Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/6dbc99-bfa9-4ef7-a798-a3032615660c/1/_t02EudLDTMhc7kLSpLMImYrCjg.roa
File: _t02EudLDTMhc7kLSpLMImYrCjg.roa (raw, json)
Hash identifier: wPomsKUUUjp7Ym9REQPxeJmX3mwt8lb5cskCqrnQeic=
Subject key identifier: FE:DD:36:12:E7:4B:0D:33:21:73:B9:0B:4A:92:CC:22:66:2B:0A:38
Certificate issuer: /CN=d98247d3f81472dbba06dbea9bd19c785d18babe
Certificate serial: 054318C5
Authority key identifier: D9:82:47:D3:F8:14:72:DB:BA:06:DB:EA:9B:D1:9C:78:5D:18:BA:BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2YJH0_gUctu6Btvqm9GceF0Yur4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/6dbc99-bfa9-4ef7-a798-a3032615660c/1/_t02EudLDTMhc7kLSpLMImYrCjg.roa
Signing time: Thu 19 May 2022 20:07:29 +0000
ROA not before: Thu 19 May 2022 20:07:29 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 1239
IP address blocks: 45.153.90.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 88283333 (0x54318c5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d98247d3f81472dbba06dbea9bd19c785d18babe
Validity
Not Before: May 19 20:07:29 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=fedd3612e74b0d332173b90b4a92cc22662b0a38
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:be:71:1a:94:d4:a3:fd:85:13:c7:e9:ec:13:
ae:f3:c0:6d:21:29:79:3e:10:03:20:af:27:53:d8:
41:e6:21:a9:de:b2:47:08:29:a7:d7:e4:50:87:b5:
22:0f:51:d7:61:a1:1d:40:6d:d0:c7:e3:02:7c:8b:
a6:e7:78:5c:af:fb:69:9e:d7:f8:6e:a3:09:55:c0:
0b:14:10:ab:3c:74:5e:bb:14:27:21:55:ad:8e:42:
3a:0a:79:23:7f:fa:58:25:d9:00:a7:b4:eb:f8:c3:
49:f6:bc:b4:dc:48:95:0f:da:d6:bb:04:bd:76:8a:
84:1c:6b:dd:f8:d1:b8:05:4f:ec:45:e8:2e:66:08:
0e:78:5f:56:a1:51:1f:d7:8a:ea:c3:3b:d9:6f:1d:
d9:4a:10:12:f2:9f:38:b0:1c:c3:a2:d3:c5:5e:e3:
37:1c:04:52:02:af:a2:bf:99:1e:19:73:25:ef:b9:
92:5b:29:b2:e1:e6:74:ae:5c:68:90:9d:2d:65:90:
d8:50:9d:e0:a6:52:c7:71:ec:0b:c1:93:2c:27:03:
8a:c3:eb:0f:f9:47:6e:df:28:5f:a7:a9:48:39:7e:
d6:91:e3:a7:68:45:da:2a:44:84:e1:f5:df:ef:e8:
29:2b:a3:19:18:c0:f5:da:af:ec:25:ce:c4:18:c5:
4a:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:DD:36:12:E7:4B:0D:33:21:73:B9:0B:4A:92:CC:22:66:2B:0A:38
X509v3 Authority Key Identifier:
keyid:D9:82:47:D3:F8:14:72:DB:BA:06:DB:EA:9B:D1:9C:78:5D:18:BA:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2YJH0_gUctu6Btvqm9GceF0Yur4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/6dbc99-bfa9-4ef7-a798-a3032615660c/1/_t02EudLDTMhc7kLSpLMImYrCjg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/6dbc99-bfa9-4ef7-a798-a3032615660c/1/2YJH0_gUctu6Btvqm9GceF0Yur4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.153.90.0/24
Signature Algorithm: sha256WithRSAEncryption
7e:98:41:27:16:bf:22:72:98:f4:9c:4d:72:98:68:79:4f:5e:
92:5c:57:25:f2:86:f6:e8:a2:09:3e:37:b5:cb:15:45:24:30:
cc:2f:b9:78:89:b9:16:7e:ce:8e:5e:3a:6c:db:ac:18:b5:db:
d6:df:9f:ab:83:f7:67:49:f0:ed:41:a4:47:77:6e:ab:83:5e:
4c:6d:b7:30:62:54:18:d2:0f:2a:09:48:f0:15:ae:c2:62:e0:
6d:8b:6e:d5:89:f1:8e:e0:3b:7f:26:d4:d8:84:9d:d6:32:73:
d4:13:88:6f:54:f6:c5:dc:82:74:92:43:45:de:88:1c:8c:2a:
5f:59:8d:9b:28:8c:d4:f0:e5:42:98:ca:23:13:37:6b:30:af:
32:f7:65:f5:0f:9a:c5:4f:8b:26:f0:68:d1:5e:07:d5:65:e8:
28:3b:ef:72:4c:f3:03:d4:a8:90:7f:8e:09:c5:b8:0a:55:e2:
be:b4:53:f7:1a:ac:3f:a7:f6:c6:cf:3e:af:fb:af:1e:f6:b5:
f0:26:a3:97:18:44:52:af:25:33:54:88:0d:9a:11:80:32:d3:
ff:af:3b:c6:5e:d9:28:ce:9b:dc:5b:ea:1e:da:f4:fb:7e:84:
66:9d:cd:dd:48:a9:ec:b5:6d:9e:6f:4d:bf:62:ae:d6:ec:07:
42:33:89:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 01:30:47 2025 by rpki-client