Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/MTkBUjqdniy1L_m0gN5VIgwY1X8.roa
File: MTkBUjqdniy1L_m0gN5VIgwY1X8.roa (raw, json)
Hash identifier: PiaaoSQo965VTcq6Pp+3yRvXt/FehTYHj/LCSmuPjNw=
Subject key identifier: 31:39:01:52:3A:9D:9E:2C:B5:2F:F9:B4:80:DE:55:22:0C:18:D5:7F
Certificate issuer: /CN=6f75e4e94b5cb74517b7b01568015da9e6eecdb6
Certificate serial: 0185C8C0D7891CD536DB52EA240206B7FCB8
Authority key identifier: 6F:75:E4:E9:4B:5C:B7:45:17:B7:B0:15:68:01:5D:A9:E6:EE:CD:B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b3Xk6Utct0UXt7AVaAFdqebuzbY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/MTkBUjqdniy1L_m0gN5VIgwY1X8.roa
Signing time: Thu 19 Jan 2023 06:39:19 +0000
ROA not before: Thu 19 Jan 2023 06:39:19 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 4826
IP address blocks: 95.82.32.0/21 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:c8:c0:d7:89:1c:d5:36:db:52:ea:24:02:06:b7:fc:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f75e4e94b5cb74517b7b01568015da9e6eecdb6
Validity
Not Before: Jan 19 06:39:19 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=313901523a9d9e2cb52ff9b480de55220c18d57f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:88:ff:e0:f3:12:33:1e:3b:aa:f2:7c:73:a0:
df:da:51:ca:3e:6a:f3:ad:a1:95:f3:bf:b1:8a:49:
f8:10:ea:8f:ca:f7:b6:9c:d7:b8:53:16:91:46:7c:
70:29:a0:eb:08:31:0f:53:9c:3c:50:3e:e7:6e:57:
0e:90:54:5e:9e:4c:d0:04:73:cf:d2:cf:62:ef:9e:
88:10:54:f6:42:b8:70:70:fb:5e:84:75:91:50:13:
b4:13:92:63:d3:c0:18:42:2d:51:5a:c7:50:e2:43:
0a:69:6e:02:64:c6:cd:56:c4:23:0b:bd:45:9d:93:
b9:e4:9c:26:83:be:23:94:d3:d8:6b:4b:1a:d7:eb:
86:f7:1b:ca:77:03:9d:6a:50:e3:94:1d:65:36:5e:
d0:1d:bb:98:3e:64:f5:d3:e7:8d:32:a2:f2:66:bd:
02:9a:ca:0f:f5:94:f9:0b:74:7d:e9:9c:f9:f1:a5:
a3:1b:c5:db:8d:c0:fa:5b:84:87:cf:1f:25:83:22:
19:08:ae:a1:0a:e0:3d:47:c5:6f:3b:fa:ec:19:78:
78:fb:26:03:51:e3:76:e4:b6:49:ab:88:af:60:70:
cb:f7:9b:7a:2d:43:c2:71:79:b9:58:d6:ba:07:63:
98:63:6f:b0:57:34:1e:7c:05:9c:62:da:9f:cf:20:
de:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:39:01:52:3A:9D:9E:2C:B5:2F:F9:B4:80:DE:55:22:0C:18:D5:7F
X509v3 Authority Key Identifier:
keyid:6F:75:E4:E9:4B:5C:B7:45:17:B7:B0:15:68:01:5D:A9:E6:EE:CD:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3Xk6Utct0UXt7AVaAFdqebuzbY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/MTkBUjqdniy1L_m0gN5VIgwY1X8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/b3Xk6Utct0UXt7AVaAFdqebuzbY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.82.32.0/21
Signature Algorithm: sha256WithRSAEncryption
29:57:29:3b:f1:c6:f8:35:aa:d6:7e:2b:9b:b4:04:19:42:89:
ed:a2:31:01:33:01:c8:4f:60:af:22:82:8d:28:53:b2:9a:df:
19:16:fb:51:fe:52:a9:23:ec:bd:d7:55:ee:ab:6c:28:e4:db:
4d:50:0e:2f:c1:f1:2c:e3:e3:cc:15:eb:d2:ce:e5:62:4b:e4:
70:17:94:8a:78:ee:3b:80:5e:90:3f:66:8a:aa:ce:b6:08:ca:
5f:d2:64:4d:b9:65:ed:af:3d:27:89:7e:6a:dc:25:fc:ba:44:
06:61:81:69:60:26:ec:49:9b:fe:70:6f:30:60:35:0c:49:78:
0b:ba:a5:76:3f:d9:d8:0c:73:7f:a5:66:69:2a:62:57:e0:ff:
be:a8:32:85:39:a1:0a:2d:6c:b4:50:66:3e:4f:50:ca:2c:ba:
64:f8:b2:7a:b9:b9:a9:de:fc:ec:a7:3e:b2:1b:29:f9:33:ae:
4a:93:dd:12:7c:e8:55:c8:ac:db:d0:c7:50:57:75:b1:e0:1b:
3c:6a:e8:78:5c:ea:7b:70:73:93:53:b4:30:26:70:67:32:2c:
65:f3:33:af:be:6f:70:64:b6:c3:8d:47:c0:ba:e3:2e:1a:13:
f3:53:bd:b6:b4:cf:8b:76:e9:d9:91:a5:6a:42:ed:3d:5e:dd:
26:c3:fe:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:14:15 2025 by rpki-client