Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/6444d1-5f00-4e50-8019-1b6f750cf9a2/1/aAMQPRGUKlAZLLwNsUk5QL9hOhI.roa
File: aAMQPRGUKlAZLLwNsUk5QL9hOhI.roa (raw, json)
Hash identifier: 55RC4T2I+IpUjmM0YTNhVvY2Vejh3By81SfBfSglMLI=
Subject key identifier: 68:03:10:3D:11:94:2A:50:19:2C:BC:0D:B1:49:39:40:BF:61:3A:12
Certificate issuer: /CN=a865bae25778beed8880c08df2d3f37fc37abc1e
Certificate serial: 018CCA2BCCF1C470D1BB35A58A9958424ACF
Authority key identifier: A8:65:BA:E2:57:78:BE:ED:88:80:C0:8D:F2:D3:F3:7F:C3:7A:BC:1E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qGW64ld4vu2IgMCN8tPzf8N6vB4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/6444d1-5f00-4e50-8019-1b6f750cf9a2/1/aAMQPRGUKlAZLLwNsUk5QL9hOhI.roa
Signing time: Tue 02 Jan 2024 12:35:17 +0000
ROA not before: Tue 02 Jan 2024 12:35:17 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 48964
IP address blocks: 141.105.138.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:2b:cc:f1:c4:70:d1:bb:35:a5:8a:99:58:42:4a:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a865bae25778beed8880c08df2d3f37fc37abc1e
Validity
Not Before: Jan 2 12:35:17 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6803103d11942a50192cbc0db1493940bf613a12
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:c9:65:a2:7d:5f:a7:10:7b:02:e9:5f:6c:b9:
08:48:cd:7d:b7:d7:fb:a5:0c:53:b4:38:d6:45:b1:
ec:ab:74:d1:17:9e:78:84:21:e9:d3:af:e5:48:44:
23:52:a0:2a:5d:19:64:81:78:e1:58:80:8a:a3:64:
19:d2:98:c8:d8:18:d1:e9:b4:bf:53:b8:20:09:a2:
9d:67:c7:dc:cb:a6:09:57:70:ae:40:de:99:84:43:
f3:ee:fb:4a:91:3d:83:14:ae:8b:87:47:87:b6:53:
bc:10:4e:27:38:42:df:4c:70:64:3d:93:74:51:c0:
23:35:67:f3:c5:55:19:58:65:4b:e2:59:fc:c1:a2:
a0:57:45:db:39:dc:cc:3e:7e:fc:7f:cc:29:91:d1:
14:ca:21:4d:96:75:cd:60:fc:42:50:f1:83:7d:be:
ea:b9:cb:2b:81:cf:42:ff:f5:18:9b:6b:86:36:ee:
f6:f2:59:4c:1d:c0:31:68:8e:95:91:16:1e:fc:31:
8f:39:58:9e:bf:77:c5:0a:b7:1b:f0:77:ca:71:e9:
97:1c:bb:35:4a:82:17:42:7b:9e:89:7f:72:21:97:
59:50:c7:f1:5d:5d:53:13:f2:00:0a:13:b6:9b:24:
dc:e8:e7:c6:ef:4e:b1:05:61:12:ce:46:61:0a:8b:
96:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:03:10:3D:11:94:2A:50:19:2C:BC:0D:B1:49:39:40:BF:61:3A:12
X509v3 Authority Key Identifier:
keyid:A8:65:BA:E2:57:78:BE:ED:88:80:C0:8D:F2:D3:F3:7F:C3:7A:BC:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qGW64ld4vu2IgMCN8tPzf8N6vB4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/6444d1-5f00-4e50-8019-1b6f750cf9a2/1/aAMQPRGUKlAZLLwNsUk5QL9hOhI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/6444d1-5f00-4e50-8019-1b6f750cf9a2/1/qGW64ld4vu2IgMCN8tPzf8N6vB4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.105.138.0/24
Signature Algorithm: sha256WithRSAEncryption
05:05:90:9a:c3:ce:2f:ff:30:7c:78:c0:d1:65:d8:e1:21:04:
13:49:c2:02:6d:b5:5b:b0:cb:09:92:71:67:ba:d5:75:ae:fd:
43:70:0c:9f:8d:82:41:57:96:d6:89:9d:cc:3c:26:43:72:3f:
0b:90:08:b5:f1:cc:16:f1:5d:ab:75:1f:96:88:65:04:82:fd:
6c:5f:83:08:11:c5:d2:fe:9e:74:3f:63:72:fa:bf:9d:cb:38:
4e:81:c5:a4:d9:51:5b:4e:f1:ef:e6:c2:df:a1:ce:b3:99:1f:
0c:ee:51:b8:64:c8:12:bc:c3:dd:f3:98:e7:dc:05:61:47:a6:
e0:9a:46:e6:93:84:df:e8:a2:ba:5c:ed:e2:ac:85:9f:e1:08:
a7:94:70:c0:4d:ba:6f:be:ac:76:18:73:51:14:9b:ed:de:fe:
01:b3:36:af:8d:fe:f2:12:8a:34:39:2a:cc:7f:22:79:f7:f9:
c8:39:3c:03:04:89:6c:35:db:3e:cb:9e:01:71:3d:f3:05:fa:
a4:a2:91:9a:01:20:f1:ca:6c:e5:16:a6:17:25:b1:13:bf:f2:
83:eb:5d:71:fb:6d:45:80:e2:3e:3d:b0:a9:66:7b:0a:4d:68:
89:5a:57:e6:f1:71:d0:35:3e:cc:fd:6d:dd:c5:7c:09:4e:b6:
2d:7f:53:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 00:00:52 2025 by rpki-client