Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/a8dadc-611b-4063-adb6-55b659cd82bb/1/6JGZ23nNSLMhsYIjcaIj2CRNg78.roa
File: 6JGZ23nNSLMhsYIjcaIj2CRNg78.roa (raw, json)
Hash identifier: NSMNj7MzfzRiB7ibkUFT80cS+9FzXyjpiqmTdXm+uYY=
Subject key identifier: E8:91:99:DB:79:CD:48:B3:21:B1:82:23:71:A2:23:D8:24:4D:83:BF
Certificate issuer: /CN=217b7ab062bc828b348d05306e65354748b9d6d6
Certificate serial: 019421B1BD37BA106B82CAC6C8C3151221E7
Authority key identifier: 21:7B:7A:B0:62:BC:82:8B:34:8D:05:30:6E:65:35:47:48:B9:D6:D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IXt6sGK8gos0jQUwbmU1R0i51tY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/a8dadc-611b-4063-adb6-55b659cd82bb/1/6JGZ23nNSLMhsYIjcaIj2CRNg78.roa
Signing time: Wed 01 Jan 2025 11:48:03 +0000
ROA not before: Wed 01 Jan 2025 11:48:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 207713
IP address blocks: 193.228.128.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b1:bd:37:ba:10:6b:82:ca:c6:c8:c3:15:12:21:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=217b7ab062bc828b348d05306e65354748b9d6d6
Validity
Not Before: Jan 1 11:48:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e89199db79cd48b321b1822371a223d8244d83bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:3b:d2:82:95:74:9b:6b:1d:da:5e:01:b3:ef:
79:07:0f:5e:49:59:1c:8c:1f:de:84:4e:d1:dc:74:
81:e3:b3:78:ef:39:f3:5d:35:87:cd:6a:9f:1d:0a:
7e:c8:c4:09:b3:bb:2f:3d:b0:3e:76:d0:26:ad:f3:
a7:66:05:2d:10:c6:a5:2a:ae:f4:76:74:2d:c9:9a:
ad:ed:41:15:af:29:12:24:ea:d3:21:a1:db:7a:9b:
87:04:3d:81:2d:0c:2d:d6:12:d7:92:68:e0:57:94:
2b:a4:17:d5:e6:b1:9b:50:50:29:0c:d0:c6:96:2c:
e6:28:bc:ef:34:a4:04:98:c6:2c:85:98:16:f3:3f:
19:be:36:1d:7d:80:c5:50:42:e6:f4:00:df:b9:e4:
25:b7:f7:75:35:a2:d1:a0:f4:da:df:1b:e7:36:78:
86:06:b2:ac:71:09:d5:69:f7:2f:f9:83:cf:77:3e:
51:cf:fd:ec:8e:2b:bc:a3:f5:8f:1b:b2:01:82:83:
0e:8f:b6:51:65:d7:fe:f2:e7:f3:ff:44:5e:4a:60:
95:fb:56:a2:9f:4f:8b:63:f9:94:e1:28:af:67:ba:
cd:d3:15:44:4d:a4:b7:5f:e6:a3:92:7a:87:16:42:
5b:f7:50:1a:e4:29:e8:04:e0:e5:23:d2:6d:96:35:
ed:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:91:99:DB:79:CD:48:B3:21:B1:82:23:71:A2:23:D8:24:4D:83:BF
X509v3 Authority Key Identifier:
keyid:21:7B:7A:B0:62:BC:82:8B:34:8D:05:30:6E:65:35:47:48:B9:D6:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IXt6sGK8gos0jQUwbmU1R0i51tY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/a8dadc-611b-4063-adb6-55b659cd82bb/1/6JGZ23nNSLMhsYIjcaIj2CRNg78.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/a8dadc-611b-4063-adb6-55b659cd82bb/1/IXt6sGK8gos0jQUwbmU1R0i51tY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.228.128.0/24
Signature Algorithm: sha256WithRSAEncryption
7e:be:4d:48:22:68:76:19:fb:83:c8:59:b1:09:b4:5e:ac:7b:
02:90:71:50:26:36:15:fb:9d:5a:22:0f:74:32:67:1c:ea:a5:
3d:d2:fe:6e:7f:50:f1:c2:80:e7:e2:36:f6:3c:41:ad:05:f0:
9e:e3:5c:87:73:4b:6f:ff:1d:95:97:0e:d6:65:fb:92:21:04:
3f:05:e6:da:50:ff:26:4a:e1:f5:b2:74:c4:a4:88:dd:2c:60:
22:70:29:21:87:12:17:78:30:a1:b7:2a:60:98:ab:8a:6c:6e:
4f:3c:99:dd:67:cc:4d:a5:d9:e1:65:c5:6a:b1:d5:52:77:36:
6c:1b:bd:73:f9:2f:bc:0f:cf:7f:7a:c4:d2:da:01:a8:9e:4f:
a3:60:a3:49:80:a1:07:1d:43:f2:de:eb:fd:fb:91:a7:15:6d:
84:86:71:bc:55:b0:ee:d5:ea:85:6b:ce:74:9c:ae:49:e4:a3:
46:9f:eb:80:af:57:c6:01:c4:fb:29:55:d6:90:4b:6d:77:6a:
48:75:36:63:ab:f9:93:15:99:32:cb:12:4a:0a:e4:02:1d:69:
20:92:99:90:eb:b2:4f:ca:cd:e6:c5:46:c0:22:56:c3:f9:58:
f7:2c:13:1c:27:c6:6d:d0:53:db:67:d2:22:e3:4a:f0:00:98:
45:51:a9:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 00:26:52 2025 by rpki-client