Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/1be999-5a59-4c10-92ff-da1b58618841/1/F7-qPtVoRBR6pctwZmbaOlsXYmA.roa
File: F7-qPtVoRBR6pctwZmbaOlsXYmA.roa (raw, json)
Hash identifier: wEpV3mWqLa5cPrYSptJDWu3TdcXjwBEk4uzOzwmcqxA=
Subject key identifier: 17:BF:AA:3E:D5:68:44:14:7A:A5:CB:70:66:66:DA:3A:5B:17:62:60
Certificate issuer: /CN=eefbe8369a7bbc03a86fbe639b7efaa02b717287
Certificate serial: 0184131F0BE0498F6E23AEC05A7D35DDC037
Authority key identifier: EE:FB:E8:36:9A:7B:BC:03:A8:6F:BE:63:9B:7E:FA:A0:2B:71:72:87
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7vvoNpp7vAOob75jm376oCtxcoc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/1be999-5a59-4c10-92ff-da1b58618841/1/F7-qPtVoRBR6pctwZmbaOlsXYmA.roa
Signing time: Wed 26 Oct 2022 07:08:32 +0000
ROA not before: Wed 26 Oct 2022 07:08:32 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 207616
IP address blocks: 91.193.56.0/23 maxlen: 24
2a0f:6280::/30 maxlen: 48
2a0f:6284::/30 maxlen: 48
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:13:1f:0b:e0:49:8f:6e:23:ae:c0:5a:7d:35:dd:c0:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eefbe8369a7bbc03a86fbe639b7efaa02b717287
Validity
Not Before: Oct 26 07:08:32 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=17bfaa3ed56844147aa5cb706666da3a5b176260
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:1d:60:ed:e7:d9:7f:0c:54:dd:2c:03:53:ed:
01:cb:74:a8:76:97:da:59:fe:d2:e2:79:19:67:9a:
bd:33:43:cc:e3:bc:87:88:cf:68:06:4f:c7:97:8a:
8b:a6:8f:07:08:fd:07:44:b4:3e:27:35:60:4b:1b:
58:25:ea:e6:b3:6e:95:b7:2d:8b:fa:8f:f8:d2:6b:
ac:8d:98:87:16:a7:c1:1f:14:b2:db:86:e0:54:d2:
3d:a6:7a:53:af:03:36:03:6b:e0:fb:9c:bf:ef:c7:
c8:84:6a:34:e4:40:c3:32:f8:0e:da:11:fd:7c:61:
69:90:9e:fb:14:38:61:45:06:39:99:60:10:6f:c0:
3e:5b:69:13:58:bb:7f:55:e0:fe:c0:7a:cf:f9:7c:
fd:9b:75:66:2b:be:47:68:26:81:fb:5f:9d:92:82:
18:52:90:c5:96:98:b2:1b:58:f6:66:0a:c5:25:f8:
3c:ec:b7:4c:54:58:e0:95:e9:00:a6:1b:be:ac:f5:
e6:45:dc:0e:93:12:e3:e6:94:2c:49:8a:42:59:bb:
0e:d3:c0:9f:7c:bb:e6:aa:95:9e:25:46:62:7b:f1:
3f:30:e1:05:27:9b:0d:c4:46:40:1a:e5:fd:b8:a7:
f4:8e:4d:89:c1:f5:48:8a:8a:86:bf:75:ab:12:32:
e7:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:BF:AA:3E:D5:68:44:14:7A:A5:CB:70:66:66:DA:3A:5B:17:62:60
X509v3 Authority Key Identifier:
keyid:EE:FB:E8:36:9A:7B:BC:03:A8:6F:BE:63:9B:7E:FA:A0:2B:71:72:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7vvoNpp7vAOob75jm376oCtxcoc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/1be999-5a59-4c10-92ff-da1b58618841/1/F7-qPtVoRBR6pctwZmbaOlsXYmA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/1be999-5a59-4c10-92ff-da1b58618841/1/7vvoNpp7vAOob75jm376oCtxcoc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.193.56.0/23
IPv6:
2a0f:6280::/29
Signature Algorithm: sha256WithRSAEncryption
77:b2:43:50:18:59:f1:ac:f8:36:bf:19:87:09:43:b1:38:60:
ae:f5:33:0f:c5:5e:07:b7:0a:16:22:71:16:ff:5a:02:66:64:
3a:e5:0e:1f:5e:14:a9:28:20:cd:ee:72:3f:23:19:63:74:38:
e3:f1:ae:ea:69:08:34:6c:4b:a5:fc:1f:28:af:d5:42:a6:ce:
fe:01:61:93:aa:cc:62:21:4c:c8:b9:46:df:2a:65:22:92:22:
d8:de:3e:af:bf:02:71:58:a4:e7:81:6b:b7:0f:ed:16:a7:18:
c5:6a:10:74:57:dd:38:95:6f:10:53:f5:c4:c4:c6:df:d5:ff:
ad:68:b7:ed:9e:6c:97:d6:b8:82:96:24:20:d8:1f:5e:df:d5:
d4:0b:fe:e5:b1:83:5f:59:6d:a6:46:25:db:4e:9f:d9:07:d9:
f7:0a:2c:0d:94:aa:19:db:a3:90:d7:9a:7a:84:f6:7f:e9:56:
37:c3:b8:96:e8:c9:e9:d9:7a:54:b2:27:f6:ce:6a:6f:80:d3:
b2:19:8a:f4:7b:a8:2f:20:d8:78:d8:9c:42:f1:f5:03:7c:23:
8c:37:f3:2c:9e:7c:5e:ed:b6:a3:00:db:76:92:7b:d3:70:ba:
5e:46:66:ac:fc:7e:45:c1:82:7e:f8:89:44:63:c5:b8:a9:39:
75:73:b0:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:17:00 2025 by rpki-client