Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/Ko7PSNz6V0FRzw_IW9MzmaMxZvk.roa
File: Ko7PSNz6V0FRzw_IW9MzmaMxZvk.roa (raw, json)
Hash identifier: 79d2nxQ12R4pdLSRrWke/d9/iTMbBOj9G1b57pGWEFQ=
Subject key identifier: 2A:8E:CF:48:DC:FA:57:41:51:CF:0F:C8:5B:D3:33:99:A3:31:66:F9
Certificate issuer: /CN=f8e62634e1bd5133a9de4512ae98cad1b2219b59
Certificate serial: 41880EFD
Authority key identifier: F8:E6:26:34:E1:BD:51:33:A9:DE:45:12:AE:98:CA:D1:B2:21:9B:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/Ko7PSNz6V0FRzw_IW9MzmaMxZvk.roa
Signing time: Sat 01 Jan 2022 10:05:56 +0000
ROA not before: Sat 01 Jan 2022 10:05:56 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 3280
IP address blocks: 89.40.70.0/24 maxlen: 24
89.45.35.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1099435773 (0x41880efd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8e62634e1bd5133a9de4512ae98cad1b2219b59
Validity
Not Before: Jan 1 10:05:56 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=2a8ecf48dcfa574151cf0fc85bd33399a33166f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:d0:9b:7e:11:fe:78:34:48:2b:32:c0:8c:8d:
05:fe:24:ff:6f:47:b3:37:9e:5d:e7:16:50:12:01:
b8:0a:e3:b2:1c:10:ea:d9:bd:58:f8:d3:9e:3e:8d:
e9:91:5f:4e:e7:58:c2:d8:e8:26:07:47:77:62:fd:
7b:b2:81:ae:de:98:61:22:47:5a:3b:69:28:3d:c7:
c2:5c:d4:5d:33:2d:80:8c:41:06:aa:49:8b:14:b3:
13:48:5f:f3:da:4f:fa:02:b2:5f:c9:d1:fe:92:45:
24:45:7f:9b:f7:81:10:79:c9:d5:8e:f2:4d:99:7e:
ca:0a:ca:ca:69:1a:e1:c6:5e:29:af:88:c4:7b:26:
f1:f7:f8:bb:b9:bb:31:fb:c3:dd:12:59:b1:fa:53:
c6:ae:b4:83:18:4c:2f:84:08:35:83:a4:7f:33:d7:
b2:94:54:e2:87:f1:2f:ea:f1:77:04:88:3c:80:25:
0c:23:73:38:48:96:24:47:3e:fa:24:cd:e0:3f:03:
a6:04:a6:af:22:a9:1f:92:77:9e:c8:ac:44:c4:8f:
f3:c1:97:24:83:77:c3:d3:0c:ce:26:08:1d:59:da:
26:25:d3:de:a6:d9:c5:b1:f2:6f:97:7f:eb:0d:fb:
8e:26:73:47:5d:71:c2:60:80:fa:6d:04:4e:39:14:
3b:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:8E:CF:48:DC:FA:57:41:51:CF:0F:C8:5B:D3:33:99:A3:31:66:F9
X509v3 Authority Key Identifier:
keyid:F8:E6:26:34:E1:BD:51:33:A9:DE:45:12:AE:98:CA:D1:B2:21:9B:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/Ko7PSNz6V0FRzw_IW9MzmaMxZvk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.40.70.0/24
89.45.35.0/24
Signature Algorithm: sha256WithRSAEncryption
96:f1:af:c6:e3:42:98:f0:aa:be:74:d2:a2:58:25:7a:94:03:
a7:f4:6d:e1:cd:f5:23:c2:71:2b:42:4d:c1:cc:82:97:7a:23:
3e:96:ec:dc:f1:9f:64:02:59:4e:3f:cc:6a:c0:b2:4d:58:b9:
81:29:0d:16:7a:94:ed:22:72:bc:90:e7:b9:fd:a8:77:64:df:
2c:3f:67:36:64:77:8c:66:f7:b7:d7:5f:c0:1a:27:d7:90:51:
20:66:f1:2e:3d:9c:4f:6a:1d:f0:10:cc:93:14:cd:0c:30:1d:
d1:4c:51:bc:13:99:39:4f:2e:fc:4e:61:9d:d8:0d:a1:29:83:
58:6c:18:92:cf:24:fe:a7:da:88:35:d4:9a:1f:8b:f9:39:fa:
22:0e:78:03:f2:26:5d:3e:0d:c2:4b:d4:6f:b8:a2:07:16:ac:
a3:02:89:e2:0c:25:e1:3e:3c:44:f0:b2:76:1e:c4:ed:e0:86:
02:c6:81:71:c8:1b:53:98:15:fe:fb:e4:95:1b:d1:f0:95:7f:
7b:9f:92:a7:b1:1e:01:5f:97:8b:3e:f2:26:2f:39:df:fd:e1:
5b:70:67:e5:51:30:6d:27:a0:10:2c:0b:16:18:93:0e:0a:57:
04:06:92:35:34:39:2d:96:64:df:28:65:74:a7:29:b4:73:af:
4e:b4:37:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:40:20 2025 by rpki-client