Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/b8a454-a699-4269-b676-63ae2eace298/1/VCfxBs-R_8d90RSC5onhYiV0Isw.roa
File: VCfxBs-R_8d90RSC5onhYiV0Isw.roa (raw, json)
Hash identifier: NVuxDzlmTH+pZVnyxokypyC/T18kkBF4osZBS37OT1Q=
Subject key identifier: 54:27:F1:06:CF:91:FF:C7:7D:D1:14:82:E6:89:E1:62:25:74:22:CC
Certificate issuer: /CN=ee9887ba5f457d797afdac2c5551defb453d88f3
Certificate serial: 0190B6E9CDE56DF547B2B72E23EB2869DED8
Authority key identifier: EE:98:87:BA:5F:45:7D:79:7A:FD:AC:2C:55:51:DE:FB:45:3D:88:F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7piHul9FfXl6_awsVVHe-0U9iPM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/b8a454-a699-4269-b676-63ae2eace298/1/VCfxBs-R_8d90RSC5onhYiV0Isw.roa
Signing time: Mon 15 Jul 2024 15:01:34 +0000
ROA not before: Mon 15 Jul 2024 15:01:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 43361
IP address blocks: 37.17.244.0/22 maxlen: 22
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:b6:e9:cd:e5:6d:f5:47:b2:b7:2e:23:eb:28:69:de:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee9887ba5f457d797afdac2c5551defb453d88f3
Validity
Not Before: Jul 15 15:01:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5427f106cf91ffc77dd11482e689e162257422cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:e2:74:26:a8:93:a1:83:5a:02:f0:14:d7:34:
d6:08:b2:1b:48:78:93:b5:38:fa:0f:ae:5f:12:c9:
59:bd:59:d6:b8:9b:fd:ec:25:35:ad:6b:82:72:58:
9d:aa:f8:90:4a:11:44:f5:70:f3:f2:64:64:65:84:
49:fd:7f:3e:5e:a1:74:10:82:59:50:0e:55:1e:e6:
51:d2:24:3f:a8:67:40:ea:30:2f:54:fe:39:48:c2:
07:e9:eb:58:bf:fe:35:b4:d9:67:51:c0:0c:e5:fd:
07:d1:c7:e5:f4:97:74:c8:b6:f7:de:99:42:19:e5:
ab:ff:2c:14:3d:5d:d9:2f:19:5d:c1:c1:b5:61:37:
b0:2b:50:a8:60:00:f4:4f:83:6c:32:0a:4e:d3:b6:
0e:f3:83:17:f9:d4:6d:46:df:62:d1:d9:77:f0:c8:
53:16:55:93:00:4c:46:13:04:ad:f0:0f:af:52:c0:
48:62:99:35:3a:30:c5:8a:57:8f:66:25:bd:27:9d:
cf:e9:e6:56:6e:9f:81:56:af:71:fd:34:42:2a:a9:
31:29:2f:47:2f:1c:89:54:d6:83:4c:a9:67:0c:96:
e3:7e:e0:c2:22:3f:d6:39:22:12:0b:bc:a1:fa:75:
43:92:95:20:97:fb:ac:cf:a0:a5:5c:49:6c:41:97:
fd:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:27:F1:06:CF:91:FF:C7:7D:D1:14:82:E6:89:E1:62:25:74:22:CC
X509v3 Authority Key Identifier:
keyid:EE:98:87:BA:5F:45:7D:79:7A:FD:AC:2C:55:51:DE:FB:45:3D:88:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7piHul9FfXl6_awsVVHe-0U9iPM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/b8a454-a699-4269-b676-63ae2eace298/1/VCfxBs-R_8d90RSC5onhYiV0Isw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/b8a454-a699-4269-b676-63ae2eace298/1/7piHul9FfXl6_awsVVHe-0U9iPM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.17.244.0/22
Signature Algorithm: sha256WithRSAEncryption
07:a7:ae:44:a4:86:62:70:1c:58:a2:f8:ae:b5:9c:6d:73:34:
30:24:5d:14:64:83:ed:87:5f:ba:08:28:49:42:af:e6:47:9e:
5d:d3:ab:c3:2f:7b:14:73:f0:7c:d2:0e:7d:3e:59:91:a5:8a:
8d:20:87:9d:29:c3:d2:3b:7c:32:35:85:2d:98:e8:98:d6:b5:
2e:fb:e0:cf:db:08:4f:62:2f:06:47:19:ac:36:a6:2c:29:06:
d0:ff:56:d5:5b:ba:24:13:49:3b:6d:17:68:85:4c:1b:73:a2:
3c:41:79:ff:99:72:dc:e2:2b:47:bb:ae:7a:d4:a4:f7:6f:99:
dd:c6:26:37:ac:84:1a:43:e6:a2:e6:81:d3:9a:91:d7:17:39:
a2:58:8b:68:a2:2d:b1:4d:ef:01:ef:a9:39:85:94:de:be:fa:
ed:ee:9d:39:34:5f:16:76:38:ca:f7:2f:ca:08:23:c8:c8:af:
6b:09:79:45:fd:06:14:2d:03:f4:5c:74:38:e8:a3:fd:98:28:
85:ee:3f:1f:c3:f7:9d:d4:ea:c2:b6:0c:90:ef:63:cd:3a:0b:
03:b9:b9:ba:8c:21:1a:06:12:c8:97:12:55:53:00:0a:8e:9c:
52:79:1c:bb:55:f0:ea:48:1c:3b:44:f9:c3:9e:cd:f9:93:c2:
1b:86:ac:e6
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZC26c3lbfVHsrcuI+soad7YMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVlOTg4N2JhNWY0NTdkNzk3YWZkYWMyYzU1NTFkZWZiNDUz
ZDg4ZjMwHhcNMjQwNzE1MTUwMTM0WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1NDI3ZjEwNmNmOTFmZmM3N2RkMTE0ODJlNjg5ZTE2MjI1NzQyMmNjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAneJ0JqiToYNaAvAU1zTWCLIbSHiT
tTj6D65fEslZvVnWuJv97CU1rWuCclidqviQShFE9XDz8mRkZYRJ/X8+XqF0EIJZ
UA5VHuZR0iQ/qGdA6jAvVP45SMIH6etYv/41tNlnUcAM5f0H0cfl9Jd0yLb33plC
GeWr/ywUPV3ZLxldwcG1YTewK1CoYAD0T4NsMgpO07YO84MX+dRtRt9i0dl38MhT
FlWTAExGEwSt8A+vUsBIYpk1OjDFilePZiW9J53P6eZWbp+BVq9x/TRCKqkxKS9H
LxyJVNaDTKlnDJbjfuDCIj/WOSISC7yh+nVDkpUgl/usz6ClXElsQZf9FQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFFQn8QbPkf/HfdEUguaJ4WIldCLMMB8GA1UdIwQY
MBaAFO6Yh7pfRX15ev2sLFVR3vtFPYjzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN3BpSHVsOUZmWGw2X2F3c1ZWSGUtMFU5aVBNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NC9iOGE0NTQtYTY5OS00MjY5LWI2NzYt
NjNhZTJlYWNlMjk4LzEvVkNmeEJzLVJfOGQ5MFJTQzVvbmhZaVYwSXN3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82NC9iOGE0NTQtYTY5OS00MjY5LWI2NzYtNjNhZTJlYWNlMjk4
LzEvN3BpSHVsOUZmWGw2X2F3c1ZWSGUtMFU5aVBNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCJRH0MA0G
CSqGSIb3DQEBCwUAA4IBAQAHp65EpIZicBxYoviutZxtczQwJF0UZIPth1+6CChJ
Qq/mR55d06vDL3sUc/B80g59PlmRpYqNIIedKcPSO3wyNYUtmOiY1rUu++DP2whP
Yi8GRxmsNqYsKQbQ/1bVW7okE0k7bRdohUwbc6I8QXn/mXLc4itHu6561KT3b5nd
xiY3rIQaQ+ai5oHTmpHXFzmiWItooi2xTe8B76k5hZTevvrt7p05NF8WdjjK9y/K
CCPIyK9rCXlF/QYULQP0XHQ46KP9mCiF7j8fw/ed1OrCtgyQ72PNOgsDubm6jCEa
BhLIlxJVUwAKjpxSeRy7VfDqSBw7RPnDns35k8Ibhqzm
-----END CERTIFICATE-----
Generated at Thu Apr 17 02:16:47 2025 by rpki-client