Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/1-DWnJUYuVvLauq0vaEiuMFX8iL8.roa
File: 1-DWnJUYuVvLauq0vaEiuMFX8iL8.roa (raw, json)
Hash identifier: QODDkr0DOyAjvuN2lVMk/w+ul1Tp3sYe5yfoA9J2woc=
Subject key identifier: F8:35:A7:25:46:2E:56:F2:DA:BA:AD:2F:68:48:AE:30:55:FC:88:BF
Certificate issuer: /CN=6f75e4e94b5cb74517b7b01568015da9e6eecdb6
Certificate serial: 018CE836B4514ABEA56EA581A85797EC1DB0
Authority key identifier: 6F:75:E4:E9:4B:5C:B7:45:17:B7:B0:15:68:01:5D:A9:E6:EE:CD:B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b3Xk6Utct0UXt7AVaAFdqebuzbY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/1-DWnJUYuVvLauq0vaEiuMFX8iL8.roa
Signing time: Mon 08 Jan 2024 08:35:48 +0000
ROA not before: Mon 08 Jan 2024 08:35:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 62240
IP address blocks: 95.82.32.0/21 maxlen: 21
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:e8:36:b4:51:4a:be:a5:6e:a5:81:a8:57:97:ec:1d:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f75e4e94b5cb74517b7b01568015da9e6eecdb6
Validity
Not Before: Jan 8 08:35:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f835a725462e56f2dabaad2f6848ae3055fc88bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:ed:5a:09:5a:af:12:a4:10:29:0e:65:a0:e7:
d8:aa:c2:70:0c:da:bd:63:c5:95:b1:94:59:79:cd:
5f:56:3a:ad:70:fe:41:3c:61:16:07:8d:d6:ad:73:
f3:9c:96:68:39:0f:70:05:3c:85:e8:cf:74:c6:e0:
ea:f7:7b:f4:0b:8c:eb:6a:9f:04:5f:c5:26:d5:b4:
9b:78:6a:4b:9d:b5:35:76:02:ee:15:7a:37:6f:0c:
1a:ee:6a:c5:2a:b1:4e:67:ce:ba:37:64:36:75:80:
78:95:80:67:16:99:1d:bf:a6:35:57:2a:74:b1:f9:
ae:b9:10:91:40:3f:cb:32:89:78:49:6d:b3:6b:d4:
4c:08:f8:79:9c:09:be:4f:6f:0c:a4:37:ea:9f:4d:
a0:99:05:1a:bf:98:b8:f2:60:d9:99:65:59:47:df:
81:c9:bc:09:5e:00:6c:c3:35:42:88:0c:da:4b:ac:
f7:28:9c:44:30:c9:5c:9b:af:66:dc:d2:63:e5:c5:
8d:84:bf:89:35:28:9e:48:55:f7:39:14:5a:76:76:
fb:f5:a1:dc:09:bd:7b:2c:18:48:02:c9:20:97:64:
2b:4b:81:42:a6:f7:08:39:4e:86:88:fa:f2:f8:93:
31:9f:ae:76:09:7d:da:bb:3f:10:5a:dd:30:b8:ad:
f4:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:35:A7:25:46:2E:56:F2:DA:BA:AD:2F:68:48:AE:30:55:FC:88:BF
X509v3 Authority Key Identifier:
keyid:6F:75:E4:E9:4B:5C:B7:45:17:B7:B0:15:68:01:5D:A9:E6:EE:CD:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3Xk6Utct0UXt7AVaAFdqebuzbY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/1-DWnJUYuVvLauq0vaEiuMFX8iL8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/b3Xk6Utct0UXt7AVaAFdqebuzbY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.82.32.0/21
Signature Algorithm: sha256WithRSAEncryption
59:45:ef:1d:3c:3c:fc:f0:47:0b:cc:0b:06:ff:b5:85:6a:d2:
8c:ca:8b:1b:d7:ea:22:6f:88:63:8e:08:9a:18:f9:52:75:67:
e7:05:93:23:20:6a:88:a8:26:c5:d3:19:7b:74:76:63:41:8e:
be:64:99:c8:fc:f7:4d:56:ae:2a:65:56:32:31:69:a1:4c:3d:
02:e6:8f:fd:29:62:3f:d0:12:b9:e3:f4:60:8c:ec:67:95:e0:
ee:13:80:d4:05:f8:a0:e4:d7:16:c6:54:82:e9:9f:4a:82:23:
5c:93:36:aa:69:bc:6e:47:f6:7c:da:b0:87:1b:63:8c:ab:49:
ab:37:5d:12:73:0a:08:23:72:0d:e2:2b:df:49:89:97:a6:4a:
14:48:1e:ca:51:61:c2:e7:07:03:49:69:7f:1b:42:5a:29:3a:
b3:92:9d:a3:a0:95:41:27:39:01:2f:88:15:12:dd:5f:a5:87:
08:23:bd:65:12:fa:0d:f2:51:54:b9:b2:cf:54:e2:91:b2:60:
29:60:88:84:66:7e:13:cf:2b:2c:2e:68:d9:50:20:7d:bc:ef:
98:6d:55:63:d6:88:32:d3:25:c4:e2:99:07:4d:4c:a2:ef:da:
49:fc:63:b3:8a:38:d1:a4:b3:64:14:43:77:fe:a0:c1:50:bb:
63:3d:68:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:13:02 2025 by rpki-client