Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/fb791b-8013-458a-9a1e-25dbf43804c5/1/VyhrDVR9Mg0l1Sz6pfUFF04fyHc.roa
File: VyhrDVR9Mg0l1Sz6pfUFF04fyHc.roa (raw, json)
Hash identifier: LJreRFoW5ALThA3JrUkFpTZ1084ijqen8wivpdNCFU8=
Subject key identifier: 57:28:6B:0D:54:7D:32:0D:25:D5:2C:FA:A5:F5:05:17:4E:1F:C8:77
Certificate issuer: /CN=9c542f5df3c1acb857fd50eeb016eed07385ff8c
Certificate serial: 018E66A751BA85ECAE78ABC8594F060662AA
Authority key identifier: 9C:54:2F:5D:F3:C1:AC:B8:57:FD:50:EE:B0:16:EE:D0:73:85:FF:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nFQvXfPBrLhX_VDusBbu0HOF_4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/fb791b-8013-458a-9a1e-25dbf43804c5/1/VyhrDVR9Mg0l1Sz6pfUFF04fyHc.roa
Signing time: Fri 22 Mar 2024 14:53:45 +0000
ROA not before: Fri 22 Mar 2024 14:53:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 20668
IP address blocks: 62.3.28.0/24 maxlen: 24
93.190.122.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:66:a7:51:ba:85:ec:ae:78:ab:c8:59:4f:06:06:62:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9c542f5df3c1acb857fd50eeb016eed07385ff8c
Validity
Not Before: Mar 22 14:53:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=57286b0d547d320d25d52cfaa5f505174e1fc877
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:08:98:26:f5:ce:12:94:07:e0:f0:d2:b0:02:
48:94:e7:10:6a:6c:7b:1c:b5:37:4f:a7:b9:2e:2e:
14:12:69:95:10:bb:1a:e9:02:58:7c:9c:6e:d6:f0:
8f:55:38:88:2d:8e:8f:bd:52:27:fb:1a:a5:05:a7:
f1:df:0e:74:58:ec:c2:6d:84:00:1a:d7:d9:15:f7:
7b:de:b7:2a:0f:fe:3c:4f:66:66:76:7b:03:bd:e9:
4c:a2:8a:cd:3a:21:a4:ee:09:24:80:24:60:a5:ef:
ef:cb:cc:0d:09:49:59:14:17:8a:57:6c:33:7e:23:
5a:de:47:9c:94:b9:94:b4:de:cd:98:1d:0b:4a:c3:
e9:a9:03:89:b5:7f:a9:fe:c9:11:c8:02:2b:1e:4f:
64:56:2c:6e:e0:6c:fc:a2:98:0a:c9:a4:b0:47:c3:
c5:4f:71:74:1d:9d:45:8e:63:60:74:f4:a9:f0:2f:
5b:62:55:db:56:2c:b9:14:e6:0d:1b:00:fd:42:c5:
a2:11:42:f6:27:8c:4d:aa:ea:de:7f:9f:52:d4:4e:
11:b9:7c:15:4e:71:fe:0e:2a:40:11:60:78:c4:77:
56:95:2f:75:cb:5b:19:74:fb:1c:4b:75:67:c1:ed:
c0:93:c6:eb:e7:76:1d:df:3a:7e:7c:8f:1a:c7:0e:
ce:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:28:6B:0D:54:7D:32:0D:25:D5:2C:FA:A5:F5:05:17:4E:1F:C8:77
X509v3 Authority Key Identifier:
keyid:9C:54:2F:5D:F3:C1:AC:B8:57:FD:50:EE:B0:16:EE:D0:73:85:FF:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nFQvXfPBrLhX_VDusBbu0HOF_4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/fb791b-8013-458a-9a1e-25dbf43804c5/1/VyhrDVR9Mg0l1Sz6pfUFF04fyHc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/fb791b-8013-458a-9a1e-25dbf43804c5/1/nFQvXfPBrLhX_VDusBbu0HOF_4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.3.28.0/24
93.190.122.0/24
Signature Algorithm: sha256WithRSAEncryption
a3:17:2b:c1:d9:cb:1f:49:57:dd:d2:c1:4d:89:67:f5:ca:8a:
d9:fc:bd:0e:31:80:f9:60:46:e3:4c:76:6e:cf:cf:cf:29:5c:
8b:d3:81:be:b9:e3:55:fb:5f:bf:67:21:89:22:81:4e:5a:87:
dc:fc:f6:5a:13:49:98:82:d1:b0:69:29:8c:f6:0d:2c:b4:fa:
81:60:43:01:e3:e1:7b:e8:01:68:ad:ca:e5:a7:89:f9:9d:ff:
b5:86:63:3b:56:36:cb:ec:ef:6d:03:ec:71:56:2a:0e:be:8d:
b5:43:99:58:93:0f:53:2d:23:d4:02:42:82:22:03:40:62:e5:
78:ec:1f:2d:fc:50:c6:b3:c7:46:2b:92:ec:56:31:3d:ae:2b:
54:df:29:6a:32:99:d3:37:91:a6:f2:21:ef:da:83:0c:ce:84:
e1:2e:59:c8:c0:2b:ab:99:b6:5d:ae:c8:a7:b4:69:40:49:c1:
0f:56:b0:76:6c:a3:f5:cd:99:28:f6:48:5c:e2:a0:30:3e:49:
2f:09:72:5c:37:1c:fe:32:9b:93:22:8c:e6:86:73:0e:19:c0:
da:78:86:da:2f:b5:0d:f1:9d:b8:45:58:43:e9:92:82:23:ad:
bb:5e:8c:cd:97:73:aa:bb:9a:05:f2:f4:92:67:b1:3a:50:19:
95:78:90:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 02:16:32 2025 by rpki-client