Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/46b67c-80be-4fca-be24-1eb2a6ef5217/1/4eSJySyKtKuIfHkImlac-cejYOI.roa
File: 4eSJySyKtKuIfHkImlac-cejYOI.roa (raw, json)
Hash identifier: +a5LYel9n4P8e9Gvb1bSpcq4b5II8dHubJ4p/dP1XuY=
Subject key identifier: E1:E4:89:C9:2C:8A:B4:AB:88:7C:79:08:9A:56:9C:F9:C7:A3:60:E2
Certificate issuer: /CN=26fcb0c3655a3c52f030a64db66139625a0ffbe0
Certificate serial: 143B5E08
Authority key identifier: 26:FC:B0:C3:65:5A:3C:52:F0:30:A6:4D:B6:61:39:62:5A:0F:FB:E0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Jvyww2VaPFLwMKZNtmE5YloP--A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/46b67c-80be-4fca-be24-1eb2a6ef5217/1/4eSJySyKtKuIfHkImlac-cejYOI.roa
Signing time: Sat 01 Jan 2022 02:52:39 +0000
ROA not before: Sat 01 Jan 2022 02:52:39 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 43200
IP address blocks: 81.26.32.0/19 maxlen: 19
85.89.192.0/19 maxlen: 19
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 339435016 (0x143b5e08)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=26fcb0c3655a3c52f030a64db66139625a0ffbe0
Validity
Not Before: Jan 1 02:52:39 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e1e489c92c8ab4ab887c79089a569cf9c7a360e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:58:15:2d:3b:61:e8:f7:7e:69:07:df:cf:64:
ea:bd:6e:2b:99:00:19:7a:97:7a:74:ef:b5:8b:30:
81:90:3c:2a:d0:70:31:bc:0e:32:e0:c8:88:75:f2:
de:24:03:95:4a:b8:e7:e3:fc:75:74:d3:3b:18:bc:
d5:31:48:06:ca:86:8c:89:23:b0:6b:5b:b9:89:fa:
3e:1b:f7:16:d2:b6:ef:0a:12:af:d3:a7:a0:64:f4:
ea:6b:a8:fa:8e:2d:87:6f:36:90:aa:21:eb:bd:0c:
01:d7:62:3f:67:73:7d:44:6a:67:aa:c8:9f:7e:44:
93:a1:96:c8:2d:6e:96:6e:69:e7:b1:98:28:72:ba:
eb:19:fb:f7:30:d6:a3:92:59:c6:30:30:ef:1b:03:
e7:d8:a2:2f:ab:41:92:78:6c:ef:01:22:d9:2e:93:
ae:a1:97:54:87:9d:df:d2:b0:a8:2f:3a:3b:76:8d:
be:4d:d2:12:3e:f0:de:b5:99:aa:e0:8d:05:ae:62:
de:f9:99:2e:2a:34:55:97:c0:ad:14:72:28:01:83:
04:ad:e8:2d:ea:7b:b3:f2:74:93:12:7a:ce:2a:1d:
72:42:f4:50:2f:f8:b6:58:5d:16:c2:8e:02:13:2d:
f8:37:eb:74:c7:6b:52:41:be:2a:3c:bb:51:b2:45:
65:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:E4:89:C9:2C:8A:B4:AB:88:7C:79:08:9A:56:9C:F9:C7:A3:60:E2
X509v3 Authority Key Identifier:
keyid:26:FC:B0:C3:65:5A:3C:52:F0:30:A6:4D:B6:61:39:62:5A:0F:FB:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Jvyww2VaPFLwMKZNtmE5YloP--A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/46b67c-80be-4fca-be24-1eb2a6ef5217/1/4eSJySyKtKuIfHkImlac-cejYOI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/46b67c-80be-4fca-be24-1eb2a6ef5217/1/Jvyww2VaPFLwMKZNtmE5YloP--A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.26.32.0/19
85.89.192.0/19
Signature Algorithm: sha256WithRSAEncryption
7b:78:ed:61:c5:b6:ec:4f:03:c4:ad:e1:ca:72:04:25:fb:ff:
7a:97:43:74:20:c8:8e:8a:04:db:1b:02:6b:5d:16:1e:03:2e:
4b:62:e3:27:d1:9e:a8:28:0b:f0:01:9e:e5:e8:99:87:d3:c7:
76:00:a5:28:a9:1b:ee:df:5e:e1:5e:b1:fd:d5:8b:7f:8a:9e:
f7:a6:6c:7d:13:ea:34:9f:5b:75:14:a6:ff:26:03:8f:95:c0:
e4:33:5c:5f:85:13:97:d3:4a:d2:2e:c0:53:0c:45:47:72:80:
93:1c:0b:e8:57:ae:bc:9b:09:21:7f:47:88:86:6e:06:61:e3:
07:80:bb:c1:6d:06:f1:57:7c:40:3e:34:31:50:0d:9c:08:6b:
dd:d0:ac:4f:0e:aa:ac:79:1f:b4:c1:cf:69:bd:d7:1b:a9:7e:
c6:b8:bf:e6:cf:0b:a8:e6:3e:30:66:35:0e:f3:32:c8:95:b4:
3f:89:6a:03:37:c3:ba:ad:0d:8d:59:07:c2:b0:f4:77:41:2e:
b1:da:7e:b7:e8:8c:41:db:64:aa:eb:c3:88:54:b9:53:4b:0f:
de:62:3c:69:0a:4b:f1:49:bb:61:9b:0a:c1:05:dd:83:d2:65:
b3:9f:41:6d:7b:71:84:7a:36:a9:45:12:8c:bb:ef:b9:8a:77:
3e:97:fe:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 09:18:11 2025 by rpki-client