Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/986dde-5f68-4c21-b546-d540df886bab/1/0-4pECMSLxkl_IV3_S1avfIx47s.roa
File: 0-4pECMSLxkl_IV3_S1avfIx47s.roa (raw, json)
Hash identifier: y9N8d3Icu1S6BzUMEpmmN92g1PM5zwweIknEKafzgLA=
Subject key identifier: D3:EE:29:10:23:12:2F:19:25:FC:85:77:FD:2D:5A:BD:F2:31:E3:BB
Certificate issuer: /CN=e795c9617ca5a6a3bff263fc1837992fd1ac47f2
Certificate serial: 018964F72C0B2F572B027CD63297BB87FC50
Authority key identifier: E7:95:C9:61:7C:A5:A6:A3:BF:F2:63:FC:18:37:99:2F:D1:AC:47:F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/55XJYXylpqO_8mP8GDeZL9GsR_I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/986dde-5f68-4c21-b546-d540df886bab/1/0-4pECMSLxkl_IV3_S1avfIx47s.roa
Signing time: Mon 17 Jul 2023 17:47:47 +0000
ROA not before: Mon 17 Jul 2023 17:47:47 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 45.149.153.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:64:f7:2c:0b:2f:57:2b:02:7c:d6:32:97:bb:87:fc:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e795c9617ca5a6a3bff263fc1837992fd1ac47f2
Validity
Not Before: Jul 17 17:47:47 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d3ee291023122f1925fc8577fd2d5abdf231e3bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:ea:1d:33:fa:74:d3:ef:3c:79:e6:67:75:5d:
9d:1d:3f:bb:e3:b8:2c:db:f7:f1:0e:ab:9f:10:a0:
93:f8:18:d8:b4:8d:d9:e6:e7:fe:51:fd:d6:57:9e:
79:d6:87:3e:b3:b3:ec:42:89:c7:e4:29:aa:5f:16:
d5:a0:92:df:8c:d8:da:b1:9f:f5:ed:84:9a:d1:52:
e1:bd:27:2e:ba:b9:03:5e:2d:78:b1:0c:9b:00:59:
69:de:af:0c:ee:21:f4:81:3f:64:34:63:90:67:1b:
5a:99:f1:6b:2f:76:d0:fd:20:14:0c:66:d5:ff:55:
fd:14:1b:d0:c9:2d:c1:81:2b:8f:ec:d3:65:79:d5:
f6:c2:cf:08:2e:7a:cf:85:dc:05:72:df:40:28:f4:
1b:31:70:03:e8:97:ad:37:83:66:13:2a:f8:02:2c:
1a:06:08:93:ed:2d:dd:fc:bf:b1:c7:da:06:0a:98:
21:88:ee:6d:77:7c:d6:37:2b:2d:8e:66:63:0c:0c:
c9:8d:64:83:c1:7e:34:df:86:05:c0:91:73:39:f8:
68:cc:7c:e8:61:e2:30:a9:b4:8c:10:5c:43:ca:f7:
4c:24:3b:0b:54:75:7f:0d:09:e0:8b:23:e6:d4:51:
a7:24:97:ab:22:1e:f3:79:99:1a:51:ee:51:ae:8a:
be:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:EE:29:10:23:12:2F:19:25:FC:85:77:FD:2D:5A:BD:F2:31:E3:BB
X509v3 Authority Key Identifier:
keyid:E7:95:C9:61:7C:A5:A6:A3:BF:F2:63:FC:18:37:99:2F:D1:AC:47:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/55XJYXylpqO_8mP8GDeZL9GsR_I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/986dde-5f68-4c21-b546-d540df886bab/1/0-4pECMSLxkl_IV3_S1avfIx47s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/986dde-5f68-4c21-b546-d540df886bab/1/55XJYXylpqO_8mP8GDeZL9GsR_I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.149.153.0/24
Signature Algorithm: sha256WithRSAEncryption
5f:ea:62:d5:22:a7:9b:91:4c:d7:b7:02:7a:9b:3e:e1:f3:df:
65:91:b3:fb:59:0f:2c:f2:8a:c7:38:6a:4c:9a:e4:21:96:7c:
b3:3a:f5:3b:b0:8e:f0:26:8d:c4:25:b3:35:51:78:22:43:f5:
5d:f1:26:20:a6:d5:e9:f3:0c:8c:87:a2:3c:85:bf:c2:2d:50:
21:f5:96:1d:9b:66:a3:b9:a0:8d:09:c4:a3:55:5f:d0:96:98:
c7:4e:71:f2:c3:5d:90:59:78:c5:b9:a1:ff:1a:36:de:a7:09:
89:01:9c:4d:33:3d:49:f6:a5:cc:09:52:81:1c:5e:95:d5:03:
a1:be:94:4d:1b:bd:95:e3:a9:8a:0b:65:ad:6e:ca:66:d0:df:
09:e6:a8:5a:58:d3:e4:5f:8b:28:ed:96:5f:ca:cd:5d:a9:e8:
70:2f:03:9d:ca:66:08:94:4d:bc:51:fb:a5:f4:0d:b6:ad:a9:
98:5d:b6:3c:16:ec:16:db:f3:5f:df:d5:6a:c6:5a:cd:3e:66:
6b:09:52:c0:35:5e:fb:02:80:7a:a9:a6:62:5d:c7:0d:b2:c9:
e4:fa:97:45:c5:69:66:bf:87:f7:79:f4:d9:9a:93:9a:a6:8b:
d7:4e:1d:6e:0e:ca:74:d2:de:af:2f:a0:dc:d2:ef:6d:71:65:
86:0f:28:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 14:12:21 2025 by rpki-client