Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/6444d1-5f00-4e50-8019-1b6f750cf9a2/1/tbhYHYTVfTWaKI-xumr_Z7_vs5U.roa
File: tbhYHYTVfTWaKI-xumr_Z7_vs5U.roa (raw, json)
Hash identifier: 0Nh42yUnfOdJfxSNGN/IPGpWEyjvImQyk0wLZdMCwY0=
Subject key identifier: B5:B8:58:1D:84:D5:7D:35:9A:28:8F:B1:BA:6A:FF:67:BF:EF:B3:95
Certificate issuer: /CN=a865bae25778beed8880c08df2d3f37fc37abc1e
Certificate serial: 018CCA2BCBC71A61CCC884D91D98E6690596
Authority key identifier: A8:65:BA:E2:57:78:BE:ED:88:80:C0:8D:F2:D3:F3:7F:C3:7A:BC:1E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qGW64ld4vu2IgMCN8tPzf8N6vB4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/6444d1-5f00-4e50-8019-1b6f750cf9a2/1/tbhYHYTVfTWaKI-xumr_Z7_vs5U.roa
Signing time: Tue 02 Jan 2024 12:35:17 +0000
ROA not before: Tue 02 Jan 2024 12:35:17 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 42905
IP address blocks: 141.105.128.0/24 maxlen: 24
141.105.132.0/22 maxlen: 22
141.105.133.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:2b:cb:c7:1a:61:cc:c8:84:d9:1d:98:e6:69:05:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a865bae25778beed8880c08df2d3f37fc37abc1e
Validity
Not Before: Jan 2 12:35:17 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b5b8581d84d57d359a288fb1ba6aff67bfefb395
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:35:e6:05:ce:b5:a9:70:68:ee:0d:46:e7:4d:
b2:29:da:21:8f:84:cc:49:6b:f9:13:7a:00:a8:ee:
b7:e0:99:09:31:40:9b:94:1a:70:51:7d:f2:7a:5c:
99:f1:16:f8:97:e9:5a:4a:47:cb:63:33:35:08:a1:
03:b5:2d:b3:c7:20:0c:19:77:0e:76:be:1c:c5:32:
c1:76:8b:10:e8:d5:4e:f4:af:c5:6e:5c:89:93:25:
08:ab:1e:4c:56:04:bc:b5:d9:9a:85:fb:b7:ab:39:
6c:2c:c9:8d:dc:c0:ac:60:10:3b:8b:a5:14:be:9d:
8b:c6:bf:29:73:a3:43:3e:6f:a4:0d:8f:dd:a7:eb:
c9:4a:e0:a6:33:1a:99:8f:03:cc:c8:72:db:f0:76:
91:08:0c:fa:1b:8d:99:ba:13:53:5b:07:9a:46:38:
00:5c:2a:4d:8a:82:4e:0c:47:7a:94:02:f4:87:e2:
33:5d:0c:06:53:15:43:29:90:61:1c:34:f3:6c:51:
35:0a:a8:a9:e7:bb:70:0f:d3:57:de:8c:7a:61:8d:
b2:76:89:c3:d8:17:13:f4:a3:52:48:50:1c:74:cc:
11:05:79:ae:74:d1:8f:9d:fb:a0:4e:ca:ae:77:8c:
79:ef:03:fb:2e:df:93:ad:90:9c:e2:16:4b:7c:dd:
3d:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:B8:58:1D:84:D5:7D:35:9A:28:8F:B1:BA:6A:FF:67:BF:EF:B3:95
X509v3 Authority Key Identifier:
keyid:A8:65:BA:E2:57:78:BE:ED:88:80:C0:8D:F2:D3:F3:7F:C3:7A:BC:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qGW64ld4vu2IgMCN8tPzf8N6vB4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/6444d1-5f00-4e50-8019-1b6f750cf9a2/1/tbhYHYTVfTWaKI-xumr_Z7_vs5U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/6444d1-5f00-4e50-8019-1b6f750cf9a2/1/qGW64ld4vu2IgMCN8tPzf8N6vB4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.105.128.0/24
141.105.132.0/22
Signature Algorithm: sha256WithRSAEncryption
a1:bc:97:29:c7:e3:34:f5:17:ed:57:d1:12:8f:3c:8a:68:85:
a6:02:8d:d6:c0:3e:99:49:32:db:6e:e2:33:ea:e8:3f:92:da:
0d:fa:53:c8:7b:dd:85:64:54:7c:1d:98:45:e6:bb:b1:a4:46:
92:0d:99:6c:d0:90:9f:16:0d:e0:43:fc:bd:ff:08:86:de:a9:
f1:5b:ae:72:0a:c6:cb:57:98:b7:b4:b9:25:2b:46:82:de:04:
03:6c:09:5f:bf:a6:45:0d:99:41:64:85:de:29:65:fb:dd:18:
a2:56:6a:20:0b:0d:21:d0:4e:39:35:3f:d9:9b:bd:d0:bb:9e:
d4:84:ea:61:2d:26:54:aa:21:72:70:6e:36:57:40:4f:f0:3b:
4f:78:98:e8:6b:a8:77:ef:5b:bf:33:29:80:25:da:d9:32:3e:
72:78:6d:3d:02:49:2d:ea:2e:21:0a:82:cd:ef:df:05:9d:b1:
b0:d2:77:c7:f7:3f:dd:4e:f2:27:92:f6:60:ae:f8:62:12:cf:
f4:ad:11:20:45:30:91:e4:81:7b:8c:a7:0a:50:4a:c0:60:b3:
a7:36:9b:cd:b2:ca:c0:b4:0f:d2:4d:6c:d2:43:78:92:7d:1a:
31:0b:52:4f:ca:2c:6d:dc:72:03:ed:ac:53:de:be:1d:12:74:
38:9c:ed:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 00:06:03 2025 by rpki-client