Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/098d13-6d6d-4294-9753-a8773de768f7/1/R3ri9fU7sC2v-75w3z9_ahY5G-0.roa
File: R3ri9fU7sC2v-75w3z9_ahY5G-0.roa (raw, json)
Hash identifier: jnFMGUP0Sp4SZQ3Ry3pxbIH3a8Okd5invuusUGYETwY=
Subject key identifier: 47:7A:E2:F5:F5:3B:B0:2D:AF:FB:BE:70:DF:3F:7F:6A:16:39:1B:ED
Certificate issuer: /CN=00aff6b4effe7c363ef200f6f3e5888b915ba681
Certificate serial: 018AB192012061D9DCFECB8EFECB1C11AE6A
Authority key identifier: 00:AF:F6:B4:EF:FE:7C:36:3E:F2:00:F6:F3:E5:88:8B:91:5B:A6:81
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AK_2tO_-fDY-8gD28-WIi5FbpoE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/098d13-6d6d-4294-9753-a8773de768f7/1/R3ri9fU7sC2v-75w3z9_ahY5G-0.roa
Signing time: Wed 20 Sep 2023 07:50:50 +0000
ROA not before: Wed 20 Sep 2023 07:50:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 211439
IP address blocks: 91.243.178.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:b1:92:01:20:61:d9:dc:fe:cb:8e:fe:cb:1c:11:ae:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00aff6b4effe7c363ef200f6f3e5888b915ba681
Validity
Not Before: Sep 20 07:50:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=477ae2f5f53bb02daffbbe70df3f7f6a16391bed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:8f:2b:2a:d4:b3:b8:98:20:d9:25:93:32:ce:
5a:ae:f8:ba:6b:66:54:3a:d6:00:6e:4a:21:4a:a9:
dd:52:51:c9:77:dd:3e:42:c3:fa:67:fa:7c:82:5d:
8f:e2:56:23:53:d6:c7:fe:58:43:b2:7d:d0:37:ef:
77:a4:80:90:d2:2a:a8:49:e5:a4:20:f7:23:6a:3c:
3c:73:b7:29:79:9d:b0:86:eb:ae:01:42:9f:83:28:
95:43:26:45:30:84:1e:9b:27:87:58:84:fc:bd:45:
0a:9d:6e:05:39:31:b8:99:50:19:00:5d:48:8b:96:
60:2a:e4:a9:66:b1:3a:67:06:ec:83:3c:72:55:e2:
3a:0d:dd:4b:c6:b8:14:02:41:c2:07:01:a1:87:b6:
b6:1e:de:48:89:65:f2:c9:32:50:3b:57:d2:90:02:
de:d8:dc:de:8b:9d:53:bc:85:8c:b2:3c:40:f0:9f:
ae:78:65:8e:ec:5d:b2:35:e4:7f:fa:9e:e9:ee:5f:
28:89:5f:24:65:51:dd:ae:85:33:ba:dd:b0:27:b1:
49:1d:c7:1a:56:10:3a:48:9b:27:11:21:e2:3d:8b:
a6:35:de:97:1a:84:9c:95:14:40:04:50:41:ed:25:
87:40:8a:ae:08:f3:dc:41:77:e7:fb:b9:c4:26:67:
b2:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:7A:E2:F5:F5:3B:B0:2D:AF:FB:BE:70:DF:3F:7F:6A:16:39:1B:ED
X509v3 Authority Key Identifier:
keyid:00:AF:F6:B4:EF:FE:7C:36:3E:F2:00:F6:F3:E5:88:8B:91:5B:A6:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AK_2tO_-fDY-8gD28-WIi5FbpoE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/098d13-6d6d-4294-9753-a8773de768f7/1/R3ri9fU7sC2v-75w3z9_ahY5G-0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/098d13-6d6d-4294-9753-a8773de768f7/1/AK_2tO_-fDY-8gD28-WIi5FbpoE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.243.178.0/24
Signature Algorithm: sha256WithRSAEncryption
80:66:a0:c8:7c:9d:30:0b:fe:e9:01:fd:e4:9a:22:99:46:c4:
8b:6b:22:79:f5:88:97:58:ff:34:f9:ee:b8:31:de:f5:3c:48:
68:9f:7c:f4:52:df:db:a6:6d:2b:d1:02:94:e0:a9:ee:2d:77:
f6:9c:42:9f:42:28:0e:6f:bc:ff:de:51:75:22:2e:11:16:c0:
a0:3b:5a:8b:af:08:4b:27:ea:8f:4f:dd:2d:09:42:c5:39:1d:
66:b8:1f:17:a5:32:c8:a5:00:9c:6d:97:ce:5f:44:db:87:18:
99:f5:d5:53:0d:84:bd:72:83:d1:58:dd:c4:41:06:8c:2e:bf:
93:73:90:4a:70:b7:95:06:48:00:21:c3:a0:8d:87:43:f8:91:
98:68:14:34:3e:08:c5:86:34:94:33:d1:3e:a4:98:d8:10:68:
75:ac:58:68:ec:19:ea:6b:11:87:c3:52:63:b4:a3:28:19:f5:
2d:8b:49:15:c2:17:9d:85:3d:39:90:67:48:25:8d:06:05:33:
4b:fc:69:ce:14:7a:29:ed:8a:63:df:ce:c6:11:08:00:31:3a:
c9:68:b0:66:6e:cf:d0:46:5e:3d:4d:0e:d2:e9:b2:ad:9c:e6:
eb:82:86:54:ef:8d:32:d3:56:59:39:e1:70:5a:10:b1:46:32:
e3:c7:2c:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:19:54 2025 by rpki-client