Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/70a8f1-d8eb-42b5-bddb-6265521f6df7/1/d9ESCb1C7f_6aGcRNRixnH-S1NY.roa
File: d9ESCb1C7f_6aGcRNRixnH-S1NY.roa (raw, json)
Hash identifier: +V4pqUNXUTDPnvjw4NyG42bnDemQkdLUGDiOeyclWC8=
Subject key identifier: 77:D1:12:09:BD:42:ED:FF:FA:68:67:11:35:18:B1:9C:7F:92:D4:D6
Certificate issuer: /CN=8db34774b01979284fd9e754fea68fa3c61783d0
Certificate serial: 09FEF09F
Authority key identifier: 8D:B3:47:74:B0:19:79:28:4F:D9:E7:54:FE:A6:8F:A3:C6:17:83:D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jbNHdLAZeShP2edU_qaPo8YXg9A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/70a8f1-d8eb-42b5-bddb-6265521f6df7/1/d9ESCb1C7f_6aGcRNRixnH-S1NY.roa
Signing time: Sat 01 Jan 2022 11:56:00 +0000
ROA not before: Sat 01 Jan 2022 11:56:00 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 207326
IP address blocks: 185.225.39.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 167702687 (0x9fef09f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8db34774b01979284fd9e754fea68fa3c61783d0
Validity
Not Before: Jan 1 11:56:00 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=77d11209bd42edfffa6867113518b19c7f92d4d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:6b:b8:0a:23:4c:bf:e3:2c:fc:98:ae:45:83:
96:33:d0:45:55:cc:34:ea:e1:bc:1a:22:79:da:e6:
5c:1e:9d:14:5e:23:18:59:17:20:de:9a:1e:8c:cc:
7d:e2:b8:7a:4c:47:25:ad:f6:be:52:2d:62:64:4c:
c0:75:22:15:60:c7:52:c9:10:b1:88:e8:7c:e6:d9:
c4:a9:e1:91:b1:2b:93:57:45:4a:41:9e:df:1d:b3:
8d:1a:b2:fe:96:d3:ac:3d:d2:62:1d:bf:4b:13:15:
e8:90:51:2e:f9:98:3b:f6:11:cc:67:05:63:8f:12:
d2:e8:08:0f:ef:a2:8c:52:43:17:5d:79:da:31:b0:
8c:26:ba:35:ea:bf:cb:ab:34:09:9b:b9:c9:96:ce:
e1:1e:5b:e8:81:0f:e9:73:35:c4:9c:82:db:77:00:
61:b7:08:aa:a6:6c:d4:e3:28:57:b8:c3:66:e4:e9:
c4:79:26:6c:a6:46:59:dd:ce:11:30:a8:a8:6b:75:
c8:bc:ab:b1:67:68:d3:1b:60:68:81:b8:1c:1b:18:
f3:f4:3e:a8:17:d1:46:0c:a0:38:27:e7:98:8b:02:
5c:eb:2a:9a:2e:31:fc:ce:47:b3:c5:26:5b:41:52:
fe:70:d7:c7:87:cb:25:ff:41:ec:b0:c3:78:b1:82:
0c:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:D1:12:09:BD:42:ED:FF:FA:68:67:11:35:18:B1:9C:7F:92:D4:D6
X509v3 Authority Key Identifier:
keyid:8D:B3:47:74:B0:19:79:28:4F:D9:E7:54:FE:A6:8F:A3:C6:17:83:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jbNHdLAZeShP2edU_qaPo8YXg9A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/70a8f1-d8eb-42b5-bddb-6265521f6df7/1/d9ESCb1C7f_6aGcRNRixnH-S1NY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/70a8f1-d8eb-42b5-bddb-6265521f6df7/1/jbNHdLAZeShP2edU_qaPo8YXg9A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.225.39.0/24
Signature Algorithm: sha256WithRSAEncryption
7e:c6:4b:87:74:27:8a:0c:2a:ca:f7:70:d6:2b:60:91:b5:2a:
5d:12:7c:3b:71:6f:3d:06:18:57:80:f9:6f:e8:99:cb:31:75:
a6:39:9b:c9:76:c2:ff:e6:71:e0:28:a0:39:98:6c:67:9b:df:
1f:5d:4c:65:80:24:75:ed:d8:90:34:77:df:68:4b:8e:f8:bf:
b5:28:84:e3:f9:95:59:c6:a7:ac:b3:77:b8:aa:3c:3c:14:45:
f5:d9:8d:c2:94:eb:9f:37:34:16:7b:85:0b:f1:b9:52:d1:e8:
bf:58:17:94:54:cc:98:bc:53:ac:0a:03:9b:d3:67:9e:ed:20:
86:df:55:dd:4c:a9:13:41:94:70:3d:71:4f:2e:35:26:fc:5a:
a4:af:80:94:6a:15:34:c7:95:47:95:ed:aa:6d:98:e9:79:d4:
fd:14:46:20:00:15:34:98:70:dd:3a:89:c2:b4:d2:a0:d5:e1:
fa:da:d2:41:b8:e5:10:c7:2e:21:ce:dc:23:15:41:5e:eb:15:
83:4c:a1:52:1e:bd:9d:fd:47:84:67:ee:7e:6a:92:50:83:65:
dd:81:fc:f1:c2:ff:2d:f6:6e:78:86:6f:3c:dd:c4:01:bb:95:
af:67:04:18:9c:8b:0d:c3:a2:f8:d3:85:a0:40:18:a5:99:ce:
47:bb:0c:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 22:37:24 2025 by rpki-client