Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/8ea9b9-3b6e-4fdf-b5d1-f04fdcc09e51/1/T4EnmXR-c10BZmk-Z9h91BmPtnk.roa
File: T4EnmXR-c10BZmk-Z9h91BmPtnk.roa (raw, json)
Hash identifier: viKrB/GhXRFYnzL6WjUi42lN42yRmhsqOhmB9sL17zk=
Subject key identifier: 4F:81:27:99:74:7E:73:5D:01:66:69:3E:67:D8:7D:D4:19:8F:B6:79
Certificate issuer: /CN=992b86095ce558d2e9618728a44228a27be9098f
Certificate serial: 01840F31CB16389080AD6376B179BB1984DA
Authority key identifier: 99:2B:86:09:5C:E5:58:D2:E9:61:87:28:A4:42:28:A2:7B:E9:09:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mSuGCVzlWNLpYYcopEIoonvpCY8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/8ea9b9-3b6e-4fdf-b5d1-f04fdcc09e51/1/T4EnmXR-c10BZmk-Z9h91BmPtnk.roa
Signing time: Tue 25 Oct 2022 12:50:32 +0000
ROA not before: Tue 25 Oct 2022 12:50:32 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 29119
IP address blocks: 166.108.242.0/23 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:0f:31:cb:16:38:90:80:ad:63:76:b1:79:bb:19:84:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=992b86095ce558d2e9618728a44228a27be9098f
Validity
Not Before: Oct 25 12:50:32 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=4f812799747e735d0166693e67d87dd4198fb679
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:58:5d:26:7b:66:38:a3:08:e7:17:6c:7b:84:
bf:86:3e:cc:84:58:9a:11:49:e0:b7:11:1b:9e:14:
b8:8c:a4:71:fb:38:e3:68:d6:dc:22:f8:20:b7:b2:
3a:c3:fb:0b:3d:35:2e:53:b2:cf:b1:f7:be:43:6f:
02:0f:7f:22:9e:61:42:d1:8f:38:ab:a1:d6:19:1d:
22:f9:e8:38:61:62:66:72:0f:bc:78:b2:31:7a:c7:
1f:f5:28:48:04:6a:4e:99:5a:d5:ec:e2:c2:21:0a:
8c:10:83:a4:ad:2c:1b:db:2a:d9:1f:c1:0e:63:6e:
29:6c:b0:0f:2c:62:d4:55:bd:21:ed:95:9d:e1:bb:
fd:f5:ac:5b:1e:ae:f3:2a:40:5b:5e:f4:28:15:01:
d8:a3:34:53:22:0a:ac:a8:27:9b:e0:10:4e:2f:92:
07:0a:19:b2:17:db:54:e3:ef:2c:db:39:b7:14:c6:
e1:aa:e9:b5:6e:65:23:55:74:09:81:a5:c4:7b:c2:
b3:01:5c:7c:a2:7a:9b:41:ff:5c:9c:d4:0e:7e:7b:
b4:5e:78:ce:64:ed:59:b3:9a:af:4d:33:04:a0:2a:
82:f5:59:b0:af:eb:b9:fb:05:0f:68:54:9c:40:4b:
5d:dc:6b:14:d7:84:04:08:2f:ff:ff:6d:1c:ea:42:
ee:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:81:27:99:74:7E:73:5D:01:66:69:3E:67:D8:7D:D4:19:8F:B6:79
X509v3 Authority Key Identifier:
keyid:99:2B:86:09:5C:E5:58:D2:E9:61:87:28:A4:42:28:A2:7B:E9:09:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mSuGCVzlWNLpYYcopEIoonvpCY8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/8ea9b9-3b6e-4fdf-b5d1-f04fdcc09e51/1/T4EnmXR-c10BZmk-Z9h91BmPtnk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/8ea9b9-3b6e-4fdf-b5d1-f04fdcc09e51/1/mSuGCVzlWNLpYYcopEIoonvpCY8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
166.108.242.0/23
Signature Algorithm: sha256WithRSAEncryption
58:6e:00:47:c0:70:b6:a3:6b:f1:93:1b:7b:71:5e:5d:fe:08:
c8:d0:3c:9c:75:70:d0:5c:8c:5a:7b:da:d0:50:42:8e:a3:7f:
37:69:bb:b6:88:ee:5d:a3:9b:c3:84:6b:de:9d:7b:d0:98:6a:
44:36:69:a4:51:81:8a:a8:f7:e6:97:ed:c8:5a:0c:65:3f:00:
c5:18:be:5c:4a:ef:d6:c5:18:46:a8:1d:3e:a5:f5:1b:29:a5:
cc:4d:85:8f:ef:9f:85:d9:c1:2e:ea:4c:49:64:2a:84:94:e7:
54:d1:45:1b:a2:5e:c9:fc:0d:cd:a8:c3:7f:75:5e:4a:80:38:
61:3b:57:76:5c:98:80:72:89:ba:06:e0:1a:dc:9b:df:23:1d:
21:c5:ce:aa:3d:05:a6:05:3a:ea:68:71:11:83:ab:dd:28:d3:
45:a1:cf:23:3f:82:47:42:59:1a:02:50:c2:11:79:f3:12:39:
75:af:8f:e8:f3:ca:e9:cc:8c:e4:28:cb:ed:86:31:09:62:4b:
dd:78:11:13:92:30:a9:c4:a2:17:d9:ae:c3:e6:2b:72:32:b1:
3d:57:68:3a:09:c0:d8:9c:d6:da:fb:2d:cd:10:45:c5:f9:a6:
73:16:bf:72:8b:37:a7:e1:c7:c8:3c:1a:bf:0c:b2:1c:df:9f:
aa:9d:31:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:19:53 2025 by rpki-client