Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/f34254-0e9d-4dc5-a418-1b711aec1fbc/1/5Oyf5ZRuBAMUwkCnGSib9ta2H8U.roa
File: 5Oyf5ZRuBAMUwkCnGSib9ta2H8U.roa (raw, json)
Hash identifier: 1zDBHOMCsAI2j0sevX0duz5YqmtsIZmJWNF9ZxzdHMc=
Subject key identifier: E4:EC:9F:E5:94:6E:04:03:14:C2:40:A7:19:28:9B:F6:D6:B6:1F:C5
Certificate issuer: /CN=86ee1268fe0aadf317ab44fd816d10fe54ddfc0c
Certificate serial: 0188F84FC138FCAD475B00E68B37E10DD88A
Authority key identifier: 86:EE:12:68:FE:0A:AD:F3:17:AB:44:FD:81:6D:10:FE:54:DD:FC:0C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hu4SaP4KrfMXq0T9gW0Q_lTd_Aw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/f34254-0e9d-4dc5-a418-1b711aec1fbc/1/5Oyf5ZRuBAMUwkCnGSib9ta2H8U.roa
Signing time: Mon 26 Jun 2023 15:25:56 +0000
ROA not before: Mon 26 Jun 2023 15:25:56 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 44929
IP address blocks: 91.203.29.0/24 maxlen: 24
91.203.28.0/22 maxlen: 22
91.203.28.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:f8:4f:c1:38:fc:ad:47:5b:00:e6:8b:37:e1:0d:d8:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86ee1268fe0aadf317ab44fd816d10fe54ddfc0c
Validity
Not Before: Jun 26 15:25:56 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e4ec9fe5946e040314c240a719289bf6d6b61fc5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:25:57:e6:e9:c1:6c:46:a0:1f:b9:61:1c:91:
22:26:2f:61:c1:a8:5b:f4:ac:a7:fd:0c:ef:2c:a7:
ea:3b:ce:90:00:db:35:9f:2c:69:02:e3:b1:c9:68:
28:60:3e:1f:8a:22:71:97:0d:6c:42:5a:b3:19:60:
f2:4e:2c:21:92:a6:83:68:27:2c:7e:73:3f:29:69:
a8:31:f2:61:e8:f9:77:4b:14:71:bf:d2:5d:81:fb:
62:79:19:2f:44:43:16:7a:5d:34:48:7a:2e:ee:e8:
a6:8a:d9:cf:da:45:f3:31:c7:56:4d:a9:4d:80:b7:
85:a3:1d:c9:51:26:7d:8e:75:ed:bc:62:28:07:f3:
d6:a1:e2:93:0d:8e:95:f3:5a:01:28:9b:37:fd:0d:
df:b6:3c:de:a3:75:c2:e4:d4:d1:33:ba:01:6e:07:
3a:30:a7:e4:86:fd:68:12:09:91:5b:3e:f7:b6:41:
40:51:80:ce:66:fc:0d:30:19:cd:34:12:1b:89:78:
18:74:4d:db:71:eb:c0:f0:57:a2:2a:aa:e8:c6:77:
cc:86:c7:38:7c:3c:2c:16:36:df:79:ac:27:bb:75:
08:52:fc:3f:5c:cd:f9:56:e8:d7:6a:c5:dd:98:d2:
0e:25:3a:2c:cb:12:fd:5e:bf:d8:cc:d9:d5:70:c4:
8d:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:EC:9F:E5:94:6E:04:03:14:C2:40:A7:19:28:9B:F6:D6:B6:1F:C5
X509v3 Authority Key Identifier:
keyid:86:EE:12:68:FE:0A:AD:F3:17:AB:44:FD:81:6D:10:FE:54:DD:FC:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hu4SaP4KrfMXq0T9gW0Q_lTd_Aw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/f34254-0e9d-4dc5-a418-1b711aec1fbc/1/5Oyf5ZRuBAMUwkCnGSib9ta2H8U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/f34254-0e9d-4dc5-a418-1b711aec1fbc/1/hu4SaP4KrfMXq0T9gW0Q_lTd_Aw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.203.28.0/22
Signature Algorithm: sha256WithRSAEncryption
72:92:05:6d:5c:60:d9:5b:72:21:37:b9:6c:55:93:ca:16:57:
32:1f:ce:ac:1a:82:dd:18:89:02:b5:e8:69:6b:d4:a0:22:a1:
56:ac:fc:f3:44:01:3d:f7:9b:32:3e:f3:33:61:85:e4:52:1c:
34:99:9d:27:f2:aa:7c:23:13:75:d7:d1:93:56:6c:5a:dc:65:
0b:20:2c:45:0c:eb:d1:c9:1e:e9:e9:bd:8e:71:19:ba:d2:62:
6f:7f:97:a6:2e:49:4f:bc:5f:dd:62:e2:53:e3:fd:46:a2:3d:
49:7f:f4:6c:29:9f:e1:c4:ff:74:fd:75:fa:b8:06:53:b2:1b:
2b:01:1c:ac:50:3c:09:c3:f3:46:56:7d:c6:db:1d:4a:c6:48:
71:32:22:b2:64:dd:a3:0d:ff:ef:e5:f1:d0:16:64:73:32:97:
a8:82:60:3b:cf:2a:47:e7:55:f2:d6:45:c3:f4:e0:d7:b9:74:
31:27:53:bd:f3:8f:0d:d5:9d:1f:bd:80:f9:4f:b6:e1:eb:8b:
fa:cb:c5:02:1d:53:15:2d:10:58:f8:e9:ea:b9:78:e0:a4:f2:
2a:d1:3d:e0:85:4c:05:8c:75:4e:29:82:29:2a:71:8e:66:c1:
ab:28:36:70:18:11:39:ea:70:5a:c5:97:2b:f2:cf:72:74:01:
ec:bd:fe:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:43:42 2025 by rpki-client