Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/d665e6-f95d-4347-8565-d4f5317c5830/1/vj4gmgyfbf5C9GNPs4tkFxxJbXA.roa
File: vj4gmgyfbf5C9GNPs4tkFxxJbXA.roa (raw, json)
Hash identifier: zO1SfcuEclPrUS3rEHLdlMB8LphKPxQUyzV8YaGfDEc=
Subject key identifier: BE:3E:20:9A:0C:9F:6D:FE:42:F4:63:4F:B3:8B:64:17:1C:49:6D:70
Certificate issuer: /CN=96b8121d556df453456553dcb45c4143f4cdd213
Certificate serial: 0188242593492AED5240F2686A7E6F08BA22
Authority key identifier: 96:B8:12:1D:55:6D:F4:53:45:65:53:DC:B4:5C:41:43:F4:CD:D2:13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lrgSHVVt9FNFZVPctFxBQ_TN0hM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/d665e6-f95d-4347-8565-d4f5317c5830/1/vj4gmgyfbf5C9GNPs4tkFxxJbXA.roa
Signing time: Tue 16 May 2023 10:40:22 +0000
ROA not before: Tue 16 May 2023 10:40:22 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 41465
IP address blocks: 89.19.192.0/20 maxlen: 20
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:24:25:93:49:2a:ed:52:40:f2:68:6a:7e:6f:08:ba:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=96b8121d556df453456553dcb45c4143f4cdd213
Validity
Not Before: May 16 10:40:22 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=be3e209a0c9f6dfe42f4634fb38b64171c496d70
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:ce:75:e0:65:9a:a4:7a:86:cc:33:03:7f:cb:
6e:e1:d7:d3:8f:34:0a:99:bf:6e:cb:e7:c5:ab:e7:
3a:e9:bd:51:18:d0:03:df:35:8e:f1:71:4f:77:2f:
bc:8e:ba:65:61:d8:4c:b6:59:7c:cd:21:ea:9d:d0:
5a:2d:8e:f6:31:27:1c:7b:5d:33:4c:2a:ce:43:3d:
d5:6c:ab:56:69:96:00:61:12:d1:f3:a0:89:1c:44:
1c:04:56:e6:53:a6:3e:d0:ab:38:56:d6:7c:3a:12:
fc:47:0f:77:4d:01:4c:df:c0:31:d6:71:5f:b1:11:
cc:c1:f3:ba:de:92:d0:77:ba:71:4a:7d:61:cd:1e:
b9:08:e0:01:c8:3e:11:55:20:78:d7:df:1b:88:d1:
30:24:e2:a8:af:94:91:d5:38:bf:2f:a9:9c:b0:95:
a9:06:35:20:f3:f5:49:89:66:56:08:be:44:bf:10:
d3:69:05:3f:c2:71:39:12:b6:93:12:de:d6:b4:a4:
12:e7:18:02:50:08:92:0d:27:26:ae:28:ab:07:cd:
43:62:75:52:f6:a7:10:bd:c1:b7:66:87:ce:c0:ab:
5c:48:fc:a6:9f:ee:6b:88:02:5f:c8:d1:56:be:4d:
02:8f:f3:ed:3b:ee:28:57:67:63:45:0c:af:de:0c:
05:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:3E:20:9A:0C:9F:6D:FE:42:F4:63:4F:B3:8B:64:17:1C:49:6D:70
X509v3 Authority Key Identifier:
keyid:96:B8:12:1D:55:6D:F4:53:45:65:53:DC:B4:5C:41:43:F4:CD:D2:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lrgSHVVt9FNFZVPctFxBQ_TN0hM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/d665e6-f95d-4347-8565-d4f5317c5830/1/vj4gmgyfbf5C9GNPs4tkFxxJbXA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/d665e6-f95d-4347-8565-d4f5317c5830/1/lrgSHVVt9FNFZVPctFxBQ_TN0hM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.19.192.0/20
Signature Algorithm: sha256WithRSAEncryption
52:18:c5:e3:97:98:f1:04:9e:06:d3:30:fc:cc:0d:4c:51:f2:
aa:b9:85:f9:1d:fb:e8:db:b8:28:62:1c:72:ce:9f:ca:a1:b5:
c0:2c:96:26:69:ec:d4:e8:20:80:d7:36:af:71:21:f3:b5:99:
4f:96:a9:ea:1f:01:68:af:7c:00:42:cd:0a:ad:e9:83:b8:7d:
fe:01:29:31:cd:1a:8c:42:76:ec:06:59:89:d7:f9:e8:5e:36:
da:8a:7e:8b:e3:3c:8e:41:79:8a:de:28:5b:98:72:57:55:9c:
7c:c1:7d:4d:eb:c2:cc:ab:e6:ed:5c:97:79:64:a7:44:97:2e:
45:78:08:95:02:5a:ea:fe:4f:e3:5f:e0:be:24:ce:38:9f:aa:
a6:43:cf:e1:c2:1f:af:70:d9:63:dd:fe:ec:c8:dc:25:4c:08:
46:1f:2a:21:b3:8d:e4:60:f4:98:d5:19:3a:20:55:ec:0f:c8:
f0:32:8a:b1:c5:90:80:e8:b4:67:df:29:df:dd:ed:5c:f4:bf:
f4:71:0c:49:4d:f9:44:ab:67:fb:b1:fb:cf:ab:10:9c:1a:76:
df:47:80:9b:3d:56:44:68:26:f9:5f:33:12:94:81:91:d9:b9:
a4:25:1e:4f:9c:00:cd:24:1f:93:98:aa:d1:d0:92:07:40:6f:
b8:5a:07:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:16:05 2025 by rpki-client