Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/h-anEFJX6G_y6yrTUMDs0JICnU4.roa
File: h-anEFJX6G_y6yrTUMDs0JICnU4.roa (raw, json)
Hash identifier: D/ujS+921yqIg47W6emGmqVeNxT2XFlpFF36EcBir4k=
Subject key identifier: 87:E6:A7:10:52:57:E8:6F:F2:EB:2A:D3:50:C0:EC:D0:92:02:9D:4E
Certificate issuer: /CN=f8e62634e1bd5133a9de4512ae98cad1b2219b59
Certificate serial: 418EB1E0
Authority key identifier: F8:E6:26:34:E1:BD:51:33:A9:DE:45:12:AE:98:CA:D1:B2:21:9B:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/h-anEFJX6G_y6yrTUMDs0JICnU4.roa
Signing time: Sat 01 Jan 2022 10:06:01 +0000
ROA not before: Sat 01 Jan 2022 10:06:01 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 48571
IP address blocks: 128.0.55.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1099870688 (0x418eb1e0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8e62634e1bd5133a9de4512ae98cad1b2219b59
Validity
Not Before: Jan 1 10:06:01 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=87e6a7105257e86ff2eb2ad350c0ecd092029d4e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:4b:fa:9e:cd:d6:11:73:6a:28:0a:32:e1:d7:
2d:da:f8:15:f6:80:0c:cd:da:a5:6b:87:9a:9b:f8:
0b:1c:5f:d9:55:ef:83:d3:6a:f9:0e:5e:19:96:ee:
2a:f9:80:fd:6d:fe:df:80:dc:09:79:42:7b:af:3f:
e3:e9:9f:c6:8a:57:1f:8c:9f:58:cb:43:5b:c5:92:
a1:b3:26:16:fb:8e:d6:7f:68:66:92:90:84:f8:47:
2e:b0:8d:f0:78:4b:27:69:80:5f:1c:f4:0f:e8:e1:
2b:d8:e4:a0:4c:70:8d:7e:82:62:61:60:a9:63:4b:
7f:f1:d8:1f:d6:bf:eb:e4:f1:c6:22:72:d9:ed:2a:
bf:90:0d:86:b5:5f:5e:60:44:f2:08:43:12:75:b9:
b8:0b:86:ac:30:a9:e5:87:ff:77:ff:57:89:51:04:
a0:70:16:ae:4c:f4:ce:8e:5f:25:6b:a4:d8:b7:08:
60:24:a4:79:0c:c4:d7:16:15:70:61:ee:7e:50:45:
70:f4:d3:37:ab:04:29:e7:2d:8a:58:24:9f:a6:0a:
d3:6e:4f:6f:5c:ff:11:ad:1e:39:9a:2e:98:53:85:
f5:69:ea:a9:37:7e:98:f3:90:59:1c:83:2b:5f:b1:
19:06:5f:6c:19:bd:22:f0:8b:d4:93:70:1e:a0:2e:
6b:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:E6:A7:10:52:57:E8:6F:F2:EB:2A:D3:50:C0:EC:D0:92:02:9D:4E
X509v3 Authority Key Identifier:
keyid:F8:E6:26:34:E1:BD:51:33:A9:DE:45:12:AE:98:CA:D1:B2:21:9B:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/h-anEFJX6G_y6yrTUMDs0JICnU4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
128.0.55.0/24
Signature Algorithm: sha256WithRSAEncryption
51:31:92:94:73:3f:15:1d:ef:24:70:74:49:cf:9c:39:bc:ca:
65:ee:3f:70:84:87:c7:24:95:9c:5b:b2:41:7c:94:33:e0:47:
42:a1:05:ea:a1:fe:63:1c:dd:e7:37:00:96:3a:3c:ff:f0:82:
b0:a5:41:24:3d:18:0e:f9:52:1b:58:0b:7e:8b:f7:7c:2b:95:
34:79:24:d7:5a:2f:6d:a9:9f:81:01:74:fd:e8:0a:c9:dc:60:
bf:72:ad:f5:37:72:33:da:b7:3c:4f:a9:5e:f0:db:44:f0:21:
3b:0b:4b:2a:6e:31:b8:9e:c1:92:d3:b4:c2:57:ee:ad:ed:23:
90:64:d2:df:71:29:eb:ea:8c:63:33:8b:bc:dc:aa:23:1a:7e:
d9:8f:fa:70:00:04:42:94:40:63:03:95:1d:d9:34:ba:a9:4f:
b4:b3:70:d0:a9:50:f7:15:63:03:27:4b:b9:75:83:7b:2f:3f:
9b:cd:2d:1f:36:6b:e0:d7:32:0d:69:b3:21:2f:c8:47:98:55:
8a:e4:ac:2a:05:84:19:dc:01:90:5c:cb:92:73:92:4a:44:bb:
d1:cd:f2:91:13:ca:cd:03:bc:0f:ce:d7:c4:c0:4d:c4:2e:69:
2d:0f:ec:ff:73:c7:73:b9:84:78:c4:32:65:b1:02:c9:94:b0:
60:e8:95:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:37:02 2025 by rpki-client