Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/70a8f1-d8eb-42b5-bddb-6265521f6df7/1/Dvb4EamnmhR4ESjAdWLdzdx5R1I.roa
File: Dvb4EamnmhR4ESjAdWLdzdx5R1I.roa (raw, json)
Hash identifier: sMZViZQPFlhPfRvGM26DkILLMoq/1z0IX8jFCcU/saI=
Subject key identifier: 0E:F6:F8:11:A9:A7:9A:14:78:11:28:C0:75:62:DD:CD:DC:79:47:52
Certificate issuer: /CN=8db34774b01979284fd9e754fea68fa3c61783d0
Certificate serial: 09FD89E6
Authority key identifier: 8D:B3:47:74:B0:19:79:28:4F:D9:E7:54:FE:A6:8F:A3:C6:17:83:D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jbNHdLAZeShP2edU_qaPo8YXg9A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/70a8f1-d8eb-42b5-bddb-6265521f6df7/1/Dvb4EamnmhR4ESjAdWLdzdx5R1I.roa
Signing time: Sat 01 Jan 2022 11:56:00 +0000
ROA not before: Sat 01 Jan 2022 11:56:00 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 62943
IP address blocks: 84.54.15.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 167610854 (0x9fd89e6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8db34774b01979284fd9e754fea68fa3c61783d0
Validity
Not Before: Jan 1 11:56:00 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=0ef6f811a9a79a14781128c07562ddcddc794752
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:7d:c0:a1:da:1a:22:9b:ed:87:59:bb:6b:4d:
88:93:e2:02:54:9b:8f:bc:74:ca:54:cc:83:b7:80:
0e:ab:f0:1d:6e:52:e8:d8:43:e6:75:e4:81:54:f8:
61:a7:ff:f8:06:7a:73:29:12:91:0d:cc:11:e2:a4:
72:b0:c0:56:09:e7:fd:00:47:20:10:ea:32:8f:fb:
e3:29:24:1b:a6:6f:e8:c2:f7:05:43:7f:1b:ba:de:
2c:88:6b:39:7d:51:31:0d:0e:aa:1c:b8:23:13:83:
03:af:bf:95:1a:44:49:f8:9a:98:f9:a4:4d:7d:97:
70:52:61:b6:42:cc:ee:0c:c4:b9:3b:8f:2b:34:a0:
d8:2a:8e:d2:65:69:df:f1:b2:22:2c:e5:2d:01:dd:
d7:d2:69:6d:4a:bd:28:34:0e:6a:ac:e7:46:b0:4f:
5e:43:63:e3:07:5b:0e:04:3f:4a:c2:7e:84:14:d7:
41:33:b8:42:fc:88:18:95:27:9c:d8:fb:c4:9b:43:
52:57:73:ef:4c:1e:d7:2d:8f:99:ca:17:46:5e:9f:
ba:00:ff:ca:a2:3d:98:d1:6b:fe:7b:8a:67:5b:d5:
00:9b:b4:c5:9b:ba:ad:54:12:5f:71:24:8e:1a:c2:
95:5a:89:a1:db:ce:6a:ec:99:b3:26:36:a4:28:44:
1d:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:F6:F8:11:A9:A7:9A:14:78:11:28:C0:75:62:DD:CD:DC:79:47:52
X509v3 Authority Key Identifier:
keyid:8D:B3:47:74:B0:19:79:28:4F:D9:E7:54:FE:A6:8F:A3:C6:17:83:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jbNHdLAZeShP2edU_qaPo8YXg9A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/70a8f1-d8eb-42b5-bddb-6265521f6df7/1/Dvb4EamnmhR4ESjAdWLdzdx5R1I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/70a8f1-d8eb-42b5-bddb-6265521f6df7/1/jbNHdLAZeShP2edU_qaPo8YXg9A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.54.15.0/24
Signature Algorithm: sha256WithRSAEncryption
e4:c6:6f:72:ff:b3:f3:b6:72:1e:10:7b:0e:65:a9:8f:f8:5e:
3b:27:6c:07:58:a2:b3:d1:dd:27:d6:a4:ee:fd:d6:dd:ae:7e:
07:1e:f1:63:1d:8e:2a:4f:52:04:00:2c:70:ce:c3:2c:be:10:
b4:4f:55:79:5d:c9:e2:59:55:37:1a:b4:4d:b4:b2:7d:21:e0:
8e:05:62:fd:a3:fe:33:7d:0c:3d:e9:a2:2d:4b:92:14:90:51:
4a:c4:66:fe:19:43:d5:23:7d:0f:e0:67:ee:8d:4e:a1:49:04:
3c:af:3b:c3:61:06:73:4d:46:34:02:22:14:2b:69:64:21:a9:
d9:ca:37:67:80:2c:fc:05:37:48:b0:00:04:7d:33:98:c8:99:
13:0c:8d:f0:5f:eb:2e:29:af:61:22:dd:b8:41:e1:18:3d:03:
a9:9d:09:a0:60:45:14:be:7c:5b:35:fe:2a:58:6e:24:c2:8e:
11:ce:60:fc:49:af:bd:2a:9f:14:8a:e8:bf:bc:73:3b:c8:05:
33:bf:cf:1a:e4:28:48:ce:03:e2:43:48:78:ea:3d:69:a4:5c:
e0:81:70:f6:a8:1b:c4:71:fa:3c:06:67:e8:21:d1:2d:97:de:
8e:3a:28:e9:27:05:24:9d:cb:a0:5d:77:d4:34:4b:d2:8b:10:
3c:97:46:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 22:32:40 2025 by rpki-client