Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/e-PTrcQEnTUYVv1TxspQwODbkMw.roa
File: e-PTrcQEnTUYVv1TxspQwODbkMw.roa (raw, json)
Hash identifier: QXCmruTnebo7p4imLDbwan4qDJSyqQOhvtJ1VTrVi4M=
Subject key identifier: 7B:E3:D3:AD:C4:04:9D:35:18:56:FD:53:C6:CA:50:C0:E0:DB:90:CC
Certificate issuer: /CN=6f75e4e94b5cb74517b7b01568015da9e6eecdb6
Certificate serial: 018CE8388916675D1AF78F3E5B35904871E7
Authority key identifier: 6F:75:E4:E9:4B:5C:B7:45:17:B7:B0:15:68:01:5D:A9:E6:EE:CD:B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b3Xk6Utct0UXt7AVaAFdqebuzbY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/e-PTrcQEnTUYVv1TxspQwODbkMw.roa
Signing time: Mon 08 Jan 2024 08:37:48 +0000
ROA not before: Mon 08 Jan 2024 08:37:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 21859
IP address blocks: 95.82.0.0/21 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:e8:38:89:16:67:5d:1a:f7:8f:3e:5b:35:90:48:71:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f75e4e94b5cb74517b7b01568015da9e6eecdb6
Validity
Not Before: Jan 8 08:37:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7be3d3adc4049d351856fd53c6ca50c0e0db90cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:7a:ae:8e:f4:0c:42:aa:1d:cf:8e:c5:c8:54:
ae:3b:98:78:db:86:16:29:29:0e:97:a7:c0:ff:c0:
3a:b5:3a:3f:ac:c0:a4:1d:aa:ac:58:89:2c:6d:e2:
85:24:63:e3:4d:ff:e2:ee:f2:c6:32:3f:2a:2a:af:
90:a5:77:5c:a8:9d:4c:fb:4a:9c:56:6b:20:6c:13:
4d:5f:43:e0:31:d5:fe:67:4a:07:0b:cf:ad:b1:06:
61:77:53:b4:c3:a0:77:1d:cf:ca:e4:9c:9c:3e:b0:
a1:8f:7f:4d:81:19:d8:73:3f:b5:ef:ec:87:db:5a:
55:fa:81:52:39:50:3b:89:d1:35:e0:42:b7:81:c1:
73:2f:37:f6:47:32:2b:22:11:da:a0:d1:45:14:86:
df:3d:76:02:4f:4b:e1:93:b0:45:85:c0:42:fd:71:
05:9d:3d:2d:02:21:2f:e5:9b:1b:19:aa:aa:40:cc:
d9:9f:4f:d3:fb:e6:41:01:57:06:46:5c:7c:cd:74:
76:a7:66:d1:ba:3e:3d:5b:73:a7:65:c9:97:6c:ff:
c2:e7:9a:46:c0:ec:a4:ba:7e:7e:fb:01:97:cf:5f:
5c:5f:e5:6f:fd:96:1f:57:e6:67:ba:2a:99:2c:45:
e5:e5:6f:0f:86:43:af:d8:53:34:48:f9:ed:c2:92:
34:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:E3:D3:AD:C4:04:9D:35:18:56:FD:53:C6:CA:50:C0:E0:DB:90:CC
X509v3 Authority Key Identifier:
keyid:6F:75:E4:E9:4B:5C:B7:45:17:B7:B0:15:68:01:5D:A9:E6:EE:CD:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3Xk6Utct0UXt7AVaAFdqebuzbY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/e-PTrcQEnTUYVv1TxspQwODbkMw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/b3Xk6Utct0UXt7AVaAFdqebuzbY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.82.0.0/21
Signature Algorithm: sha256WithRSAEncryption
30:f6:4f:5e:5b:5c:6f:e8:d1:45:5f:e9:74:39:d9:fc:53:d4:
0f:e6:7b:29:03:85:26:29:e0:ad:35:e5:e7:a4:e7:e6:c3:2b:
c2:2e:e3:21:00:43:d3:fb:13:87:1b:d2:5b:65:08:c5:a0:56:
8e:29:4c:ce:7d:a3:6a:02:01:8e:26:1c:8d:a9:14:2e:8f:40:
2e:11:b0:85:91:7a:24:b7:c0:1f:9f:92:41:7a:9e:dc:16:a1:
23:d5:45:e6:bb:75:4b:5f:50:d8:ee:a0:ac:ea:10:57:c4:cf:
56:8a:f3:0b:f7:07:7a:61:af:57:3b:47:c4:32:5c:e0:a7:3d:
19:26:f2:56:36:9f:33:13:b7:d1:51:a1:8f:5d:55:c2:f3:75:
65:8d:71:13:9b:4c:9d:9a:12:7f:52:95:13:ce:69:d7:fa:da:
28:32:ba:c3:bb:4d:f2:73:81:ea:f4:c8:9a:aa:fe:1d:2d:95:
6c:e7:ed:c9:dc:3b:86:4b:36:0e:2f:bf:b6:46:a4:23:a8:7f:
0d:ac:e8:5f:cb:d1:ba:68:56:2c:b2:c8:f9:1e:57:df:9b:02:
75:8a:95:e9:92:81:34:2f:6d:b3:c3:2a:d6:bf:8d:23:95:fb:
3c:fd:81:54:d1:e0:d1:ca:9f:68:36:ba:da:24:a7:43:4e:05:
fc:f2:78:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:24:43 2025 by rpki-client