Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/86a426-56ee-46dd-9425-7f92c34eb07c/1/51okFBVZwVqUidBJ4xEGJ_40_oI.roa
File: 51okFBVZwVqUidBJ4xEGJ_40_oI.roa (raw, json)
Hash identifier: rZSLm8ezulwgTilqJFzxfEJY7OQeDjxdEMwXqw/kKHc=
Subject key identifier: E7:5A:24:14:15:59:C1:5A:94:89:D0:49:E3:11:06:27:FE:34:FE:82
Certificate issuer: /CN=9c2cb7f9ca0efd72be258a4a09358806374b4662
Certificate serial: 0238CB
Authority key identifier: 9C:2C:B7:F9:CA:0E:FD:72:BE:25:8A:4A:09:35:88:06:37:4B:46:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nCy3-coO_XK-JYpKCTWIBjdLRmI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/86a426-56ee-46dd-9425-7f92c34eb07c/1/51okFBVZwVqUidBJ4xEGJ_40_oI.roa
Signing time: Thu 16 Jun 2022 12:43:45 +0000
ROA not before: Thu 16 Jun 2022 12:43:45 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 14618
IP address blocks: 82.145.96.0/19 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 145611 (0x238cb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9c2cb7f9ca0efd72be258a4a09358806374b4662
Validity
Not Before: Jun 16 12:43:45 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e75a24141559c15a9489d049e3110627fe34fe82
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:ed:73:f3:54:41:1a:26:76:48:37:55:12:c0:
e4:ed:ed:05:2e:5b:87:1d:91:c9:cb:52:c7:56:fe:
58:26:00:34:fb:2c:89:51:16:ca:b4:69:dd:42:68:
cc:63:42:68:f1:5d:bf:90:94:c1:f6:ee:84:e9:2b:
04:14:99:06:b8:ab:2f:d9:1c:43:97:e8:3e:78:d9:
66:0a:4f:42:dc:06:18:12:a5:67:b3:55:b9:de:fb:
fc:bb:b8:53:5f:73:5b:1e:af:2a:de:b7:5d:9a:19:
42:56:d7:0e:92:e7:55:84:cc:fe:7b:2d:da:95:3f:
80:4d:a7:fc:7d:59:44:de:38:71:4c:71:e9:7a:be:
04:70:c2:37:a1:98:e8:17:a9:7a:02:9f:a7:63:1a:
09:bb:4a:a6:0e:b9:21:43:82:61:1d:87:31:a0:2d:
9e:e5:2c:a7:bf:65:d8:6e:cc:cd:c4:59:96:55:f0:
5a:8c:be:d3:ae:e3:bd:e8:e5:81:fc:8b:d7:d7:ec:
c3:af:f8:e3:82:8a:65:63:b5:7a:95:b0:48:c3:9b:
b9:18:4e:eb:e5:32:9c:1d:d3:0d:21:65:4f:e2:4b:
cc:97:8e:4f:46:ac:37:f8:c4:f1:19:60:2d:1c:40:
c2:6f:0b:7a:c9:c4:65:11:c4:97:7e:8c:c3:ba:17:
bd:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:5A:24:14:15:59:C1:5A:94:89:D0:49:E3:11:06:27:FE:34:FE:82
X509v3 Authority Key Identifier:
keyid:9C:2C:B7:F9:CA:0E:FD:72:BE:25:8A:4A:09:35:88:06:37:4B:46:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nCy3-coO_XK-JYpKCTWIBjdLRmI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/86a426-56ee-46dd-9425-7f92c34eb07c/1/51okFBVZwVqUidBJ4xEGJ_40_oI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/88/86a426-56ee-46dd-9425-7f92c34eb07c/1/nCy3-coO_XK-JYpKCTWIBjdLRmI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.145.96.0/19
Signature Algorithm: sha256WithRSAEncryption
2e:e0:08:6b:25:aa:f5:e6:0b:4e:7b:10:1d:1b:5b:83:f9:94:
40:e2:fe:0a:3f:c1:0c:ac:ef:c9:db:b7:2a:55:30:02:bc:42:
89:14:b0:48:0a:1f:dd:3d:97:98:35:6f:13:e8:30:d5:2c:ad:
a3:39:24:bf:8a:53:b5:a8:c5:c7:56:81:10:c4:43:de:33:fb:
0c:2f:20:67:9a:fa:28:09:55:f2:f0:b9:e4:92:35:49:fe:77:
92:25:8e:93:cf:b1:e6:36:6d:51:b9:6a:ac:4e:37:60:39:85:
3f:2e:5a:8c:07:05:29:06:b0:dd:11:ed:ef:96:4d:bc:3e:ce:
e8:7a:43:48:1e:b8:2f:d1:97:55:22:c1:18:ff:2a:dc:f6:ad:
f2:92:d4:83:89:94:15:bb:8a:ec:f4:01:b6:e1:cc:be:d3:7f:
7e:f7:98:4a:07:9d:52:8c:ce:50:f9:db:07:42:86:9f:04:81:
a9:de:b5:50:8d:5b:84:c3:6f:10:7d:cc:7e:f8:95:bd:d4:c8:
05:e2:54:3c:71:b3:ed:80:ef:fd:5a:c4:52:fc:dd:46:3f:9c:
7d:7b:f4:94:98:33:85:af:2d:0c:c2:d4:b3:14:e0:fe:f7:54:
94:2d:ca:18:60:15:c2:d0:1f:e5:dd:15:c8:8e:70:f7:88:85:
b9:01:02:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 22:46:52 2025 by rpki-client