Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/d665e6-f95d-4347-8565-d4f5317c5830/1/B4Egg5LkNKItdt_vftN6ZI9bX9o.roa
File: B4Egg5LkNKItdt_vftN6ZI9bX9o.roa (raw, json)
Hash identifier: vkyf8Qrp6WUfyDEUFcusLmNREsG2i4utSsnUXmFvKBI=
Subject key identifier: 07:81:20:83:92:E4:34:A2:2D:76:DF:EF:7E:D3:7A:64:8F:5B:5F:DA
Certificate issuer: /CN=96b8121d556df453456553dcb45c4143f4cdd213
Certificate serial: 018CC6B8A8E121ACB479C054B7D7106E4C96
Authority key identifier: 96:B8:12:1D:55:6D:F4:53:45:65:53:DC:B4:5C:41:43:F4:CD:D2:13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lrgSHVVt9FNFZVPctFxBQ_TN0hM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/d665e6-f95d-4347-8565-d4f5317c5830/1/B4Egg5LkNKItdt_vftN6ZI9bX9o.roa
Signing time: Mon 01 Jan 2024 20:30:39 +0000
ROA not before: Mon 01 Jan 2024 20:30:39 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 41465
IP address blocks: 89.19.192.0/20 maxlen: 20
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:b8:a8:e1:21:ac:b4:79:c0:54:b7:d7:10:6e:4c:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=96b8121d556df453456553dcb45c4143f4cdd213
Validity
Not Before: Jan 1 20:30:39 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0781208392e434a22d76dfef7ed37a648f5b5fda
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:56:3c:cc:fa:f2:fc:9c:2a:be:99:73:c8:22:
ad:07:22:98:e0:51:7d:ab:7b:9a:d4:a3:6a:fa:9e:
6e:1e:97:75:3c:d0:e1:89:38:d1:e7:70:ee:c4:d9:
4e:56:e2:f6:6e:3a:d0:0d:72:80:d5:54:d8:b1:d1:
62:a9:f1:c8:91:f1:80:00:e4:84:d7:de:7e:43:40:
06:47:b8:fd:73:d5:35:f6:7e:98:92:4c:32:d7:61:
5a:62:4a:4d:cf:57:03:3c:74:1d:f2:bb:fa:3b:05:
fe:ad:ff:ba:cb:ed:5c:94:a9:58:85:46:61:09:c6:
a0:34:59:78:a1:eb:0f:4f:85:c8:cf:80:b8:d5:b7:
10:83:b4:8a:63:38:3c:11:c5:ea:c5:b8:66:05:d1:
33:b7:bd:fd:0a:4d:91:11:d3:a9:4d:4c:be:5a:24:
c2:11:39:c8:9d:a8:d5:2d:41:a5:13:68:b1:5f:54:
9e:7a:61:a7:10:3c:6e:ed:da:10:18:fb:1c:d9:7c:
9d:56:75:2a:65:88:71:ba:fc:21:96:d0:55:49:ee:
bd:13:39:25:ef:fa:74:77:e8:59:84:d3:65:a3:86:
c0:ce:4b:cf:ca:7a:97:fb:5c:17:57:10:0a:8f:ad:
02:31:d3:98:9d:4b:b5:93:a9:a9:72:d9:63:7e:c9:
b9:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:81:20:83:92:E4:34:A2:2D:76:DF:EF:7E:D3:7A:64:8F:5B:5F:DA
X509v3 Authority Key Identifier:
keyid:96:B8:12:1D:55:6D:F4:53:45:65:53:DC:B4:5C:41:43:F4:CD:D2:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lrgSHVVt9FNFZVPctFxBQ_TN0hM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/d665e6-f95d-4347-8565-d4f5317c5830/1/B4Egg5LkNKItdt_vftN6ZI9bX9o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/d665e6-f95d-4347-8565-d4f5317c5830/1/lrgSHVVt9FNFZVPctFxBQ_TN0hM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.19.192.0/20
Signature Algorithm: sha256WithRSAEncryption
2b:04:4e:3d:2e:e8:ac:01:fa:10:f6:b5:b2:5d:ae:b3:59:a2:
07:bd:66:23:d0:07:31:a9:81:d4:5e:b1:29:a7:78:a9:9d:c3:
19:39:bf:73:d1:53:47:26:4b:87:42:2f:ba:c2:f3:d0:2f:a8:
b4:38:13:b9:0c:50:e4:8a:0c:8b:af:bc:73:2d:de:11:4a:df:
e5:0c:ca:86:ea:dc:dd:1b:2c:aa:46:a9:52:d5:39:ea:f7:d0:
c5:62:8f:c0:50:50:e7:64:7f:31:c7:41:ab:c7:52:97:a0:c9:
00:b0:e9:7d:c4:2a:eb:19:31:33:93:3c:7a:29:18:5e:34:5f:
96:4f:87:7c:49:26:9e:77:84:17:18:2e:76:cc:ce:5a:6b:d3:
a0:6b:e4:87:f5:57:c8:15:8a:29:70:57:64:7c:fb:5b:1e:42:
24:61:40:d6:6e:e4:63:24:c4:15:f3:6a:83:66:e0:e2:b8:da:
17:f1:09:0b:b9:fc:08:d9:2d:cb:93:fb:2d:ba:8f:f0:2c:ba:
db:b7:e3:8b:e7:27:f9:2e:30:00:2e:be:86:da:cc:6b:f2:05:
8e:55:ab:bd:37:24:33:f9:eb:c5:80:93:b6:9e:57:64:a6:88:
45:1c:ed:a9:1d:a6:eb:be:82:6e:29:34:6f:76:eb:d8:86:48:
ac:bb:ec:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:41:22 2025 by rpki-client