Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/c23viuCIWj0364uH-h0sN6kJWN8.roa
File: c23viuCIWj0364uH-h0sN6kJWN8.roa (raw, json)
Hash identifier: QCVK6wirS2O0NNjnAFT1aH61TE5DMNxbn2HzktNdpPU=
Subject key identifier: 73:6D:EF:8A:E0:88:5A:3D:37:EB:8B:87:FA:1D:2C:37:A9:09:58:DF
Certificate issuer: /CN=6f75e4e94b5cb74517b7b01568015da9e6eecdb6
Certificate serial: 018CCA2A33B1FB2578C6738585D5CE36F681
Authority key identifier: 6F:75:E4:E9:4B:5C:B7:45:17:B7:B0:15:68:01:5D:A9:E6:EE:CD:B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b3Xk6Utct0UXt7AVaAFdqebuzbY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/c23viuCIWj0364uH-h0sN6kJWN8.roa
Signing time: Tue 02 Jan 2024 12:33:32 +0000
ROA not before: Tue 02 Jan 2024 12:33:32 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 16509
IP address blocks: 95.82.16.0/20 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:2a:33:b1:fb:25:78:c6:73:85:85:d5:ce:36:f6:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f75e4e94b5cb74517b7b01568015da9e6eecdb6
Validity
Not Before: Jan 2 12:33:32 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=736def8ae0885a3d37eb8b87fa1d2c37a90958df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:36:9f:8d:8c:ac:8e:85:b4:98:e8:a3:eb:66:
c0:b8:76:07:c0:84:33:3a:32:9d:b7:44:ae:f6:e8:
5a:c4:89:e0:f9:68:c2:37:ae:8a:66:20:7d:91:12:
d5:77:11:8d:2a:4d:3e:ac:d0:b4:f7:56:7c:a9:a3:
26:b3:f2:a9:ae:fc:2a:96:62:17:ac:e6:a6:8e:d4:
8b:27:36:b5:8a:ec:dc:54:b0:07:f4:36:4f:ef:4b:
95:3a:d0:3b:24:60:04:ef:8b:aa:14:fa:0d:b9:25:
f8:95:9b:12:d1:56:f8:49:e4:f6:3f:7f:82:61:f5:
5d:6f:07:d1:42:94:67:2b:d5:9c:93:a7:a8:8d:2e:
1b:86:ad:9b:45:28:fe:6b:b3:a1:0d:7d:de:ee:df:
2a:24:02:c0:1e:29:82:58:74:20:4f:0d:b2:81:93:
ac:55:58:90:5f:0b:f9:cb:20:4e:1e:23:99:f8:bb:
3e:f4:fa:ab:4c:87:d8:84:c6:fb:ca:25:f6:2f:a6:
f1:23:90:7d:c8:87:dd:d7:6a:df:ff:bf:50:91:b4:
a9:0d:49:18:10:1b:a6:e3:e0:0e:49:5b:8b:07:27:
7f:ce:d0:0a:51:82:1a:1f:bf:72:70:3c:ce:dc:d1:
8c:61:4a:7a:e8:bb:55:6f:af:c7:33:fc:9b:49:88:
93:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:6D:EF:8A:E0:88:5A:3D:37:EB:8B:87:FA:1D:2C:37:A9:09:58:DF
X509v3 Authority Key Identifier:
keyid:6F:75:E4:E9:4B:5C:B7:45:17:B7:B0:15:68:01:5D:A9:E6:EE:CD:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3Xk6Utct0UXt7AVaAFdqebuzbY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/c23viuCIWj0364uH-h0sN6kJWN8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/b3Xk6Utct0UXt7AVaAFdqebuzbY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.82.16.0/20
Signature Algorithm: sha256WithRSAEncryption
20:44:1f:68:5e:34:78:25:f3:87:ae:82:e3:1f:e2:5c:16:75:
19:42:b6:9c:23:b3:ee:2c:4b:9d:d7:bb:8a:75:1c:a1:14:8f:
8d:da:b5:12:55:8c:ad:d5:0e:eb:1b:56:80:e6:36:98:2d:34:
cc:71:52:67:d9:8b:9b:3d:d0:dd:34:af:8f:9b:c1:4b:c3:1f:
d8:f9:04:7e:d3:86:11:46:1a:27:2d:cd:ee:34:81:bc:2e:29:
fe:4f:fe:76:2a:e8:d7:2a:c1:5d:27:70:6c:b4:aa:8a:89:e4:
b1:b2:cb:9c:49:d3:f6:64:e2:83:37:8a:df:ce:2f:f2:35:f7:
88:74:29:5e:3e:62:1d:3f:cc:22:91:a5:ac:4d:49:7f:67:f9:
36:22:e1:a4:c9:78:c4:bf:49:59:b6:12:da:11:03:bb:f1:32:
ec:87:85:fe:2d:a3:bd:a7:a3:9e:ec:29:fc:79:de:95:8d:28:
cb:12:a8:4b:63:87:f2:85:ad:3c:01:67:ee:00:70:97:b2:3b:
da:4e:aa:b4:2a:ed:ec:a0:f7:0e:e1:7e:d2:0b:0b:f0:73:7b:
98:0b:16:a7:2f:42:fe:e9:da:39:94:db:7c:12:ff:25:e7:f8:
a1:47:04:32:55:61:b2:82:a1:2f:2e:6f:f2:3b:07:36:63:ac:
03:67:74:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:27:53 2025 by rpki-client