Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/ee42bb-1e49-4c21-a4d6-ec287e1d37e5/1/IJjuMuD9LExPcQ2GEfyG8I4DQ5E.roa
File: IJjuMuD9LExPcQ2GEfyG8I4DQ5E.roa (raw, json)
Hash identifier: QmXKZimEA4Ngtjg2ZdYcXuxxxYpr0Wi2yuDSbZpDfBI=
Subject key identifier: 20:98:EE:32:E0:FD:2C:4C:4F:71:0D:86:11:FC:86:F0:8E:03:43:91
Certificate issuer: /CN=e316318247d211841f9620a9a1130010ddb486f2
Certificate serial: 018CC87143708EFF26B598012307EFF39247
Authority key identifier: E3:16:31:82:47:D2:11:84:1F:96:20:A9:A1:13:00:10:DD:B4:86:F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4xYxgkfSEYQfliCpoRMAEN20hvI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/ee42bb-1e49-4c21-a4d6-ec287e1d37e5/1/IJjuMuD9LExPcQ2GEfyG8I4DQ5E.roa
Signing time: Tue 02 Jan 2024 04:31:55 +0000
ROA not before: Tue 02 Jan 2024 04:31:55 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 208937
IP address blocks: 91.231.126.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:71:43:70:8e:ff:26:b5:98:01:23:07:ef:f3:92:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e316318247d211841f9620a9a1130010ddb486f2
Validity
Not Before: Jan 2 04:31:55 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2098ee32e0fd2c4c4f710d8611fc86f08e034391
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:14:ef:56:26:79:12:37:06:b1:b2:1c:19:fe:
d6:d2:90:df:95:29:9f:af:de:c0:a3:f4:da:73:c7:
d5:f4:6c:c9:6f:2e:db:ea:bc:8e:69:2b:9e:e8:16:
92:d5:e0:32:e4:f1:a4:a3:51:22:41:aa:0f:4a:f8:
27:b7:7b:f5:45:d8:ca:73:e0:0a:6c:fd:47:31:25:
41:ae:3a:ef:36:7b:10:07:66:d3:35:de:82:ce:d3:
d8:e2:be:f4:15:11:84:ec:a4:63:c0:81:21:98:c0:
14:e3:48:eb:31:1c:c0:4c:c1:ed:b4:b8:3d:f3:a8:
9f:cd:27:35:86:53:0b:52:53:88:cd:a9:79:4a:85:
f6:f0:6b:b8:37:d4:88:b0:57:0c:ad:16:a5:2c:73:
ee:39:6b:16:e5:cd:d1:8d:13:8e:e7:6d:5d:7b:01:
08:5a:c5:45:29:de:23:38:74:2d:67:3d:7f:f9:ba:
5b:8e:ec:36:88:fc:f9:ee:07:9c:40:b9:e4:09:7e:
0c:4e:27:19:28:cf:b1:2a:5a:5d:a7:98:46:45:3d:
67:d8:00:8a:e4:a7:e9:15:00:5e:d1:f7:de:6f:ea:
23:b5:87:9f:e7:72:0b:5b:0d:cc:d6:0a:32:10:ef:
96:b9:e9:3c:85:f0:29:f8:0e:e2:45:f3:df:66:af:
84:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:98:EE:32:E0:FD:2C:4C:4F:71:0D:86:11:FC:86:F0:8E:03:43:91
X509v3 Authority Key Identifier:
keyid:E3:16:31:82:47:D2:11:84:1F:96:20:A9:A1:13:00:10:DD:B4:86:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4xYxgkfSEYQfliCpoRMAEN20hvI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/ee42bb-1e49-4c21-a4d6-ec287e1d37e5/1/IJjuMuD9LExPcQ2GEfyG8I4DQ5E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/ee42bb-1e49-4c21-a4d6-ec287e1d37e5/1/4xYxgkfSEYQfliCpoRMAEN20hvI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.231.126.0/24
Signature Algorithm: sha256WithRSAEncryption
0c:78:bd:1a:86:f7:ee:35:2a:d1:de:f8:2d:68:ad:48:85:a0:
db:d3:ec:38:b0:91:10:99:3c:b3:f8:20:c6:70:16:4f:aa:e9:
49:7f:09:b3:02:4f:96:44:09:ca:90:f9:5f:09:a9:df:e6:0b:
a2:5e:0b:8d:b7:2e:29:4a:20:45:6f:50:30:f4:a6:de:de:6c:
97:6d:66:f3:a3:a7:3d:d5:ad:ef:4a:bc:a3:ca:1f:9c:8a:f0:
8f:45:95:53:66:fa:6e:c8:66:4e:bc:1e:82:63:29:8a:fc:34:
d8:53:4a:32:ec:d6:51:c2:87:3c:7b:ad:c5:0f:f7:52:2d:f5:
b0:13:71:73:80:50:6b:14:8f:aa:f5:3b:bc:70:1d:e7:f5:98:
97:ae:30:37:76:03:27:9c:11:b1:35:9a:5e:4c:d4:9d:e4:8f:
8c:60:06:6d:f4:34:e1:09:8e:e5:f9:26:30:d9:b9:1c:6b:95:
3c:18:48:a2:f3:db:7e:9e:d1:3b:01:74:df:5b:e2:d2:36:79:
e4:62:8f:92:de:85:fb:9a:48:13:a0:07:be:16:29:cd:8a:70:
18:2e:2a:c7:8f:14:2c:e5:ff:dc:89:27:99:06:87:53:4e:36:
2b:a4:1a:04:6f:b7:ab:08:55:ca:f2:ac:0f:e8:c7:d0:24:33:
b9:20:2c:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:37:47 2025 by rpki-client