Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/Wk81ZJ22x3ZmzGIKyZhP9xCWzys.roa
File: Wk81ZJ22x3ZmzGIKyZhP9xCWzys.roa (raw, json)
Hash identifier: 0cAI5q1gwBaTuEdP74WSmmAEmufxJ0eRjK6UVwAxqGc=
Subject key identifier: 5A:4F:35:64:9D:B6:C7:76:66:CC:62:0A:C9:98:4F:F7:10:96:CF:2B
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 0190EE5288BD997A46850108CF7BDA196016
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/Wk81ZJ22x3ZmzGIKyZhP9xCWzys.roa
Signing time: Fri 26 Jul 2024 09:15:04 +0000
ROA not before: Fri 26 Jul 2024 09:15:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 399244
IP address blocks: 2.56.103.0/24 maxlen: 24
2.59.22.0/24 maxlen: 24
45.9.120.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:ee:52:88:bd:99:7a:46:85:01:08:cf:7b:da:19:60:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Jul 26 09:15:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5a4f35649db6c77666cc620ac9984ff71096cf2b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:fe:89:90:62:8e:8d:96:30:fb:1b:c5:78:cd:
a5:58:b2:46:a2:1c:ad:21:66:e4:08:d4:f2:e9:73:
b6:b8:f7:88:fb:f0:27:01:cc:8b:9f:74:a6:43:b2:
b9:9f:dc:42:e3:de:48:18:66:5e:f8:0f:83:f1:c8:
79:8e:47:e8:8c:a4:26:dc:e7:60:ba:f8:21:e8:04:
d5:f2:a5:17:93:d5:ec:6e:f9:8e:81:e4:43:79:dc:
56:80:34:bd:0e:a2:d6:32:02:85:8f:0d:dc:06:4a:
c9:c9:20:ec:8d:dd:8e:ce:17:6a:da:22:8c:98:09:
ef:7d:ca:8f:b6:cf:8a:03:26:dd:3a:ee:9e:eb:18:
7c:8b:e0:75:df:07:c5:06:ef:fb:cb:3c:91:c4:1a:
91:9c:3e:fe:3c:61:4d:72:58:47:6f:55:19:d7:9c:
ca:71:df:5f:47:25:31:de:f9:b5:05:1d:7a:de:a0:
54:3e:76:ad:dd:3b:fc:a8:27:13:72:01:fb:4d:14:
77:e1:7e:7e:a6:33:b9:de:77:fb:dc:90:ee:bb:81:
d1:14:e3:76:85:74:f3:9e:e1:e1:e4:28:46:a5:25:
82:66:0a:61:a3:6f:82:2b:2a:b4:1b:47:fe:a4:96:
aa:35:1f:27:75:92:65:4d:8d:2f:ec:b6:e7:05:ad:
91:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:4F:35:64:9D:B6:C7:76:66:CC:62:0A:C9:98:4F:F7:10:96:CF:2B
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/Wk81ZJ22x3ZmzGIKyZhP9xCWzys.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.56.103.0/24
2.59.22.0/24
45.9.120.0/24
Signature Algorithm: sha256WithRSAEncryption
b3:3d:7d:6e:ee:51:55:ab:af:69:71:1b:5e:10:81:b2:f7:94:
62:99:99:54:6d:44:4d:3a:d7:93:8e:eb:71:ce:cc:03:be:f4:
7a:a7:4a:f1:25:de:4b:56:05:83:4c:d2:65:5d:56:55:47:56:
45:ab:d3:d2:b9:5a:1f:ee:af:90:9a:eb:67:23:88:53:6a:3a:
2f:9d:6c:c2:d9:91:45:47:28:16:0b:4a:13:9c:ee:6f:9c:e5:
a1:ba:4c:77:c2:a6:66:d6:f7:89:59:35:a9:52:43:87:0b:f0:
ca:d8:06:8e:5a:54:28:9c:ee:f2:0c:63:0b:c7:b5:06:6f:35:
85:77:c7:73:1b:e0:a4:2f:00:9b:b1:38:88:4f:6e:fe:a1:84:
21:70:a1:8c:a9:d4:f6:9f:3f:a1:59:53:e2:43:68:c4:f7:be:
4c:6a:36:e7:dc:1a:39:54:36:8e:38:51:da:7d:1e:58:01:d7:
88:53:fe:e1:fd:00:a6:ae:03:93:b3:08:c0:40:02:83:e0:ee:
0e:29:b0:0d:05:3b:ab:3c:81:b0:9d:ab:f2:73:95:b5:a9:d5:
60:de:8d:1d:16:b4:ca:10:49:53:8f:bd:b8:c3:0d:40:91:47:
cc:40:cc:60:c8:8c:76:20:75:99:6b:dd:39:7b:a1:86:e3:36:
0a:04:5b:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 19:21:13 2025 by rpki-client