Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/eb7835-d364-4e28-9a82-ed9231fbaed1/1/uqQgkiYqm0GV3Rw5It4cbCc0jxQ.roa
File: uqQgkiYqm0GV3Rw5It4cbCc0jxQ.roa (raw, json)
Hash identifier: c24RcOEMknkDJYKpBKqRdDy51nwUIVMUyRx+qVQxsDk=
Subject key identifier: BA:A4:20:92:26:2A:9B:41:95:DD:1C:39:22:DE:1C:6C:27:34:8F:14
Certificate issuer: /CN=1ae9db29aa9308e1751b03d0d6999bb868805886
Certificate serial: 018CC56E5F52540AE175A3B6282DA57C851A
Authority key identifier: 1A:E9:DB:29:AA:93:08:E1:75:1B:03:D0:D6:99:9B:B8:68:80:58:86
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GunbKaqTCOF1GwPQ1pmbuGiAWIY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/eb7835-d364-4e28-9a82-ed9231fbaed1/1/uqQgkiYqm0GV3Rw5It4cbCc0jxQ.roa
Signing time: Mon 01 Jan 2024 14:29:54 +0000
ROA not before: Mon 01 Jan 2024 14:29:54 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 209653
IP address blocks: 87.121.16.0/23 maxlen: 24
87.120.160.0/23 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:6e:5f:52:54:0a:e1:75:a3:b6:28:2d:a5:7c:85:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1ae9db29aa9308e1751b03d0d6999bb868805886
Validity
Not Before: Jan 1 14:29:54 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=baa42092262a9b4195dd1c3922de1c6c27348f14
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:46:64:e2:91:7e:19:57:bb:52:35:a8:4b:ca:
ff:12:99:9b:a6:04:f7:58:a3:9c:3f:e5:97:b5:c8:
63:6f:a3:f2:6a:3d:12:9f:56:4a:1d:13:a7:cb:c1:
36:9e:43:94:92:9c:ea:67:f4:f5:74:89:f8:68:a4:
4d:4a:c4:3c:15:0e:7d:a1:d3:1b:6f:18:bf:58:a2:
c5:a3:50:a7:b5:b2:e9:a2:97:59:dc:ef:5a:9f:f3:
76:30:f9:e0:09:ae:be:c7:8e:17:2c:3f:b5:e0:f0:
46:96:7b:0b:0f:1f:f9:47:e8:94:2e:07:ed:a6:b9:
ee:39:7f:47:cf:53:e5:d5:15:6c:3d:5a:82:0b:88:
f0:f7:12:b7:b5:5d:16:17:96:9c:4e:86:c9:14:9d:
ee:a4:9b:c2:c1:95:7d:ec:1c:75:eb:80:ba:2d:21:
7e:11:76:55:7d:f1:89:2e:ef:ed:f9:3f:59:a0:3b:
26:29:07:fa:de:9f:4a:1d:ed:b2:9f:c2:e9:3c:74:
47:b9:9c:59:4a:55:ad:a0:65:bd:4c:06:fc:1b:cb:
68:19:c1:d2:a1:3a:76:d5:3d:a4:5a:c8:f3:66:d1:
3a:7f:cc:33:e4:c6:86:20:04:27:2d:ed:ae:12:6a:
8e:c9:64:52:e8:84:e2:a9:73:f7:ac:bc:04:34:52:
4a:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:A4:20:92:26:2A:9B:41:95:DD:1C:39:22:DE:1C:6C:27:34:8F:14
X509v3 Authority Key Identifier:
keyid:1A:E9:DB:29:AA:93:08:E1:75:1B:03:D0:D6:99:9B:B8:68:80:58:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GunbKaqTCOF1GwPQ1pmbuGiAWIY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/eb7835-d364-4e28-9a82-ed9231fbaed1/1/uqQgkiYqm0GV3Rw5It4cbCc0jxQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/eb7835-d364-4e28-9a82-ed9231fbaed1/1/GunbKaqTCOF1GwPQ1pmbuGiAWIY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.120.160.0/23
87.121.16.0/23
Signature Algorithm: sha256WithRSAEncryption
18:9c:44:2c:15:21:8d:cb:76:34:82:9b:93:13:6e:ad:ba:f2:
c7:09:88:97:1c:3a:93:2f:de:89:3e:b0:cb:1e:f6:be:07:df:
7f:8a:c4:cf:c7:73:35:a0:8c:6b:7b:22:06:ba:58:eb:49:35:
ce:43:f7:95:0c:1f:bf:e2:27:74:54:56:78:e6:9b:e3:23:c6:
e9:92:bd:84:c6:c9:9c:88:eb:96:99:95:1e:84:f2:94:88:3b:
7c:56:d3:2f:78:14:3f:6c:d7:1f:fc:7a:81:16:47:82:df:d1:
5a:be:2d:df:93:f5:c9:8c:4a:7b:29:aa:5a:7c:d8:d3:c5:35:
a5:29:19:4b:6b:18:b0:60:04:82:38:17:d5:08:bc:42:7a:de:
e7:e2:33:74:08:24:b0:11:07:9d:db:e2:65:b2:42:84:b3:04:
88:27:f1:0c:29:ae:0a:6a:1a:5b:12:47:b9:77:bf:99:e0:65:
43:c8:35:25:bb:a2:b2:9c:38:38:ef:e5:47:bc:9e:39:18:a6:
78:8f:1f:75:28:41:7c:d9:15:d4:f3:79:a2:17:9b:9f:9e:48:
c1:6f:a4:0c:69:d4:05:03:10:e3:04:1a:d2:60:74:80:0d:d8:
69:89:3c:6b:29:29:39:d1:74:bf:91:bb:05:13:e8:d3:65:53:
55:04:c0:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:53:52 2025 by rpki-client