Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/86a426-56ee-46dd-9425-7f92c34eb07c/1/aA4Wqur3PDT8WN4C9yHTqpjyKsA.roa
File: aA4Wqur3PDT8WN4C9yHTqpjyKsA.roa (raw, json)
Hash identifier: KWXUSHDEa+KSOWSMN6d5NCZEhixFrYBCw3+vDwQCO7c=
Subject key identifier: 68:0E:16:AA:EA:F7:3C:34:FC:58:DE:02:F7:21:D3:AA:98:F2:2A:C0
Certificate issuer: /CN=9c2cb7f9ca0efd72be258a4a09358806374b4662
Certificate serial: 0189E1E489F64F0AE52434775D59BDC1E964
Authority key identifier: 9C:2C:B7:F9:CA:0E:FD:72:BE:25:8A:4A:09:35:88:06:37:4B:46:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nCy3-coO_XK-JYpKCTWIBjdLRmI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/86a426-56ee-46dd-9425-7f92c34eb07c/1/aA4Wqur3PDT8WN4C9yHTqpjyKsA.roa
Signing time: Thu 10 Aug 2023 23:59:58 +0000
ROA not before: Thu 10 Aug 2023 23:59:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 12533
IP address blocks: 82.145.96.0/20 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:e1:e4:89:f6:4f:0a:e5:24:34:77:5d:59:bd:c1:e9:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9c2cb7f9ca0efd72be258a4a09358806374b4662
Validity
Not Before: Aug 10 23:59:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=680e16aaeaf73c34fc58de02f721d3aa98f22ac0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:ee:fc:e9:34:64:e9:db:f4:8a:90:da:1b:c5:
df:71:ab:a9:ed:ee:80:e8:d3:c6:88:9c:ff:0f:07:
c3:78:45:a1:31:b4:4f:5f:39:16:c4:e4:76:e7:9f:
87:96:d1:4b:eb:ac:cf:0a:88:01:70:39:28:d7:81:
b6:5a:38:04:fc:7d:23:75:69:47:7d:db:9e:2d:1f:
f2:fa:52:c5:5e:f0:56:a2:ad:1e:3b:74:63:3a:9e:
f1:3b:61:51:a9:c5:1f:27:96:5e:9c:61:0e:44:93:
9f:0b:36:69:a5:30:4b:45:df:ed:21:86:8f:a2:88:
92:7e:b4:5f:9f:1f:88:d9:33:bb:8e:55:ed:a3:81:
95:3c:6e:66:ef:a3:e5:14:95:1c:e1:e9:5b:58:b9:
4e:58:78:5a:c7:c3:74:a2:d0:a1:1a:1c:da:3d:c7:
37:3c:e0:7e:92:fb:e7:f9:1a:84:ce:2a:c8:4a:db:
ec:c2:22:95:68:de:4b:75:2e:9f:84:48:3e:89:9a:
2a:5c:fa:06:f5:d4:4c:df:ea:66:cc:db:2c:59:4b:
70:df:71:d2:cb:a7:73:0a:a6:36:c2:4c:e1:34:b2:
bc:9d:70:9f:2f:cf:52:fd:9b:fd:0d:fc:99:51:3a:
b7:bd:43:c7:98:29:f5:d5:de:68:9f:55:22:4c:6f:
e6:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:0E:16:AA:EA:F7:3C:34:FC:58:DE:02:F7:21:D3:AA:98:F2:2A:C0
X509v3 Authority Key Identifier:
keyid:9C:2C:B7:F9:CA:0E:FD:72:BE:25:8A:4A:09:35:88:06:37:4B:46:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nCy3-coO_XK-JYpKCTWIBjdLRmI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/86a426-56ee-46dd-9425-7f92c34eb07c/1/aA4Wqur3PDT8WN4C9yHTqpjyKsA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/88/86a426-56ee-46dd-9425-7f92c34eb07c/1/nCy3-coO_XK-JYpKCTWIBjdLRmI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.145.96.0/20
Signature Algorithm: sha256WithRSAEncryption
90:ee:6d:34:bf:c8:44:af:ae:54:6f:da:c9:f5:53:0b:e0:e1:
bc:db:0b:ac:44:d5:28:fe:24:20:7d:11:3f:cb:01:da:01:15:
eb:2b:08:cf:9c:f3:24:0c:11:29:62:0f:f7:19:82:b0:f2:0d:
7f:5c:80:99:af:e6:c5:2b:a1:b6:5a:31:da:4e:45:45:61:fc:
11:8c:2f:ed:24:fd:69:cd:7a:3f:23:03:58:30:92:72:7b:13:
b4:bf:29:3f:12:be:af:08:d4:c8:17:40:2a:f1:13:1e:3e:e2:
ec:0a:05:4a:e8:dc:b6:2a:26:8b:46:98:9d:11:78:6a:c5:1a:
1f:03:56:9f:a9:79:2c:c1:44:6c:a3:f5:f9:fd:c4:f0:0f:52:
e3:b5:36:e0:a1:b6:68:52:2d:86:00:f2:53:38:59:f2:ab:32:
c7:c1:14:0c:6a:02:c2:9a:90:99:2c:b7:d3:3c:f9:79:45:0a:
88:69:41:85:d0:be:59:65:4a:9d:be:66:3f:e8:ee:fe:84:1b:
41:7f:b6:49:f2:9a:ea:00:80:04:db:3c:67:99:06:66:d5:86:
d2:b4:6d:ed:10:74:d6:4f:2c:69:87:6f:5c:aa:fe:82:8a:3d:
81:25:89:9e:c2:e1:a1:2e:81:d5:c9:7b:5c:90:4d:b1:86:ef:
e3:24:4d:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:49:17 2025 by rpki-client