Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/86a426-56ee-46dd-9425-7f92c34eb07c/1/8piy6XMgIzk0o02j80WRfHFOnVk.roa
File: 8piy6XMgIzk0o02j80WRfHFOnVk.roa (raw, json)
Hash identifier: npbAw/FAkvmlHpa9v5/rh2k4692P8IHOOaVolUHG6Ts=
Subject key identifier: F2:98:B2:E9:73:20:23:39:34:A3:4D:A3:F3:45:91:7C:71:4E:9D:59
Certificate issuer: /CN=9c2cb7f9ca0efd72be258a4a09358806374b4662
Certificate serial: 018CC2DAFA9C65EB202797C1E617E6AE7954
Authority key identifier: 9C:2C:B7:F9:CA:0E:FD:72:BE:25:8A:4A:09:35:88:06:37:4B:46:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nCy3-coO_XK-JYpKCTWIBjdLRmI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/86a426-56ee-46dd-9425-7f92c34eb07c/1/8piy6XMgIzk0o02j80WRfHFOnVk.roa
Signing time: Mon 01 Jan 2024 02:29:40 +0000
ROA not before: Mon 01 Jan 2024 02:29:40 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 12533
IP address blocks: 82.145.96.0/20 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:da:fa:9c:65:eb:20:27:97:c1:e6:17:e6:ae:79:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9c2cb7f9ca0efd72be258a4a09358806374b4662
Validity
Not Before: Jan 1 02:29:40 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f298b2e97320233934a34da3f345917c714e9d59
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:0a:47:4e:a1:e7:bd:32:62:b2:db:95:aa:46:
b4:e2:0d:a4:1d:5c:25:0e:a0:50:1a:ea:7e:10:8a:
04:19:99:de:ab:29:2e:07:86:ff:78:87:1e:b8:1a:
75:5a:6b:91:b3:bb:ce:be:57:4b:65:4c:07:20:f0:
d9:8a:a6:5a:35:f7:1f:6b:54:cf:86:4e:28:d7:94:
ba:e1:e8:62:65:b7:73:95:0b:2b:7c:62:d3:da:2b:
40:db:3b:97:d8:00:50:5f:16:4d:4a:1b:60:15:f4:
00:f3:00:08:6e:c2:b4:a1:58:ab:5c:f7:8e:45:22:
06:a4:8c:ac:76:16:40:16:01:1a:04:19:f4:46:ff:
42:ec:0c:cc:b5:4e:73:08:c7:d3:98:c4:68:55:ff:
e0:c5:5f:33:61:18:06:67:dc:03:72:85:88:a3:db:
b3:ca:c6:2b:a0:29:a5:44:2d:e4:d2:a7:67:43:4c:
96:75:95:9b:44:30:25:18:50:7d:24:88:1f:11:e0:
ce:66:b6:f1:0e:0b:1d:be:c5:be:f8:8f:2c:ce:1c:
c4:d6:29:25:5c:94:2e:f5:50:9b:dc:8c:7e:5a:5f:
91:fe:01:87:48:60:e7:91:96:48:74:fb:8c:cd:b9:
52:bd:4c:45:3d:70:bc:9e:56:fb:cc:fe:9c:c3:db:
e6:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:98:B2:E9:73:20:23:39:34:A3:4D:A3:F3:45:91:7C:71:4E:9D:59
X509v3 Authority Key Identifier:
keyid:9C:2C:B7:F9:CA:0E:FD:72:BE:25:8A:4A:09:35:88:06:37:4B:46:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nCy3-coO_XK-JYpKCTWIBjdLRmI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/86a426-56ee-46dd-9425-7f92c34eb07c/1/8piy6XMgIzk0o02j80WRfHFOnVk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/88/86a426-56ee-46dd-9425-7f92c34eb07c/1/nCy3-coO_XK-JYpKCTWIBjdLRmI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.145.96.0/20
Signature Algorithm: sha256WithRSAEncryption
b8:9f:d5:5d:d2:de:c7:66:64:cf:6a:9b:bb:15:c7:a3:27:9c:
0b:b8:a4:08:7e:e9:4e:d9:ac:0d:22:ba:0b:7b:01:fd:89:a5:
98:b9:50:5a:a8:25:59:86:bf:84:82:a2:e0:66:9a:c5:96:64:
6c:84:47:0f:dc:62:c8:4c:a1:59:c8:b4:c2:34:b7:f5:f6:30:
8f:37:e2:a8:c2:a8:38:87:53:6f:ec:4f:d5:6b:ec:f3:00:25:
c3:17:55:f9:be:4f:3c:cc:82:3c:0c:8e:62:59:52:9d:3e:65:
1e:3e:99:38:76:32:4f:3f:d4:8d:b0:73:dd:66:83:0d:3e:f1:
36:bb:61:28:4e:f0:4b:22:f6:09:48:42:80:72:88:1f:42:f5:
81:f4:22:32:24:3e:2b:1a:c9:4c:22:5b:42:fe:59:f2:c9:ea:
15:63:4b:e0:3f:ee:b0:28:f1:77:74:8a:90:bf:76:b5:82:1d:
2d:c3:80:49:39:71:0d:54:e8:6a:3f:e8:cf:54:70:85:36:01:
0d:17:89:9e:95:f5:1a:d2:00:1b:2b:31:a2:de:c8:6b:37:ef:
0b:db:a1:8e:d8:4d:f2:5a:63:fc:ae:e9:4c:c2:a8:06:ab:6b:
7f:c9:a0:bd:7e:e7:d0:d6:11:09:da:4a:4f:60:4e:91:46:d2:
c6:2a:a0:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:38:58 2025 by rpki-client