Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/6f857d-c398-4d14-9074-3749d95dcd1f/1/JERZwVfonfemyPeF2k73JqLctNI.roa
File: JERZwVfonfemyPeF2k73JqLctNI.roa (raw, json)
Hash identifier: gLhjiSW6Ze8syhB/Z/2rcAmTMoQ4jNAbzYPqPqIPofY=
Subject key identifier: 24:44:59:C1:57:E8:9D:F7:A6:C8:F7:85:DA:4E:F7:26:A2:DC:B4:D2
Certificate issuer: /CN=156d70330ec51e9ff1f7727b1781c47a7a9aa56d
Certificate serial: 07155C8C
Authority key identifier: 15:6D:70:33:0E:C5:1E:9F:F1:F7:72:7B:17:81:C4:7A:7A:9A:A5:6D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FW1wMw7FHp_x93J7F4HEenqapW0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/6f857d-c398-4d14-9074-3749d95dcd1f/1/JERZwVfonfemyPeF2k73JqLctNI.roa
Signing time: Sat 01 Jan 2022 14:58:04 +0000
ROA not before: Sat 01 Jan 2022 14:58:04 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 199524
IP address blocks: 45.147.162.0/24 maxlen: 24
45.147.160.0/24 maxlen: 24
45.147.163.0/24 maxlen: 24
45.147.161.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 118840460 (0x7155c8c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=156d70330ec51e9ff1f7727b1781c47a7a9aa56d
Validity
Not Before: Jan 1 14:58:04 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=244459c157e89df7a6c8f785da4ef726a2dcb4d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:5f:2a:7c:a9:05:5b:7e:6d:5c:23:12:ed:aa:
24:10:a6:97:5f:99:47:1e:13:dc:f0:27:6f:4f:a4:
68:44:5b:3e:1d:f3:6f:85:03:cf:e5:3c:37:35:fe:
8d:0d:66:ac:87:f1:7c:ba:f3:54:89:f1:80:dc:fb:
60:f5:d1:99:ee:59:dd:20:0b:a9:35:22:d7:58:9b:
58:db:4a:de:23:20:57:42:65:9c:bc:82:42:df:d2:
73:2b:4d:36:96:09:ce:15:c2:e1:14:99:21:c3:60:
e4:5b:36:f1:2c:24:4d:6b:77:b8:4f:f7:e4:63:49:
80:c7:e9:cf:1d:06:e4:29:3c:b0:a4:d6:b7:7b:c5:
4e:33:ca:ff:7a:a3:5c:fa:64:f5:77:49:27:d4:92:
04:7e:ea:22:e2:a0:d7:c9:e5:e5:65:20:f0:4d:4b:
ce:8a:cf:07:08:9d:b8:df:0e:83:54:56:25:58:29:
2f:03:01:09:2a:db:4e:1c:14:57:8a:45:8e:32:41:
76:4a:2a:54:36:99:00:15:f0:e1:f6:c1:4d:4a:da:
3d:9c:d8:47:cf:1e:21:08:81:aa:5d:f9:e4:ee:ad:
4e:76:f3:64:50:78:3a:15:da:19:49:80:34:b8:77:
5b:50:3b:72:70:99:00:bc:2f:f4:5b:da:42:11:f9:
62:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:44:59:C1:57:E8:9D:F7:A6:C8:F7:85:DA:4E:F7:26:A2:DC:B4:D2
X509v3 Authority Key Identifier:
keyid:15:6D:70:33:0E:C5:1E:9F:F1:F7:72:7B:17:81:C4:7A:7A:9A:A5:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FW1wMw7FHp_x93J7F4HEenqapW0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/6f857d-c398-4d14-9074-3749d95dcd1f/1/JERZwVfonfemyPeF2k73JqLctNI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/6f857d-c398-4d14-9074-3749d95dcd1f/1/FW1wMw7FHp_x93J7F4HEenqapW0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.147.160.0/22
Signature Algorithm: sha256WithRSAEncryption
6d:e2:db:9a:b5:0f:89:70:fa:1b:c6:f9:85:7b:e4:b2:87:e1:
33:b3:b4:54:6f:37:a1:1e:5a:f5:80:0b:e7:0d:9e:de:0f:8e:
76:d9:ce:4e:9c:9f:0c:76:f0:1e:da:95:c9:f3:29:8e:2b:ee:
10:63:43:c4:a8:c4:8e:28:95:b7:c9:d3:ed:33:6a:59:da:fe:
fc:b0:f1:90:ef:18:c9:62:21:b4:a8:b7:a8:69:9b:c9:ee:29:
4a:48:dc:6e:52:f7:67:b3:4d:77:52:6b:b9:88:3f:9d:0e:b3:
a9:ac:a8:39:fa:99:44:18:05:14:89:4b:c6:a1:6f:30:de:90:
cb:06:c7:4b:52:5c:b0:45:5d:57:c0:96:6e:13:8d:f6:e9:67:
a0:70:0b:a5:e9:b3:1d:df:d9:7b:c6:ed:50:38:cd:27:9e:2f:
5e:fd:a1:71:37:f8:37:5e:24:f6:cf:7c:f5:69:d8:40:b9:94:
20:d1:c4:24:d6:93:bb:e2:8d:8b:ea:d2:e7:47:ba:a3:5d:ec:
76:7d:32:4a:25:5d:ca:ab:36:8e:57:9a:34:03:b2:1b:c4:cd:
8f:15:9c:e3:74:93:d6:9b:44:40:0f:02:bf:be:e2:93:ca:8a:
37:c3:fd:ee:b5:a2:af:63:9f:cf:39:f2:ed:56:4d:a0:a8:2c:
13:68:58:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:38:06 2025 by rpki-client