Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/bfb423-da69-4265-95e5-f47ae7ddaec0/1/J8aLb286XLsLcXAQ32X_05_ujqw.roa
File: J8aLb286XLsLcXAQ32X_05_ujqw.roa (raw, json)
Hash identifier: qPupn53zAd63KkIJ1TeQeB7tjHcwBmFYAGvhu/x9IVQ=
Subject key identifier: 27:C6:8B:6F:6F:3A:5C:BB:0B:71:70:10:DF:65:FF:D3:9F:EE:8E:AC
Certificate issuer: /CN=69ca7c17232db063491cfa585203369ffbeb76ed
Certificate serial: 019285799B915B11696970D779E87CCE539D
Authority key identifier: 69:CA:7C:17:23:2D:B0:63:49:1C:FA:58:52:03:36:9F:FB:EB:76:ED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/acp8FyMtsGNJHPpYUgM2n_vrdu0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/bfb423-da69-4265-95e5-f47ae7ddaec0/1/J8aLb286XLsLcXAQ32X_05_ujqw.roa
Signing time: Sun 13 Oct 2024 10:43:11 +0000
ROA not before: Sun 13 Oct 2024 10:43:11 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 210513
IP address blocks: 185.65.255.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:85:79:9b:91:5b:11:69:69:70:d7:79:e8:7c:ce:53:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69ca7c17232db063491cfa585203369ffbeb76ed
Validity
Not Before: Oct 13 10:43:11 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=27c68b6f6f3a5cbb0b717010df65ffd39fee8eac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:ef:9b:b1:a6:1a:c8:99:96:c5:35:3b:46:cb:
bf:6e:02:8a:2a:78:57:28:59:8b:46:eb:be:f0:0c:
93:5a:23:16:8a:ac:44:cc:c2:aa:dd:c4:39:04:9b:
78:7c:40:bd:0d:4b:a7:97:81:5f:ce:43:27:20:14:
2a:e5:9f:6d:e4:8b:19:3b:46:bb:db:41:22:22:11:
f3:a2:97:a7:00:0b:59:bc:1e:95:d1:c8:20:36:28:
4e:c1:16:57:e0:7f:e9:17:0c:c4:3d:84:56:9f:da:
7c:09:1c:7c:46:9c:94:95:38:1a:9e:2f:09:21:8b:
f0:91:2f:14:24:88:5c:47:ca:e7:02:48:4c:b5:db:
ac:97:da:5c:04:ca:c7:15:23:0b:c4:eb:fd:83:b4:
65:e5:d6:44:0e:8b:1d:11:ab:38:fa:55:81:32:42:
85:14:09:24:83:85:20:63:d0:d6:55:9b:d1:0a:65:
84:2a:88:df:85:16:08:1a:6e:b2:a9:04:c6:57:61:
c7:78:9f:24:e9:2e:04:af:3d:2e:b9:50:48:e6:f2:
3b:df:d4:48:9f:e3:93:54:72:72:8b:32:5f:7b:ec:
19:57:cd:c4:d7:42:50:90:82:20:c1:ce:56:54:dd:
6e:3e:2e:84:87:59:bb:b7:0f:35:ba:31:46:4c:92:
9f:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:C6:8B:6F:6F:3A:5C:BB:0B:71:70:10:DF:65:FF:D3:9F:EE:8E:AC
X509v3 Authority Key Identifier:
keyid:69:CA:7C:17:23:2D:B0:63:49:1C:FA:58:52:03:36:9F:FB:EB:76:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/acp8FyMtsGNJHPpYUgM2n_vrdu0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/bfb423-da69-4265-95e5-f47ae7ddaec0/1/J8aLb286XLsLcXAQ32X_05_ujqw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/bfb423-da69-4265-95e5-f47ae7ddaec0/1/acp8FyMtsGNJHPpYUgM2n_vrdu0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.65.255.0/24
Signature Algorithm: sha256WithRSAEncryption
31:ef:53:44:40:dc:5e:dd:b9:ea:50:7d:8d:c2:63:2d:f9:37:
84:0d:db:33:e8:70:42:17:a6:47:c9:ea:5f:3f:67:bf:f1:e2:
d3:d9:25:d1:d2:9b:65:72:e8:7a:96:e2:75:db:b4:2f:bd:46:
af:0c:46:be:55:f2:65:33:4d:d2:2f:95:a9:58:2d:8f:f1:74:
b5:82:42:c3:f2:7c:6a:de:c3:f1:fd:2b:f1:18:da:38:2b:45:
f4:1a:79:64:f0:ea:97:a2:6c:36:10:93:85:d3:2c:f8:22:80:
b9:10:a2:4d:c1:9c:7b:cd:5c:32:90:2e:13:de:5b:8e:fa:bb:
0b:63:df:68:03:40:74:6b:3e:cd:21:1b:74:2c:b4:c7:77:cc:
d2:f4:7e:fb:e7:b0:b8:e9:46:86:d1:c1:5e:58:49:69:99:52:
df:ba:3b:c9:ea:91:e0:de:3d:22:26:4c:f3:14:30:a9:fa:7a:
c6:c7:60:16:1a:56:ff:2c:4d:91:14:4b:22:86:ce:9c:b8:a9:
2d:3a:be:ca:56:15:0e:d8:ef:a4:5e:38:0a:a0:ae:a3:a1:e6:
68:7a:c6:ab:05:5c:4f:ad:1d:49:6f:12:a6:96:46:9f:b2:ac:
55:8d:2a:ae:75:f2:20:e9:07:14:0a:eb:62:ee:d1:ee:29:6f:
20:94:90:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 16:03:54 2025 by rpki-client