Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/8ea9b9-3b6e-4fdf-b5d1-f04fdcc09e51/1/wyN1M-4D9RHYHXqUBkhWHjlNs_o.roa
File: wyN1M-4D9RHYHXqUBkhWHjlNs_o.roa (raw, json)
Hash identifier: D36oDRIjIC99HHxWz3JgL0bismAgZxxR49uq88EX0Ks=
Subject key identifier: C3:23:75:33:EE:03:F5:11:D8:1D:7A:94:06:48:56:1E:39:4D:B3:FA
Certificate issuer: /CN=992b86095ce558d2e9618728a44228a27be9098f
Certificate serial: 018571957AC93744ADB4A216622E39BA917A
Authority key identifier: 99:2B:86:09:5C:E5:58:D2:E9:61:87:28:A4:42:28:A2:7B:E9:09:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mSuGCVzlWNLpYYcopEIoonvpCY8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/8ea9b9-3b6e-4fdf-b5d1-f04fdcc09e51/1/wyN1M-4D9RHYHXqUBkhWHjlNs_o.roa
Signing time: Mon 02 Jan 2023 08:24:59 +0000
ROA not before: Mon 02 Jan 2023 08:24:59 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 60117
IP address blocks: 166.108.184.0/22 maxlen: 24
166.108.212.0/22 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:95:7a:c9:37:44:ad:b4:a2:16:62:2e:39:ba:91:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=992b86095ce558d2e9618728a44228a27be9098f
Validity
Not Before: Jan 2 08:24:59 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c3237533ee03f511d81d7a940648561e394db3fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:6d:6b:9c:93:17:b0:29:2c:d5:f4:37:56:23:
4d:ea:1f:49:fa:72:90:b2:d5:ee:21:82:6a:1e:a1:
76:5b:ef:66:b9:3d:de:84:09:80:35:80:a8:83:e5:
24:e8:e6:8c:ff:97:d7:a4:bf:98:e9:e0:dd:4e:5c:
30:26:40:a2:41:b8:da:ba:78:ca:0e:b7:8a:ab:80:
ac:4c:94:40:92:d0:d4:ac:ea:dc:57:d0:45:b4:23:
a5:71:91:63:81:2e:8f:b1:35:4d:a2:6d:0a:92:70:
6c:b1:d6:52:a7:06:8d:a8:98:b7:d4:09:86:8b:2c:
f4:0c:ff:63:66:95:f7:a7:9d:72:af:be:71:32:57:
19:7c:32:89:65:d7:fd:28:3d:6d:1e:a7:41:14:91:
4e:05:97:2d:28:8b:c4:c0:c9:92:b9:53:43:f4:8d:
27:7f:b9:07:52:33:37:b7:3c:b6:e9:12:1d:f9:b4:
6c:0b:98:11:7e:50:23:2c:09:90:3c:f8:71:5d:79:
34:59:c8:d7:2a:11:89:a9:1c:f0:63:7d:48:35:21:
89:ad:b3:4d:e3:c7:61:05:88:a4:d9:b4:22:77:95:
cb:cd:de:64:3e:f5:b5:9c:d4:2c:a5:a6:0d:2e:6a:
a9:c6:3d:04:72:bf:90:b0:5d:44:0f:98:99:d1:5b:
a1:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:23:75:33:EE:03:F5:11:D8:1D:7A:94:06:48:56:1E:39:4D:B3:FA
X509v3 Authority Key Identifier:
keyid:99:2B:86:09:5C:E5:58:D2:E9:61:87:28:A4:42:28:A2:7B:E9:09:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mSuGCVzlWNLpYYcopEIoonvpCY8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/8ea9b9-3b6e-4fdf-b5d1-f04fdcc09e51/1/wyN1M-4D9RHYHXqUBkhWHjlNs_o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/8ea9b9-3b6e-4fdf-b5d1-f04fdcc09e51/1/mSuGCVzlWNLpYYcopEIoonvpCY8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
166.108.184.0/22
166.108.212.0/22
Signature Algorithm: sha256WithRSAEncryption
79:cf:d3:5f:9e:8e:c9:62:ca:32:f9:d7:41:67:e5:21:f3:31:
fc:33:dc:e3:0a:00:03:0f:a6:90:04:e8:40:8d:32:d0:18:75:
3a:64:87:f1:0b:df:a5:59:3e:0f:c7:06:bd:d3:13:3e:fe:d3:
73:fe:bf:7b:39:de:c5:a4:d3:dd:7e:b9:78:a4:2d:74:f9:db:
f5:22:7b:95:4f:5a:01:bd:59:cc:74:13:6a:5c:ac:f0:91:08:
ff:96:75:1a:43:f1:3c:cc:77:c1:84:9d:19:a9:26:6d:63:15:
c6:9f:1d:79:4d:60:8a:21:8e:71:5e:70:6f:89:8e:4e:cb:86:
15:f2:f5:ee:2f:ff:a2:ea:03:6c:18:c9:f4:cb:14:ff:97:df:
24:dc:c9:46:a0:20:ce:45:ab:3b:5f:f4:f9:81:b2:b5:4e:63:
56:cc:28:98:8a:24:dd:46:ba:04:c8:06:02:29:67:53:ba:a5:
eb:e6:c6:a1:8a:a8:83:97:77:7c:88:62:08:66:33:40:c9:74:
99:3d:d1:ef:1b:11:89:7e:55:74:6f:db:67:59:4d:10:fa:5d:
73:ac:77:c3:51:dc:16:fd:99:73:ff:ac:ec:22:1d:e9:fb:dc:
76:40:c2:78:62:f0:6f:85:ec:61:b1:a2:db:a4:bc:da:b4:9e:
68:a5:ee:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:34:11 2025 by rpki-client