Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/098d13-6d6d-4294-9753-a8773de768f7/1/Ztd9McKhLFqgpfvDtKLmfPOYZBc.roa
File: Ztd9McKhLFqgpfvDtKLmfPOYZBc.roa (raw, json)
Hash identifier: /W/Msoj32QRpdN2Ty5DGWg9a0XkWLM4f6rdLrkyl92E=
Subject key identifier: 66:D7:7D:31:C2:A1:2C:5A:A0:A5:FB:C3:B4:A2:E6:7C:F3:98:64:17
Certificate issuer: /CN=00aff6b4effe7c363ef200f6f3e5888b915ba681
Certificate serial: 018BA9696314D08683A624AE17DCC3168B12
Authority key identifier: 00:AF:F6:B4:EF:FE:7C:36:3E:F2:00:F6:F3:E5:88:8B:91:5B:A6:81
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AK_2tO_-fDY-8gD28-WIi5FbpoE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/098d13-6d6d-4294-9753-a8773de768f7/1/Ztd9McKhLFqgpfvDtKLmfPOYZBc.roa
Signing time: Tue 07 Nov 2023 10:52:17 +0000
ROA not before: Tue 07 Nov 2023 10:52:17 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 21859
IP address blocks: 89.46.10.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:a9:69:63:14:d0:86:83:a6:24:ae:17:dc:c3:16:8b:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00aff6b4effe7c363ef200f6f3e5888b915ba681
Validity
Not Before: Nov 7 10:52:17 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=66d77d31c2a12c5aa0a5fbc3b4a2e67cf3986417
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:1f:ed:2e:ed:3b:81:5b:9c:40:3e:39:ad:fe:
cf:dd:29:09:03:4b:67:f3:2f:20:c1:1d:6c:d9:06:
0b:51:2d:69:3f:5d:12:4f:25:45:5e:94:9d:26:dd:
98:1a:9a:08:88:bd:b8:f0:6d:9e:05:f4:b4:ed:c5:
14:6b:6c:cc:1f:06:9e:4c:cd:04:58:e2:90:79:8b:
97:d1:3e:4a:a6:20:9b:c7:df:b7:bb:72:6b:0c:eb:
f9:e4:5a:dc:90:15:2e:81:04:5f:5f:62:d8:5c:7a:
d3:f0:44:a9:fe:f5:ff:3f:69:d2:fb:f7:f4:a0:ba:
01:b2:e7:a9:94:66:e0:fd:47:78:e5:f4:82:5d:c4:
cc:61:73:10:d1:e5:46:34:af:ca:08:28:61:6e:09:
4a:b5:9a:3c:95:43:61:c3:45:61:9a:1e:4e:5d:e1:
18:4f:c4:3f:e2:23:f3:fc:9c:26:35:bb:2d:be:ac:
33:d7:e9:96:c4:a6:d6:a9:37:d4:50:5b:44:37:7c:
38:0d:f9:f8:21:3c:c9:8c:83:95:2d:04:bf:c2:87:
d6:3a:b3:29:cc:6b:55:92:86:49:7d:0f:ca:98:12:
d0:97:6e:bd:1a:2c:af:51:71:b4:ac:b3:d9:9d:09:
d5:76:02:d8:e1:ca:7d:4f:f2:ec:c8:27:60:eb:e7:
0d:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:D7:7D:31:C2:A1:2C:5A:A0:A5:FB:C3:B4:A2:E6:7C:F3:98:64:17
X509v3 Authority Key Identifier:
keyid:00:AF:F6:B4:EF:FE:7C:36:3E:F2:00:F6:F3:E5:88:8B:91:5B:A6:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AK_2tO_-fDY-8gD28-WIi5FbpoE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/098d13-6d6d-4294-9753-a8773de768f7/1/Ztd9McKhLFqgpfvDtKLmfPOYZBc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/098d13-6d6d-4294-9753-a8773de768f7/1/AK_2tO_-fDY-8gD28-WIi5FbpoE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.46.10.0/24
Signature Algorithm: sha256WithRSAEncryption
4f:22:c2:a8:6a:9b:7e:e9:03:6c:2f:26:9c:cd:69:24:36:3d:
d7:2a:3c:c4:48:a9:58:7d:3d:c7:ba:0c:d6:60:4f:9a:44:8f:
57:4e:3a:3c:bc:b7:eb:89:30:aa:3e:46:56:f2:60:0a:30:d4:
fe:c6:9f:29:c5:1c:c9:cc:34:10:84:72:ba:f6:98:66:de:be:
f9:f7:46:ff:63:8e:45:8f:aa:fe:1d:6e:2b:fc:67:97:b0:18:
bf:33:54:c5:d5:b5:2a:fd:d9:24:88:95:df:14:24:85:4d:ba:
77:86:84:24:36:34:a6:7a:69:3d:1f:b2:85:74:37:21:8e:59:
bc:ed:b8:41:94:0e:48:a9:e8:5b:f7:a3:a1:87:c1:22:47:29:
79:6f:52:69:3d:8b:dd:6b:6e:e2:8e:8a:95:d2:97:51:16:d7:
e6:87:6e:f8:9b:e8:58:ef:c9:54:42:49:4a:8f:9e:ce:0c:9b:
bb:d0:5c:d5:84:81:b8:f5:97:a2:8f:80:51:55:12:8f:e5:af:
ce:3c:93:6b:84:aa:cb:25:7f:c6:27:23:03:93:c1:70:05:22:
40:44:f8:8a:be:f1:38:45:02:a3:5a:03:ec:b1:a3:cb:9f:c4:
6f:ac:a4:e0:8b:f3:b5:35:b9:45:a9:18:58:ed:d9:17:e0:43:
7d:e2:2c:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 20:40:47 2025 by rpki-client