Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/2171be-b083-479b-a580-6a06b7502bd7/1/vlDd0uhwDDkgpVS5rCEnwkJKtBg.roa
File: vlDd0uhwDDkgpVS5rCEnwkJKtBg.roa (raw, json)
Hash identifier: Yk8etSH6eAUEgCE9eIXtDLVjBjXxmoQMPryOCOHxqAI=
Subject key identifier: BE:50:DD:D2:E8:70:0C:39:20:A5:54:B9:AC:21:27:C2:42:4A:B4:18
Certificate issuer: /CN=37ed49efac9795987771acdc77a0e228904277ad
Certificate serial: 018A3C3FA8BEEF343CD55459FE0CA5E58954
Authority key identifier: 37:ED:49:EF:AC:97:95:98:77:71:AC:DC:77:A0:E2:28:90:42:77:AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N-1J76yXlZh3cazcd6DiKJBCd60.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/2171be-b083-479b-a580-6a06b7502bd7/1/vlDd0uhwDDkgpVS5rCEnwkJKtBg.roa
Signing time: Mon 28 Aug 2023 13:05:19 +0000
ROA not before: Mon 28 Aug 2023 13:05:19 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 996
IP address blocks: 109.172.84.0/22 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:3c:3f:a8:be:ef:34:3c:d5:54:59:fe:0c:a5:e5:89:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=37ed49efac9795987771acdc77a0e228904277ad
Validity
Not Before: Aug 28 13:05:19 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=be50ddd2e8700c3920a554b9ac2127c2424ab418
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:bf:43:df:b0:94:22:71:87:5d:62:ce:e0:81:
a9:67:69:27:ed:df:b7:38:58:9c:ad:1d:eb:ac:8c:
ed:6d:c7:6d:da:21:bd:13:24:04:da:ec:cc:7c:f1:
c3:89:d3:bf:84:c5:8b:8f:e2:9b:d6:c6:bf:e7:e7:
8e:1a:33:3f:05:bc:23:2e:a8:2c:5f:e8:28:7f:01:
32:aa:6b:2f:ff:19:ea:ba:de:0e:1d:a0:3b:75:27:
15:0d:c8:a5:97:c7:3d:d2:16:31:75:cd:c6:1c:86:
72:3f:dc:50:f1:7f:2e:80:b8:61:56:a6:ce:fa:1c:
f7:8b:af:4a:8b:06:85:42:e6:ce:97:ae:6b:65:f9:
88:a9:aa:3b:b9:83:ec:22:a2:cf:27:32:54:ae:53:
2e:b2:f7:01:d4:85:23:16:58:7f:e0:b0:df:2f:a7:
fc:93:2a:6e:b1:7c:5f:ed:39:03:4f:e3:f0:92:c7:
85:e0:22:08:86:44:cb:ce:45:6f:70:97:9c:6e:15:
d8:5a:e1:68:15:84:20:b3:8e:4d:5b:cd:b2:4f:f9:
20:cc:f7:b2:f7:c1:1f:57:0e:01:98:13:b9:4b:1e:
d9:f1:74:0d:c5:e1:2a:89:98:60:2c:2c:92:60:f5:
3d:88:89:ee:d7:0c:cd:09:f5:67:06:89:f8:19:24:
1f:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:50:DD:D2:E8:70:0C:39:20:A5:54:B9:AC:21:27:C2:42:4A:B4:18
X509v3 Authority Key Identifier:
keyid:37:ED:49:EF:AC:97:95:98:77:71:AC:DC:77:A0:E2:28:90:42:77:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N-1J76yXlZh3cazcd6DiKJBCd60.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/2171be-b083-479b-a580-6a06b7502bd7/1/vlDd0uhwDDkgpVS5rCEnwkJKtBg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/2171be-b083-479b-a580-6a06b7502bd7/1/N-1J76yXlZh3cazcd6DiKJBCd60.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.172.84.0/22
Signature Algorithm: sha256WithRSAEncryption
4e:08:a2:f8:d1:cb:f3:c8:06:38:d2:22:8c:a5:7d:e7:81:2b:
26:a9:73:7a:95:52:59:a7:37:1f:15:1c:8a:c5:8f:70:9d:c5:
ed:60:de:bd:ab:10:a3:19:38:3b:4e:f7:66:38:7f:96:98:a0:
02:0c:c6:9b:09:1b:9a:5d:0f:76:ee:0f:e0:e3:9c:8c:cb:7b:
06:32:93:d6:fa:58:2d:3d:1c:17:7f:5f:eb:cc:d1:05:7f:d8:
d7:04:ad:20:c6:b8:08:0e:ff:bf:78:c8:68:cf:b6:83:27:6d:
a5:f4:26:6b:ff:92:6b:c0:c6:1c:f0:91:db:e8:20:cb:8e:4b:
57:5a:6c:1d:7f:64:94:92:b2:75:64:ac:0c:3c:61:c3:a7:94:
f6:48:fb:6e:5c:39:6b:ab:5c:87:19:d5:cf:44:07:78:5c:65:
34:ac:c0:8a:47:87:0e:62:50:75:ca:0a:71:90:3d:af:09:47:
9a:a7:15:72:19:d6:31:37:b2:ec:85:16:95:e5:70:1c:25:3b:
4b:0b:ef:33:e5:7e:a8:4a:a1:f7:91:14:52:44:49:69:6a:15:
2d:b2:8c:52:3b:83:7c:5a:7a:bd:77:b1:b7:57:89:31:de:89:
d6:33:87:58:d8:98:d7:df:36:1d:49:89:d1:3d:8e:9c:3e:67:
12:e7:f6:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 00:09:30 2025 by rpki-client