Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/699e85-1027-4c7e-8ae7-df4a2e760ccb/1/2ADwnypRxI5uJZd9jakGUXlzRn4.roa
File: 2ADwnypRxI5uJZd9jakGUXlzRn4.roa (raw, json)
Hash identifier: QK6E0pCK6LDl9qkoiXaigX8P/tDGldYp9couHrjmo6s=
Subject key identifier: D8:00:F0:9F:2A:51:C4:8E:6E:25:97:7D:8D:A9:06:51:79:73:46:7E
Certificate issuer: /CN=e4a2b8e90d157ea022f8e700024a93dc356a514d
Certificate serial: 018AAF94F80E26175C038D4C50E615181066
Authority key identifier: E4:A2:B8:E9:0D:15:7E:A0:22:F8:E7:00:02:4A:93:DC:35:6A:51:4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5KK46Q0VfqAi-OcAAkqT3DVqUU0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/699e85-1027-4c7e-8ae7-df4a2e760ccb/1/2ADwnypRxI5uJZd9jakGUXlzRn4.roa
Signing time: Tue 19 Sep 2023 22:34:50 +0000
ROA not before: Tue 19 Sep 2023 22:34:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 61135
IP address blocks: 188.132.206.0/24 maxlen: 24
188.132.207.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:af:94:f8:0e:26:17:5c:03:8d:4c:50:e6:15:18:10:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e4a2b8e90d157ea022f8e700024a93dc356a514d
Validity
Not Before: Sep 19 22:34:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d800f09f2a51c48e6e25977d8da906517973467e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:97:a8:1d:70:6c:12:99:1e:31:50:0a:6c:bd:
84:65:89:ba:0d:e7:d9:f8:e2:8e:8c:76:5b:87:98:
1d:d4:af:2b:a0:12:9f:3e:7c:fe:68:97:a2:92:64:
46:33:eb:4b:f9:11:12:dc:b2:6b:91:16:05:0b:9c:
4a:aa:0f:1e:78:c5:82:2b:ad:91:20:9c:a9:93:5c:
63:c8:f9:09:a8:a4:61:a7:3b:4e:58:85:4b:dc:7a:
87:c7:af:89:ea:e5:a5:58:9c:8d:7b:9f:f4:e3:0b:
c8:dc:89:c9:57:c0:cc:6f:51:02:98:b3:b5:75:90:
64:9c:78:02:c4:20:9b:d8:4b:0c:00:41:77:d6:5c:
8a:ac:07:93:5b:d3:4e:a5:2c:ef:e4:d6:d7:5d:6f:
d8:e2:4e:6f:43:19:54:b9:37:ff:59:fa:fe:70:15:
a3:2a:ee:85:29:57:64:4b:42:09:ac:78:f3:dc:e4:
e1:bc:fb:e3:3c:e9:88:69:83:49:c3:0f:53:93:14:
f8:2c:20:fd:20:77:07:6f:2f:19:f7:e8:dd:04:9a:
01:ec:fd:f5:14:04:d8:4e:3c:10:b2:92:bc:77:f5:
07:43:18:57:a3:f9:31:78:dc:29:26:d7:8b:bd:74:
51:33:96:f6:a5:57:8f:5c:92:93:26:37:d4:34:8e:
de:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:00:F0:9F:2A:51:C4:8E:6E:25:97:7D:8D:A9:06:51:79:73:46:7E
X509v3 Authority Key Identifier:
keyid:E4:A2:B8:E9:0D:15:7E:A0:22:F8:E7:00:02:4A:93:DC:35:6A:51:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5KK46Q0VfqAi-OcAAkqT3DVqUU0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/699e85-1027-4c7e-8ae7-df4a2e760ccb/1/2ADwnypRxI5uJZd9jakGUXlzRn4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/699e85-1027-4c7e-8ae7-df4a2e760ccb/1/5KK46Q0VfqAi-OcAAkqT3DVqUU0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.132.206.0/23
Signature Algorithm: sha256WithRSAEncryption
8d:a8:3c:ca:eb:b7:ea:74:5e:b2:f9:6e:1b:fd:22:44:25:c5:
20:3a:e4:f2:7f:3f:b9:e9:21:c3:6d:d1:5d:b4:47:9b:ce:e2:
f9:44:f9:9c:65:41:6e:23:c6:62:de:32:29:c4:4d:df:fe:30:
ac:62:c3:4d:97:34:11:f0:43:a3:b1:46:90:c9:10:d3:07:22:
07:36:6a:45:a0:45:fc:e3:4f:90:0f:00:83:44:57:02:8f:b3:
39:8f:55:39:e0:f0:5a:03:f2:d9:d6:9a:89:52:29:bb:5e:79:
93:72:ed:55:38:c4:2f:19:0a:32:91:cd:cd:d7:3b:09:00:13:
26:78:e7:dc:23:10:fd:ba:6f:a2:26:99:7e:9b:e5:ee:9a:e4:
91:fb:27:ba:f2:82:e2:0e:eb:cb:ef:07:e5:27:ec:27:5c:d2:
74:c1:b5:a9:e2:0f:e0:90:52:0c:cd:aa:44:34:2e:c8:d1:b9:
73:0c:06:12:ee:7c:23:bf:f7:ec:c0:e9:00:0b:93:95:7c:f6:
50:ba:13:18:96:6d:a0:46:d1:a6:42:9e:25:be:e1:29:fc:f4:
fe:46:e7:34:80:5c:6b:d0:59:d3:d3:2a:aa:3f:5e:02:98:e2:
b4:a8:4c:58:c7:5e:bd:92:66:69:4f:08:f8:24:54:bf:3d:f0:
6c:8f:78:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:22:04 2025 by rpki-client