Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/098d13-6d6d-4294-9753-a8773de768f7/1/OuvDgU7CizNf_704nPi1apdGCY8.roa
File: OuvDgU7CizNf_704nPi1apdGCY8.roa (raw, json)
Hash identifier: l324yjv2/fqRpWvF9+xbU9SZWZ7NSACe745SdwNgGyg=
Subject key identifier: 3A:EB:C3:81:4E:C2:8B:33:5F:FF:BD:38:9C:F8:B5:6A:97:46:09:8F
Certificate issuer: /CN=00aff6b4effe7c363ef200f6f3e5888b915ba681
Certificate serial: 018CC56E2292D70C8FAF998864985F6B8FD0
Authority key identifier: 00:AF:F6:B4:EF:FE:7C:36:3E:F2:00:F6:F3:E5:88:8B:91:5B:A6:81
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AK_2tO_-fDY-8gD28-WIi5FbpoE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/098d13-6d6d-4294-9753-a8773de768f7/1/OuvDgU7CizNf_704nPi1apdGCY8.roa
Signing time: Mon 01 Jan 2024 14:29:38 +0000
ROA not before: Mon 01 Jan 2024 14:29:38 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 211936
IP address blocks: 195.242.241.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:6e:22:92:d7:0c:8f:af:99:88:64:98:5f:6b:8f:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00aff6b4effe7c363ef200f6f3e5888b915ba681
Validity
Not Before: Jan 1 14:29:38 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3aebc3814ec28b335fffbd389cf8b56a9746098f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:7a:c7:c4:fb:46:67:97:a1:ef:a0:06:8b:1c:
f6:60:e5:9a:76:fd:67:19:20:98:b2:22:10:bb:20:
3a:ee:b7:41:96:29:b6:d0:63:c4:a3:c0:45:7e:c3:
9d:59:a9:2e:b9:9d:b7:b8:35:60:6b:ae:e0:c1:31:
f8:bd:c2:b8:20:08:09:e7:0e:61:33:2b:c0:85:0a:
d9:9c:b1:1b:93:f7:ea:4d:e7:ec:5a:a8:6b:6c:ac:
66:aa:40:ae:5c:71:9a:fc:7f:cf:84:55:b9:f0:ca:
22:d4:05:b5:ee:b3:56:6d:ba:82:cd:81:e2:4f:34:
05:9f:32:2b:39:3c:55:38:d5:0c:22:1f:a6:34:54:
fd:86:10:b4:d7:57:a5:f2:17:86:3f:8f:86:ed:8e:
9c:77:87:87:53:01:48:25:08:b6:e2:77:fc:d0:68:
d7:bc:19:9b:92:f3:01:50:c3:ad:4b:1f:63:66:cb:
cf:e1:fc:9a:6a:63:1a:a2:8c:0b:8a:6d:47:d0:e2:
71:39:5c:15:17:c2:e2:24:a2:83:1d:3a:d5:9f:e1:
8b:77:b2:f1:77:05:63:75:c7:9f:e4:a3:92:ed:4a:
88:87:e6:f6:32:94:6b:07:67:fc:c0:80:e3:ae:93:
dd:ad:fc:54:54:bb:03:0d:b6:67:e2:0b:ab:af:47:
aa:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:EB:C3:81:4E:C2:8B:33:5F:FF:BD:38:9C:F8:B5:6A:97:46:09:8F
X509v3 Authority Key Identifier:
keyid:00:AF:F6:B4:EF:FE:7C:36:3E:F2:00:F6:F3:E5:88:8B:91:5B:A6:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AK_2tO_-fDY-8gD28-WIi5FbpoE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/098d13-6d6d-4294-9753-a8773de768f7/1/OuvDgU7CizNf_704nPi1apdGCY8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/098d13-6d6d-4294-9753-a8773de768f7/1/AK_2tO_-fDY-8gD28-WIi5FbpoE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.242.241.0/24
Signature Algorithm: sha256WithRSAEncryption
29:02:c9:ab:4c:ee:d5:93:df:61:5c:09:4e:06:e7:fa:4e:68:
8a:c8:1a:50:36:a7:29:1e:19:d6:37:1e:84:35:b8:ad:13:f3:
73:3e:43:b3:3f:e0:64:7d:aa:db:92:ac:f2:1a:a6:be:ea:54:
88:81:8d:e6:2b:24:bd:95:2d:a1:59:9f:61:de:bc:dc:ab:44:
ad:90:e4:9a:15:c0:96:0a:4e:47:7a:a3:a7:c7:6d:5c:9e:49:
1c:56:ad:bb:7d:50:a1:c9:f2:52:99:80:28:00:3c:10:ba:e2:
73:11:ea:4e:ed:3c:ec:3f:34:f7:6d:44:2e:4e:4a:9f:30:d7:
77:89:81:b8:0d:7d:9e:bc:3f:dd:78:97:7d:44:eb:c6:67:d9:
c2:20:b3:f1:b0:cb:c7:74:51:46:a8:e3:21:37:11:fd:86:90:
b3:4a:13:52:7f:b9:07:04:cf:ae:98:eb:e1:7e:b7:8e:f8:ce:
91:4a:8d:c8:b4:4e:9a:ae:12:3f:aa:94:01:08:d2:71:13:f1:
30:d4:79:46:35:d4:a6:92:1a:28:24:c7:24:5e:db:80:e9:29:
b9:5a:c3:67:5c:75:44:1b:2f:5e:06:d8:26:86:6c:b7:67:b4:
bc:1a:5a:e5:84:d1:45:39:0f:76:7f:84:c1:ed:4f:81:4c:c4:
30:a3:f6:f8
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzFbiKS1wyPr5mIZJhfa4/QMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAwYWZmNmI0ZWZmZTdjMzYzZWYyMDBmNmYzZTU4ODhiOTE1
YmE2ODEwHhcNMjQwMTAxMTQyOTM4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzYWViYzM4MTRlYzI4YjMzNWZmZmJkMzg5Y2Y4YjU2YTk3NDYwOThmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoHrHxPtGZ5eh76AGixz2YOWadv1n
GSCYsiIQuyA67rdBlim20GPEo8BFfsOdWakuuZ23uDVga67gwTH4vcK4IAgJ5w5h
MyvAhQrZnLEbk/fqTefsWqhrbKxmqkCuXHGa/H/PhFW58Moi1AW17rNWbbqCzYHi
TzQFnzIrOTxVONUMIh+mNFT9hhC011el8heGP4+G7Y6cd4eHUwFIJQi24nf80GjX
vBmbkvMBUMOtSx9jZsvP4fyaamMaoowLim1H0OJxOVwVF8LiJKKDHTrVn+GLd7Lx
dwVjdcef5KOS7UqIh+b2MpRrB2f8wIDjrpPdrfxUVLsDDbZn4gurr0eq5wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFDrrw4FOwoszX/+9OJz4tWqXRgmPMB8GA1UdIwQY
MBaAFACv9rTv/nw2PvIA9vPliIuRW6aBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQUtfMnRPXy1mRFktOGdEMjgtV0lpNUZicG9FLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC8wOThkMTMtNmQ2ZC00Mjk0LTk3NTMt
YTg3NzNkZTc2OGY3LzEvT3V2RGdVN0Npek5mXzcwNG5QaTFhcGRHQ1k4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNC8wOThkMTMtNmQ2ZC00Mjk0LTk3NTMtYTg3NzNkZTc2OGY3
LzEvQUtfMnRPXy1mRFktOGdEMjgtV0lpNUZicG9FLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAw/LxMA0G
CSqGSIb3DQEBCwUAA4IBAQApAsmrTO7Vk99hXAlOBuf6TmiKyBpQNqcpHhnWNx6E
NbitE/NzPkOzP+BkfarbkqzyGqa+6lSIgY3mKyS9lS2hWZ9h3rzcq0StkOSaFcCW
Ck5HeqOnx21cnkkcVq27fVChyfJSmYAoADwQuuJzEepO7TzsPzT3bUQuTkqfMNd3
iYG4DX2evD/deJd9ROvGZ9nCILPxsMvHdFFGqOMhNxH9hpCzShNSf7kHBM+umOvh
freO+M6RSo3ItE6arhI/qpQBCNJxE/Ew1HlGNdSmkhooJMckXtuA6Sm5WsNnXHVE
Gy9eBtgmhmy3Z7S8GlrlhNFFOQ92f4TB7U+BTMQwo/b4
-----END CERTIFICATE-----
Generated at Thu Mar 13 20:35:49 2025 by rpki-client