Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/259bea-2931-4de0-be42-5a3d8f0ecbfd/1/EiqC5TAvJOj5Jw5R3k2Pf7Y9eXU.roa
File: EiqC5TAvJOj5Jw5R3k2Pf7Y9eXU.roa (raw, json)
Hash identifier: NGOTdaaj8eAZwb7CsoBjE1YPWtTj2CB7AM8EwvFywoM=
Subject key identifier: 12:2A:82:E5:30:2F:24:E8:F9:27:0E:51:DE:4D:8F:7F:B6:3D:79:75
Certificate issuer: /CN=cf7178f7a005f93779f468d34badbccc1b9cea50
Certificate serial: 01856E0AF66B18BA7E3B6FFA4D157008BB18
Authority key identifier: CF:71:78:F7:A0:05:F9:37:79:F4:68:D3:4B:AD:BC:CC:1B:9C:EA:50
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z3F496AF-Td59GjTS628zBuc6lA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/259bea-2931-4de0-be42-5a3d8f0ecbfd/1/EiqC5TAvJOj5Jw5R3k2Pf7Y9eXU.roa
Signing time: Sun 01 Jan 2023 15:54:50 +0000
ROA not before: Sun 01 Jan 2023 15:54:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 25577
IP address blocks: 91.195.228.0/23 maxlen: 23
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:0a:f6:6b:18:ba:7e:3b:6f:fa:4d:15:70:08:bb:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf7178f7a005f93779f468d34badbccc1b9cea50
Validity
Not Before: Jan 1 15:54:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=122a82e5302f24e8f9270e51de4d8f7fb63d7975
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:0c:a5:44:67:f6:a7:a2:b0:86:11:ab:e5:0d:
13:cd:b9:db:a1:61:da:52:c4:66:a3:dc:a0:32:ea:
3d:9c:5c:10:a3:35:89:27:c4:ab:f2:26:46:8b:a7:
fc:ab:4d:ba:52:53:40:d6:e3:72:e0:d9:d9:a7:8d:
03:fe:bf:07:a7:07:a5:2c:b8:f7:87:02:ee:a3:bb:
49:63:f7:1b:91:20:57:0f:21:35:ba:d8:e6:f6:44:
f5:13:bb:66:2a:ac:85:b7:13:5c:02:8c:14:6c:9b:
d8:fb:db:87:04:c3:e9:83:cf:64:6f:6f:86:5e:dc:
a6:af:8a:40:ef:83:84:b7:3f:b3:82:aa:20:7c:6e:
e4:f6:53:b4:fb:3f:8f:ba:11:c2:1e:70:51:34:13:
81:78:8e:46:d8:ae:bc:5b:75:d9:9b:1e:f4:3f:46:
18:97:c5:f0:89:33:f3:ab:eb:2c:38:8a:d6:3c:8c:
4a:02:ec:85:06:9c:61:17:7f:75:ea:e4:03:f6:ec:
ba:1c:bf:6e:c9:28:cc:e6:47:c5:c9:05:c9:81:60:
02:ce:1d:87:51:62:c1:e9:f0:a5:cd:b5:54:ba:e5:
78:ee:6a:59:de:4a:11:91:9f:c0:89:71:e8:ee:c7:
46:79:d8:a3:8d:26:e1:83:86:4a:c8:b8:93:ac:1f:
17:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:2A:82:E5:30:2F:24:E8:F9:27:0E:51:DE:4D:8F:7F:B6:3D:79:75
X509v3 Authority Key Identifier:
keyid:CF:71:78:F7:A0:05:F9:37:79:F4:68:D3:4B:AD:BC:CC:1B:9C:EA:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z3F496AF-Td59GjTS628zBuc6lA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/259bea-2931-4de0-be42-5a3d8f0ecbfd/1/EiqC5TAvJOj5Jw5R3k2Pf7Y9eXU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/259bea-2931-4de0-be42-5a3d8f0ecbfd/1/z3F496AF-Td59GjTS628zBuc6lA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.195.228.0/23
Signature Algorithm: sha256WithRSAEncryption
b3:d1:a3:9c:2e:fc:75:ec:80:b4:2e:01:a2:58:c4:e5:64:4e:
18:9a:37:70:b2:09:e0:ed:04:a6:bc:ab:b8:57:6a:a6:b9:99:
13:1c:31:d2:a4:22:1d:6e:34:87:c4:f5:82:47:b4:61:6b:c7:
5e:0a:27:f7:58:db:de:b9:b5:d6:5e:9b:48:b9:92:1d:a7:fc:
36:fa:27:25:b6:46:db:d7:49:49:c7:25:e8:f5:36:af:6d:80:
51:ba:cc:b9:ad:a1:34:7a:c6:2a:a9:f8:e4:d3:d8:fd:bc:83:
fc:57:da:a9:0a:8d:5b:cf:1b:7c:ef:91:8b:93:83:ca:3f:93:
9e:8a:1c:2c:e5:28:25:fe:e4:1d:44:7b:ef:6e:95:cd:db:a1:
51:56:46:75:65:be:68:a6:e3:2c:7f:0e:70:76:2b:b7:0c:95:
1c:03:cc:16:21:5e:d7:ff:d6:88:85:49:6b:99:ff:84:3d:9d:
c6:11:b8:87:0f:e3:5c:b9:9e:37:a9:d8:51:db:27:db:44:42:
90:9f:e8:6f:e4:74:88:b1:ac:f8:e9:50:3c:c9:8e:57:5c:c2:
6c:7e:fd:a6:ed:14:e7:0f:46:37:41:ad:c6:22:66:4e:9f:d6:
71:f1:33:7e:a5:e3:48:a5:94:b4:fd:fe:dd:e9:91:cd:14:c3:
4a:ee:30:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 22:01:26 2025 by rpki-client