Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/66b74c-81c1-410e-957d-a8d65dccb96b/1/2UXtcwLW7BFJx4iEinxjrIe0bD0.roa
File: 2UXtcwLW7BFJx4iEinxjrIe0bD0.roa (raw, json)
Hash identifier: VBwFgw2kxqnOAkMgbGgeEahHb+9IRsmh5rC38jIEnzs=
Subject key identifier: D9:45:ED:73:02:D6:EC:11:49:C7:88:84:8A:7C:63:AC:87:B4:6C:3D
Certificate issuer: /CN=72e4baf99ab840129133285fe9ad7b83fd130c39
Certificate serial: 061B1355
Authority key identifier: 72:E4:BA:F9:9A:B8:40:12:91:33:28:5F:E9:AD:7B:83:FD:13:0C:39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cuS6-Zq4QBKRMyhf6a17g_0TDDk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/66b74c-81c1-410e-957d-a8d65dccb96b/1/2UXtcwLW7BFJx4iEinxjrIe0bD0.roa
Signing time: Sat 01 Jan 2022 02:55:53 +0000
ROA not before: Sat 01 Jan 2022 02:55:53 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 42708
IP address blocks: 45.11.182.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 102437717 (0x61b1355)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72e4baf99ab840129133285fe9ad7b83fd130c39
Validity
Not Before: Jan 1 02:55:53 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d945ed7302d6ec1149c788848a7c63ac87b46c3d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:bc:a4:fc:df:a1:95:96:b0:42:e2:e9:48:56:
41:9d:4f:83:80:35:d9:6d:a6:3e:d5:ad:9a:83:5b:
5e:1a:69:ea:24:8e:2e:61:c7:f7:36:81:90:ee:13:
b0:f4:12:54:a8:bc:2e:54:fe:f3:e3:2f:c8:bf:46:
0b:1d:00:e9:f4:2a:74:e0:c3:ed:a8:db:13:89:27:
b9:ea:82:b5:86:9b:66:cc:77:07:d8:d5:77:95:22:
b4:5c:ba:75:a6:f5:22:ba:d9:22:b3:c0:91:28:62:
4d:19:2b:9e:ed:dd:b6:7a:2a:eb:15:2e:3a:8f:ce:
e3:ee:72:78:7a:b5:ea:01:c7:7d:1f:2c:ee:d5:ea:
9d:f4:1a:d3:16:f3:3a:9b:4e:b4:28:1f:88:2b:57:
5f:93:48:ff:2d:f2:76:b6:d8:62:39:11:ea:2d:7d:
49:2c:e7:78:28:85:a0:63:49:04:0c:a5:a8:da:3d:
55:59:35:53:6f:1d:5b:9e:93:a8:c8:8f:6d:67:18:
aa:71:c9:8a:b7:17:6e:3a:fc:66:b7:1d:7a:66:b9:
7a:3a:b3:e0:bc:1b:53:bf:42:57:15:6c:61:3b:20:
a1:ec:0c:a3:37:e6:3b:fa:ff:27:01:0c:c3:2c:a7:
2c:bb:38:a0:6d:68:4c:27:99:1f:ea:4d:82:59:6d:
34:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:45:ED:73:02:D6:EC:11:49:C7:88:84:8A:7C:63:AC:87:B4:6C:3D
X509v3 Authority Key Identifier:
keyid:72:E4:BA:F9:9A:B8:40:12:91:33:28:5F:E9:AD:7B:83:FD:13:0C:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cuS6-Zq4QBKRMyhf6a17g_0TDDk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/66b74c-81c1-410e-957d-a8d65dccb96b/1/2UXtcwLW7BFJx4iEinxjrIe0bD0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/66b74c-81c1-410e-957d-a8d65dccb96b/1/cuS6-Zq4QBKRMyhf6a17g_0TDDk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.11.182.0/24
Signature Algorithm: sha256WithRSAEncryption
8a:d0:84:13:2a:63:b3:ee:d1:8b:54:64:01:cd:68:74:de:9e:
5f:a3:18:44:d7:15:84:73:38:8b:c8:09:e6:ec:ea:c0:c1:00:
32:b9:91:5e:9a:ea:83:32:6a:81:e0:45:d5:72:73:19:a7:16:
37:31:fa:a9:2d:9f:7e:e6:d7:4f:c7:76:12:20:f1:0a:db:5c:
44:8e:4d:4a:d6:97:59:c3:94:64:ec:77:a5:13:12:da:5c:f3:
e7:f3:8c:fc:d7:c2:09:e8:08:30:79:fb:6b:b6:6d:ec:5e:20:
05:7c:20:30:2f:d9:35:76:17:ae:d2:40:9c:df:fa:62:c3:c1:
f7:47:6e:c1:ba:00:0b:23:9c:a4:7f:a4:f7:a4:aa:7b:72:0c:
51:7a:b4:58:7d:a1:6b:52:36:68:cd:76:eb:03:26:0c:d4:14:
55:d9:ff:9c:97:43:da:ae:58:e2:c3:61:7e:d8:8a:21:ac:b8:
f3:76:ad:b5:3b:ab:ef:5d:0b:9e:ad:d8:16:b8:13:c1:08:c6:
2b:a9:9e:03:1b:80:ca:44:22:34:c8:e5:61:24:ae:b4:6e:e4:
e9:22:7a:31:87:ec:f0:40:03:7a:80:27:2e:d2:d4:ee:c8:b0:
2b:26:b3:68:fd:ff:99:c9:34:75:b9:16:72:46:fe:51:5c:db:
41:d8:54:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 05:57:40 2025 by rpki-client