Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/4f6985-b94a-47cc-a300-6f2cf4f03ceb/1/LaEVvsORic6aviogiew15pWbphc.roa
File: LaEVvsORic6aviogiew15pWbphc.roa (raw, json)
Hash identifier: wCk0VzRxMU+d9Cn326lkvsFmMZVVl3eSWtZHQxpDo7I=
Subject key identifier: 2D:A1:15:BE:C3:91:89:CE:9A:BE:2A:20:89:EC:35:E6:95:9B:A6:17
Certificate issuer: /CN=db1d6eba463b7564abfae938b46ed47187de0ec0
Certificate serial: 018DBBBB2C058DA8D13854A7E87E2DAB8EB6
Authority key identifier: DB:1D:6E:BA:46:3B:75:64:AB:FA:E9:38:B4:6E:D4:71:87:DE:0E:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2x1uukY7dWSr-uk4tG7UcYfeDsA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/4f6985-b94a-47cc-a300-6f2cf4f03ceb/1/LaEVvsORic6aviogiew15pWbphc.roa
Signing time: Sun 18 Feb 2024 10:20:22 +0000
ROA not before: Sun 18 Feb 2024 10:20:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 62005
IP address blocks: 213.109.192.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:bb:bb:2c:05:8d:a8:d1:38:54:a7:e8:7e:2d:ab:8e:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=db1d6eba463b7564abfae938b46ed47187de0ec0
Validity
Not Before: Feb 18 10:20:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2da115bec39189ce9abe2a2089ec35e6959ba617
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:f3:6d:ed:ab:e0:8a:c9:28:3f:ce:84:7a:c6:
05:f6:a8:73:7e:f5:a1:26:ff:90:0a:d6:8a:f0:cf:
aa:9b:d6:d3:f2:92:77:bf:95:1b:0e:65:cc:a6:6e:
c1:84:05:1d:45:1f:8a:4c:14:04:d4:bd:d8:26:9f:
96:b3:4d:37:0f:90:2d:be:6a:42:19:32:94:5b:8e:
a2:90:52:97:c2:96:59:bc:1c:8f:74:3a:13:0b:9f:
db:f4:67:38:cf:e3:01:60:3f:13:d7:1d:fd:7c:6d:
1a:89:27:27:d3:f8:85:58:ba:c2:b8:d5:22:de:fb:
c7:10:9e:be:9f:7e:7e:f9:ad:e2:3e:4f:04:53:4f:
3a:40:fe:dd:33:7e:ff:e7:0d:d3:ed:0d:14:55:92:
aa:49:44:d2:b9:8c:16:8b:b9:37:35:1b:30:f0:a4:
bc:13:ee:c6:48:c8:09:ad:97:8d:1f:e3:67:22:c9:
ed:2e:7a:ab:b9:6b:f4:1b:93:1c:39:cb:38:62:b3:
95:0e:46:7d:82:88:9e:9e:9a:2e:44:c5:60:6f:38:
82:62:69:60:4c:ba:8f:29:d6:b9:c8:0b:e1:b7:59:
23:32:d8:88:c7:90:5c:b9:a8:09:6f:01:49:8c:f4:
16:0c:78:87:87:1e:b6:48:99:43:e8:dc:0c:29:5c:
9c:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:A1:15:BE:C3:91:89:CE:9A:BE:2A:20:89:EC:35:E6:95:9B:A6:17
X509v3 Authority Key Identifier:
keyid:DB:1D:6E:BA:46:3B:75:64:AB:FA:E9:38:B4:6E:D4:71:87:DE:0E:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2x1uukY7dWSr-uk4tG7UcYfeDsA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/4f6985-b94a-47cc-a300-6f2cf4f03ceb/1/LaEVvsORic6aviogiew15pWbphc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/4f6985-b94a-47cc-a300-6f2cf4f03ceb/1/2x1uukY7dWSr-uk4tG7UcYfeDsA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.109.192.0/24
Signature Algorithm: sha256WithRSAEncryption
ac:a4:27:80:26:99:fa:f9:1d:7d:80:e3:ae:ac:2e:56:69:86:
e6:d0:7a:db:3f:c9:33:80:ad:2c:50:08:24:3c:8c:9c:b3:5a:
f2:fb:e8:bf:cf:11:2a:61:72:e8:d6:de:55:eb:19:39:b7:70:
97:f0:a5:c7:69:52:36:b9:be:a8:d6:77:a2:6b:b6:81:01:fb:
65:e6:1a:9b:c8:ff:15:6e:30:da:d0:bb:32:8e:8a:0a:c8:2e:
69:a2:ed:09:3f:1a:d2:ec:a7:0b:d0:75:66:8b:17:c2:54:17:
88:37:40:65:b8:ca:46:45:b9:38:62:2f:d2:3b:51:7c:73:2b:
7a:6a:77:0b:de:2f:91:44:db:8a:a9:4e:5b:a0:0d:9e:d4:fe:
3c:e8:3c:b3:81:6a:57:4d:d4:36:0c:13:26:3a:07:92:13:d8:
26:60:74:b0:50:98:77:9c:ff:b8:65:62:5f:cf:62:47:b3:35:
4b:09:51:03:ca:d4:82:02:cb:8a:e6:c1:a7:a4:01:a3:2c:a8:
9e:3e:82:a6:49:8a:68:6b:72:01:c0:8a:21:a8:30:66:ee:ae:
7d:a5:32:f4:41:6f:fc:e6:8f:c1:32:e3:80:cd:1d:c4:75:b3:
17:f1:96:4c:30:28:d0:00:a3:41:93:d3:e3:3a:24:05:4f:dc:
24:cd:0c:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:34:23 2025 by rpki-client