Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/70a8f1-d8eb-42b5-bddb-6265521f6df7/1/8oXVaIl18_WUoaqueCJeT5fhr9c.roa
File: 8oXVaIl18_WUoaqueCJeT5fhr9c.roa (raw, json)
Hash identifier: NbWH2LdXi3tEK5MKoTdbyvzrBRUGVw1u6/N9Z/L4WlE=
Subject key identifier: F2:85:D5:68:89:75:F3:F5:94:A1:AA:AE:78:22:5E:4F:97:E1:AF:D7
Certificate issuer: /CN=8db34774b01979284fd9e754fea68fa3c61783d0
Certificate serial: 018A46D73950BAE021B657126DE9BCA7DFF5
Authority key identifier: 8D:B3:47:74:B0:19:79:28:4F:D9:E7:54:FE:A6:8F:A3:C6:17:83:D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jbNHdLAZeShP2edU_qaPo8YXg9A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/70a8f1-d8eb-42b5-bddb-6265521f6df7/1/8oXVaIl18_WUoaqueCJeT5fhr9c.roa
Signing time: Wed 30 Aug 2023 14:27:04 +0000
ROA not before: Wed 30 Aug 2023 14:27:04 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 216394
IP address blocks: 84.54.12.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:46:d7:39:50:ba:e0:21:b6:57:12:6d:e9:bc:a7:df:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8db34774b01979284fd9e754fea68fa3c61783d0
Validity
Not Before: Aug 30 14:27:04 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f285d5688975f3f594a1aaae78225e4f97e1afd7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:34:e9:c8:ac:72:d8:64:bb:1b:38:5a:a6:e3:
a0:a7:04:3d:35:21:3c:37:44:49:90:cf:89:1a:79:
c2:c0:a1:c4:69:73:a2:e3:b8:15:69:1d:f1:97:67:
d6:af:49:4a:27:a4:b0:9d:9a:f9:0b:a3:69:10:4d:
5a:99:c9:15:03:59:d2:a6:13:78:69:b9:ef:40:ce:
77:17:82:4f:a7:69:2d:93:af:74:55:12:47:0b:f5:
8b:35:29:ee:84:15:9a:41:c6:ff:92:b5:a9:ad:7a:
8f:dd:b1:bc:5a:af:44:9f:91:13:f8:22:ec:d4:79:
af:1d:23:b1:f9:0e:64:24:e7:0c:31:c8:9a:54:d5:
c2:b0:ff:5f:43:c3:36:93:49:6a:b5:b6:02:51:36:
09:b7:dc:1a:c7:72:fa:8b:24:6e:ec:5c:4b:fe:60:
56:7b:b9:45:c4:03:5c:9d:68:a0:da:ea:ac:51:48:
1f:a6:b2:18:18:73:d6:78:c2:71:a8:71:e9:4f:11:
e6:e6:89:33:c5:3d:62:51:96:6e:80:5c:4c:03:3a:
84:3c:05:60:61:54:d0:d8:13:0b:17:be:a8:79:f9:
5a:bd:6f:b1:4a:1e:2d:a0:31:34:86:d0:ea:33:1d:
36:96:35:61:a4:43:71:a9:d8:b8:ed:e9:f7:51:6d:
f5:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:85:D5:68:89:75:F3:F5:94:A1:AA:AE:78:22:5E:4F:97:E1:AF:D7
X509v3 Authority Key Identifier:
keyid:8D:B3:47:74:B0:19:79:28:4F:D9:E7:54:FE:A6:8F:A3:C6:17:83:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jbNHdLAZeShP2edU_qaPo8YXg9A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/70a8f1-d8eb-42b5-bddb-6265521f6df7/1/8oXVaIl18_WUoaqueCJeT5fhr9c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/70a8f1-d8eb-42b5-bddb-6265521f6df7/1/jbNHdLAZeShP2edU_qaPo8YXg9A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.54.12.0/24
Signature Algorithm: sha256WithRSAEncryption
86:fc:a6:34:ce:8c:d0:28:27:39:2c:cb:35:3e:ce:94:ee:12:
96:85:f2:b2:2c:02:a3:c6:ac:ff:fe:f9:85:23:5b:fa:70:7b:
9f:03:ea:11:25:89:a2:e2:95:d3:6b:38:10:6b:df:60:00:4d:
cf:64:bd:f8:a7:fd:78:f5:ad:84:ed:48:95:9a:ba:49:d4:54:
a4:48:27:60:2a:b2:4c:7e:00:1c:2b:b6:a2:b8:75:ea:c8:ef:
dd:43:c8:8a:b9:9f:53:a2:4b:60:7b:aa:0c:08:4b:6d:72:15:
00:d8:5f:af:ae:02:f3:1d:ba:71:8a:48:d2:42:33:78:ce:54:
fa:12:ac:5d:52:94:eb:8d:f6:e2:17:1f:fd:88:b9:a4:26:f7:
7e:30:4e:05:78:c7:ce:2a:95:77:3d:e5:6b:c7:a2:a4:f9:39:
52:54:88:92:11:0b:6a:d1:8a:4f:97:93:23:85:b6:d0:dc:03:
50:e7:b6:28:3e:e0:83:d7:4d:4c:f6:bc:f5:83:47:62:94:09:
f7:7d:6b:ee:a9:07:af:ee:03:f6:4e:e0:0d:0b:ac:07:aa:3e:
7b:eb:77:79:7d:55:fe:2d:74:a6:34:75:a7:f3:c7:e9:03:75:
f7:b9:24:55:18:a0:2c:5b:f4:c7:1d:76:a7:3f:5d:0d:46:0f:
ca:54:53:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 22:38:39 2025 by rpki-client