Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/d78fc5-bf3e-4686-8d85-c33f8a21122c/1/tcAaMkmUPgOWGLQM8lQq8Z8mKJo.roa
File: tcAaMkmUPgOWGLQM8lQq8Z8mKJo.roa (raw, json)
Hash identifier: PGw6MlDMidyShy6O+rywxZA1zTpe3644AItCe3IZ9jw=
Subject key identifier: B5:C0:1A:32:49:94:3E:03:96:18:B4:0C:F2:54:2A:F1:9F:26:28:9A
Certificate issuer: /CN=ed2fa686d18c8020afc6adf55afdbe660dbaac15
Certificate serial: 01924CDA249485CAB30D657A40AF56C8AB84
Authority key identifier: ED:2F:A6:86:D1:8C:80:20:AF:C6:AD:F5:5A:FD:BE:66:0D:BA:AC:15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7S-mhtGMgCCvxq31Wv2-Zg26rBU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/d78fc5-bf3e-4686-8d85-c33f8a21122c/1/tcAaMkmUPgOWGLQM8lQq8Z8mKJo.roa
Signing time: Wed 02 Oct 2024 10:50:17 +0000
ROA not before: Wed 02 Oct 2024 10:50:17 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 212870
IP address blocks: 91.198.188.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:4c:da:24:94:85:ca:b3:0d:65:7a:40:af:56:c8:ab:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ed2fa686d18c8020afc6adf55afdbe660dbaac15
Validity
Not Before: Oct 2 10:50:17 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b5c01a3249943e039618b40cf2542af19f26289a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:96:b3:b9:fb:11:00:01:8a:52:93:c1:c2:70:
86:42:21:e1:12:0e:b7:43:d6:8b:80:ab:d2:07:b7:
d6:d9:de:9d:fe:e5:fc:0c:e7:3c:05:37:3f:38:5a:
d1:3b:3d:75:9b:85:cc:1b:06:53:df:c0:6b:96:ca:
42:9b:b7:d7:7f:a1:32:e5:1f:b6:d9:b0:05:29:46:
a5:e0:c9:2f:55:b0:ae:7d:b0:d8:10:aa:e1:e7:06:
15:25:f2:4c:cd:9f:bf:82:9e:36:05:1c:2c:55:e7:
94:91:43:dd:b7:d1:b7:63:0a:11:f9:de:be:a8:40:
87:6c:a5:a9:01:89:57:6d:b4:9e:bd:0f:de:f8:d1:
5d:1b:10:87:11:1a:40:81:29:3f:b3:b4:65:33:f4:
57:e3:9e:9a:16:26:d0:52:00:8b:66:a9:b2:34:47:
ea:f1:af:8c:0c:a1:c8:e2:a0:02:37:6c:31:37:be:
f2:8f:7b:e9:0d:1b:8d:8b:27:8e:11:17:0d:39:1a:
ba:42:e8:d3:4d:85:51:0c:19:08:31:5d:4f:25:ad:
84:b8:74:b6:31:be:c0:d1:ca:81:f8:cc:e3:9a:a0:
1b:63:16:ce:30:4b:89:86:d0:77:a2:00:e1:23:7b:
d1:da:db:9d:8b:2a:ef:29:07:08:66:3e:d3:47:06:
05:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:C0:1A:32:49:94:3E:03:96:18:B4:0C:F2:54:2A:F1:9F:26:28:9A
X509v3 Authority Key Identifier:
keyid:ED:2F:A6:86:D1:8C:80:20:AF:C6:AD:F5:5A:FD:BE:66:0D:BA:AC:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7S-mhtGMgCCvxq31Wv2-Zg26rBU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d78fc5-bf3e-4686-8d85-c33f8a21122c/1/tcAaMkmUPgOWGLQM8lQq8Z8mKJo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d78fc5-bf3e-4686-8d85-c33f8a21122c/1/7S-mhtGMgCCvxq31Wv2-Zg26rBU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.198.188.0/24
Signature Algorithm: sha256WithRSAEncryption
12:bb:24:5d:6b:4e:b2:39:aa:75:87:41:e2:90:ff:ab:b6:6c:
2d:5f:f6:fe:fd:54:63:f0:f1:01:29:44:2a:78:b4:da:07:bc:
fe:cb:40:1a:3e:f6:b1:86:76:50:75:59:f8:0f:cc:12:66:7a:
ca:23:62:2e:76:f7:41:19:c1:c2:e7:92:d0:a0:59:b9:e2:f3:
ea:2f:18:91:fb:d6:71:84:b8:69:81:01:b9:50:94:c6:9e:34:
5c:2e:d6:5e:f2:34:9e:49:c4:bb:08:8e:43:c9:09:9e:e6:c4:
5a:4f:ea:0a:dd:c8:55:1c:45:d3:40:d9:35:8d:60:e1:42:4b:
4b:0b:d4:24:27:63:b3:6a:20:14:17:03:dd:df:83:d2:02:b7:
99:78:d2:ac:0d:a4:78:30:81:45:c7:00:8f:62:d6:aa:07:7a:
d7:1d:2c:3e:0f:4b:fe:f2:51:6b:00:24:e3:d8:c3:18:99:aa:
75:77:a3:1e:55:56:fa:bb:84:2c:9b:4e:f5:e7:99:d4:6a:46:
e5:55:59:af:94:ac:45:15:2e:c9:7b:b9:9e:3b:d0:c0:7f:8a:
c4:6f:da:5c:c7:40:18:d5:86:94:90:3f:62:22:4f:f0:2e:a5:
ac:19:33:17:c3:aa:cc:65:62:a1:45:f5:bf:79:9d:64:43:bd:
6e:42:ed:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 04:03:41 2025 by rpki-client