Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/23db5c-1a10-44c6-9d77-bb5caac2e903/1/1XLSnQgav6UV_hSY2B-fLL9A1qA.roa
File: 1XLSnQgav6UV_hSY2B-fLL9A1qA.roa (raw, json)
Hash identifier: St/vs86HSf6Kf45/HRxgkF5+PXho7Fwmrt/qtlOxeyQ=
Subject key identifier: D5:72:D2:9D:08:1A:BF:A5:15:FE:14:98:D8:1F:9F:2C:BF:40:D6:A0
Certificate issuer: /CN=8dc69c6bbe89e7c0479b617744a4424f66674944
Certificate serial: 018CCA2A283408C1A384603214A8320E081A
Authority key identifier: 8D:C6:9C:6B:BE:89:E7:C0:47:9B:61:77:44:A4:42:4F:66:67:49:44
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jcaca76J58BHm2F3RKRCT2ZnSUQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/23db5c-1a10-44c6-9d77-bb5caac2e903/1/1XLSnQgav6UV_hSY2B-fLL9A1qA.roa
Signing time: Tue 02 Jan 2024 12:33:29 +0000
ROA not before: Tue 02 Jan 2024 12:33:29 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 43824
IP address blocks: 91.92.115.0/24 maxlen: 24
85.202.95.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:2a:28:34:08:c1:a3:84:60:32:14:a8:32:0e:08:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8dc69c6bbe89e7c0479b617744a4424f66674944
Validity
Not Before: Jan 2 12:33:29 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d572d29d081abfa515fe1498d81f9f2cbf40d6a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:df:e3:b5:6f:71:8e:74:a0:7f:a3:f5:7c:92:
89:bb:ed:4d:1a:66:99:2a:33:b1:8f:3c:92:9b:0c:
e2:32:17:ee:88:58:a8:20:cb:de:6a:fc:82:35:14:
6a:9a:38:dd:da:60:64:61:6b:09:53:c0:d8:a2:7b:
be:e7:2b:40:d7:ba:f0:e9:bc:f8:b7:d7:e2:80:95:
7a:a2:27:b5:b6:44:02:61:02:df:a4:0e:94:06:12:
a0:3b:d8:75:f0:d3:9c:e1:b9:11:31:0a:fc:5f:0d:
60:f5:62:27:28:7c:42:4d:55:f3:d2:5f:53:36:ab:
4d:65:ad:31:5e:eb:94:3c:33:78:09:f3:10:28:ea:
09:f0:ba:6a:b1:91:42:ef:17:7e:c0:78:5a:c2:0b:
c0:77:9b:4e:e8:79:1f:2c:d3:ad:1d:fa:3d:9d:30:
59:8a:bf:d6:e6:d3:05:e6:e3:59:fb:68:84:bb:5c:
0c:e1:76:01:9b:1b:43:c6:cc:67:ac:86:b0:58:00:
d5:b0:af:4e:3c:62:05:50:30:39:42:3b:28:5e:e7:
bd:39:91:f6:06:ed:53:c1:e2:d0:d5:1d:14:69:85:
73:17:cd:d3:b3:ad:34:e5:d6:cd:6d:8a:b2:a0:4b:
c1:6e:0f:44:ed:6c:33:dd:c8:4c:d4:cc:58:e3:16:
b9:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:72:D2:9D:08:1A:BF:A5:15:FE:14:98:D8:1F:9F:2C:BF:40:D6:A0
X509v3 Authority Key Identifier:
keyid:8D:C6:9C:6B:BE:89:E7:C0:47:9B:61:77:44:A4:42:4F:66:67:49:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jcaca76J58BHm2F3RKRCT2ZnSUQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/23db5c-1a10-44c6-9d77-bb5caac2e903/1/1XLSnQgav6UV_hSY2B-fLL9A1qA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/23db5c-1a10-44c6-9d77-bb5caac2e903/1/jcaca76J58BHm2F3RKRCT2ZnSUQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.202.95.0/24
91.92.115.0/24
Signature Algorithm: sha256WithRSAEncryption
b3:c1:bd:3b:db:ca:ea:58:7e:b6:09:9c:66:9c:17:4c:98:5e:
f6:3c:34:64:87:7d:db:8a:59:65:1e:b5:34:d5:d1:39:e0:db:
a3:c6:5d:1e:53:34:3f:7f:0d:48:a3:fd:4f:08:f5:ae:6e:b0:
cb:af:24:87:30:33:95:b0:41:cc:fb:d3:00:eb:44:41:b0:95:
92:42:99:ed:21:ba:dc:b4:33:ba:3e:67:89:df:91:47:6d:d8:
cc:bc:67:e1:51:9f:5b:26:fe:bb:ba:36:d5:50:23:6e:bb:53:
c8:e4:97:52:55:4f:d3:32:aa:d5:04:ab:9a:a5:f9:1b:0e:ec:
98:f0:50:17:66:d0:d7:47:1d:04:cb:7c:aa:86:ae:ea:a0:83:
2c:93:c6:f9:2c:ca:df:01:dd:ca:57:8f:c0:1e:67:b4:c0:19:
f0:1f:b9:a5:15:39:33:f2:67:04:34:fb:93:bd:fb:69:ed:bf:
6b:d6:12:95:14:44:71:8f:99:ef:8a:35:9a:2a:6a:65:cc:79:
c3:78:e6:49:bc:f3:e4:de:e5:43:d7:3d:32:53:f3:75:2e:b9:
aa:76:07:b2:71:70:c3:97:be:0e:58:24:8c:31:eb:39:d2:44:
86:b4:4b:90:0e:45:e4:99:2b:1c:36:7c:ca:28:0a:82:a0:9d:
57:f3:52:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 00:15:35 2025 by rpki-client