Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/a66a29-51cc-4ba9-884f-f17613ea49e7/1/IaeTFnesgpZqLCtB5S2koN3rROk.roa
File: IaeTFnesgpZqLCtB5S2koN3rROk.roa (raw, json)
Hash identifier: 2dTN7hkxFEZVuPyQm3PnDH7gpnxdJMdUb4xnFMSUzvE=
Subject key identifier: 21:A7:93:16:77:AC:82:96:6A:2C:2B:41:E5:2D:A4:A0:DD:EB:44:E9
Certificate issuer: /CN=11dd0ebff5ba38a8758b794d04d62905194a3266
Certificate serial: 01856D2F3142AFA16751B1A21AFB921A3CA5
Authority key identifier: 11:DD:0E:BF:F5:BA:38:A8:75:8B:79:4D:04:D6:29:05:19:4A:32:66
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ed0Ov_W6OKh1i3lNBNYpBRlKMmY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/a66a29-51cc-4ba9-884f-f17613ea49e7/1/IaeTFnesgpZqLCtB5S2koN3rROk.roa
Signing time: Sun 01 Jan 2023 11:54:47 +0000
ROA not before: Sun 01 Jan 2023 11:54:47 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 49999
IP address blocks: 46.20.96.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:2f:31:42:af:a1:67:51:b1:a2:1a:fb:92:1a:3c:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11dd0ebff5ba38a8758b794d04d62905194a3266
Validity
Not Before: Jan 1 11:54:47 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=21a7931677ac82966a2c2b41e52da4a0ddeb44e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:92:c3:d0:be:eb:1f:e7:5b:3b:fa:31:30:c9:
df:19:8f:f9:e8:10:6f:a0:94:d6:e7:16:90:54:88:
63:c2:d7:ca:97:8d:3c:7e:e6:fb:0e:bc:40:80:e7:
1b:c4:4b:f3:54:1b:e8:c6:22:04:c1:b9:f1:a2:cb:
4d:91:be:59:04:85:8b:5b:ba:58:8a:c1:73:ba:94:
7e:4c:2c:8f:a2:5d:e2:d9:ce:e8:22:40:ea:1e:6d:
3c:d3:bf:ba:0e:38:ab:ba:48:15:a5:bf:15:f9:40:
e8:48:d3:06:01:ff:4d:44:13:75:a3:c5:94:6e:7c:
03:99:f8:0a:80:e4:43:ba:63:36:61:7a:5a:d0:9e:
8c:aa:d0:9b:24:6a:d4:9c:78:23:62:20:98:58:56:
8e:93:b3:45:5f:e7:58:0a:60:d8:ab:aa:e9:6d:c5:
c3:d4:46:3a:36:6a:aa:57:e6:07:c5:cd:ee:d2:bf:
91:fc:8b:17:17:ea:f2:97:a4:ab:00:d8:d7:ab:04:
70:80:e8:24:bc:15:1d:1f:7f:97:f3:e4:d1:c9:e3:
be:16:1f:76:7c:1e:df:82:f5:27:5e:41:0b:be:30:
0f:ff:b7:96:e0:7a:fd:ab:04:61:ef:b9:3f:e2:b9:
9d:c1:62:dc:df:73:73:6e:67:8e:19:2f:95:a7:8c:
55:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:A7:93:16:77:AC:82:96:6A:2C:2B:41:E5:2D:A4:A0:DD:EB:44:E9
X509v3 Authority Key Identifier:
keyid:11:DD:0E:BF:F5:BA:38:A8:75:8B:79:4D:04:D6:29:05:19:4A:32:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ed0Ov_W6OKh1i3lNBNYpBRlKMmY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/a66a29-51cc-4ba9-884f-f17613ea49e7/1/IaeTFnesgpZqLCtB5S2koN3rROk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/a66a29-51cc-4ba9-884f-f17613ea49e7/1/Ed0Ov_W6OKh1i3lNBNYpBRlKMmY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.20.96.0/24
Signature Algorithm: sha256WithRSAEncryption
ba:67:ce:6f:52:01:7d:84:bc:2d:6a:d1:6b:c6:f8:09:ec:f8:
6a:5a:d6:f8:d3:09:69:15:73:aa:a2:f7:e2:d2:aa:a0:a0:d2:
07:e1:bc:7c:db:b6:33:58:44:78:8a:28:6b:ff:7c:32:2b:0e:
7b:9f:f1:8e:47:31:12:83:ff:ae:30:66:2c:4d:32:48:6e:f7:
da:9e:55:9e:82:82:f6:74:fb:63:16:c8:69:96:51:43:02:ba:
9b:3f:ad:bb:eb:d2:2e:36:51:4e:b3:b6:85:a0:ba:59:e0:d3:
38:74:8a:06:5e:0b:40:f4:c3:99:4f:cd:6f:cd:88:d3:3b:9a:
68:1d:07:4c:3d:d5:b6:e9:d6:f5:fa:96:fb:97:c0:c3:85:dd:
d8:bd:c1:6b:09:c7:23:29:de:df:70:56:a6:f1:fd:aa:5b:3e:
7f:a9:e9:d3:02:4f:32:49:2c:13:c8:df:06:57:4c:5b:52:29:
d3:ff:f3:d8:05:73:e0:12:88:80:e4:c0:af:d7:ab:01:f5:db:
79:92:50:ff:6d:59:69:4a:26:8b:b4:c0:53:35:6f:9b:12:8b:
ec:20:f8:a2:aa:b2:80:d9:0c:2a:84:8e:1d:6f:45:91:0e:51:
b3:30:11:6d:a6:b2:8a:4d:54:61:61:1c:49:ee:82:89:b4:28:
03:c6:4a:7b
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVtLzFCr6FnUbGiGvuSGjylMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDExZGQwZWJmZjViYTM4YTg3NThiNzk0ZDA0ZDYyOTA1MTk0
YTMyNjYwHhcNMjMwMTAxMTE1NDQ3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyMWE3OTMxNjc3YWM4Mjk2NmEyYzJiNDFlNTJkYTRhMGRkZWI0NGU5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq5LD0L7rH+dbO/oxMMnfGY/56BBv
oJTW5xaQVIhjwtfKl408fub7DrxAgOcbxEvzVBvoxiIEwbnxostNkb5ZBIWLW7pY
isFzupR+TCyPol3i2c7oIkDqHm0807+6DjirukgVpb8V+UDoSNMGAf9NRBN1o8WU
bnwDmfgKgORDumM2YXpa0J6MqtCbJGrUnHgjYiCYWFaOk7NFX+dYCmDYq6rpbcXD
1EY6NmqqV+YHxc3u0r+R/IsXF+ryl6SrANjXqwRwgOgkvBUdH3+X8+TRyeO+Fh92
fB7fgvUnXkELvjAP/7eW4Hr9qwRh77k/4rmdwWLc33NzbmeOGS+Vp4xVSwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFCGnkxZ3rIKWaiwrQeUtpKDd60TpMB8GA1UdIwQY
MBaAFBHdDr/1ujiodYt5TQTWKQUZSjJmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRWQwT3ZfVzZPS2gxaTNsTkJOWXBCUmxLTW1ZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMC9hNjZhMjktNTFjYy00YmE5LTg4NGYt
ZjE3NjEzZWE0OWU3LzEvSWFlVEZuZXNncFpxTEN0QjVTMmtvTjNyUk9rLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMC9hNjZhMjktNTFjYy00YmE5LTg4NGYtZjE3NjEzZWE0OWU3
LzEvRWQwT3ZfVzZPS2gxaTNsTkJOWXBCUmxLTW1ZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALhRgMA0G
CSqGSIb3DQEBCwUAA4IBAQC6Z85vUgF9hLwtatFrxvgJ7PhqWtb40wlpFXOqovfi
0qqgoNIH4bx827YzWER4iihr/3wyKw57n/GORzESg/+uMGYsTTJIbvfanlWegoL2
dPtjFshpllFDArqbP62769IuNlFOs7aFoLpZ4NM4dIoGXgtA9MOZT81vzYjTO5po
HQdMPdW26db1+pb7l8DDhd3YvcFrCccjKd7fcFam8f2qWz5/qenTAk8ySSwTyN8G
V0xbUinT//PYBXPgEoiA5MCv16sB9dt5klD/bVlpSiaLtMBTNW+bEovsIPiiqrKA
2QwqhI4db0WRDlGzMBFtprKKTVRhYRxJ7oKJtCgDxkp7
-----END CERTIFICATE-----
Generated at Sun Jun 8 05:19:48 2025 by rpki-client