Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/vPe6Ud0O-0rVb50t_L0DyLS2BWg.roa
File: vPe6Ud0O-0rVb50t_L0DyLS2BWg.roa (raw, json)
Hash identifier: puT/nX9PA7381nPu2oUBwWhy2anKvDNinWTibHeFFIE=
Subject key identifier: BC:F7:BA:51:DD:0E:FB:4A:D5:6F:9D:2D:FC:BD:03:C8:B4:B6:05:68
Certificate issuer: /CN=6f75e4e94b5cb74517b7b01568015da9e6eecdb6
Certificate serial: 01876F27F4FF579AF104041402624BC88EF2
Authority key identifier: 6F:75:E4:E9:4B:5C:B7:45:17:B7:B0:15:68:01:5D:A9:E6:EE:CD:B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b3Xk6Utct0UXt7AVaAFdqebuzbY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/vPe6Ud0O-0rVb50t_L0DyLS2BWg.roa
Signing time: Tue 11 Apr 2023 07:11:42 +0000
ROA not before: Tue 11 Apr 2023 07:11:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 44547
IP address blocks: 95.82.32.0/21 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:6f:27:f4:ff:57:9a:f1:04:04:14:02:62:4b:c8:8e:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f75e4e94b5cb74517b7b01568015da9e6eecdb6
Validity
Not Before: Apr 11 07:11:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=bcf7ba51dd0efb4ad56f9d2dfcbd03c8b4b60568
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:81:b9:1b:ee:3c:0b:cf:e4:3f:c8:06:a2:56:
bc:88:f3:6c:0c:98:82:1e:d9:3d:bb:56:c9:6b:20:
b3:cd:34:4f:74:f6:b6:34:46:89:a2:1c:98:c0:81:
1f:7a:65:38:36:92:f9:69:82:70:04:2f:bd:01:78:
1d:5e:3e:ca:03:7f:17:84:03:7b:3d:af:f2:ce:55:
db:9e:8b:fd:89:24:1b:92:b9:03:b1:b2:1f:d2:35:
30:67:21:a6:c8:c0:92:bb:28:f4:3c:62:2f:56:6e:
ea:21:1e:c7:75:36:fd:9e:82:78:c4:22:3b:c5:03:
40:43:e7:f9:64:5f:52:47:f7:eb:38:28:39:95:36:
02:e1:5c:80:b5:7d:8b:51:43:db:1a:2e:40:cb:09:
69:7a:a0:bf:d9:a9:9c:a6:5e:f5:00:45:fe:cb:f8:
d8:f2:cc:98:74:1d:ad:51:cf:f1:28:01:1b:32:6d:
96:82:e2:85:8f:25:51:08:35:f5:f5:e7:8b:23:83:
49:28:9d:12:47:d2:ab:8f:b5:1e:ee:95:1e:95:d0:
57:88:44:9f:93:dd:98:42:e7:89:07:7e:65:8a:e8:
da:5d:3c:6a:27:24:ea:5b:fc:2c:20:16:d9:eb:1a:
e3:02:15:54:df:90:85:47:ef:7d:48:71:6d:17:f3:
34:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:F7:BA:51:DD:0E:FB:4A:D5:6F:9D:2D:FC:BD:03:C8:B4:B6:05:68
X509v3 Authority Key Identifier:
keyid:6F:75:E4:E9:4B:5C:B7:45:17:B7:B0:15:68:01:5D:A9:E6:EE:CD:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3Xk6Utct0UXt7AVaAFdqebuzbY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/vPe6Ud0O-0rVb50t_L0DyLS2BWg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/b3Xk6Utct0UXt7AVaAFdqebuzbY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.82.32.0/21
Signature Algorithm: sha256WithRSAEncryption
73:c9:5c:8b:44:16:88:ed:e5:a2:a4:b6:fa:cd:3b:dd:97:40:
c7:e5:2b:a0:aa:50:a2:70:b7:ed:5c:b5:01:a2:98:ca:54:6c:
6c:8d:81:6c:19:5a:e8:43:d8:a4:b4:e1:36:58:ce:ca:3e:b1:
fe:2f:8d:a8:b9:9d:52:82:aa:ed:b4:99:39:06:c1:52:fb:d4:
a2:aa:24:d4:ea:8f:21:25:d3:5e:ca:4c:33:94:00:3e:07:1b:
28:bc:98:eb:1d:2f:f5:47:cd:a4:54:d0:22:8c:1c:88:82:c7:
02:45:77:e4:26:21:3e:85:28:77:ba:32:8c:1b:d7:c3:f0:8b:
c3:a4:6f:92:4a:59:37:9e:81:62:d6:57:6e:52:43:0c:bf:d2:
d4:aa:66:9d:ba:5d:48:b9:5d:00:80:b6:2e:01:31:b5:7c:a2:
ae:63:59:ce:6e:81:e1:0e:a9:98:d9:b0:bc:fd:96:14:b0:a8:
57:57:24:17:dc:04:25:70:df:96:03:16:42:c4:65:e7:9f:cd:
37:42:be:74:3b:c3:5e:f1:59:1f:10:c5:22:32:7c:bf:8b:cb:
d6:d6:76:4a:41:2a:0c:39:52:7f:62:ec:a0:2d:58:b3:bb:2e:
cb:5b:f3:ab:83:e5:2c:68:dc:b3:a8:1f:c4:c2:87:98:94:74:
39:8c:24:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:27:53 2025 by rpki-client