Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/c072ae-15d7-42a8-bfc2-bc93ca679e1f/1/t_omVMmfqkpTJYqeDoKAbQ8LWNM.roa
File: t_omVMmfqkpTJYqeDoKAbQ8LWNM.roa (raw, json)
Hash identifier: Grf+z2xxAV4ldI/TyMAcEUillMkXqLArD7nqXixAIZ4=
Subject key identifier: B7:FA:26:54:C9:9F:AA:4A:53:25:8A:9E:0E:82:80:6D:0F:0B:58:D3
Certificate issuer: /CN=215266435617fa0f1fd2837ec80c6d83b0b9d608
Certificate serial: 018EBD394BF1BA97BC3355EE298C4C48800C
Authority key identifier: 21:52:66:43:56:17:FA:0F:1F:D2:83:7E:C8:0C:6D:83:B0:B9:D6:08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IVJmQ1YX-g8f0oN-yAxtg7C51gg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/c072ae-15d7-42a8-bfc2-bc93ca679e1f/1/t_omVMmfqkpTJYqeDoKAbQ8LWNM.roa
Signing time: Mon 08 Apr 2024 10:20:32 +0000
ROA not before: Mon 08 Apr 2024 10:20:32 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 211056
IP address blocks: 45.81.16.0/24 maxlen: 24
45.81.17.0/24 maxlen: 24
45.81.18.0/24 maxlen: 24
45.81.19.0/24 maxlen: 24
185.201.49.0/24 maxlen: 24
2a05:9080:3::/48 maxlen: 48
2a05:9080:5::/48 maxlen: 48
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:bd:39:4b:f1:ba:97:bc:33:55:ee:29:8c:4c:48:80:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=215266435617fa0f1fd2837ec80c6d83b0b9d608
Validity
Not Before: Apr 8 10:20:32 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b7fa2654c99faa4a53258a9e0e82806d0f0b58d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:24:20:fc:a0:22:97:ed:a7:60:16:9e:4f:43:
f8:03:c8:87:0c:f7:37:82:a9:61:51:5b:29:52:32:
f6:e9:e9:f3:14:01:fb:58:20:96:ed:b6:39:91:95:
d7:d2:e8:6a:7a:bd:5c:93:e0:e8:3a:ea:9a:70:64:
95:78:20:bf:a7:8c:91:29:a6:12:c8:ba:66:7c:d4:
c6:83:68:88:dc:87:f4:a1:61:2b:a2:d6:da:f5:3d:
16:a7:65:01:a0:e6:e4:f7:c3:a1:c4:f3:f4:b1:98:
e5:39:fc:f4:3d:45:e2:0e:5e:9c:56:59:af:b6:6e:
61:a7:29:c5:54:ed:2d:06:bd:b3:73:43:fd:1a:65:
98:2b:ce:ac:2b:44:72:aa:d0:bf:fc:b1:0e:a7:a8:
77:d8:10:30:ff:c3:27:73:9f:ce:c5:ce:43:f2:83:
44:7b:72:57:43:c1:a9:96:f0:93:d5:4b:21:0a:e7:
7f:24:2c:fd:bc:31:f9:5d:28:38:14:8d:c7:c6:23:
62:f4:9f:d8:cf:8a:18:a9:27:36:ae:28:16:65:9f:
c6:63:e9:e2:22:dc:39:f8:b9:3b:bd:ef:2e:4f:1f:
11:fa:7a:29:72:00:d3:8f:dd:18:b3:0a:45:01:45:
9f:33:3c:68:54:5d:85:79:e3:8f:1e:87:68:3f:21:
e8:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:FA:26:54:C9:9F:AA:4A:53:25:8A:9E:0E:82:80:6D:0F:0B:58:D3
X509v3 Authority Key Identifier:
keyid:21:52:66:43:56:17:FA:0F:1F:D2:83:7E:C8:0C:6D:83:B0:B9:D6:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IVJmQ1YX-g8f0oN-yAxtg7C51gg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/c072ae-15d7-42a8-bfc2-bc93ca679e1f/1/t_omVMmfqkpTJYqeDoKAbQ8LWNM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/c072ae-15d7-42a8-bfc2-bc93ca679e1f/1/IVJmQ1YX-g8f0oN-yAxtg7C51gg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.81.16.0/22
185.201.49.0/24
IPv6:
2a05:9080:3::/48
2a05:9080:5::/48
Signature Algorithm: sha256WithRSAEncryption
7b:fe:c2:88:ff:af:f8:7e:b8:35:27:f0:ca:a7:30:e1:e3:10:
9e:f6:5b:67:34:ef:10:b3:4c:fd:6f:f7:9d:53:99:a4:e1:4f:
3b:76:c1:d7:eb:64:13:12:88:87:63:d9:95:8f:d8:76:75:6d:
05:c2:44:2e:de:d0:e8:43:0f:cc:61:d4:42:73:03:8f:b3:a7:
41:f1:03:d9:de:5b:fa:b6:c7:5f:27:36:3f:ef:ec:37:7b:76:
d8:af:d5:f7:0d:ad:01:4d:7f:7c:71:78:a5:5e:a7:af:ff:4b:
b7:3b:90:71:bd:77:2e:b8:c1:69:61:a4:7e:4a:2a:93:1a:56:
db:62:b8:20:bb:9b:45:55:12:b4:8b:63:5f:ee:d6:d6:44:86:
2b:72:33:2a:c6:65:34:b5:5d:92:27:d3:80:d5:99:02:ab:60:
d3:37:1b:a2:2e:42:0c:80:a7:0a:14:de:5e:4f:7c:d5:1f:6a:
38:2e:c6:05:4e:7b:e9:80:c1:ba:50:2e:42:ca:00:02:d9:07:
3a:66:f1:9d:77:55:f0:6f:09:80:d0:27:1b:b9:fc:75:a6:88:
8c:d1:9c:7c:5f:c6:a9:0c:ca:63:ee:0b:75:a2:42:3e:a1:00:
93:c9:c4:68:a5:d0:e7:53:92:d2:a1:70:1e:b3:c4:d3:51:76:
2d:a7:05:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:15:18 2025 by rpki-client