Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/388fd8-c81f-4e71-af52-c0b1ad435b95/1/1-JhRFtuHEVYO-XOLV9m3Je-fCuA.roa
File: 1-JhRFtuHEVYO-XOLV9m3Je-fCuA.roa (raw, json)
Hash identifier: gAHdOcONHHaCSZgPRBe2uv0lzFc8ApRGK3UYjQglGxw=
Subject key identifier: F8:98:51:16:DB:87:11:56:0E:F9:73:8B:57:D9:B7:25:EF:9F:0A:E0
Certificate issuer: /CN=a7fd3f89335dcf828666b28fad8ae993bd448878
Certificate serial: 38E995
Authority key identifier: A7:FD:3F:89:33:5D:CF:82:86:66:B2:8F:AD:8A:E9:93:BD:44:88:78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p_0_iTNdz4KGZrKPrYrpk71EiHg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/388fd8-c81f-4e71-af52-c0b1ad435b95/1/1-JhRFtuHEVYO-XOLV9m3Je-fCuA.roa
Signing time: Thu 31 Mar 2022 20:22:03 +0000
ROA not before: Thu 31 Mar 2022 20:22:03 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 57327
IP address blocks: 193.53.81.0/24 maxlen: 24
2a0a:3507::/48 maxlen: 48
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3729813 (0x38e995)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a7fd3f89335dcf828666b28fad8ae993bd448878
Validity
Not Before: Mar 31 20:22:03 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f8985116db8711560ef9738b57d9b725ef9f0ae0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:2f:b5:1e:ae:4f:c7:ef:81:0a:bc:43:5a:4e:
f3:9b:24:a3:0a:9a:f9:8d:5d:3d:ea:e5:f7:e1:cc:
ec:0a:ea:c1:73:92:29:43:13:26:af:d1:3f:81:82:
d6:73:1d:17:f7:ef:40:bf:82:e6:22:96:c8:8a:21:
dc:98:63:88:b6:b5:21:96:9d:f3:d4:5c:06:35:f3:
10:58:84:3b:5e:55:8d:f4:b3:f7:a1:fb:4f:c5:cf:
ab:05:5f:af:f5:b6:de:3a:85:40:4f:00:78:8c:db:
12:c5:87:ad:87:0c:c1:2e:fa:d3:70:05:57:66:37:
c5:10:ac:bd:7f:3b:88:8c:fa:21:a4:55:fe:62:56:
6f:7b:e2:91:e7:ac:8e:93:e1:f0:32:fb:ee:52:37:
c0:7c:de:cd:41:57:39:1c:12:86:38:61:60:22:b9:
03:64:b0:37:dd:0b:62:6b:0c:f1:a1:2e:0c:06:8b:
a6:af:ad:5a:7b:ed:37:2f:a4:fc:c6:2a:df:76:fe:
49:41:43:21:7e:85:32:82:06:64:df:75:6a:b9:96:
6c:af:be:61:1e:97:94:3b:43:1f:d1:fe:73:a2:6b:
e4:27:08:f0:f8:1f:5c:c4:3d:26:83:dd:20:d8:f5:
81:42:29:26:cd:f9:14:2d:3f:58:87:89:38:f2:fe:
42:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:98:51:16:DB:87:11:56:0E:F9:73:8B:57:D9:B7:25:EF:9F:0A:E0
X509v3 Authority Key Identifier:
keyid:A7:FD:3F:89:33:5D:CF:82:86:66:B2:8F:AD:8A:E9:93:BD:44:88:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p_0_iTNdz4KGZrKPrYrpk71EiHg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/388fd8-c81f-4e71-af52-c0b1ad435b95/1/1-JhRFtuHEVYO-XOLV9m3Je-fCuA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/388fd8-c81f-4e71-af52-c0b1ad435b95/1/p_0_iTNdz4KGZrKPrYrpk71EiHg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.53.81.0/24
IPv6:
2a0a:3507::/48
Signature Algorithm: sha256WithRSAEncryption
21:39:8b:57:ed:b5:e7:67:4d:61:ad:a4:da:f8:6f:41:92:00:
55:c1:62:27:d9:5a:94:73:a0:03:c9:62:41:ae:1c:fe:fc:66:
c6:e8:b7:a2:45:66:11:e4:d7:8f:a0:36:9c:db:5f:04:9c:53:
9b:09:29:7a:2a:f7:4a:25:66:62:4d:02:f0:13:8d:93:64:a5:
10:96:57:2f:bb:a2:06:00:bf:b0:cd:6d:eb:df:b7:04:9a:3b:
16:39:26:be:e3:73:47:36:55:54:4e:a9:6d:b6:88:3f:a5:b8:
a0:6d:f8:e7:ef:75:42:7d:b0:33:7e:74:50:8c:5b:1e:8d:91:
14:4b:b7:eb:51:35:17:9a:38:01:b5:a3:db:d7:e4:c1:05:e0:
92:f5:a2:2e:86:85:0b:95:22:0d:23:f3:db:8a:df:19:7b:fb:
af:55:d2:ac:32:9a:76:1c:99:2c:f3:6b:88:b9:14:45:d4:33:
12:01:cf:2d:5e:f9:1f:d9:fa:1a:fa:18:18:47:56:d6:90:8c:
45:d2:22:48:e0:7b:58:be:c1:b9:30:af:67:8d:fe:bb:c4:d1:
36:c2:fe:05:7d:62:34:c9:50:42:a2:97:d5:96:91:23:61:4e:
14:d8:ff:ec:7b:2f:1d:f3:81:cc:60:59:35:31:f5:60:c9:98:
fe:c2:73:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:18:32 2025 by rpki-client