Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/1bb45a-551c-4967-95ca-77344bcc9191/1/7lZh6-VP_ugRHvpRpSMDH8BL4kE.roa
File: 7lZh6-VP_ugRHvpRpSMDH8BL4kE.roa (raw, json)
Hash identifier: Grj5LhzOPtApJZ+egurHOV7GmmIZUuhtzQDMs2ANeoo=
Subject key identifier: EE:56:61:EB:E5:4F:FE:E8:11:1E:FA:51:A5:23:03:1F:C0:4B:E2:41
Certificate issuer: /CN=3c4ed942e5c742e77bfb9beb954f872534f52848
Certificate serial: 0344D7D8
Authority key identifier: 3C:4E:D9:42:E5:C7:42:E7:7B:FB:9B:EB:95:4F:87:25:34:F5:28:48
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PE7ZQuXHQud7-5vrlU-HJTT1KEg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/1bb45a-551c-4967-95ca-77344bcc9191/1/7lZh6-VP_ugRHvpRpSMDH8BL4kE.roa
Signing time: Thu 16 Jun 2022 08:22:44 +0000
ROA not before: Thu 16 Jun 2022 08:22:44 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 49999
IP address blocks: 194.15.154.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 54843352 (0x344d7d8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c4ed942e5c742e77bfb9beb954f872534f52848
Validity
Not Before: Jun 16 08:22:44 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ee5661ebe54ffee8111efa51a523031fc04be241
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:36:29:ae:d6:f8:c2:fe:b7:4a:e2:49:a2:fd:
94:be:7b:07:1e:12:a6:9a:cb:e9:c4:32:91:97:6e:
55:7a:80:14:84:4b:ec:03:15:81:d6:e2:77:8d:2c:
fb:94:c3:e8:b9:f1:51:7e:34:3b:5c:a2:5a:ff:5b:
64:18:93:ac:43:1e:1f:72:c1:62:c8:8e:95:7f:a3:
29:c6:17:2d:02:8b:24:f5:7c:bd:60:c7:31:41:b5:
50:79:03:3e:a6:a5:c6:d8:bc:8c:61:13:39:5a:a6:
c1:80:25:ab:9d:a4:0f:80:26:d1:f6:5f:5d:a2:b4:
7a:d9:a7:09:1e:cd:58:68:75:13:92:3f:ce:fd:8d:
6a:d0:ee:8f:35:3a:75:9b:0a:8e:05:2e:8c:49:d1:
bf:58:41:ef:55:8e:f2:d9:01:2c:ed:b3:6e:0f:77:
26:9a:62:9a:72:99:89:10:34:15:db:f4:aa:79:a3:
65:be:c5:a0:12:87:4b:d0:b4:64:a3:99:8f:f9:60:
33:84:36:bb:f5:4d:10:79:9f:7f:0d:c1:9b:16:d6:
a6:8e:60:3f:1c:0a:96:75:35:8b:7c:c1:6d:a9:04:
22:b5:3d:ee:b7:0b:f3:ef:b7:73:03:67:c2:48:eb:
5c:fc:7a:df:3c:0c:bc:ff:11:47:d6:3c:20:0a:55:
cf:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:56:61:EB:E5:4F:FE:E8:11:1E:FA:51:A5:23:03:1F:C0:4B:E2:41
X509v3 Authority Key Identifier:
keyid:3C:4E:D9:42:E5:C7:42:E7:7B:FB:9B:EB:95:4F:87:25:34:F5:28:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PE7ZQuXHQud7-5vrlU-HJTT1KEg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/1bb45a-551c-4967-95ca-77344bcc9191/1/7lZh6-VP_ugRHvpRpSMDH8BL4kE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/1bb45a-551c-4967-95ca-77344bcc9191/1/PE7ZQuXHQud7-5vrlU-HJTT1KEg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.15.154.0/24
Signature Algorithm: sha256WithRSAEncryption
a2:b7:91:01:a1:b9:4e:fc:e4:cc:81:fe:0f:77:f4:ed:cf:5a:
38:8e:0c:54:ea:93:6b:90:5a:0d:4e:14:7f:26:38:87:8d:8d:
ff:20:ce:c3:2f:54:3e:db:ce:0b:be:52:69:0d:cc:85:37:0a:
bd:bb:92:4e:72:ab:81:8d:66:21:83:d5:2b:23:a9:95:08:01:
53:f8:0e:04:f9:4b:ee:e0:e9:2f:04:a4:f3:d1:76:1b:12:49:
2b:74:ac:0d:6d:35:f0:b1:dc:11:74:ae:8e:61:2f:70:04:ce:
2f:9a:6a:b5:47:6e:22:dd:d1:e8:8a:63:48:e5:7c:e9:bd:3c:
61:d3:a5:db:4e:56:38:d0:3f:b9:b1:35:72:ca:63:f4:15:3f:
b3:61:e7:58:ed:34:3e:af:0e:17:a6:82:b6:30:b5:a8:e3:0e:
08:e6:c3:fc:3f:61:de:f8:8b:a3:30:c8:0b:c7:46:db:ff:75:
a6:2b:d4:95:cc:ae:44:10:e9:00:7a:d3:13:06:97:c4:c9:78:
05:21:e7:f1:f6:b3:c0:eb:a6:63:af:8b:a9:55:4a:ed:48:59:
9e:49:83:8c:e8:ec:c6:34:3b:e5:f0:d4:0e:48:78:ca:f8:33:
89:91:31:83:13:48:ac:b8:60:cb:ba:9a:e4:e5:42:d0:cf:fb:
e1:f0:76:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:46:16 2025 by rpki-client