Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/ec583d-1aba-4798-8817-d6c9c6e86923/1/mwqnejfsq0UdTU-brAN7rjRidwE.roa
File: mwqnejfsq0UdTU-brAN7rjRidwE.roa (raw, json)
Hash identifier: e0WIYNU+M/4UjX58J5L7AAYB6Bs41lNkUtYflsYczXw=
Subject key identifier: 9B:0A:A7:7A:37:EC:AB:45:1D:4D:4F:9B:AC:03:7B:AE:34:62:77:01
Certificate issuer: /CN=83286fa6da7d252e7828f84923f55919142b007f
Certificate serial: 16A70860
Authority key identifier: 83:28:6F:A6:DA:7D:25:2E:78:28:F8:49:23:F5:59:19:14:2B:00:7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gyhvptp9JS54KPhJI_VZGRQrAH8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/ec583d-1aba-4798-8817-d6c9c6e86923/1/mwqnejfsq0UdTU-brAN7rjRidwE.roa
Signing time: Sat 01 Jan 2022 09:59:51 +0000
ROA not before: Sat 01 Jan 2022 09:59:51 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 207160
IP address blocks: 185.65.243.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 380045408 (0x16a70860)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=83286fa6da7d252e7828f84923f55919142b007f
Validity
Not Before: Jan 1 09:59:51 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=9b0aa77a37ecab451d4d4f9bac037bae34627701
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:90:1d:9b:06:ed:51:b7:74:16:f9:e0:04:d7:
e8:fb:e6:a8:7b:f9:4e:84:eb:c5:7e:7f:56:7a:dc:
76:6b:8c:23:34:be:4e:c6:57:5a:e7:d3:5d:93:8b:
d2:ab:a9:88:9f:83:5e:d7:05:c5:12:a4:b6:92:0b:
2b:0a:d9:72:72:4f:6c:7f:84:17:2c:40:5f:65:01:
b6:fd:4a:de:d1:4d:94:9d:83:06:16:78:1a:18:ae:
88:ec:2f:fb:26:1f:db:64:0c:20:29:3e:bc:d6:ca:
ad:5d:1b:a7:89:28:dc:ef:b5:ae:82:a4:f7:eb:72:
33:04:f0:ed:88:7a:bc:79:9f:ca:14:05:ff:70:3c:
11:bb:c2:0c:6d:00:05:f4:07:fe:46:1d:f4:07:fc:
80:86:dd:18:2d:b4:7a:c1:4b:01:70:14:13:4b:c1:
7f:9d:91:d2:d7:df:4a:03:3a:f4:e0:cd:9b:d1:37:
cc:62:54:40:44:99:52:2e:f1:9b:ec:66:86:47:3a:
de:92:76:14:82:64:99:90:70:0c:35:b9:fc:bb:23:
bb:af:dc:20:1c:7e:f2:e8:04:b8:90:6d:c3:f1:ae:
6a:c6:14:66:7f:b8:31:4e:79:cc:77:ba:12:9f:dd:
ce:1d:22:c4:9b:aa:09:1d:9d:a2:01:bc:32:32:a3:
b8:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:0A:A7:7A:37:EC:AB:45:1D:4D:4F:9B:AC:03:7B:AE:34:62:77:01
X509v3 Authority Key Identifier:
keyid:83:28:6F:A6:DA:7D:25:2E:78:28:F8:49:23:F5:59:19:14:2B:00:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gyhvptp9JS54KPhJI_VZGRQrAH8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/ec583d-1aba-4798-8817-d6c9c6e86923/1/mwqnejfsq0UdTU-brAN7rjRidwE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/ec583d-1aba-4798-8817-d6c9c6e86923/1/gyhvptp9JS54KPhJI_VZGRQrAH8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.65.243.0/24
Signature Algorithm: sha256WithRSAEncryption
b1:04:1f:b5:e0:e2:b9:24:81:3e:97:3d:23:67:d7:03:00:81:
38:8e:e9:8e:05:64:07:9b:e7:0a:5f:2e:0f:63:35:e0:39:66:
6d:8d:2c:99:d9:e2:05:bf:e0:ce:ab:ed:1e:d7:32:aa:e9:e8:
3f:7a:80:0a:3d:45:30:71:f7:1e:57:c2:d5:d9:93:4b:34:ee:
5b:09:f5:4d:3c:d7:c9:f3:72:87:88:c1:0d:1d:2a:21:05:77:
ff:40:13:6d:9f:7b:40:49:53:ab:8a:7c:bc:1e:d3:bb:b3:e4:
e0:ad:0e:64:a9:92:40:73:ed:fc:14:84:58:d2:f4:9b:22:cc:
df:01:56:83:98:33:18:f2:b2:71:3c:ee:3d:01:84:48:26:97:
33:30:5f:93:98:44:85:9b:48:b6:63:6e:81:ad:b7:c1:b5:77:
d5:45:55:f9:76:cc:93:4d:a9:f1:9b:87:00:94:97:fb:42:f8:
73:e6:ac:a0:9c:22:0d:c5:2f:87:4e:82:93:60:c9:41:fe:f0:
ab:bc:9e:cb:4d:d6:d2:48:81:16:f0:36:42:b2:db:4b:c9:ee:
33:bf:ce:7e:6c:27:d6:68:a8:9b:ad:a6:2d:6c:07:ba:fb:cb:
c4:97:61:51:c3:15:a1:3b:27:25:f3:6e:41:2a:9c:60:09:b4:
17:8b:0b:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 18:30:42 2025 by rpki-client