Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/hn07jF3cxL1EYSI6RT_rSDMm8QM.roa
File: hn07jF3cxL1EYSI6RT_rSDMm8QM.roa (raw, json)
Hash identifier: eMxOPdfY4UDLISUVcOyPV48OfhG5WbHJ1AJNIDi5T54=
Subject key identifier: 86:7D:3B:8C:5D:DC:C4:BD:44:61:22:3A:45:3F:EB:48:33:26:F1:03
Certificate issuer: /CN=6f75e4e94b5cb74517b7b01568015da9e6eecdb6
Certificate serial: 018E8FF95265D4463484EC6DA4FEB71DAFDD
Authority key identifier: 6F:75:E4:E9:4B:5C:B7:45:17:B7:B0:15:68:01:5D:A9:E6:EE:CD:B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b3Xk6Utct0UXt7AVaAFdqebuzbY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/hn07jF3cxL1EYSI6RT_rSDMm8QM.roa
Signing time: Sat 30 Mar 2024 15:27:45 +0000
ROA not before: Sat 30 Mar 2024 15:27:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 14618
IP address blocks: 95.82.16.0/20 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:8f:f9:52:65:d4:46:34:84:ec:6d:a4:fe:b7:1d:af:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f75e4e94b5cb74517b7b01568015da9e6eecdb6
Validity
Not Before: Mar 30 15:27:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=867d3b8c5ddcc4bd4461223a453feb483326f103
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:1a:75:9b:63:af:51:7b:da:50:f4:78:ea:31:
84:ea:10:f3:58:a5:9c:d0:39:1c:19:9c:72:ac:c1:
4b:b9:36:4f:fd:fa:9f:9c:cd:ed:cd:b9:c4:20:b8:
75:65:3d:e9:94:95:10:bf:ca:8c:e9:49:b2:3a:53:
17:9e:81:8d:82:75:2a:46:3a:9b:bd:cd:53:54:b1:
f2:c7:0e:57:4c:f0:b4:4f:d8:ad:78:ab:e3:2c:c3:
39:3a:5f:ca:26:e0:79:80:16:a0:9f:e5:01:9b:0d:
2a:06:5e:bd:96:3e:a4:e4:06:93:66:2e:d9:69:91:
a6:66:a2:7c:a7:71:81:86:d6:60:57:a3:79:e3:06:
2c:bd:4c:e9:1b:04:ee:ab:58:03:60:d9:08:72:87:
39:37:12:4a:3b:c4:65:b3:61:3e:92:b8:2c:b3:44:
76:8b:65:cc:b1:7d:b6:cb:4c:d8:7b:11:40:5a:e4:
e1:3a:2d:78:d1:26:59:3d:e3:18:02:57:3e:21:2b:
be:ba:3d:b9:10:50:3b:5e:f0:c3:49:18:15:e4:d0:
95:3d:3e:c5:a8:1c:75:87:bc:a6:08:b9:c3:6c:9d:
1b:76:5f:61:a3:c9:6f:81:b3:9d:2b:f4:c1:68:ff:
4c:76:5c:a6:d0:9c:32:06:6d:c6:8d:d4:bd:9d:0b:
63:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:7D:3B:8C:5D:DC:C4:BD:44:61:22:3A:45:3F:EB:48:33:26:F1:03
X509v3 Authority Key Identifier:
keyid:6F:75:E4:E9:4B:5C:B7:45:17:B7:B0:15:68:01:5D:A9:E6:EE:CD:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3Xk6Utct0UXt7AVaAFdqebuzbY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/hn07jF3cxL1EYSI6RT_rSDMm8QM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/b3Xk6Utct0UXt7AVaAFdqebuzbY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.82.16.0/20
Signature Algorithm: sha256WithRSAEncryption
23:9e:6e:9a:e6:76:3c:ec:16:2a:fe:59:e8:d4:ba:2b:2e:48:
40:80:8e:29:d3:6e:54:0f:88:ca:1e:2a:49:d4:8d:e2:1a:b7:
97:94:5b:b6:67:41:2d:75:ce:5d:65:8b:51:5e:f6:4e:35:2d:
3c:ba:f7:c5:5b:d5:46:8f:1a:1b:45:87:47:a0:d0:f8:cb:85:
d3:36:19:d2:e3:90:42:00:ad:3c:3c:10:65:42:15:bf:57:cb:
70:6e:60:77:51:53:2a:ef:03:3c:0b:97:cb:70:bb:53:63:ea:
c4:5a:e5:8b:b8:27:71:40:7b:1e:fa:6f:1d:80:09:36:7d:a1:
96:f9:72:5b:ee:63:3b:97:ae:14:84:ee:59:5c:f5:34:69:59:
8f:63:6e:62:39:f1:db:0d:bf:0d:19:06:1c:27:ed:b0:6d:9e:
44:da:fe:a8:73:8f:c7:9e:b2:5a:bd:a8:46:28:fb:6f:56:4f:
19:87:25:54:c9:08:95:6f:e9:50:a8:7a:df:48:c4:6d:de:f8:
ab:dd:fc:b0:39:5e:ca:95:40:77:ba:6c:f0:43:19:cc:ab:31:
4b:b8:98:58:2c:e9:26:6f:2d:a2:b4:c8:42:58:e3:df:5c:1a:
27:11:ae:cb:b2:c8:8b:af:b9:ed:1e:b2:67:87:5b:5d:29:a4:
2c:e7:04:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:22:12 2025 by rpki-client