Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/8b1fac-5a21-4848-a66a-10bb4579d528/1/ddaL0U3JYj4-9EX8A08h8LretmE.roa
File: ddaL0U3JYj4-9EX8A08h8LretmE.roa (raw, json)
Hash identifier: 5RzcUY8EapUUeaLz9hXQEm81YxHwv6aAwwcLJ5C4jL0=
Subject key identifier: 75:D6:8B:D1:4D:C9:62:3E:3E:F4:45:FC:03:4F:21:F0:BA:DE:B6:61
Certificate issuer: /CN=0a7327805df20fb5c1d6f4e89074743caeb24af7
Certificate serial: 0972E876
Authority key identifier: 0A:73:27:80:5D:F2:0F:B5:C1:D6:F4:E8:90:74:74:3C:AE:B2:4A:F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CnMngF3yD7XB1vTokHR0PK6ySvc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/8b1fac-5a21-4848-a66a-10bb4579d528/1/ddaL0U3JYj4-9EX8A08h8LretmE.roa
Signing time: Wed 13 Apr 2022 04:33:31 +0000
ROA not before: Wed 13 Apr 2022 04:33:31 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 205516
IP address blocks: 193.106.99.0/24 maxlen: 24
45.8.116.0/22 maxlen: 24
91.198.101.0/24 maxlen: 24
193.43.250.0/24 maxlen: 24
2a0e:6600::/29 maxlen: 48
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 158525558 (0x972e876)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a7327805df20fb5c1d6f4e89074743caeb24af7
Validity
Not Before: Apr 13 04:33:31 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=75d68bd14dc9623e3ef445fc034f21f0badeb661
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:ee:17:88:d9:94:bf:f3:cb:1f:9b:c9:db:78:
a2:8b:40:7a:04:00:7a:e9:b7:a0:ad:99:a8:a8:70:
e9:11:c0:13:94:f9:c7:a3:19:b7:df:3e:71:9b:25:
79:a7:55:fe:5f:d5:77:91:81:b4:cb:ab:52:55:6d:
f8:49:a8:b4:4d:b0:17:59:ac:06:20:b2:0f:25:21:
8c:15:69:ab:d0:c9:ce:c7:8f:37:9f:50:a6:bd:0b:
48:45:0b:49:f3:61:5c:69:96:bc:40:b1:c0:41:b4:
d5:d8:e5:bc:67:a2:eb:c2:07:6b:91:6f:29:71:13:
88:4f:57:62:dc:8f:5c:53:d1:b2:d2:6f:02:dd:97:
89:01:ca:9d:2e:7a:4b:ce:a3:9c:86:56:e8:d1:12:
1b:4c:48:74:cc:79:e7:19:e7:8c:32:49:e6:4f:cd:
05:9f:9b:9e:67:cc:df:5b:2a:e9:cf:d6:11:08:f3:
34:c7:20:12:2a:0b:17:b5:c0:69:64:f2:6b:ed:71:
9e:af:5e:3a:99:c2:2f:b1:d3:b5:79:a6:42:1a:e8:
03:5d:fc:d6:53:c2:c6:c0:07:e8:ed:1b:ac:74:e7:
ef:97:3c:7d:2a:5b:75:13:22:dd:5b:8a:3e:fd:00:
64:27:ea:23:d5:17:c2:38:cb:a1:9f:99:81:ce:e1:
d8:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:D6:8B:D1:4D:C9:62:3E:3E:F4:45:FC:03:4F:21:F0:BA:DE:B6:61
X509v3 Authority Key Identifier:
keyid:0A:73:27:80:5D:F2:0F:B5:C1:D6:F4:E8:90:74:74:3C:AE:B2:4A:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CnMngF3yD7XB1vTokHR0PK6ySvc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/8b1fac-5a21-4848-a66a-10bb4579d528/1/ddaL0U3JYj4-9EX8A08h8LretmE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/8b1fac-5a21-4848-a66a-10bb4579d528/1/CnMngF3yD7XB1vTokHR0PK6ySvc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.8.116.0/22
91.198.101.0/24
193.43.250.0/24
193.106.99.0/24
IPv6:
2a0e:6600::/29
Signature Algorithm: sha256WithRSAEncryption
10:19:69:15:0c:c7:60:67:ec:96:4e:d6:6e:ed:58:d4:88:82:
12:c0:65:68:ff:fe:6f:be:88:7a:7e:d6:1c:89:31:4a:fd:5e:
21:80:dd:48:d1:1d:98:a3:fa:02:09:f5:27:f8:06:6e:18:17:
19:fa:4a:a7:98:49:af:a3:af:82:c2:1e:2c:39:27:c6:f4:7d:
92:ea:9f:83:f4:42:c7:c4:d3:3e:6a:44:4f:37:f1:a1:3e:ee:
31:31:51:51:32:6f:6a:72:de:ac:94:8f:ec:7e:e0:1e:8a:34:
02:aa:53:ed:47:d8:d2:72:a1:20:34:bd:fc:60:7d:bf:6d:f8:
91:69:80:6f:7e:6b:ba:0a:46:ba:32:c1:8f:14:68:39:d0:ea:
7c:2a:e6:f0:62:23:42:33:83:a2:02:1e:b5:87:ce:85:43:5a:
c2:92:3e:96:15:03:46:df:1e:bf:21:92:32:52:46:f7:c4:8c:
5b:d0:c2:19:e9:e1:5a:ae:89:45:9a:c5:0b:34:fb:c3:75:27:
6d:b3:2c:a9:b3:90:ea:12:14:f1:04:b7:1c:dd:3c:1c:65:7d:
13:1b:3f:b9:48:78:51:85:e0:7f:3f:20:0d:e9:1f:46:52:a0:
6a:e7:45:2b:62:49:54:fc:37:47:52:b2:9b:93:3f:fc:39:23:
28:40:d0:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:54:46 2025 by rpki-client