Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/9cf9d4-2ce9-424b-9cf0-8aa6f6c170ff/1/maxgy0QIXCbyH58BPSBTHjRw6Wo.roa
File: maxgy0QIXCbyH58BPSBTHjRw6Wo.roa (raw, json)
Hash identifier: LvLwtTfqsClu0LvehAIQBXwMF9x4KwNEAF1yNyoLd2I=
Subject key identifier: 99:AC:60:CB:44:08:5C:26:F2:1F:9F:01:3D:20:53:1E:34:70:E9:6A
Certificate issuer: /CN=12085c540c114fc8957a0250bb49f484b74357b9
Certificate serial: 0193432EA255E7B554466E750B91B2233BC3
Authority key identifier: 12:08:5C:54:0C:11:4F:C8:95:7A:02:50:BB:49:F4:84:B7:43:57:B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EghcVAwRT8iVegJQu0n0hLdDV7k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/9cf9d4-2ce9-424b-9cf0-8aa6f6c170ff/1/maxgy0QIXCbyH58BPSBTHjRw6Wo.roa
Signing time: Tue 19 Nov 2024 06:49:09 +0000
ROA not before: Tue 19 Nov 2024 06:49:09 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 197984
IP address blocks: 94.230.232.0/24 maxlen: 24
194.107.115.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:43:2e:a2:55:e7:b5:54:46:6e:75:0b:91:b2:23:3b:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=12085c540c114fc8957a0250bb49f484b74357b9
Validity
Not Before: Nov 19 06:49:09 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=99ac60cb44085c26f21f9f013d20531e3470e96a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:29:63:6e:ca:32:9b:ca:69:de:c5:1c:b7:d3:
24:56:c8:d8:ce:16:55:50:57:09:1d:9e:0e:5f:17:
8a:b0:37:66:8f:9a:27:38:e3:77:75:18:a7:dd:30:
0f:fe:d5:85:01:ef:42:5f:28:3b:53:8a:e1:ca:e6:
9f:74:ee:ae:96:6c:4e:9b:4a:0e:d1:3f:39:5a:8a:
bf:fc:d7:8e:6b:9c:2e:c4:7c:54:54:bb:b4:fc:01:
16:0c:ae:7e:3e:40:33:b9:fb:9d:c4:c7:2a:ab:84:
7d:0d:4c:e5:a9:ad:7c:10:17:d4:1e:d4:30:b2:e7:
37:8a:13:b8:e8:a2:b2:c8:3e:ab:e8:58:bd:8d:c7:
21:ad:58:39:54:b8:6f:d2:71:f3:5f:02:d4:56:35:
ee:10:02:a2:74:ce:33:76:91:52:c4:8a:13:b5:7d:
67:c0:ec:9f:20:1d:64:64:61:5e:a0:29:86:b4:37:
eb:39:ec:bd:9d:20:68:92:72:71:51:0f:ee:26:fa:
99:92:2f:30:28:c6:69:1e:b1:2a:6a:4e:ea:51:79:
02:8c:3b:c0:ee:53:3c:07:ca:c6:98:aa:5b:ee:84:
4a:fe:4a:10:97:4f:35:a2:1d:2a:69:2e:fb:ad:e7:
73:ab:d2:f1:3e:39:c6:54:e1:bb:ba:51:b3:27:f3:
de:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:AC:60:CB:44:08:5C:26:F2:1F:9F:01:3D:20:53:1E:34:70:E9:6A
X509v3 Authority Key Identifier:
keyid:12:08:5C:54:0C:11:4F:C8:95:7A:02:50:BB:49:F4:84:B7:43:57:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EghcVAwRT8iVegJQu0n0hLdDV7k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/9cf9d4-2ce9-424b-9cf0-8aa6f6c170ff/1/maxgy0QIXCbyH58BPSBTHjRw6Wo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/9cf9d4-2ce9-424b-9cf0-8aa6f6c170ff/1/EghcVAwRT8iVegJQu0n0hLdDV7k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.230.232.0/24
194.107.115.0/24
Signature Algorithm: sha256WithRSAEncryption
72:b0:8a:a4:b3:df:a7:c8:42:dc:54:81:90:94:60:65:6a:ad:
fc:90:55:b4:e0:d8:6a:88:a4:b4:42:05:5d:61:5c:57:ae:c8:
6f:4d:3d:76:06:83:18:42:42:32:12:63:b6:51:14:5e:6f:91:
5c:a8:a8:f0:9a:cc:ba:fc:79:c5:8d:bd:6e:53:d4:67:c8:d7:
b8:73:3a:e4:7f:4a:23:f3:b7:10:82:3c:75:7f:73:6e:5a:7d:
42:5e:ba:06:23:6b:d3:d2:38:49:a6:d2:a2:bc:d1:1e:97:38:
10:ea:da:a2:a2:f1:e6:92:ba:fe:41:a9:0b:1d:d2:4f:76:59:
bf:07:bf:83:1c:ee:b4:cf:8c:67:83:ff:dd:e3:8e:4a:b1:d3:
90:c3:73:12:4e:de:cb:c2:9c:61:dd:06:c1:04:c5:22:65:8b:
dc:0c:56:ea:b9:d1:bf:4d:e1:52:b1:a1:ac:cd:ed:5d:3f:64:
63:41:bf:c4:a7:62:bf:38:27:f5:fb:10:a9:b2:90:24:54:c0:
f5:6d:15:07:4c:05:18:5b:08:7d:1e:b8:63:4a:f2:d5:93:5b:
a6:73:48:49:0d:2a:c5:96:74:64:e1:4c:72:93:02:b8:0f:04:
c7:46:5d:bc:f0:14:ea:27:b2:a8:f8:28:e0:88:33:f4:86:cd:
e5:37:17:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 20:49:11 2025 by rpki-client