Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/c072ae-15d7-42a8-bfc2-bc93ca679e1f/1/6hak8wOkhRhFN6WEMqB_WwKBmvQ.roa
File: 6hak8wOkhRhFN6WEMqB_WwKBmvQ.roa (raw, json)
Hash identifier: bWoqXzZcrGM4JIC876F355qWRTjooy6UHHxrSbjnD3E=
Subject key identifier: EA:16:A4:F3:03:A4:85:18:45:37:A5:84:32:A0:7F:5B:02:81:9A:F4
Certificate issuer: /CN=215266435617fa0f1fd2837ec80c6d83b0b9d608
Certificate serial: 018CC2DB05520E846D2C0D22197CDB0FB5D0
Authority key identifier: 21:52:66:43:56:17:FA:0F:1F:D2:83:7E:C8:0C:6D:83:B0:B9:D6:08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IVJmQ1YX-g8f0oN-yAxtg7C51gg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/c072ae-15d7-42a8-bfc2-bc93ca679e1f/1/6hak8wOkhRhFN6WEMqB_WwKBmvQ.roa
Signing time: Mon 01 Jan 2024 02:29:42 +0000
ROA not before: Mon 01 Jan 2024 02:29:42 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 47216
IP address blocks: 194.59.215.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:db:05:52:0e:84:6d:2c:0d:22:19:7c:db:0f:b5:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=215266435617fa0f1fd2837ec80c6d83b0b9d608
Validity
Not Before: Jan 1 02:29:42 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ea16a4f303a485184537a58432a07f5b02819af4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:c4:06:c2:73:86:62:07:3e:a7:44:96:dc:13:
8c:16:89:ee:96:dc:4e:35:0e:d5:de:d6:4d:b3:78:
f7:bd:71:0b:29:e1:ce:38:06:aa:d0:3a:f4:59:bf:
17:d0:e5:a7:01:fa:70:aa:81:e5:f1:e7:92:24:49:
f8:49:17:21:2a:37:ac:69:04:34:08:55:a9:a7:3a:
9f:7e:e0:0b:82:28:3a:89:ab:c5:7e:82:76:3c:1d:
95:de:c8:21:5f:de:46:8d:7b:99:5a:1e:40:53:05:
da:14:f9:35:b9:fe:3f:f7:54:2c:30:64:bf:14:d6:
d5:7b:ec:81:8e:ae:28:81:2e:30:5d:9e:c9:1f:fd:
99:c2:0b:28:a3:aa:80:c1:8a:c6:c5:2f:d7:ec:bc:
ce:05:d0:df:1e:d4:3b:15:80:b7:63:51:ef:e6:4d:
45:9b:ae:20:2a:86:0f:a3:9f:58:03:6e:b2:90:49:
58:2b:be:e5:47:29:29:bf:c8:b6:34:83:ac:9b:37:
5c:65:3a:a1:37:23:eb:07:6e:b8:76:fa:db:dc:84:
0a:9c:fe:79:fc:70:6e:ea:81:68:37:a1:1e:95:1b:
9a:5e:88:cd:b8:79:60:db:c6:50:9f:e9:3f:43:66:
8b:98:7b:b3:8e:f9:22:85:27:aa:d4:56:d6:63:8b:
06:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:16:A4:F3:03:A4:85:18:45:37:A5:84:32:A0:7F:5B:02:81:9A:F4
X509v3 Authority Key Identifier:
keyid:21:52:66:43:56:17:FA:0F:1F:D2:83:7E:C8:0C:6D:83:B0:B9:D6:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IVJmQ1YX-g8f0oN-yAxtg7C51gg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/c072ae-15d7-42a8-bfc2-bc93ca679e1f/1/6hak8wOkhRhFN6WEMqB_WwKBmvQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/c072ae-15d7-42a8-bfc2-bc93ca679e1f/1/IVJmQ1YX-g8f0oN-yAxtg7C51gg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.59.215.0/24
Signature Algorithm: sha256WithRSAEncryption
14:b8:ee:b7:f3:1e:9e:91:5c:7e:84:18:ab:ef:e1:1f:2f:86:
d4:2c:ba:5d:3a:c9:3c:48:89:17:68:69:a4:2c:0f:1e:01:5d:
0f:cb:16:96:a6:ee:6b:bb:44:21:b5:45:70:8a:58:35:19:38:
e0:49:1a:0f:0a:f9:cb:f3:42:59:33:1b:67:7d:08:65:e1:40:
68:0d:dd:77:c5:48:14:d7:fa:b8:39:23:d5:ac:2a:69:0d:1f:
c8:15:ba:ab:20:4f:0e:57:67:67:4a:a2:86:7c:7b:14:e2:06:
84:4c:e8:39:7c:6f:13:0c:9a:cd:12:ef:14:dc:4d:3b:49:03:
64:9b:7e:8d:95:29:b8:71:89:97:82:67:12:4b:cf:62:d8:1f:
0d:0f:ec:da:a0:cc:8a:2d:4c:b5:8c:75:34:d1:5c:b9:95:88:
89:af:fd:61:5a:7f:21:a4:4c:78:46:66:0e:ce:ed:85:b1:68:
e7:60:77:bb:82:47:2f:3b:90:ba:cd:6f:4c:e3:9d:a5:3e:7c:
b0:47:1b:53:ce:bd:52:48:de:c1:28:05:52:75:a8:27:0f:b0:
c5:e3:ef:7b:7f:ba:5d:99:d6:b8:de:20:64:7f:ae:3e:01:b2:
08:70:90:2d:18:ab:a0:df:77:ae:b0:80:20:96:21:3d:10:57:
c4:7a:b2:ce
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzC2wVSDoRtLA0iGXzbD7XQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIxNTI2NjQzNTYxN2ZhMGYxZmQyODM3ZWM4MGM2ZDgzYjBi
OWQ2MDgwHhcNMjQwMTAxMDIyOTQyWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlYTE2YTRmMzAzYTQ4NTE4NDUzN2E1ODQzMmEwN2Y1YjAyODE5YWY0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAycQGwnOGYgc+p0SW3BOMFonultxO
NQ7V3tZNs3j3vXELKeHOOAaq0Dr0Wb8X0OWnAfpwqoHl8eeSJEn4SRchKjesaQQ0
CFWppzqffuALgig6iavFfoJ2PB2V3sghX95GjXuZWh5AUwXaFPk1uf4/91QsMGS/
FNbVe+yBjq4ogS4wXZ7JH/2Zwgsoo6qAwYrGxS/X7LzOBdDfHtQ7FYC3Y1Hv5k1F
m64gKoYPo59YA26ykElYK77lRykpv8i2NIOsmzdcZTqhNyPrB264dvrb3IQKnP55
/HBu6oFoN6EelRuaXojNuHlg28ZQn+k/Q2aLmHuzjvkihSeq1FbWY4sG4wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFOoWpPMDpIUYRTelhDKgf1sCgZr0MB8GA1UdIwQY
MBaAFCFSZkNWF/oPH9KDfsgMbYOwudYIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSVZKbVExWVgtZzhmMG9OLXlBeHRnN0M1MWdnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NS9jMDcyYWUtMTVkNy00MmE4LWJmYzIt
YmM5M2NhNjc5ZTFmLzEvNmhhazh3T2toUmhGTjZXRU1xQl9Xd0tCbXZRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83NS9jMDcyYWUtMTVkNy00MmE4LWJmYzItYmM5M2NhNjc5ZTFm
LzEvSVZKbVExWVgtZzhmMG9OLXlBeHRnN0M1MWdnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwjvXMA0G
CSqGSIb3DQEBCwUAA4IBAQAUuO638x6ekVx+hBir7+EfL4bULLpdOsk8SIkXaGmk
LA8eAV0PyxaWpu5ru0QhtUVwilg1GTjgSRoPCvnL80JZMxtnfQhl4UBoDd13xUgU
1/q4OSPVrCppDR/IFbqrIE8OV2dnSqKGfHsU4gaETOg5fG8TDJrNEu8U3E07SQNk
m36NlSm4cYmXgmcSS89i2B8ND+zaoMyKLUy1jHU00Vy5lYiJr/1hWn8hpEx4RmYO
zu2FsWjnYHe7gkcvO5C6zW9M452lPnywRxtTzr1SSN7BKAVSdagnD7DF4+97f7pd
mda43iBkf64+AbIIcJAtGKug33eusIAgliE9EFfEerLO
-----END CERTIFICATE-----
Generated at Sun Apr 20 18:54:16 2025 by rpki-client