Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/70a8f1-d8eb-42b5-bddb-6265521f6df7/1/rv_pdkRuzxSY7BpzKoTJUAXdn5w.roa
File: rv_pdkRuzxSY7BpzKoTJUAXdn5w.roa (raw, json)
Hash identifier: CVGP69S/i5asbRiEWCyj1/T7DOfj13KqvmtRV4AfgMs=
Subject key identifier: AE:FF:E9:76:44:6E:CF:14:98:EC:1A:73:2A:84:C9:50:05:DD:9F:9C
Certificate issuer: /CN=8db34774b01979284fd9e754fea68fa3c61783d0
Certificate serial: 0B4B4D91
Authority key identifier: 8D:B3:47:74:B0:19:79:28:4F:D9:E7:54:FE:A6:8F:A3:C6:17:83:D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jbNHdLAZeShP2edU_qaPo8YXg9A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/70a8f1-d8eb-42b5-bddb-6265521f6df7/1/rv_pdkRuzxSY7BpzKoTJUAXdn5w.roa
Signing time: Sat 28 May 2022 12:46:32 +0000
ROA not before: Sat 28 May 2022 12:46:32 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 207459
IP address blocks: 213.226.118.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 189484433 (0xb4b4d91)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8db34774b01979284fd9e754fea68fa3c61783d0
Validity
Not Before: May 28 12:46:32 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=aeffe976446ecf1498ec1a732a84c95005dd9f9c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:5c:e8:29:f6:d9:33:bb:54:ab:0d:79:cf:40:
cb:9f:e2:73:1a:66:9c:56:e6:2c:05:05:7a:9a:8f:
28:6a:95:6a:e9:ce:37:24:19:42:a5:23:19:e3:c9:
ed:98:12:72:6f:2f:4e:47:8e:ad:81:a6:eb:e4:41:
a9:bd:df:22:bd:0e:8c:03:4e:85:8f:3c:f8:38:df:
f6:15:93:8d:11:0c:ad:cb:ac:9e:7d:fc:22:9f:93:
9b:80:32:87:b4:f6:01:b9:ff:d4:47:71:53:19:dc:
b6:aa:77:e0:2e:4c:f7:69:aa:3b:b9:5b:3c:e2:d0:
84:1c:78:f2:21:28:7e:5a:98:9d:18:e0:d3:55:18:
12:42:10:bd:83:21:f9:fe:99:29:1b:bc:5f:50:b7:
eb:6f:52:de:66:80:f1:dc:28:9a:62:7a:87:51:e7:
24:77:77:d6:8a:f0:6e:7a:ee:22:60:12:a5:fc:13:
81:d6:6f:2e:bb:d0:a2:0e:81:9a:71:db:cf:e9:09:
71:5b:d7:da:25:3b:ce:0a:cc:26:80:d2:cf:fb:68:
07:7f:a6:8c:99:bd:9b:fc:db:00:24:e6:26:9f:aa:
1b:1a:fb:0b:3f:b2:0a:5d:05:09:dd:9c:0e:f9:e8:
07:f7:c6:9f:37:11:a1:cf:dd:80:ba:ac:4a:c4:31:
4d:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:FF:E9:76:44:6E:CF:14:98:EC:1A:73:2A:84:C9:50:05:DD:9F:9C
X509v3 Authority Key Identifier:
keyid:8D:B3:47:74:B0:19:79:28:4F:D9:E7:54:FE:A6:8F:A3:C6:17:83:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jbNHdLAZeShP2edU_qaPo8YXg9A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/70a8f1-d8eb-42b5-bddb-6265521f6df7/1/rv_pdkRuzxSY7BpzKoTJUAXdn5w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/70a8f1-d8eb-42b5-bddb-6265521f6df7/1/jbNHdLAZeShP2edU_qaPo8YXg9A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.226.118.0/24
Signature Algorithm: sha256WithRSAEncryption
74:47:78:9e:fc:f4:5a:54:bd:d0:f4:87:f8:c1:75:3a:a5:d7:
3e:52:c6:50:df:06:6f:e5:e3:bd:fa:c0:96:d6:a0:89:33:c7:
b8:93:0e:1b:d4:17:e8:3e:19:ea:10:3c:7f:be:a6:cd:1a:58:
1d:ca:5d:89:82:d9:44:9e:b4:00:c7:7f:84:ae:ad:e0:17:7f:
55:a9:f2:9e:6b:95:2b:ab:11:fe:73:9f:66:8b:ad:52:14:6a:
41:8a:d1:35:39:ff:b3:a5:50:3c:40:43:3f:29:22:bf:9a:8d:
32:1f:df:a5:79:a6:d9:f7:73:36:3b:ed:ec:e0:e5:ce:82:94:
e4:d1:d7:94:fa:0e:9c:ed:fe:50:85:ba:92:d5:99:5c:ec:9d:
02:7a:1a:8c:5a:66:a5:cb:a7:5e:dd:de:d7:68:c4:52:46:ba:
8a:9d:52:ee:44:11:60:ef:7f:7f:10:1f:13:d5:ad:ae:53:fd:
89:09:14:fa:99:72:94:12:04:19:29:f5:7c:20:f6:14:0e:86:
28:b3:f9:2f:b6:af:cf:ee:8a:2b:83:b7:df:86:9f:e8:cf:48:
39:18:f4:eb:bc:c8:be:40:b9:4b:27:90:54:47:b2:f0:0d:3d:
4c:0d:71:7b:31:59:3e:18:ec:6d:10:f8:c9:71:17:aa:13:3f:
2f:1e:dd:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 22:34:50 2025 by rpki-client