Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/rQKsn_xxaVz3ok8te1geY8x4QB0.roa
File: rQKsn_xxaVz3ok8te1geY8x4QB0.roa (raw, json)
Hash identifier: 9vodVdvFx4d4CBEwfe9oXCwIq0FdBHFuS4d3SplKRhE=
Subject key identifier: AD:02:AC:9F:FC:71:69:5C:F7:A2:4F:2D:7B:58:1E:63:CC:78:40:1D
Certificate issuer: /CN=6f75e4e94b5cb74517b7b01568015da9e6eecdb6
Certificate serial: 01936E948F17619FA79328391484D7DB814B
Authority key identifier: 6F:75:E4:E9:4B:5C:B7:45:17:B7:B0:15:68:01:5D:A9:E6:EE:CD:B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b3Xk6Utct0UXt7AVaAFdqebuzbY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/rQKsn_xxaVz3ok8te1geY8x4QB0.roa
Signing time: Wed 27 Nov 2024 17:04:09 +0000
ROA not before: Wed 27 Nov 2024 17:04:09 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 95.82.0.0/20 maxlen: 20
109.111.32.0/20 maxlen: 24
109.111.42.0/23 maxlen: 24
176.221.20.0/22 maxlen: 24
176.221.24.0/22 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:6e:94:8f:17:61:9f:a7:93:28:39:14:84:d7:db:81:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f75e4e94b5cb74517b7b01568015da9e6eecdb6
Validity
Not Before: Nov 27 17:04:09 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ad02ac9ffc71695cf7a24f2d7b581e63cc78401d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:1a:1b:d3:3e:93:5b:61:9d:f2:fa:f0:59:e1:
b1:b5:2a:58:7c:b2:86:10:43:a8:8a:8b:1a:6a:04:
76:fb:45:0c:ea:58:c5:17:6e:d4:3e:89:c0:e9:b1:
48:34:54:1b:db:d2:86:ac:54:c0:49:da:bf:ba:1b:
3a:d2:88:fb:81:7b:38:04:90:be:51:79:dd:db:2e:
97:2e:3b:ec:e8:37:7c:6e:2d:5f:e9:5b:42:2c:5a:
71:7e:a7:7b:a3:0c:2b:27:c2:b7:df:2e:dd:81:05:
fc:5e:0c:dd:85:00:e4:34:00:fb:d3:24:7a:93:4d:
9c:9c:cc:a0:8a:f6:f0:a8:23:42:98:07:34:ac:e7:
10:3e:4b:c2:21:e2:87:f4:0f:e1:bf:5e:fd:76:7c:
e7:22:35:fe:37:82:18:ad:ac:07:71:c8:09:49:5e:
fb:e7:44:d3:2d:18:e2:87:3e:1c:a9:26:b0:3a:bf:
61:53:35:6a:05:ea:74:93:19:8b:bd:27:33:75:4c:
cf:9f:bf:ec:e2:8d:0e:be:07:62:11:f9:cd:0f:4a:
0c:40:18:2f:64:e5:08:20:da:77:d1:9b:18:db:0b:
80:07:62:a1:86:d6:e1:6b:e7:c8:0a:bc:58:1e:4a:
5c:dc:e0:5e:02:88:1c:d6:ac:93:5d:8c:11:45:a8:
e3:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:02:AC:9F:FC:71:69:5C:F7:A2:4F:2D:7B:58:1E:63:CC:78:40:1D
X509v3 Authority Key Identifier:
keyid:6F:75:E4:E9:4B:5C:B7:45:17:B7:B0:15:68:01:5D:A9:E6:EE:CD:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3Xk6Utct0UXt7AVaAFdqebuzbY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/rQKsn_xxaVz3ok8te1geY8x4QB0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/b3Xk6Utct0UXt7AVaAFdqebuzbY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.82.0.0/20
109.111.32.0/20
176.221.20.0-176.221.27.255
Signature Algorithm: sha256WithRSAEncryption
10:59:11:71:33:7e:e9:a6:dc:a8:3f:da:d0:9a:d4:72:a1:c1:
07:c0:40:1f:3e:6c:17:01:34:b8:c1:4f:40:56:a7:fe:a2:10:
17:07:d5:33:08:9a:36:a2:e4:5a:51:68:a5:cd:b0:f2:7c:c1:
8d:cc:c0:1f:61:ec:08:a1:86:0e:06:17:1d:96:c8:92:78:8f:
6a:b4:e7:99:fa:38:44:58:62:a8:fb:b9:03:06:75:64:d3:52:
33:27:99:f7:57:a7:d3:db:b3:cb:40:80:3b:04:d4:19:78:51:
be:61:f7:a9:b2:f0:bc:d6:2b:98:17:97:b8:9e:d6:78:7a:85:
46:02:16:96:23:90:b7:2b:39:ec:a7:93:51:67:3a:0c:22:93:
ce:57:ee:b3:f2:d5:2b:4d:3d:4f:ed:6b:69:2a:b0:d8:6a:48:
5a:3a:4a:96:e7:a2:35:31:56:33:4a:0a:62:c4:e9:37:d0:48:
40:65:42:33:ab:bf:c4:6c:21:23:68:ba:11:88:76:c6:91:09:
ea:d3:3f:47:da:3d:15:b0:c6:a4:3a:1d:6d:81:e3:20:ea:44:
9c:61:3c:59:3a:58:63:66:c0:a9:ed:52:4d:44:85:33:c1:a3:
0d:b3:1f:fe:b4:36:7a:c6:28:d2:f2:50:a7:0a:43:72:00:b1:
93:a0:7c:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:12:22 2025 by rpki-client