Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/986dde-5f68-4c21-b546-d540df886bab/1/6_8xGUKuLeTDlQvQNBbc622IDzU.roa
File: 6_8xGUKuLeTDlQvQNBbc622IDzU.roa (raw, json)
Hash identifier: ZkE1Rat/Bk8rPcyAYRJxJXMu9z36Il7Me0f4Viup7p8=
Subject key identifier: EB:FF:31:19:42:AE:2D:E4:C3:95:0B:D0:34:16:DC:EB:6D:88:0F:35
Certificate issuer: /CN=e795c9617ca5a6a3bff263fc1837992fd1ac47f2
Certificate serial: 03FBAE91
Authority key identifier: E7:95:C9:61:7C:A5:A6:A3:BF:F2:63:FC:18:37:99:2F:D1:AC:47:F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/55XJYXylpqO_8mP8GDeZL9GsR_I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/986dde-5f68-4c21-b546-d540df886bab/1/6_8xGUKuLeTDlQvQNBbc622IDzU.roa
Signing time: Wed 23 Feb 2022 09:54:50 +0000
ROA not before: Wed 23 Feb 2022 09:54:50 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 1239
IP address blocks: 45.149.154.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 66825873 (0x3fbae91)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e795c9617ca5a6a3bff263fc1837992fd1ac47f2
Validity
Not Before: Feb 23 09:54:50 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ebff311942ae2de4c3950bd03416dceb6d880f35
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:cc:6e:90:d0:47:b8:5c:7e:c6:13:1e:c6:c0:
45:5b:34:63:c7:41:a5:18:03:a7:f0:4e:35:3b:33:
3d:22:ce:99:75:c5:33:37:8d:a4:c8:3b:42:20:c4:
04:35:2e:76:f5:dd:f9:46:48:b1:8e:17:93:57:6a:
9a:7b:d5:c0:f8:fc:aa:00:e9:7a:17:c7:31:7a:70:
87:64:fc:31:a6:c5:59:af:5b:9e:f9:ac:59:bb:10:
e0:01:a4:61:a8:98:22:20:dc:67:03:47:ed:c8:81:
65:40:b7:34:81:ec:7f:88:ad:ad:b9:25:7b:20:e7:
30:98:e7:d8:e8:eb:86:5f:59:f8:a3:10:f1:bf:77:
6f:dc:c4:70:a8:ee:59:95:85:31:61:38:fc:c4:88:
d5:c1:56:72:24:83:9d:c3:e0:4c:c1:ce:f9:42:9e:
6c:12:63:35:7a:86:32:fa:ed:7f:75:29:fb:16:69:
1e:4a:61:6f:90:67:95:53:92:9b:46:db:55:8d:c1:
f3:06:c8:bd:59:72:ef:21:10:d6:f2:7f:a5:ba:b5:
cb:3c:97:ff:10:8d:0c:be:3b:b0:97:5a:bb:dd:bf:
ab:76:fc:34:f5:ea:69:b1:81:96:1c:32:63:ce:29:
65:24:a4:ee:30:00:94:fc:a9:d8:f7:a8:9f:f0:c5:
df:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:FF:31:19:42:AE:2D:E4:C3:95:0B:D0:34:16:DC:EB:6D:88:0F:35
X509v3 Authority Key Identifier:
keyid:E7:95:C9:61:7C:A5:A6:A3:BF:F2:63:FC:18:37:99:2F:D1:AC:47:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/55XJYXylpqO_8mP8GDeZL9GsR_I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/986dde-5f68-4c21-b546-d540df886bab/1/6_8xGUKuLeTDlQvQNBbc622IDzU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/986dde-5f68-4c21-b546-d540df886bab/1/55XJYXylpqO_8mP8GDeZL9GsR_I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.149.154.0/24
Signature Algorithm: sha256WithRSAEncryption
3b:d0:e5:e2:06:55:69:5f:00:8a:66:96:78:b3:95:fb:0f:28:
98:d2:3a:54:7d:1d:3e:45:ee:10:c1:39:4c:a2:18:f8:39:9d:
90:b1:28:53:8d:a8:02:c5:33:a3:da:0f:b9:51:d4:ad:df:fe:
d3:24:92:41:39:33:21:6d:92:55:e2:99:e7:af:ef:68:2e:3b:
bd:2f:41:77:d3:fa:76:f2:89:fb:10:51:6b:0b:1b:aa:12:3a:
4f:b6:a2:06:fd:7f:74:a6:c7:07:a3:17:4b:16:2e:bb:ea:b7:
70:fe:0f:68:67:a8:a9:b6:7a:6f:ad:0a:6b:40:2b:f8:ec:e2:
41:73:33:d0:f3:89:10:8a:5a:c6:f4:5d:cf:60:22:41:04:e1:
40:c8:cf:6a:92:ea:16:2a:92:aa:8f:55:f5:be:75:07:64:a1:
20:44:ee:5a:cd:0f:0b:45:cf:f9:2a:29:9b:7d:e6:bd:5a:4b:
70:65:56:84:44:71:92:12:c6:c4:87:9e:01:a9:52:1e:66:58:
83:65:17:5e:96:0c:69:ce:7c:97:db:6a:73:7b:39:0e:86:df:
5e:90:d7:9d:9f:39:9e:de:b1:58:3e:dc:20:ac:17:22:78:66:
f3:d7:b8:20:27:b8:f8:0e:84:55:25:ca:57:94:ee:9e:61:ab:
c2:de:28:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 14:05:37 2025 by rpki-client