Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/4bba7c-a81f-40e1-8814-65daad632957/1/0S11KusRshuVq5kyUbGzysGtRjE.roa
File: 0S11KusRshuVq5kyUbGzysGtRjE.roa (raw, json)
Hash identifier: LjlrbIDgz/p8NhKikVVQCNAuNlqtFurXFnoZnunyDAo=
Subject key identifier: D1:2D:75:2A:EB:11:B2:1B:95:AB:99:32:51:B1:B3:CA:C1:AD:46:31
Certificate issuer: /CN=942588b91da9cca81b49e603a988e2b1eabddc98
Certificate serial: 018EE22C21F0717B3C75979684A0A2C4EDA1
Authority key identifier: 94:25:88:B9:1D:A9:CC:A8:1B:49:E6:03:A9:88:E2:B1:EA:BD:DC:98
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lCWIuR2pzKgbSeYDqYjiseq93Jg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/4bba7c-a81f-40e1-8814-65daad632957/1/0S11KusRshuVq5kyUbGzysGtRjE.roa
Signing time: Mon 15 Apr 2024 14:32:06 +0000
ROA not before: Mon 15 Apr 2024 14:32:06 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 210541
IP address blocks: 31.42.112.0/21 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:e2:2c:21:f0:71:7b:3c:75:97:96:84:a0:a2:c4:ed:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=942588b91da9cca81b49e603a988e2b1eabddc98
Validity
Not Before: Apr 15 14:32:06 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d12d752aeb11b21b95ab993251b1b3cac1ad4631
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:2c:ce:8a:37:6b:ae:0c:a3:51:0b:d5:67:7f:
fa:09:63:45:85:60:16:09:78:36:1b:a5:db:e9:5e:
59:51:29:48:c9:56:73:41:38:31:7b:5d:5b:7b:43:
78:24:66:89:5d:4f:80:41:cd:9b:4b:c6:89:64:8b:
12:52:2d:95:b8:5c:f2:d2:92:3f:23:ef:4a:c9:b3:
bf:b4:60:2b:08:e2:1c:99:3f:0e:87:ce:2e:1a:93:
d3:0f:9c:21:9b:e6:cb:63:1f:25:2e:d9:f2:3d:80:
ed:15:a3:3e:b6:01:b7:c7:58:c6:55:c9:6f:38:08:
4e:37:dc:48:2d:d8:75:32:ac:33:b0:f4:20:fa:35:
6e:26:86:b0:36:63:ec:b7:16:ed:77:73:d1:84:68:
48:e0:b0:1d:0e:95:1d:de:bf:00:66:84:49:7d:ec:
0f:38:d4:ad:c3:69:a3:5e:63:c6:27:51:9b:28:53:
fe:bc:f0:68:83:23:07:2e:4e:7b:68:86:94:d1:07:
1d:16:31:0f:e9:df:23:e8:08:21:a9:ca:14:04:95:
66:d6:bd:a5:95:e5:87:d2:3d:f5:1f:d9:79:b1:f3:
e6:cd:78:79:20:28:db:a0:74:b2:37:ea:73:55:66:
29:ac:ba:42:3d:40:f7:86:6f:b0:80:4c:93:dc:27:
1c:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:2D:75:2A:EB:11:B2:1B:95:AB:99:32:51:B1:B3:CA:C1:AD:46:31
X509v3 Authority Key Identifier:
keyid:94:25:88:B9:1D:A9:CC:A8:1B:49:E6:03:A9:88:E2:B1:EA:BD:DC:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lCWIuR2pzKgbSeYDqYjiseq93Jg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/4bba7c-a81f-40e1-8814-65daad632957/1/0S11KusRshuVq5kyUbGzysGtRjE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/4bba7c-a81f-40e1-8814-65daad632957/1/lCWIuR2pzKgbSeYDqYjiseq93Jg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.42.112.0/21
Signature Algorithm: sha256WithRSAEncryption
6f:30:cb:c1:2a:30:e2:32:36:13:f7:40:ac:00:98:29:d2:bc:
39:c9:d1:17:64:dd:83:16:d1:04:d9:e3:a1:62:91:40:b4:89:
e2:ea:7f:b5:2f:82:cf:d5:e2:51:f0:99:7f:06:ab:be:1f:f9:
c5:65:42:41:22:43:f2:6c:fb:bd:60:02:da:73:4b:1f:10:94:
b7:bc:38:80:d1:1c:09:f4:be:35:a8:ef:f8:56:0a:25:d0:44:
90:df:b6:b8:90:b8:d4:01:7d:a2:66:c7:24:1b:db:1a:fb:ec:
17:90:07:fb:45:55:09:1b:28:e8:ab:8d:8f:8a:ac:5c:75:9c:
43:c6:b7:ba:88:b5:15:81:c1:48:bd:f0:da:e5:55:c0:1e:0d:
5f:20:93:a9:bd:ec:ff:44:f8:37:a9:48:46:b7:ad:93:af:ed:
e1:4f:33:dc:68:55:72:91:2b:1b:c1:8b:6c:76:ac:b7:01:dc:
ae:bd:4e:13:ae:4f:d9:b9:b8:b5:78:a1:d7:02:e2:bd:ac:98:
f1:3d:00:81:bc:97:a4:5e:42:b3:28:c8:a2:5f:43:0a:57:c3:
25:d6:4f:33:19:52:d0:e7:61:fb:7a:e5:e6:30:fe:f2:cf:ec:
0b:5b:80:67:8c:85:a4:34:fe:3f:6a:e0:a6:6a:bc:54:f2:24:
5e:2f:87:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 23:40:37 2025 by rpki-client