Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/986dde-5f68-4c21-b546-d540df886bab/1/GoojTgDNNCNc2bZNzIUP2NQQB5M.roa
File: GoojTgDNNCNc2bZNzIUP2NQQB5M.roa (raw, json)
Hash identifier: ODj2Q9mwogfJfj+rZWz0xdhAIbzIV2y5JIXuEQgoX3s=
Subject key identifier: 1A:8A:23:4E:00:CD:34:23:5C:D9:B6:4D:CC:85:0F:D8:D4:10:07:93
Certificate issuer: /CN=e795c9617ca5a6a3bff263fc1837992fd1ac47f2
Certificate serial: 018F80F0EEA264BDEE45FB6C25232D9DB16B
Authority key identifier: E7:95:C9:61:7C:A5:A6:A3:BF:F2:63:FC:18:37:99:2F:D1:AC:47:F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/55XJYXylpqO_8mP8GDeZL9GsR_I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/986dde-5f68-4c21-b546-d540df886bab/1/GoojTgDNNCNc2bZNzIUP2NQQB5M.roa
Signing time: Thu 16 May 2024 10:27:04 +0000
ROA not before: Thu 16 May 2024 10:27:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 0
IP address blocks: 45.149.152.0/22 maxlen: 24
45.149.153.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:80:f0:ee:a2:64:bd:ee:45:fb:6c:25:23:2d:9d:b1:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e795c9617ca5a6a3bff263fc1837992fd1ac47f2
Validity
Not Before: May 16 10:27:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1a8a234e00cd34235cd9b64dcc850fd8d4100793
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:ed:ee:dd:bc:dd:8b:21:13:0a:c3:92:bc:d4:
e9:f0:65:0b:c0:da:aa:da:1a:a5:4c:32:59:5c:e1:
f4:5f:8d:cf:70:19:8b:6b:26:50:49:5b:7c:ba:8c:
4e:01:a4:12:29:97:1e:0c:6b:54:a7:6c:23:0b:54:
68:e1:25:9e:4a:2a:d6:b1:bf:5b:1c:4c:e5:37:41:
1a:4f:89:20:09:27:5d:d2:e5:17:7d:b5:32:61:62:
1b:80:f0:93:ed:4b:9e:53:4a:a6:e6:04:e6:78:81:
97:23:5f:d6:29:ef:62:b2:4f:ef:3e:c6:97:b2:14:
7f:a2:5f:ac:e0:5b:71:c9:fb:a8:97:cc:1a:c2:3b:
a5:71:4f:9a:31:ca:31:f9:c5:da:72:71:ef:40:61:
57:d1:fd:9d:20:13:0e:f5:22:17:94:07:ec:27:a6:
11:7e:64:f7:7d:72:e5:7c:a5:eb:e7:29:df:8c:22:
0f:4f:47:38:1d:c8:e7:05:5f:9a:80:5c:fb:03:03:
f4:42:71:60:7c:c9:c9:8c:f0:4d:19:3b:c3:1c:9f:
32:42:2a:18:79:d2:d6:77:2c:e5:91:70:ed:88:1f:
cf:e5:bc:22:dc:d8:8b:2d:07:3a:af:ea:9a:1e:88:
4a:4f:81:c1:8f:2a:f5:06:c1:8f:b3:ac:43:c9:34:
08:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:8A:23:4E:00:CD:34:23:5C:D9:B6:4D:CC:85:0F:D8:D4:10:07:93
X509v3 Authority Key Identifier:
keyid:E7:95:C9:61:7C:A5:A6:A3:BF:F2:63:FC:18:37:99:2F:D1:AC:47:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/55XJYXylpqO_8mP8GDeZL9GsR_I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/986dde-5f68-4c21-b546-d540df886bab/1/GoojTgDNNCNc2bZNzIUP2NQQB5M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/986dde-5f68-4c21-b546-d540df886bab/1/55XJYXylpqO_8mP8GDeZL9GsR_I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.149.152.0/22
Signature Algorithm: sha256WithRSAEncryption
7a:ad:84:cc:75:39:3f:0e:34:b2:7e:24:09:3e:f8:f9:56:02:
df:6c:50:2a:1b:bc:48:31:22:a1:65:e8:08:a4:f2:cd:64:1c:
9e:2f:37:7b:d3:e4:8b:06:98:ac:99:af:51:e2:39:d6:23:f0:
58:5d:71:0b:e3:55:fa:80:16:72:bc:24:62:b6:c5:12:a5:b0:
44:ca:0e:30:dd:1e:17:3d:32:71:12:0a:1c:93:70:23:dc:a0:
7d:1b:e7:b6:fd:01:ab:79:5b:3e:aa:3b:c3:a5:b6:63:e4:e4:
ec:a6:3d:85:77:98:17:4f:15:fb:0f:8a:44:dc:81:f3:8b:f8:
f5:0e:7f:43:5b:29:e8:96:e0:76:96:87:0d:b6:7f:4a:a2:30:
6a:d4:3f:9c:44:72:8b:43:93:b8:6f:42:3e:28:df:98:b4:18:
e7:fa:fb:19:11:9b:8a:84:88:00:34:9a:2b:24:f6:64:82:1c:
21:f1:b4:a0:1b:77:00:ff:d0:ef:a9:64:f5:21:0a:05:70:46:
bf:14:f4:d8:2f:90:d6:d4:87:0d:65:5a:82:db:66:52:4e:85:
c8:72:ce:02:65:7c:01:ed:c0:55:5e:fd:42:31:95:c2:6c:07:
81:a3:a9:0e:d0:29:62:98:a0:b6:4c:a3:d7:bf:4a:19:77:d8:
97:0b:ad:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 23 12:44:05 2025 by rpki-client