Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/986dde-5f68-4c21-b546-d540df886bab/1/J9hN_GK0aNFwEZy04hYJsFEGoF0.roa
File: J9hN_GK0aNFwEZy04hYJsFEGoF0.roa (raw, json)
Hash identifier: UMaSV2LMuxYFVYEry1+WQINPRydmQiZpkue7uZW5+cM=
Subject key identifier: 27:D8:4D:FC:62:B4:68:D1:70:11:9C:B4:E2:16:09:B0:51:06:A0:5D
Certificate issuer: /CN=e795c9617ca5a6a3bff263fc1837992fd1ac47f2
Certificate serial: 04265E51
Authority key identifier: E7:95:C9:61:7C:A5:A6:A3:BF:F2:63:FC:18:37:99:2F:D1:AC:47:F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/55XJYXylpqO_8mP8GDeZL9GsR_I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/986dde-5f68-4c21-b546-d540df886bab/1/J9hN_GK0aNFwEZy04hYJsFEGoF0.roa
Signing time: Thu 10 Mar 2022 17:01:52 +0000
ROA not before: Thu 10 Mar 2022 17:01:52 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 7018
IP address blocks: 45.149.153.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 69623377 (0x4265e51)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e795c9617ca5a6a3bff263fc1837992fd1ac47f2
Validity
Not Before: Mar 10 17:01:52 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=27d84dfc62b468d170119cb4e21609b05106a05d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:08:b5:c7:4e:8f:ca:90:64:e8:6f:6e:dd:df:
e1:64:7b:55:55:3e:70:b4:93:c5:23:dd:a7:1d:35:
a0:c4:71:e4:cb:6b:1a:c4:b1:70:72:8c:a6:14:07:
55:68:4d:23:91:a8:c8:bd:16:9d:a2:09:9e:31:f6:
5f:2f:6a:df:4b:27:9c:ed:60:9f:5e:3f:c2:2c:31:
71:d6:e4:4a:90:85:90:f3:cc:fd:fe:1d:7c:f2:e5:
e2:e6:65:7b:5e:de:ed:67:a5:07:79:40:a0:e4:a0:
1d:43:bc:03:09:4d:e8:f6:9f:40:b8:be:f4:78:35:
41:6b:62:01:c0:9c:e6:26:ef:43:e3:4c:3c:08:90:
79:b1:4c:37:cd:39:53:89:49:8c:d6:c5:0b:91:e6:
af:a2:08:57:4c:7b:12:a6:b0:55:ef:50:31:19:3f:
1a:27:4f:b2:0a:aa:32:30:20:08:d2:b9:32:29:5d:
2e:5f:bc:1a:bf:18:42:d5:4e:8b:3f:c4:cd:ee:31:
0e:ca:cb:4e:a1:40:a8:f6:32:d4:66:bc:60:00:6f:
29:0c:10:a1:94:b9:9d:7d:54:4f:42:43:e9:59:9c:
25:af:18:39:38:91:e2:87:41:75:62:ec:29:86:de:
fa:2f:4c:17:dd:94:c6:01:2a:80:29:45:e7:db:01:
41:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:D8:4D:FC:62:B4:68:D1:70:11:9C:B4:E2:16:09:B0:51:06:A0:5D
X509v3 Authority Key Identifier:
keyid:E7:95:C9:61:7C:A5:A6:A3:BF:F2:63:FC:18:37:99:2F:D1:AC:47:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/55XJYXylpqO_8mP8GDeZL9GsR_I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/986dde-5f68-4c21-b546-d540df886bab/1/J9hN_GK0aNFwEZy04hYJsFEGoF0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/986dde-5f68-4c21-b546-d540df886bab/1/55XJYXylpqO_8mP8GDeZL9GsR_I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.149.153.0/24
Signature Algorithm: sha256WithRSAEncryption
a0:f4:9f:f2:5c:2f:40:b0:3e:08:96:4e:a8:0d:37:b4:81:3d:
9e:c6:38:14:1a:c8:e6:a2:dc:da:3b:2c:35:95:cf:e3:4d:6a:
3f:79:6a:dc:06:af:01:cf:33:38:49:e3:6b:6c:27:51:3c:7a:
8d:57:7c:8c:46:22:2e:e2:0b:64:a1:55:09:1c:90:04:65:9c:
4c:fd:26:cb:55:91:db:7a:38:22:c6:88:62:54:bd:b7:da:f5:
07:97:a9:63:e3:d4:52:1c:2c:10:f2:c4:0b:72:25:cf:d6:48:
99:ca:aa:6b:23:ac:68:4b:96:cf:f9:c4:95:3d:81:6c:d9:d6:
57:24:ff:92:a5:3f:04:77:26:02:4c:30:e3:e9:60:9e:19:ba:
59:c2:7a:81:e3:83:39:b5:a7:cc:0d:14:af:61:ed:8f:fd:76:
c0:9c:60:34:be:da:7f:04:f3:e0:bf:28:21:93:24:34:27:ed:
c9:21:d5:fa:f8:00:eb:0f:e0:df:0c:1f:f8:4d:19:1e:cd:d4:
a3:71:27:ea:4d:22:40:b8:59:3f:6b:0c:75:79:04:b5:e6:b1:
ea:66:c6:78:29:de:b5:1c:68:60:85:32:f3:bd:24:e8:9f:80:
05:46:71:b9:d8:2b:5a:d8:dd:48:6c:9e:89:86:4b:c8:95:48:
2a:fd:85:42
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEBCZeUTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhl
Nzk1Yzk2MTdjYTVhNmEzYmZmMjYzZmMxODM3OTkyZmQxYWM0N2YyMB4XDTIyMDMx
MDE3MDE1MloXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoMjdkODRkZmM2MmI0
NjhkMTcwMTE5Y2I0ZTIxNjA5YjA1MTA2YTA1ZDCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAJUItcdOj8qQZOhvbt3f4WR7VVU+cLSTxSPdpx01oMRx5Mtr
GsSxcHKMphQHVWhNI5GoyL0WnaIJnjH2Xy9q30snnO1gn14/wiwxcdbkSpCFkPPM
/f4dfPLl4uZle17e7WelB3lAoOSgHUO8AwlN6PafQLi+9Hg1QWtiAcCc5ibvQ+NM
PAiQebFMN805U4lJjNbFC5Hmr6IIV0x7EqawVe9QMRk/GidPsgqqMjAgCNK5Mild
Ll+8Gr8YQtVOiz/Eze4xDsrLTqFAqPYy1Ga8YABvKQwQoZS5nX1UT0JD6VmcJa8Y
OTiR4odBdWLsKYbe+i9MF92UxgEqgClF59sBQVkCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBQn2E38YrRo0XARnLTiFgmwUQagXTAfBgNVHSMEGDAWgBTnlclhfKWmo7/y
Y/wYN5kv0axH8jAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
LzU1WEpZWHlscHFPXzhtUDhHRGVaTDlHc1JfSS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvZTAvOTg2ZGRlLTVmNjgtNGMyMS1iNTQ2LWQ1NDBkZjg4NmJhYi8x
L0o5aE5fR0swYU5Gd0VaeTA0aFlKc0ZFR29GMC5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZTAv
OTg2ZGRlLTVmNjgtNGMyMS1iNTQ2LWQ1NDBkZjg4NmJhYi8xLzU1WEpZWHlscHFP
XzhtUDhHRGVaTDlHc1JfSS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAC2VmTANBgkqhkiG9w0BAQsFAAOC
AQEAoPSf8lwvQLA+CJZOqA03tIE9nsY4FBrI5qLc2jssNZXP401qP3lq3AavAc8z
OEnja2wnUTx6jVd8jEYiLuILZKFVCRyQBGWcTP0my1WR23o4IsaIYlS9t9r1B5ep
Y+PUUhwsEPLEC3Ilz9ZImcqqayOsaEuWz/nElT2BbNnWVyT/kqU/BHcmAkww4+lg
nhm6WcJ6geODObWnzA0Ur2Htj/12wJxgNL7afwTz4L8oIZMkNCftySHV+vgA6w/g
3wwf+E0ZHs3Uo3En6k0iQLhZP2sMdXkEteax6mbGeCnetRxoYIUy870k6J+ABUZx
udgrWtjdSGyeiYZLyJVIKv2FQg==
-----END CERTIFICATE-----
Generated at Tue Apr 15 13:55:12 2025 by rpki-client