Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/9cf9d4-2ce9-424b-9cf0-8aa6f6c170ff/1/V5oiJFEzDlH0vX3oZHJgwnMWVjE.roa
File: V5oiJFEzDlH0vX3oZHJgwnMWVjE.roa (raw, json)
Hash identifier: h6hxObWhiqGblGW4mYlCKtqqAMNbEyHgUiR/AjfKpf0=
Subject key identifier: 57:9A:22:24:51:33:0E:51:F4:BD:7D:E8:64:72:60:C2:73:16:56:31
Certificate issuer: /CN=12085c540c114fc8957a0250bb49f484b74357b9
Certificate serial: 019427479EB300EFC5F23030164E965D9DD7
Authority key identifier: 12:08:5C:54:0C:11:4F:C8:95:7A:02:50:BB:49:F4:84:B7:43:57:B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EghcVAwRT8iVegJQu0n0hLdDV7k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/9cf9d4-2ce9-424b-9cf0-8aa6f6c170ff/1/V5oiJFEzDlH0vX3oZHJgwnMWVjE.roa
Signing time: Thu 02 Jan 2025 13:49:52 +0000
ROA not before: Thu 02 Jan 2025 13:49:52 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 197984
IP address blocks: 94.230.232.0/24 maxlen: 24
194.107.115.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:47:9e:b3:00:ef:c5:f2:30:30:16:4e:96:5d:9d:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=12085c540c114fc8957a0250bb49f484b74357b9
Validity
Not Before: Jan 2 13:49:52 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=579a222451330e51f4bd7de8647260c273165631
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:ea:02:64:dd:53:7d:c6:a3:0b:23:06:e8:1a:
81:96:ac:3d:cf:1f:ee:49:8e:c7:d6:39:86:4c:79:
13:fa:8f:99:7c:69:09:b2:53:5f:8b:12:12:db:44:
1e:43:11:39:f1:dc:c7:55:66:aa:c7:74:50:61:8d:
fd:59:58:92:bc:27:0c:18:bc:38:86:a3:4c:41:a3:
89:62:47:01:90:19:30:86:a5:28:4b:cb:81:ea:6d:
d6:ef:d3:14:71:be:cd:c9:ae:a0:4d:3c:5e:11:f3:
78:bc:47:a9:8b:de:56:eb:7c:d1:5a:46:d3:14:4a:
e3:b7:49:81:93:e4:f2:6f:f4:14:cd:f2:c8:91:c2:
e9:ab:e0:2c:e6:4d:17:01:29:4f:5c:6a:ce:bf:18:
9d:1a:ca:7f:ce:87:ef:c6:c1:46:b4:81:cd:92:ec:
de:e3:9e:d6:07:67:cb:0d:85:ad:99:0b:aa:d4:e0:
dd:e1:17:83:64:dd:6b:fd:03:53:67:9f:9e:a1:b6:
b4:a9:d5:07:50:2a:f7:7d:d0:32:32:98:75:74:12:
d9:83:c4:d5:fa:ab:45:b9:df:5f:13:5d:ad:14:4f:
7a:e3:27:da:f6:f3:e5:a6:37:54:b5:6e:ae:aa:ac:
5c:a7:3c:44:80:53:3c:df:dd:be:fb:41:26:55:c4:
58:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:9A:22:24:51:33:0E:51:F4:BD:7D:E8:64:72:60:C2:73:16:56:31
X509v3 Authority Key Identifier:
keyid:12:08:5C:54:0C:11:4F:C8:95:7A:02:50:BB:49:F4:84:B7:43:57:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EghcVAwRT8iVegJQu0n0hLdDV7k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/9cf9d4-2ce9-424b-9cf0-8aa6f6c170ff/1/V5oiJFEzDlH0vX3oZHJgwnMWVjE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/9cf9d4-2ce9-424b-9cf0-8aa6f6c170ff/1/EghcVAwRT8iVegJQu0n0hLdDV7k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.230.232.0/24
194.107.115.0/24
Signature Algorithm: sha256WithRSAEncryption
61:42:96:3e:8d:35:3d:14:87:22:16:24:32:45:86:ed:e3:5f:
1f:77:bd:e4:33:bb:41:73:72:d7:ff:f8:0d:18:f0:e4:64:fd:
84:0a:ab:cf:b8:8f:a7:18:a0:df:bc:e7:eb:07:87:73:e2:74:
72:c5:5c:e3:22:86:bf:0d:9c:1b:65:e6:d5:56:7f:8b:55:d0:
d0:68:25:d8:9b:ae:d3:b3:1a:11:98:cb:25:e6:08:0c:85:54:
cc:c2:03:b1:62:b6:6a:1d:51:13:32:1f:b1:17:94:05:0f:df:
b9:93:49:54:a0:ea:cc:86:5e:84:db:60:b7:2b:23:a8:e0:4f:
c8:95:1c:81:ba:3c:09:ff:46:76:68:e5:41:aa:d2:63:a6:b3:
a4:02:1c:4a:cd:3c:a6:83:8c:c2:08:d5:3c:db:b5:ae:c8:8b:
7f:b1:d6:16:e5:60:6d:82:03:b3:5c:b2:19:a0:6c:f7:80:44:
1d:bd:02:a1:0c:e0:9e:14:53:dd:b0:25:02:53:b5:ad:0c:10:
10:21:a2:9c:5a:ea:1f:48:38:e3:94:d7:78:83:e8:0c:33:18:
3b:98:ff:b2:54:e9:b9:4b:dc:89:4a:38:4d:5c:cd:95:d4:d1:
f7:c0:d5:3c:e9:ab:dc:7b:15:2c:cd:e1:36:77:5c:84:38:d6:
c4:1d:cb:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 04:02:49 2025 by rpki-client