Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/2171be-b083-479b-a580-6a06b7502bd7/1/foejTKaLeYq6Dz-Pim2U7XNTVHQ.roa
File: foejTKaLeYq6Dz-Pim2U7XNTVHQ.roa (raw, json)
Hash identifier: tfpJIGuornzzaUXRqySsboLOzKfmWOmp+6Gwz/eDfsU=
Subject key identifier: 7E:87:A3:4C:A6:8B:79:8A:BA:0F:3F:8F:8A:6D:94:ED:73:53:54:74
Certificate issuer: /CN=37ed49efac9795987771acdc77a0e228904277ad
Certificate serial: 0189027743122F302F4338BF6F98659D0F3D
Authority key identifier: 37:ED:49:EF:AC:97:95:98:77:71:AC:DC:77:A0:E2:28:90:42:77:AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N-1J76yXlZh3cazcd6DiKJBCd60.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/2171be-b083-479b-a580-6a06b7502bd7/1/foejTKaLeYq6Dz-Pim2U7XNTVHQ.roa
Signing time: Wed 28 Jun 2023 14:45:17 +0000
ROA not before: Wed 28 Jun 2023 14:45:17 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 996
IP address blocks: 178.130.132.0/22 maxlen: 24
109.172.84.0/22 maxlen: 24
109.172.88.0/22 maxlen: 24
109.172.92.0/22 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:02:77:43:12:2f:30:2f:43:38:bf:6f:98:65:9d:0f:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=37ed49efac9795987771acdc77a0e228904277ad
Validity
Not Before: Jun 28 14:45:17 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7e87a34ca68b798aba0f3f8f8a6d94ed73535474
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:f9:79:23:c3:fb:7c:1b:8a:8c:ee:49:71:c3:
5e:32:4e:0b:bb:a0:9b:9c:95:17:a6:8c:5b:00:8a:
f7:dc:61:6a:58:59:68:4e:0b:f5:74:d8:d3:2f:57:
3a:c6:62:ee:af:01:09:ea:4a:34:a2:9c:84:12:4a:
0d:de:30:f9:01:45:aa:8f:0d:03:41:62:67:7e:9c:
8a:1a:d7:88:19:ed:f9:78:e6:da:92:03:53:59:1a:
5b:5e:cf:e1:5a:69:1f:58:5c:b8:bc:b5:e2:a7:a3:
af:c1:b0:0a:ff:27:f7:d2:52:f8:d3:db:1c:cf:5d:
1f:54:24:bc:92:6f:37:ce:49:4a:d2:c4:28:5d:22:
9c:52:2c:2b:80:be:5e:d9:f3:dd:69:cc:bf:2f:5e:
4e:8d:5e:e3:96:95:13:44:05:97:63:ce:2e:9a:bc:
df:66:de:f1:eb:95:b0:2f:1e:12:27:e1:52:82:01:
89:07:64:2e:74:92:9e:8b:6b:93:e2:7c:dd:42:c3:
f2:51:20:03:f9:b9:e0:8e:a9:7b:14:5c:a9:c1:f7:
db:0d:59:96:c5:aa:c5:50:1e:03:b8:c4:9e:4a:72:
ed:f2:7f:19:1a:b5:52:ea:fa:d3:31:68:b0:04:41:
77:94:d6:20:7b:30:45:92:eb:70:36:bc:12:63:6f:
19:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:87:A3:4C:A6:8B:79:8A:BA:0F:3F:8F:8A:6D:94:ED:73:53:54:74
X509v3 Authority Key Identifier:
keyid:37:ED:49:EF:AC:97:95:98:77:71:AC:DC:77:A0:E2:28:90:42:77:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N-1J76yXlZh3cazcd6DiKJBCd60.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/2171be-b083-479b-a580-6a06b7502bd7/1/foejTKaLeYq6Dz-Pim2U7XNTVHQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/2171be-b083-479b-a580-6a06b7502bd7/1/N-1J76yXlZh3cazcd6DiKJBCd60.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.172.84.0-109.172.95.255
178.130.132.0/22
Signature Algorithm: sha256WithRSAEncryption
6a:fe:82:8e:18:0d:79:11:d7:8b:11:30:84:d5:8b:fb:c6:f0:
e1:47:80:e9:c5:a9:9d:7e:9e:43:72:70:ec:eb:aa:fb:cb:24:
f5:df:64:f0:99:9e:61:d3:22:57:e6:b9:b4:4b:c5:3e:fb:8a:
97:c4:ba:5b:63:3e:e2:e8:09:01:84:fe:f9:38:8f:84:7c:12:
c9:aa:ac:dd:a2:0e:ba:28:68:97:2c:c8:03:4f:57:15:f6:5e:
08:c5:f9:50:b9:a4:f6:eb:27:f0:ff:b4:3f:93:e0:ea:09:c4:
6b:d6:d5:ba:52:d9:98:75:f2:9d:64:3d:19:1a:46:15:2e:a7:
f1:39:01:46:b8:64:34:ff:19:c2:1a:d5:6b:46:f4:93:98:f1:
92:02:d9:f1:30:2f:0b:6c:57:23:8d:d5:73:91:46:59:a4:f9:
17:6b:4d:7f:bb:ae:e6:f0:96:18:62:81:d3:f1:42:8a:93:e6:
4f:13:38:1b:1f:d9:6a:54:17:3b:41:d9:78:e5:c7:47:6d:36:
92:37:fd:b5:21:60:7e:df:07:48:62:89:79:24:b2:72:09:98:
30:48:38:67:c8:a7:4e:7a:46:e3:34:11:12:33:d3:ee:a3:f5:
f1:02:d6:7d:4d:cc:5b:27:12:85:05:52:b7:16:38:89:37:5f:
c4:51:0b:84
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Apr 18 20:25:56 2025 by rpki-client