Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/47accb-6f3c-4c6c-9fd0-585eb84558f9/1/T5-LA7G-vgFbD5vSSDtnop5qRT4.roa
File: T5-LA7G-vgFbD5vSSDtnop5qRT4.roa (raw, json)
Hash identifier: l9vkjYTmyczmSyykNJHt/Bj5dBxNSO6t/gRv0OcLG2k=
Subject key identifier: 4F:9F:8B:03:B1:BE:BE:01:5B:0F:9B:D2:48:3B:67:A2:9E:6A:45:3E
Certificate issuer: /CN=e8206aa3252e3ea8d684eaec7a2993513b5d2307
Certificate serial: 02792D25
Authority key identifier: E8:20:6A:A3:25:2E:3E:A8:D6:84:EA:EC:7A:29:93:51:3B:5D:23:07
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6CBqoyUuPqjWhOrseimTUTtdIwc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/47accb-6f3c-4c6c-9fd0-585eb84558f9/1/T5-LA7G-vgFbD5vSSDtnop5qRT4.roa
Signing time: Sat 01 Jan 2022 10:55:43 +0000
ROA not before: Sat 01 Jan 2022 10:55:43 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 15738
IP address blocks: 89.21.84.0/22 maxlen: 22
89.21.88.0/22 maxlen: 22
89.21.93.0/24 maxlen: 24
89.21.94.0/24 maxlen: 24
80.84.176.0/20 maxlen: 20
80.254.0.0/20 maxlen: 20
2a06:ff40::/29 maxlen: 29
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 41495845 (0x2792d25)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e8206aa3252e3ea8d684eaec7a2993513b5d2307
Validity
Not Before: Jan 1 10:55:43 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=4f9f8b03b1bebe015b0f9bd2483b67a29e6a453e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:25:cc:07:37:fb:43:11:bc:d6:66:23:2c:c6:
4c:81:c8:12:87:6e:4c:bd:95:f9:4d:3c:9e:46:6e:
3b:e9:2c:1d:c3:dc:59:92:fc:97:85:14:e6:3e:a3:
b6:4c:79:11:60:8f:1e:ad:ab:b0:46:bf:32:bb:59:
24:06:2f:93:6c:9e:46:7c:39:b7:99:2f:7e:3e:09:
83:ac:0f:a7:ba:0a:5c:9a:87:2d:67:c3:b8:28:a1:
a6:f0:1a:36:cb:78:62:bf:59:d4:75:75:a8:01:0c:
6d:4d:0a:d3:31:2f:d2:db:e8:2f:3e:60:cc:21:ed:
63:d1:1f:28:eb:50:a5:7f:6d:38:34:e7:c4:d5:e9:
dc:bd:7f:75:07:e3:3d:6e:88:36:b2:c8:b7:22:70:
6e:6e:e5:7c:9e:56:82:e9:b7:9b:2f:db:a2:0e:69:
eb:d0:61:e2:ff:0b:c2:e4:85:e3:cb:49:6f:6a:2c:
54:a1:26:31:e0:6f:2d:74:6c:ae:f2:3d:5f:59:86:
78:15:46:2e:db:96:d9:c5:04:78:f7:79:df:83:29:
7f:2e:67:70:94:ac:0d:97:b5:de:16:71:4f:6b:a2:
df:d4:65:d1:35:94:16:87:70:1a:8b:68:e8:17:05:
ff:cc:6e:c5:b0:fe:70:21:ce:26:87:cd:47:93:0a:
17:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:9F:8B:03:B1:BE:BE:01:5B:0F:9B:D2:48:3B:67:A2:9E:6A:45:3E
X509v3 Authority Key Identifier:
keyid:E8:20:6A:A3:25:2E:3E:A8:D6:84:EA:EC:7A:29:93:51:3B:5D:23:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6CBqoyUuPqjWhOrseimTUTtdIwc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/47accb-6f3c-4c6c-9fd0-585eb84558f9/1/T5-LA7G-vgFbD5vSSDtnop5qRT4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/47accb-6f3c-4c6c-9fd0-585eb84558f9/1/6CBqoyUuPqjWhOrseimTUTtdIwc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.84.176.0/20
80.254.0.0/20
89.21.84.0-89.21.91.255
89.21.93.0-89.21.94.255
IPv6:
2a06:ff40::/29
Signature Algorithm: sha256WithRSAEncryption
a2:ed:cb:03:0a:f9:11:fb:cc:04:9d:c1:87:4a:03:24:67:de:
76:de:94:b9:86:d1:cf:74:cd:38:6c:6c:ac:bd:0e:2f:4f:d0:
8f:4b:8f:a5:26:c3:83:e9:d3:40:31:47:7c:b4:c3:b5:86:53:
eb:45:c3:a1:b6:92:41:54:07:2d:bb:8e:eb:fc:5d:74:bd:d0:
30:06:bc:3a:a7:0e:d0:92:32:38:22:6d:68:c7:c4:9a:b3:68:
3e:5d:bb:98:a4:30:9a:fb:ed:25:2b:75:9c:22:5b:7d:91:91:
bc:84:89:c7:f1:92:86:2e:3f:bf:ed:66:dd:4b:7c:fe:da:79:
00:a6:b2:f6:e0:7d:2b:5e:c9:58:fb:37:60:c6:0b:bf:8c:f2:
a7:d2:cf:38:f5:ea:06:51:39:35:da:74:a9:c3:3a:6a:fc:2f:
b6:54:8f:41:a2:ce:c1:45:a3:1f:9c:1c:de:65:ea:15:a8:37:
fc:e6:f5:e5:82:97:29:f7:c7:bc:d7:3f:48:f2:a6:9c:39:06:
69:96:f0:95:aa:1b:78:be:c4:8b:0e:07:5a:79:37:9e:97:4b:
64:40:4c:7d:d1:92:59:2d:09:b4:8f:88:d0:ca:db:85:1d:6a:
53:74:61:1a:a2:f5:67:d1:c3:c2:aa:df:c7:b2:b2:fc:7b:6a:
36:ca:2b:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:34:23 2025 by rpki-client