Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/8cca33-c2b1-4541-9ef2-aa0eb53e90b9/1/SOEEajF7W0sVGxukz3dAiokofns.roa
File: SOEEajF7W0sVGxukz3dAiokofns.roa (raw, json)
Hash identifier: 0v6lcDUhiwRVZK0tQme75rq8NgQv4fSv4lT84KiF3W0=
Subject key identifier: 48:E1:04:6A:31:7B:5B:4B:15:1B:1B:A4:CF:77:40:8A:89:28:7E:7B
Certificate issuer: /CN=f89e229f860b058d23fd28a2926161b8786330c6
Certificate serial: 018CC2DAE559E01E5DFBBCE3D32BC3474410
Authority key identifier: F8:9E:22:9F:86:0B:05:8D:23:FD:28:A2:92:61:61:B8:78:63:30:C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-J4in4YLBY0j_SiikmFhuHhjMMY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/8cca33-c2b1-4541-9ef2-aa0eb53e90b9/1/SOEEajF7W0sVGxukz3dAiokofns.roa
Signing time: Mon 01 Jan 2024 02:29:34 +0000
ROA not before: Mon 01 Jan 2024 02:29:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 198673
IP address blocks: 193.102.77.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:da:e5:59:e0:1e:5d:fb:bc:e3:d3:2b:c3:47:44:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f89e229f860b058d23fd28a2926161b8786330c6
Validity
Not Before: Jan 1 02:29:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=48e1046a317b5b4b151b1ba4cf77408a89287e7b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:e1:86:85:1c:e2:be:ca:22:04:0c:50:36:6a:
6c:7f:28:f4:12:6b:50:ec:5c:26:8b:33:00:c5:07:
a4:00:d2:bd:47:5b:d0:0b:bf:12:d0:96:67:e2:bb:
6b:c0:43:62:78:18:d1:fe:f0:09:b5:9a:47:dc:a8:
81:a1:82:86:a8:f1:45:93:45:ea:c4:49:c8:70:a7:
0c:8c:81:5d:34:08:b7:1b:e3:de:d4:7a:ff:81:01:
ad:cb:13:29:81:67:11:ce:b5:b1:dc:8c:e3:a1:2a:
fb:da:30:04:54:a1:72:1c:b6:de:36:71:bd:6d:92:
23:c8:19:02:99:09:7e:0b:84:e3:27:f1:b0:17:ab:
f5:37:e2:de:9b:df:3e:c7:cf:20:4a:4c:55:52:e1:
ab:f8:91:ef:6f:e3:21:b4:5d:f2:7f:45:99:12:0a:
00:27:40:4e:3a:22:0e:e8:e0:19:e7:1d:f1:f4:1e:
35:8e:67:bd:25:d1:a8:fb:bc:66:ee:a8:25:63:00:
4d:17:88:60:f5:50:60:e4:74:79:ac:81:9b:15:c9:
0f:46:cf:a8:dc:20:d7:86:53:90:76:38:a2:94:31:
ff:1c:95:b8:78:d7:cd:5f:c8:9d:1a:a7:95:ef:ce:
04:84:57:a1:78:03:79:9d:44:d0:13:cb:86:5e:59:
45:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:E1:04:6A:31:7B:5B:4B:15:1B:1B:A4:CF:77:40:8A:89:28:7E:7B
X509v3 Authority Key Identifier:
keyid:F8:9E:22:9F:86:0B:05:8D:23:FD:28:A2:92:61:61:B8:78:63:30:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-J4in4YLBY0j_SiikmFhuHhjMMY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/8cca33-c2b1-4541-9ef2-aa0eb53e90b9/1/SOEEajF7W0sVGxukz3dAiokofns.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/8cca33-c2b1-4541-9ef2-aa0eb53e90b9/1/1-J4in4YLBY0j_SiikmFhuHhjMMY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.102.77.0/24
Signature Algorithm: sha256WithRSAEncryption
55:4e:c3:ae:78:37:d2:bf:a0:8c:86:77:1d:f5:b2:05:dd:94:
a3:49:a1:04:b3:ba:ef:5b:09:c1:fe:a1:50:36:7c:4d:30:0f:
a6:5b:2e:b1:16:08:08:3e:db:3b:c4:28:61:0c:21:c8:a2:25:
63:e7:aa:5d:7f:78:81:55:c1:f7:a2:e2:36:3a:c7:68:84:b7:
2d:76:df:ef:cd:90:2a:d2:98:43:fa:cb:e7:8d:7c:ae:80:de:
84:21:06:69:56:be:c3:c1:4e:a7:7c:f2:10:f6:3c:0d:3b:28:
00:8d:da:5f:89:66:02:3d:61:43:d6:4e:97:60:c9:a7:ba:89:
e3:da:ba:ec:e3:63:6d:45:d4:84:bc:c1:e0:59:2b:51:3b:0c:
5f:ae:e2:65:60:d3:be:42:10:31:30:7b:3b:f8:36:30:51:aa:
b1:27:ba:99:7e:d4:fa:7c:61:31:cd:48:7e:f2:c7:c8:8d:24:
44:90:74:3a:f9:aa:28:22:e4:1a:c3:39:f5:ce:f9:f9:79:22:
84:52:b1:23:48:4c:f3:dd:50:d7:c6:d5:15:6e:66:2c:6b:e4:
ca:ee:b5:25:84:bb:ce:99:da:f0:62:4e:a1:8a:38:8d:85:74:
5c:ba:de:b4:bc:83:02:ec:7c:85:c3:15:8e:94:6b:b8:cf:43:
6f:f7:bb:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:01:46 2025 by rpki-client