Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/e05352-f148-40a0-87a4-e9724a7a6bc8/1/M-9LAykjnGdFqqjy8qnVc3_gKRU.roa
File: M-9LAykjnGdFqqjy8qnVc3_gKRU.roa (raw, json)
Hash identifier: t6Oaei3w0f7yi6NcaiG1KgBrWYpv/TTX6NrFKT9H3k0=
Subject key identifier: 33:EF:4B:03:29:23:9C:67:45:AA:A8:F2:F2:A9:D5:73:7F:E0:29:15
Certificate issuer: /CN=6d743ed63e868ef50f6d84c0003a83483fc62a03
Certificate serial: 019424B3A8524D48FB11572DF648D90CF635
Authority key identifier: 6D:74:3E:D6:3E:86:8E:F5:0F:6D:84:C0:00:3A:83:48:3F:C6:2A:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bXQ-1j6GjvUPbYTAADqDSD_GKgM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/e05352-f148-40a0-87a4-e9724a7a6bc8/1/M-9LAykjnGdFqqjy8qnVc3_gKRU.roa
Signing time: Thu 02 Jan 2025 01:49:01 +0000
ROA not before: Thu 02 Jan 2025 01:49:01 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 3356
IP address blocks: 94.131.80.0/20 maxlen: 20
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b3:a8:52:4d:48:fb:11:57:2d:f6:48:d9:0c:f6:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d743ed63e868ef50f6d84c0003a83483fc62a03
Validity
Not Before: Jan 2 01:49:01 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=33ef4b0329239c6745aaa8f2f2a9d5737fe02915
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:26:54:a5:5c:5f:84:d6:a6:b9:b5:5d:53:89:
80:3e:35:d2:da:27:5d:8b:ad:f6:76:42:41:a9:cb:
96:d7:17:e9:aa:9c:b4:27:0d:fe:4e:e3:8c:29:4d:
6c:43:cc:d9:0a:28:b6:6c:15:70:ef:87:de:3d:ce:
07:72:2f:1a:5f:10:37:a2:42:26:93:99:a2:c8:b4:
b9:57:5c:4b:a5:24:f3:27:88:c6:34:8c:ac:b6:6f:
48:d2:8a:02:5d:88:13:73:6c:fa:d3:20:b6:d8:c8:
f3:88:2b:82:b4:fb:82:9e:43:d7:98:22:bb:ae:ec:
db:b5:23:59:06:9c:d9:00:04:6c:46:b4:df:de:84:
27:3e:7c:3c:d0:e7:e1:b1:5e:fd:2b:7a:39:f4:39:
79:ad:23:a8:53:63:35:73:bc:c9:49:67:58:b4:34:
1c:3b:54:da:8d:f5:f3:5d:24:1d:8c:36:52:47:84:
aa:96:ef:cd:07:0c:74:aa:25:1c:9a:30:6b:43:c8:
0e:2e:35:82:56:05:59:03:81:22:22:5b:01:8f:20:
9f:8f:4a:ca:6e:e6:3c:48:64:5e:30:50:c0:16:e7:
30:9a:b1:11:19:50:2d:5d:a6:b2:dd:0f:d0:eb:b9:
9f:46:89:12:5a:96:39:c9:57:b2:fe:2a:27:a6:9b:
08:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:EF:4B:03:29:23:9C:67:45:AA:A8:F2:F2:A9:D5:73:7F:E0:29:15
X509v3 Authority Key Identifier:
keyid:6D:74:3E:D6:3E:86:8E:F5:0F:6D:84:C0:00:3A:83:48:3F:C6:2A:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bXQ-1j6GjvUPbYTAADqDSD_GKgM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/e05352-f148-40a0-87a4-e9724a7a6bc8/1/M-9LAykjnGdFqqjy8qnVc3_gKRU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/e05352-f148-40a0-87a4-e9724a7a6bc8/1/bXQ-1j6GjvUPbYTAADqDSD_GKgM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.131.80.0/20
Signature Algorithm: sha256WithRSAEncryption
a2:f5:85:e8:72:9d:74:60:61:f4:bb:c2:51:6f:e1:77:ea:53:
38:84:7d:38:78:3b:11:4e:c1:bf:5a:37:7d:a0:58:2e:aa:06:
4a:2d:f3:63:8a:0e:c2:7e:07:b9:87:b8:15:99:d0:f7:bd:9b:
06:9e:cf:02:65:6a:02:97:7d:10:14:fe:bf:57:de:ff:5e:85:
e0:4d:f7:b8:0e:81:0c:88:ff:d0:da:cd:5c:25:11:72:e0:b0:
99:61:2e:84:95:eb:69:37:7a:a1:aa:3f:52:24:8f:d6:a0:ca:
0c:68:14:02:c1:da:75:89:e3:d8:33:9f:ac:72:a8:ca:0d:6b:
47:28:1f:f6:d2:5a:26:73:2b:d2:3c:fa:3a:f8:82:a7:da:78:
67:cc:b3:fc:5c:f2:12:0c:d0:9c:e1:8e:f4:b4:97:c3:39:c9:
1d:5b:d4:1f:05:c6:6f:39:70:71:c7:13:6d:86:8f:36:17:33:
00:56:e6:21:e4:6d:1d:d6:df:2b:56:af:50:be:ff:20:7a:3b:
02:a9:e0:a3:8f:e5:2e:15:e2:5e:48:60:73:9a:53:39:b9:eb:
25:64:9a:e9:c2:3a:f4:03:9e:2b:53:13:a7:cd:69:be:5d:74:
b4:68:0c:d7:f8:64:50:61:8d:c8:93:2b:84:c4:a1:66:cf:3e:
5d:e0:1a:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 12:45:43 2025 by rpki-client