Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/40ade0-98da-4aa5-b817-6edc1b225625/1/jY65qMwoPWw8d4-L0eYRmXUIf8Y.roa
File: jY65qMwoPWw8d4-L0eYRmXUIf8Y.roa (raw, json)
Hash identifier: wM51jWdb+DhMhrFOD1Qw5rex41JVojFXT10s1gZKVNA=
Subject key identifier: 8D:8E:B9:A8:CC:28:3D:6C:3C:77:8F:8B:D1:E6:11:99:75:08:7F:C6
Certificate issuer: /CN=cfcd73f82c260da87386dcf7be26d5c5445526fa
Certificate serial: 018CF5502C0844DF6F054B823DD5A5F80441
Authority key identifier: CF:CD:73:F8:2C:26:0D:A8:73:86:DC:F7:BE:26:D5:C5:44:55:26:FA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z81z-CwmDahzhtz3vibVxURVJvo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/40ade0-98da-4aa5-b817-6edc1b225625/1/jY65qMwoPWw8d4-L0eYRmXUIf8Y.roa
Signing time: Wed 10 Jan 2024 21:38:41 +0000
ROA not before: Wed 10 Jan 2024 21:38:41 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 208992
IP address blocks: 85.158.184.0/24 maxlen: 24
45.144.42.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:f5:50:2c:08:44:df:6f:05:4b:82:3d:d5:a5:f8:04:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cfcd73f82c260da87386dcf7be26d5c5445526fa
Validity
Not Before: Jan 10 21:38:41 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8d8eb9a8cc283d6c3c778f8bd1e6119975087fc6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:4d:f9:6d:a9:31:0a:5c:62:9c:d2:ed:74:fd:
c4:3f:38:9f:d8:c3:e4:c8:9e:8f:ca:84:5d:71:ac:
1f:1d:9b:0a:36:f6:39:a6:32:d8:76:45:5a:4b:54:
ab:5a:0d:12:ab:fa:17:8d:1b:ea:fb:5e:d4:f0:b4:
bf:1e:8d:b9:d6:9f:d9:71:ff:e4:f2:9e:54:8d:59:
ff:52:9a:c4:69:6b:f0:d0:ed:ac:91:36:24:fb:c1:
d9:52:b6:2f:33:8c:aa:07:87:98:c7:49:8c:3b:91:
49:e3:11:d5:f5:24:a9:e6:4d:16:24:68:d4:e5:44:
6a:4f:dc:82:99:75:c1:c3:52:7e:66:ce:4c:ee:f1:
d0:f3:56:6a:9e:ac:0b:1e:ac:8d:9d:83:2c:a9:43:
d5:a3:a6:90:d4:ca:d2:f2:b5:ae:fc:a1:78:e3:5c:
37:7e:0d:83:a5:53:b6:4b:28:1b:36:71:ed:69:df:
c4:0b:93:a5:86:52:20:6a:4f:83:21:8a:09:b2:c8:
ee:82:60:3f:5e:db:c4:ba:e6:f9:e6:78:46:32:4b:
5b:19:24:b3:05:45:f4:ab:78:d7:8e:5f:a4:35:31:
38:c1:38:75:59:52:64:c8:8b:bc:12:0f:c0:31:b1:
a6:fb:9b:fe:61:da:07:3c:d0:b9:2d:01:57:2e:93:
35:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:8E:B9:A8:CC:28:3D:6C:3C:77:8F:8B:D1:E6:11:99:75:08:7F:C6
X509v3 Authority Key Identifier:
keyid:CF:CD:73:F8:2C:26:0D:A8:73:86:DC:F7:BE:26:D5:C5:44:55:26:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z81z-CwmDahzhtz3vibVxURVJvo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/40ade0-98da-4aa5-b817-6edc1b225625/1/jY65qMwoPWw8d4-L0eYRmXUIf8Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/40ade0-98da-4aa5-b817-6edc1b225625/1/z81z-CwmDahzhtz3vibVxURVJvo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.144.42.0/24
85.158.184.0/24
Signature Algorithm: sha256WithRSAEncryption
18:58:22:bd:60:ff:e8:80:df:95:4e:fd:e6:ef:3c:40:17:24:
f5:00:e8:fa:3e:32:9d:c0:69:82:2c:ae:42:e1:03:40:6d:86:
dd:c7:43:5f:a5:71:df:a5:1a:b1:54:6a:10:a9:62:11:83:e0:
50:51:31:63:62:69:38:0a:af:e0:30:eb:fa:6d:7c:5f:fb:39:
ee:8c:7e:51:ef:a1:0f:6b:0a:d6:48:4a:0a:a0:12:81:f9:c2:
ae:2e:f9:f9:fb:cc:82:1f:57:c8:69:a4:17:e6:f1:36:c1:16:
7d:d3:73:6e:74:19:7f:ec:6d:b8:85:d6:cd:48:63:9f:5f:f3:
86:91:80:f9:43:6e:59:ce:7a:eb:5e:86:1f:e2:66:3f:f5:37:
01:69:07:3d:a6:ce:10:a2:87:8d:ca:bd:fe:99:3c:d5:48:b7:
59:0f:05:29:80:89:95:02:5f:0d:28:45:2a:c9:24:53:86:fe:
06:1e:de:59:c6:7c:40:80:a3:22:14:d8:72:ac:05:60:37:de:
77:c3:07:2e:d9:fd:b4:cf:ef:e1:64:c2:10:b0:80:5c:3e:57:
5b:99:65:d2:e5:54:b0:20:b5:44:9e:d4:ce:16:b6:f4:1b:e5:
95:ad:37:f5:e1:09:f8:b1:e8:41:06:99:26:ed:67:8c:6d:c0:
87:bb:15:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 02:41:39 2025 by rpki-client