Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/6444d1-5f00-4e50-8019-1b6f750cf9a2/1/euBSlJitI67GQXdfCVKz8O3saeo.roa
File: euBSlJitI67GQXdfCVKz8O3saeo.roa (raw, json)
Hash identifier: f0D1lB3r4QgVnOER/2pzhUIG0xDqUMfW0ANTMF36isg=
Subject key identifier: 7A:E0:52:94:98:AD:23:AE:C6:41:77:5F:09:52:B3:F0:ED:EC:69:EA
Certificate issuer: /CN=a865bae25778beed8880c08df2d3f37fc37abc1e
Certificate serial: 018CCA2BD00F534DBC169C832D2ED5B71A09
Authority key identifier: A8:65:BA:E2:57:78:BE:ED:88:80:C0:8D:F2:D3:F3:7F:C3:7A:BC:1E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qGW64ld4vu2IgMCN8tPzf8N6vB4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/6444d1-5f00-4e50-8019-1b6f750cf9a2/1/euBSlJitI67GQXdfCVKz8O3saeo.roa
Signing time: Tue 02 Jan 2024 12:35:18 +0000
ROA not before: Tue 02 Jan 2024 12:35:18 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 209139
IP address blocks: 141.105.137.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:2b:d0:0f:53:4d:bc:16:9c:83:2d:2e:d5:b7:1a:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a865bae25778beed8880c08df2d3f37fc37abc1e
Validity
Not Before: Jan 2 12:35:18 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7ae0529498ad23aec641775f0952b3f0edec69ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:fe:84:51:11:67:5e:32:ee:ca:6d:12:55:ab:
7e:54:7c:a9:ab:dc:d3:86:40:50:01:98:58:82:82:
30:39:46:a4:8c:44:fd:c5:37:ee:44:56:8c:a2:0b:
70:51:2e:c9:7c:50:ee:0d:e2:88:aa:84:a7:24:78:
94:4d:d9:9c:d0:6d:80:ee:06:94:f3:39:6d:91:73:
b3:a2:87:6a:8f:0e:e1:92:fc:e2:b9:f9:75:5e:80:
e6:2f:03:9b:4f:92:e8:89:fc:e9:dd:d9:b1:bf:34:
4c:76:44:d8:ef:bc:82:8d:78:51:57:c0:ab:19:95:
11:bb:ea:ba:0f:9b:eb:a5:f1:21:e5:1b:fe:1f:a0:
87:b6:7c:7a:fa:bf:c1:3b:86:23:e3:c8:b5:48:aa:
ff:09:2c:1d:10:13:d4:e3:89:3f:96:c7:78:a9:da:
7e:f2:9d:7c:8a:b4:58:63:11:e7:96:a1:7f:88:aa:
0b:da:97:ac:f6:08:de:e0:e1:76:d6:98:4e:16:12:
11:33:2f:04:82:e9:10:e4:76:c3:04:0d:9a:62:13:
3d:9c:b6:66:78:bc:65:46:b8:0b:51:68:91:04:73:
d2:76:f9:46:12:9f:4d:a2:14:67:91:95:99:a1:8b:
67:d6:ae:97:9c:6d:c0:42:27:1e:ca:f4:10:9c:d1:
25:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:E0:52:94:98:AD:23:AE:C6:41:77:5F:09:52:B3:F0:ED:EC:69:EA
X509v3 Authority Key Identifier:
keyid:A8:65:BA:E2:57:78:BE:ED:88:80:C0:8D:F2:D3:F3:7F:C3:7A:BC:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qGW64ld4vu2IgMCN8tPzf8N6vB4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/6444d1-5f00-4e50-8019-1b6f750cf9a2/1/euBSlJitI67GQXdfCVKz8O3saeo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/6444d1-5f00-4e50-8019-1b6f750cf9a2/1/qGW64ld4vu2IgMCN8tPzf8N6vB4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.105.137.0/24
Signature Algorithm: sha256WithRSAEncryption
1c:c1:a6:f8:a3:4b:a9:85:fd:e5:07:5a:3a:5c:76:ad:96:75:
95:e0:17:a2:9c:15:37:bc:a4:39:f7:6d:42:34:78:11:d7:4f:
da:7b:b0:63:f0:7c:34:16:5e:73:7b:ed:35:63:ae:1a:2e:6b:
ac:af:bc:a9:9d:70:0c:b4:67:aa:68:cf:8a:f8:91:22:09:a1:
db:e2:4a:4b:6a:09:72:b8:be:37:53:d6:41:37:ec:a3:97:ea:
6f:69:35:cf:78:73:75:97:57:c2:fb:d9:01:00:33:a3:6e:df:
84:c0:c3:3f:e1:e1:1e:56:7b:f5:8e:bb:01:25:25:22:e3:c5:
9a:75:0d:a3:3b:f5:a5:59:15:e2:09:7d:f4:dc:4e:32:ca:34:
b7:67:9b:a9:f3:dc:dd:27:33:77:05:e8:04:3e:35:c5:f2:3d:
22:28:65:03:9e:ee:f8:13:98:6a:ab:10:c2:58:ad:5e:3e:85:
e6:00:a2:78:1a:ef:b9:0c:02:5e:ef:4e:e4:47:28:42:d9:1e:
8e:e0:5a:08:ef:ab:62:53:cf:d1:b3:4d:e2:7f:67:2e:de:e1:
54:7e:f9:d8:07:ea:58:ee:02:44:f0:84:38:49:43:a5:8d:c9:
bd:c5:a2:14:4d:5e:11:a4:de:4b:05:98:d4:c7:53:4a:69:b0:
48:f9:fe:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 00:15:15 2025 by rpki-client