Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/e05352-f148-40a0-87a4-e9724a7a6bc8/1/XbZI7sRb3r32mW2vG0ZR5BoZinY.roa
File: XbZI7sRb3r32mW2vG0ZR5BoZinY.roa (raw, json)
Hash identifier: tRp1ldFCvAoYwRHhJMr8ceTlgRdB2ucytpkTUuMgPoQ=
Subject key identifier: 5D:B6:48:EE:C4:5B:DE:BD:F6:99:6D:AF:1B:46:51:E4:1A:19:8A:76
Certificate issuer: /CN=6d743ed63e868ef50f6d84c0003a83483fc62a03
Certificate serial: 019424B3B918B0C6549E255407296A290A98
Authority key identifier: 6D:74:3E:D6:3E:86:8E:F5:0F:6D:84:C0:00:3A:83:48:3F:C6:2A:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bXQ-1j6GjvUPbYTAADqDSD_GKgM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/e05352-f148-40a0-87a4-e9724a7a6bc8/1/XbZI7sRb3r32mW2vG0ZR5BoZinY.roa
Signing time: Thu 02 Jan 2025 01:49:05 +0000
ROA not before: Thu 02 Jan 2025 01:49:05 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 265827
IP address blocks: 94.131.16.0/21 maxlen: 21
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b3:b9:18:b0:c6:54:9e:25:54:07:29:6a:29:0a:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d743ed63e868ef50f6d84c0003a83483fc62a03
Validity
Not Before: Jan 2 01:49:05 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5db648eec45bdebdf6996daf1b4651e41a198a76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:96:6f:3f:ad:94:3c:ce:e9:55:33:eb:39:b7:
66:92:5c:c5:88:22:3a:c4:92:02:05:51:b5:8c:c5:
b9:35:cf:8d:57:9c:c9:bd:4e:ab:53:c2:f5:66:90:
c2:9b:88:b3:3c:f5:d3:08:de:77:7f:bb:06:93:79:
56:13:ea:9c:79:32:e5:b3:4b:35:63:03:6d:51:c9:
80:01:23:43:d4:1f:eb:12:47:34:60:3f:64:d5:6c:
11:66:bb:80:4f:a5:34:df:a9:de:0c:a1:90:1b:03:
52:33:81:29:49:e3:97:e3:d5:b8:0d:7d:0c:f3:47:
56:e7:e6:6c:38:3e:24:fe:a1:d9:77:0b:83:ec:7e:
12:33:b7:df:dd:cb:43:7f:5d:44:31:dc:5f:c0:6a:
e0:4b:75:26:21:7b:a6:3e:f2:e6:47:16:82:98:27:
8c:2f:1d:73:16:00:b9:31:ab:a6:7e:6c:94:d9:21:
77:49:01:fd:c8:f0:e1:83:4e:99:c6:6a:90:14:e5:
49:bb:86:ae:8a:ec:fd:4f:04:b6:e7:a6:2f:4b:d9:
38:a3:83:a3:b4:ce:09:2e:97:2b:0a:b7:93:78:59:
c5:2d:99:1c:4a:03:50:ec:ec:fc:5c:06:01:8e:6e:
6c:ab:6f:5b:21:22:ca:f4:14:94:e3:f7:db:c3:ec:
04:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:B6:48:EE:C4:5B:DE:BD:F6:99:6D:AF:1B:46:51:E4:1A:19:8A:76
X509v3 Authority Key Identifier:
keyid:6D:74:3E:D6:3E:86:8E:F5:0F:6D:84:C0:00:3A:83:48:3F:C6:2A:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bXQ-1j6GjvUPbYTAADqDSD_GKgM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/e05352-f148-40a0-87a4-e9724a7a6bc8/1/XbZI7sRb3r32mW2vG0ZR5BoZinY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/e05352-f148-40a0-87a4-e9724a7a6bc8/1/bXQ-1j6GjvUPbYTAADqDSD_GKgM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.131.16.0/21
Signature Algorithm: sha256WithRSAEncryption
95:32:b6:b0:ae:84:54:fd:5d:e6:20:a4:ba:0c:0d:71:84:2e:
c4:e5:86:33:46:ef:76:c8:d7:c9:cb:9c:58:63:0a:b8:cb:f7:
28:f6:57:06:9c:9f:af:39:d3:39:18:4d:cd:f2:e9:d0:5b:2b:
05:04:45:ed:eb:cb:f3:cd:06:45:9d:19:38:88:f0:82:20:7d:
37:7c:e5:8e:05:93:12:66:a0:69:78:d8:37:50:42:1f:e1:e9:
38:25:7f:72:9b:d3:81:4c:7f:a1:07:74:8b:50:ed:f9:6f:d8:
9b:a7:36:da:11:e2:3a:da:4e:32:d6:98:36:27:ec:0a:ee:86:
40:04:5f:f9:9c:df:23:54:3d:29:19:47:08:c4:88:7f:2a:f0:
9c:42:14:11:56:c2:c1:69:22:c7:04:4f:e2:2f:20:bd:60:2f:
f2:17:f6:d9:09:f0:f6:37:b0:39:46:83:ab:5d:d9:9b:60:ac:
b8:ad:c7:34:2f:7b:e5:56:69:39:5e:14:81:2a:51:97:36:66:
b0:50:c1:f4:e3:34:25:05:80:50:8f:ab:68:32:aa:3e:67:ca:
cd:7d:51:f3:ab:15:04:a5:9b:48:7d:67:50:82:f0:2f:13:50:
a5:10:7a:2b:5c:1a:a1:ce:32:fa:79:43:d7:6a:0a:2d:b5:92:
db:cf:74:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 21:24:41 2025 by rpki-client