Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/098d13-6d6d-4294-9753-a8773de768f7/1/CjJxSN58B8b6K7sysfx7pHLtrbg.roa
File: CjJxSN58B8b6K7sysfx7pHLtrbg.roa (raw, json)
Hash identifier: qOE0DSLvlntfFpt3zOUm5p3M3FloyMaW5ExqBvonJDo=
Subject key identifier: 0A:32:71:48:DE:7C:07:C6:FA:2B:BB:32:B1:FC:7B:A4:72:ED:AD:B8
Certificate issuer: /CN=00aff6b4effe7c363ef200f6f3e5888b915ba681
Certificate serial: 018291D30490F6BCD5ADAC500056F8BE79EC
Authority key identifier: 00:AF:F6:B4:EF:FE:7C:36:3E:F2:00:F6:F3:E5:88:8B:91:5B:A6:81
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AK_2tO_-fDY-8gD28-WIi5FbpoE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/098d13-6d6d-4294-9753-a8773de768f7/1/CjJxSN58B8b6K7sysfx7pHLtrbg.roa
Signing time: Fri 12 Aug 2022 11:31:41 +0000
ROA not before: Fri 12 Aug 2022 11:31:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 43260
IP address blocks: 91.243.176.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:91:d3:04:90:f6:bc:d5:ad:ac:50:00:56:f8:be:79:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00aff6b4effe7c363ef200f6f3e5888b915ba681
Validity
Not Before: Aug 12 11:31:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=0a327148de7c07c6fa2bbb32b1fc7ba472edadb8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:da:a0:c8:f4:6d:b5:86:54:65:38:67:93:55:
f0:9d:9a:d9:98:a3:88:31:a8:82:47:66:bb:f1:73:
cb:cd:fe:11:37:fa:b6:61:33:44:a0:a0:dc:bf:b4:
74:31:ba:71:b7:c4:82:cb:8f:b0:8b:39:6c:ce:9c:
45:84:26:7c:20:02:c7:1b:7c:f7:aa:1d:00:cf:04:
d8:c0:ee:f0:9a:34:5f:2e:58:dc:82:9c:bb:82:d2:
29:27:76:6a:53:8c:32:8a:da:0c:9d:0f:4f:f8:fc:
13:61:cf:ad:88:00:df:9b:b7:84:f7:2f:9b:2e:d9:
ab:9a:17:0b:6d:55:12:3b:f8:d9:e4:f4:f0:0d:1b:
ea:d6:78:38:09:0f:35:fd:3e:4b:03:ad:8a:17:7e:
37:52:45:bb:b2:77:b3:ef:cb:cc:5e:b2:3e:05:d7:
94:9d:a8:7d:19:22:a7:e9:e7:0f:3b:c6:59:f6:51:
8a:5f:ac:d2:74:d0:36:5a:66:a2:e1:dc:0c:e7:88:
85:d5:f6:ee:8b:19:3c:54:52:e6:76:03:e8:7c:3c:
24:2e:b4:4a:2c:ee:f5:ac:6e:63:dd:73:9b:27:67:
39:f0:ff:11:e4:9e:e4:08:e0:68:a8:19:5a:0a:0d:
44:a3:fc:58:e4:d8:e7:c8:06:56:8b:1b:f6:bf:a8:
4f:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:32:71:48:DE:7C:07:C6:FA:2B:BB:32:B1:FC:7B:A4:72:ED:AD:B8
X509v3 Authority Key Identifier:
keyid:00:AF:F6:B4:EF:FE:7C:36:3E:F2:00:F6:F3:E5:88:8B:91:5B:A6:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AK_2tO_-fDY-8gD28-WIi5FbpoE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/098d13-6d6d-4294-9753-a8773de768f7/1/CjJxSN58B8b6K7sysfx7pHLtrbg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/098d13-6d6d-4294-9753-a8773de768f7/1/AK_2tO_-fDY-8gD28-WIi5FbpoE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.243.176.0/24
Signature Algorithm: sha256WithRSAEncryption
28:36:52:da:84:e0:9f:56:9d:02:cd:5d:8e:d9:91:07:7e:ec:
5b:98:17:01:58:4d:01:37:3e:d3:f9:e0:cf:ad:c6:03:e6:99:
9d:12:c5:87:a2:b3:8e:a7:5c:1b:bb:31:66:48:53:66:92:f4:
76:55:19:7d:bc:d4:0a:c1:0e:1a:e1:8f:77:29:87:85:d6:6f:
b5:22:ec:73:80:54:d9:f7:c2:ec:11:49:96:79:ac:d4:b0:c2:
d5:de:39:cb:5e:22:75:85:aa:0e:79:ca:30:72:20:ae:7a:57:
ba:28:32:de:eb:3c:40:de:0e:56:d4:29:f7:b8:6e:62:26:3a:
63:7e:53:f4:8f:49:a8:d1:40:c7:0b:60:82:d8:d1:db:c6:84:
b1:6b:a3:ad:60:b6:5f:05:80:a4:c9:b7:7c:10:da:1b:72:08:
65:1d:59:48:af:9b:de:b3:15:6f:5c:7f:2c:5d:c7:2f:76:df:
6f:0b:89:ae:56:cb:d4:7f:0b:f3:2b:ad:bf:ef:ad:d9:00:e7:
5a:70:32:59:3c:13:3b:7a:7d:da:8f:98:9e:45:0e:07:38:b1:
e3:aa:ab:1c:55:35:70:50:ea:d1:9f:12:e9:1e:26:7c:eb:81:
60:2d:68:91:b2:82:5c:4e:e4:9b:5f:2e:db:a5:ec:79:e2:df:
d6:0f:69:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:37:10 2025 by rpki-client