Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/axXNKglsQu-YuQaFEv71JHFMd54.roa
File: axXNKglsQu-YuQaFEv71JHFMd54.roa (raw, json)
Hash identifier: HhlC+gy3bV7xYNJSsRnZtlps+lDvHXzkxiE/os/wEm0=
Subject key identifier: 6B:15:CD:2A:09:6C:42:EF:98:B9:06:85:12:FE:F5:24:71:4C:77:9E
Certificate issuer: /CN=f8e62634e1bd5133a9de4512ae98cad1b2219b59
Certificate serial: 01856FD532E8F518E500A838F680588BD97C
Authority key identifier: F8:E6:26:34:E1:BD:51:33:A9:DE:45:12:AE:98:CA:D1:B2:21:9B:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/axXNKglsQu-YuQaFEv71JHFMd54.roa
Signing time: Mon 02 Jan 2023 00:15:21 +0000
ROA not before: Mon 02 Jan 2023 00:15:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 57009
IP address blocks: 89.43.55.0/24 maxlen: 24
94.176.97.0/24 maxlen: 24
93.115.9.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:d5:32:e8:f5:18:e5:00:a8:38:f6:80:58:8b:d9:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8e62634e1bd5133a9de4512ae98cad1b2219b59
Validity
Not Before: Jan 2 00:15:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6b15cd2a096c42ef98b9068512fef524714c779e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:aa:18:9c:f0:7d:d4:9b:80:d7:59:31:19:f0:
13:06:84:07:b7:6e:33:96:e0:7d:0d:7f:ab:d4:2c:
a7:7c:ad:7f:67:44:ab:71:72:d5:c6:43:15:dc:1b:
d9:67:7f:59:2d:fd:f7:51:62:65:a1:1f:8f:1d:85:
c5:d1:c7:bb:3a:02:ac:eb:9e:5f:17:8d:bf:c6:5e:
ae:8e:e1:fe:a2:91:86:2e:8d:ae:57:ae:cf:19:18:
b6:3c:60:fa:ba:5c:85:36:ff:02:d9:ae:63:9a:02:
20:16:88:64:6a:7d:f5:94:d4:b5:9f:4f:47:94:f8:
42:7e:2f:19:8a:11:77:d8:27:ea:d2:b7:a2:a8:42:
95:09:af:8d:98:fc:aa:44:37:5c:38:40:0a:b7:ea:
f3:94:85:33:56:9c:83:06:19:f8:80:04:38:2f:68:
c5:c4:11:ee:53:cd:26:26:96:52:36:9c:3e:d9:14:
e5:94:6d:71:4e:9b:99:92:f6:0a:30:07:b3:c6:5b:
7c:e6:c4:47:ae:fb:85:6f:b9:cc:1b:91:29:e8:2f:
81:4c:e1:53:8f:d3:08:8c:29:2b:dc:d0:3f:d1:24:
e6:74:6a:bd:95:6e:b4:dc:9c:26:65:1d:cc:0b:25:
be:03:9c:80:69:cf:31:2e:e6:23:66:7b:e8:93:21:
67:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:15:CD:2A:09:6C:42:EF:98:B9:06:85:12:FE:F5:24:71:4C:77:9E
X509v3 Authority Key Identifier:
keyid:F8:E6:26:34:E1:BD:51:33:A9:DE:45:12:AE:98:CA:D1:B2:21:9B:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/axXNKglsQu-YuQaFEv71JHFMd54.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.43.55.0/24
93.115.9.0/24
94.176.97.0/24
Signature Algorithm: sha256WithRSAEncryption
9c:6d:6a:10:46:5b:59:f2:74:51:1f:1d:45:38:11:d9:7f:a5:
c2:98:87:8a:b2:78:ef:08:c4:50:f3:c2:95:a5:69:6f:d6:fe:
d1:fa:4b:00:52:df:65:75:e4:89:e5:38:6d:45:bd:cb:0c:24:
4b:90:07:c7:15:03:48:71:7c:71:e7:25:11:06:c6:df:fa:42:
71:ca:5b:6b:a0:c0:db:ee:ad:3a:2c:d5:07:8c:2d:fb:ca:dc:
d9:eb:6a:34:13:ee:36:95:09:ed:63:01:99:6e:98:68:8e:03:
33:00:11:7e:4a:90:7f:e4:b6:d3:84:00:af:16:75:93:19:68:
1f:39:05:fa:21:48:64:4c:58:61:41:34:f9:42:f1:d8:b0:70:
85:07:06:c6:72:d4:54:b6:b6:d3:23:f8:3e:9a:33:42:75:d7:
f0:79:d3:66:8a:0e:e3:93:2f:2e:65:ed:a4:17:01:b1:3f:3c:
32:17:5a:7e:fe:2f:5b:6b:f2:7c:b0:40:57:51:f6:bb:91:b1:
bb:80:8c:07:37:91:9e:2f:e8:b9:31:f1:b2:a9:14:3c:c5:eb:
c2:c4:c1:a4:92:8d:16:59:81:6f:4f:d7:11:12:46:b7:1a:2b:
74:72:f1:0e:1b:2f:b9:ce:26:d4:2a:5e:3b:ad:f1:34:f3:dc:
a9:7c:71:d7
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Feb 19 22:39:03 2025 by rpki-client