Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/3fea1a-57bc-493a-9a3e-8c25b5fb276f/1/xyc6Uofur-y-vi--R6aKvE853tU.roa
File: xyc6Uofur-y-vi--R6aKvE853tU.roa (raw, json)
Hash identifier: v09KmMmZasAkwFBLEr36+VixzNRFmmMktPTEZGC555g=
Subject key identifier: C7:27:3A:52:87:EE:AF:EC:BE:BE:2F:BE:47:A6:8A:BC:4F:39:DE:D5
Certificate issuer: /CN=1c99cebe0cf09903903d19c1ca0ae62421764859
Certificate serial: 018CC9BC0CA5BDDC0B9E09E3D29338CD2A4E
Authority key identifier: 1C:99:CE:BE:0C:F0:99:03:90:3D:19:C1:CA:0A:E6:24:21:76:48:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJnOvgzwmQOQPRnBygrmJCF2SFk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/3fea1a-57bc-493a-9a3e-8c25b5fb276f/1/xyc6Uofur-y-vi--R6aKvE853tU.roa
Signing time: Tue 02 Jan 2024 10:33:13 +0000
ROA not before: Tue 02 Jan 2024 10:33:13 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 21119
IP address blocks: 213.179.48.0/20 maxlen: 20
46.16.48.0/21 maxlen: 21
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:bc:0c:a5:bd:dc:0b:9e:09:e3:d2:93:38:cd:2a:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c99cebe0cf09903903d19c1ca0ae62421764859
Validity
Not Before: Jan 2 10:33:13 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c7273a5287eeafecbebe2fbe47a68abc4f39ded5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:a6:a0:40:8e:b5:81:7f:65:58:d4:08:5f:0c:
96:16:c3:0c:37:c2:72:bb:17:bd:29:a5:75:ba:fc:
11:49:f8:0a:a0:0f:93:07:fb:25:42:01:03:18:2b:
f6:f2:fe:c7:96:c0:54:fe:be:04:45:20:0b:f9:22:
72:5b:2c:04:33:53:aa:78:c1:76:27:fa:51:f9:52:
9c:36:f7:e5:b7:3d:96:9d:38:49:bd:34:4c:a4:95:
66:bc:63:ec:c5:d5:6b:ea:34:71:83:ab:4d:88:3f:
36:20:12:2c:7c:f5:e1:55:38:f6:1e:3f:59:ef:44:
49:b3:08:83:6d:c5:aa:b9:a5:8e:a9:53:fa:f6:ea:
54:f5:06:1f:1c:9d:ee:61:21:fd:32:d7:6d:0d:e4:
7b:fe:e0:16:a3:e3:2e:ef:8e:b5:78:74:77:f1:b0:
32:94:f7:e6:20:50:e5:c9:4f:c4:be:41:ae:48:3c:
ee:ef:39:ad:9f:73:2b:ce:33:80:a7:91:f5:60:a4:
4f:07:fe:b7:6f:a4:e4:e8:dc:fa:38:d8:ae:ec:e3:
ff:70:aa:41:8f:02:78:60:c7:2e:2f:f3:1c:e1:b9:
49:1e:a2:ee:13:e1:6b:b6:ef:18:03:3a:e0:16:e2:
f8:6b:88:3b:1e:8a:8e:4d:16:18:5f:7b:1e:82:0f:
d7:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:27:3A:52:87:EE:AF:EC:BE:BE:2F:BE:47:A6:8A:BC:4F:39:DE:D5
X509v3 Authority Key Identifier:
keyid:1C:99:CE:BE:0C:F0:99:03:90:3D:19:C1:CA:0A:E6:24:21:76:48:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJnOvgzwmQOQPRnBygrmJCF2SFk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/3fea1a-57bc-493a-9a3e-8c25b5fb276f/1/xyc6Uofur-y-vi--R6aKvE853tU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/3fea1a-57bc-493a-9a3e-8c25b5fb276f/1/HJnOvgzwmQOQPRnBygrmJCF2SFk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.16.48.0/21
213.179.48.0/20
Signature Algorithm: sha256WithRSAEncryption
a0:6d:89:5b:83:2e:8f:55:09:bb:d2:67:1e:d3:a4:00:ee:e1:
38:07:6c:4a:9b:c7:1b:fc:89:85:fe:c8:d8:e2:eb:3e:ff:19:
93:71:56:14:d1:d0:97:ac:2d:9c:f1:06:fb:44:3f:65:95:71:
e1:3e:3b:27:e1:d7:5e:d7:10:44:87:6c:d2:d4:d3:97:d4:22:
12:4a:92:3d:07:08:e8:0b:e2:5a:d5:d9:e3:21:93:ca:fd:e9:
c9:25:d9:07:dc:39:e8:6d:9d:8f:59:e3:e5:97:4f:46:ae:dd:
dd:09:c9:2e:50:89:55:2a:1a:24:0a:77:7f:06:49:cb:7a:9c:
9b:aa:d1:cd:a5:d8:10:b6:9d:ba:d1:39:28:ec:1c:69:8b:12:
d3:9d:94:1d:44:33:b8:07:7b:f4:da:e5:a7:47:3c:e4:ba:fa:
c8:3d:a1:be:94:0a:2c:f8:18:65:86:9c:9e:b8:6a:73:19:32:
0a:7b:28:3d:d3:c6:b9:6d:ad:ec:10:45:57:e3:ea:95:f8:e0:
99:30:5b:a0:a8:ca:d4:11:d6:cb:65:01:a3:5d:ac:24:26:26:
40:56:e5:c0:f0:a0:ec:f0:47:ce:ad:cb:7f:d4:e6:24:f4:fb:
c5:6a:6a:44:32:ae:78:ad:14:0c:1a:34:3e:c4:22:44:b0:8e:
99:f8:81:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 00:22:42 2025 by rpki-client