Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/09f918-aced-42a8-8a3a-33e2705b4c3e/1/jBhjoHKlahPFf8946FtWap3m8Lg.roa
File: jBhjoHKlahPFf8946FtWap3m8Lg.roa (raw, json)
Hash identifier: RcC6kkHjvbF/5rrexMjV8w45Or2fyYZwBw+CYNCmI1k=
Subject key identifier: 8C:18:63:A0:72:A5:6A:13:C5:7F:CF:78:E8:5B:56:6A:9D:E6:F0:B8
Certificate issuer: /CN=ce2c505f77dca8117ef0625710744cb359736b19
Certificate serial: 01856D4AC7CC3F4A179042E536C3B79531AD
Authority key identifier: CE:2C:50:5F:77:DC:A8:11:7E:F0:62:57:10:74:4C:B3:59:73:6B:19
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zixQX3fcqBF-8GJXEHRMs1lzaxk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/09f918-aced-42a8-8a3a-33e2705b4c3e/1/jBhjoHKlahPFf8946FtWap3m8Lg.roa
Signing time: Sun 01 Jan 2023 12:24:55 +0000
ROA not before: Sun 01 Jan 2023 12:24:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 197290
IP address blocks: 46.31.128.0/23 maxlen: 24
46.31.132.0/23 maxlen: 24
46.31.130.0/23 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:4a:c7:cc:3f:4a:17:90:42:e5:36:c3:b7:95:31:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ce2c505f77dca8117ef0625710744cb359736b19
Validity
Not Before: Jan 1 12:24:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8c1863a072a56a13c57fcf78e85b566a9de6f0b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:ef:39:03:56:09:a7:67:e0:58:b1:3b:1d:dd:
57:32:66:5b:2c:2c:f4:66:12:00:b2:13:36:65:70:
51:12:28:86:e5:7d:44:1c:8c:eb:b9:f9:15:20:60:
2a:ec:00:90:3d:39:2f:f7:95:5a:46:25:01:d9:30:
57:8d:f6:f2:52:83:d1:ea:62:59:97:2a:41:62:c0:
f2:2d:30:37:c6:b4:76:98:29:37:b7:ae:45:57:72:
4c:5a:ea:cc:43:09:08:34:59:71:6a:5c:49:47:4f:
80:11:60:b7:8d:57:7d:ba:15:03:1c:b3:a5:b0:80:
14:48:ec:f3:0a:02:33:ba:1f:88:d3:4e:ef:81:09:
1e:01:c3:bb:7b:f9:f6:cc:cf:f2:f8:09:15:c3:c6:
99:e6:85:8d:e1:5d:e8:b4:6c:e6:06:06:30:bb:08:
e4:68:ea:96:cd:d9:0a:c7:25:df:9f:b5:8b:eb:8c:
53:51:15:a2:48:5a:67:d7:c7:52:ec:eb:15:9e:be:
71:59:10:d8:bc:bd:b0:8d:01:80:ab:3c:1a:63:e8:
d3:7a:dd:30:d6:b7:91:85:9d:2a:8a:30:04:e1:a3:
01:af:26:27:16:c9:10:55:53:41:3a:9a:5b:da:83:
34:6f:94:db:04:26:04:bc:69:84:60:da:2b:f6:7a:
3e:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:18:63:A0:72:A5:6A:13:C5:7F:CF:78:E8:5B:56:6A:9D:E6:F0:B8
X509v3 Authority Key Identifier:
keyid:CE:2C:50:5F:77:DC:A8:11:7E:F0:62:57:10:74:4C:B3:59:73:6B:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zixQX3fcqBF-8GJXEHRMs1lzaxk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/09f918-aced-42a8-8a3a-33e2705b4c3e/1/jBhjoHKlahPFf8946FtWap3m8Lg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/09f918-aced-42a8-8a3a-33e2705b4c3e/1/zixQX3fcqBF-8GJXEHRMs1lzaxk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.31.128.0-46.31.133.255
Signature Algorithm: sha256WithRSAEncryption
56:18:e2:7d:f6:24:e8:b8:e5:2e:d3:1e:b2:5d:87:24:ea:ce:
72:34:18:cc:6f:64:e5:92:1e:14:60:b5:a4:37:c9:14:bc:94:
7d:88:8c:4b:2e:33:21:5a:e7:74:22:4d:66:cb:64:16:d6:25:
eb:1a:92:40:f5:81:e7:c3:e6:6c:d1:a4:28:8c:26:28:fb:e6:
58:e2:f1:71:a6:19:10:e9:11:7e:0a:4b:ef:7b:6f:51:ec:08:
af:21:91:4d:2e:be:4b:65:06:ce:82:dc:19:8a:67:ba:fb:30:
27:ee:8a:e1:20:93:07:8f:6a:60:b9:56:c2:8b:b4:78:55:03:
5a:66:28:54:5e:ae:68:12:9a:73:4e:8e:15:17:97:2f:2a:f3:
6d:87:94:9a:c7:7c:aa:a3:91:11:38:dc:7d:af:e3:32:9c:8a:
b9:a6:50:db:14:93:68:21:04:df:b6:02:69:67:00:2f:f8:23:
49:11:62:35:81:d3:0c:18:59:2a:66:1f:98:f2:6e:df:29:49:
0e:6d:3c:29:1e:40:d9:66:de:c2:5e:41:97:92:08:31:be:18:
12:3e:fb:3c:1b:b5:df:3e:67:2c:cb:a3:9d:e0:9d:1b:46:d6:
33:39:0d:57:6e:82:49:bd:40:c6:a4:bc:c0:50:80:20:e7:4e:
29:b0:ce:36
-----BEGIN CERTIFICATE-----
MIIFBTCCA+2gAwIBAgISAYVtSsfMP0oXkELlNsO3lTGtMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNlMmM1MDVmNzdkY2E4MTE3ZWYwNjI1NzEwNzQ0Y2IzNTk3
MzZiMTkwHhcNMjMwMTAxMTIyNDU1WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4YzE4NjNhMDcyYTU2YTEzYzU3ZmNmNzhlODViNTY2YTlkZTZmMGI4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgu85A1YJp2fgWLE7Hd1XMmZbLCz0
ZhIAshM2ZXBREiiG5X1EHIzrufkVIGAq7ACQPTkv95VaRiUB2TBXjfbyUoPR6mJZ
lypBYsDyLTA3xrR2mCk3t65FV3JMWurMQwkINFlxalxJR0+AEWC3jVd9uhUDHLOl
sIAUSOzzCgIzuh+I007vgQkeAcO7e/n2zM/y+AkVw8aZ5oWN4V3otGzmBgYwuwjk
aOqWzdkKxyXfn7WL64xTURWiSFpn18dS7OsVnr5xWRDYvL2wjQGAqzwaY+jTet0w
1reRhZ0qijAE4aMBryYnFskQVVNBOppb2oM0b5TbBCYEvGmEYNor9no+MwIDAQAB
o4ICETCCAg0wHQYDVR0OBBYEFIwYY6BypWoTxX/PeOhbVmqd5vC4MB8GA1UdIwQY
MBaAFM4sUF933KgRfvBiVxB0TLNZc2sZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveml4UVgzZmNxQkYtOEdKWEVIUk1zMWx6YXhrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZS8wOWY5MTgtYWNlZC00MmE4LThhM2Et
MzNlMjcwNWI0YzNlLzEvakJoam9IS2xhaFBGZjg5NDZGdFdhcDNtOExnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83ZS8wOWY5MTgtYWNlZC00MmE4LThhM2EtMzNlMjcwNWI0YzNl
LzEveml4UVgzZmNxQkYtOEdKWEVIUk1zMWx6YXhrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBAcuH4AD
BAEuH4QwDQYJKoZIhvcNAQELBQADggEBAFYY4n32JOi45S7THrJdhyTqznI0GMxv
ZOWSHhRgtaQ3yRS8lH2IjEsuMyFa53QiTWbLZBbWJesakkD1gefD5mzRpCiMJij7
5lji8XGmGRDpEX4KS+97b1HsCK8hkU0uvktlBs6C3BmKZ7r7MCfuiuEgkwePamC5
VsKLtHhVA1pmKFRermgSmnNOjhUXly8q822HlJrHfKqjkRE43H2v4zKcirmmUNsU
k2ghBN+2AmlnAC/4I0kRYjWB0wwYWSpmH5jybt8pSQ5tPCkeQNlm3sJeQZeSCDG+
GBI++zwbtd8+ZyzLo53gnRtG1jM5DVdugkm9QMakvMBQgCDnTimwzjY=
-----END CERTIFICATE-----
Generated at Sun Apr 13 03:20:40 2025 by rpki-client