Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/a66a29-51cc-4ba9-884f-f17613ea49e7/1/ekNDS09zT6Vqdwfqw4lq77RoRM8.roa
File: ekNDS09zT6Vqdwfqw4lq77RoRM8.roa (raw, json)
Hash identifier: 52doPH8voc9rSyCZiEQgZKCV8Hb3HejU68PYiAuciU8=
Subject key identifier: 7A:43:43:4B:4F:73:4F:A5:6A:77:07:EA:C3:89:6A:EF:B4:68:44:CF
Certificate issuer: /CN=11dd0ebff5ba38a8758b794d04d62905194a3266
Certificate serial: 03613751
Authority key identifier: 11:DD:0E:BF:F5:BA:38:A8:75:8B:79:4D:04:D6:29:05:19:4A:32:66
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ed0Ov_W6OKh1i3lNBNYpBRlKMmY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/a66a29-51cc-4ba9-884f-f17613ea49e7/1/ekNDS09zT6Vqdwfqw4lq77RoRM8.roa
Signing time: Fri 06 May 2022 17:25:26 +0000
ROA not before: Fri 06 May 2022 17:25:26 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 51847
IP address blocks: 46.20.109.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 56702801 (0x3613751)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11dd0ebff5ba38a8758b794d04d62905194a3266
Validity
Not Before: May 6 17:25:26 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=7a43434b4f734fa56a7707eac3896aefb46844cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:2c:bd:6a:23:cb:c5:4d:cd:b2:f0:c7:08:6b:
af:55:d9:44:34:0a:86:46:e6:7d:7c:f0:ec:c7:de:
46:89:de:54:22:17:45:bb:52:24:d6:93:93:16:e9:
f4:f3:62:2d:da:a9:21:b3:fb:07:f8:2b:51:77:7d:
a5:5b:20:c2:e7:31:3b:48:cc:87:0a:e6:30:11:82:
01:94:7e:9d:63:05:6c:5e:92:4a:ad:e4:8b:74:8f:
c5:fd:d7:70:88:3f:1d:58:6e:68:fc:89:0e:c1:f9:
a9:43:d2:3e:7b:a8:af:6e:fc:1d:e5:51:e1:f1:28:
48:6d:50:5f:00:b1:c1:03:63:e6:7e:7a:c4:07:c6:
2d:5c:de:d2:2f:ec:83:33:2f:cd:e8:7a:e6:db:cb:
af:d8:b8:82:9e:62:ca:de:e0:dc:f8:93:e9:b3:fe:
8f:3d:d5:5b:03:7c:60:95:d6:91:c7:31:0a:f3:92:
8c:0c:40:84:89:71:3d:86:22:6f:da:d2:79:f3:e3:
88:16:72:96:ca:be:16:66:30:dd:08:19:63:3b:2e:
b4:f5:8c:b7:7a:6a:d6:f5:82:5b:0d:a5:89:a9:6c:
5b:89:d1:90:4a:8a:e0:fd:c6:e6:25:5f:90:75:2b:
b1:5a:f1:02:16:41:37:12:7f:d5:3b:51:1d:55:45:
ed:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:43:43:4B:4F:73:4F:A5:6A:77:07:EA:C3:89:6A:EF:B4:68:44:CF
X509v3 Authority Key Identifier:
keyid:11:DD:0E:BF:F5:BA:38:A8:75:8B:79:4D:04:D6:29:05:19:4A:32:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ed0Ov_W6OKh1i3lNBNYpBRlKMmY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/a66a29-51cc-4ba9-884f-f17613ea49e7/1/ekNDS09zT6Vqdwfqw4lq77RoRM8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/a66a29-51cc-4ba9-884f-f17613ea49e7/1/Ed0Ov_W6OKh1i3lNBNYpBRlKMmY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.20.109.0/24
Signature Algorithm: sha256WithRSAEncryption
a9:9c:1d:08:0f:55:71:39:c1:a0:9b:5d:64:a9:0d:5b:12:84:
ad:38:71:0b:3c:23:a1:92:64:3b:58:77:1f:75:f1:c0:0c:5c:
3c:4d:6e:82:35:b0:b7:99:c1:95:d7:00:e3:4f:8b:65:bb:02:
c8:85:57:8a:70:b2:05:df:9d:a3:87:b9:de:d5:da:aa:25:8c:
07:8a:df:70:02:f3:00:31:3e:27:72:1c:76:a0:57:2f:cf:6f:
ae:6b:2f:e3:33:ae:93:3c:b7:78:0f:87:0e:20:25:2c:ce:86:
d8:3b:e9:80:9a:e5:39:07:83:6b:4b:85:6b:83:9f:50:3e:98:
30:46:25:f9:b1:ab:27:a0:0f:5f:df:1e:ac:f3:a4:c7:3f:a0:
24:f0:3e:82:82:1b:45:ce:ce:aa:c5:bd:93:aa:95:d9:0b:44:
b3:42:35:a7:d9:fe:e5:2d:ab:f8:a1:c1:16:af:23:dc:d1:f5:
95:98:4d:d8:86:ba:c3:18:1e:06:d4:1a:95:39:a6:68:b9:79:
8e:19:77:a6:fd:f4:46:17:2b:dd:26:1e:e7:ed:45:c5:be:f8:
2d:98:58:a2:02:2a:f2:e9:a6:55:25:72:9a:bd:3f:0c:9a:b5:
55:d4:53:fb:1e:1c:ff:fb:88:30:85:44:68:7b:11:60:39:1f:
d5:16:03:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 05:39:05 2025 by rpki-client