Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/986dde-5f68-4c21-b546-d540df886bab/1/RqDcrlQ2FqVGP0hJZN1zCPL3Ie0.roa
File: RqDcrlQ2FqVGP0hJZN1zCPL3Ie0.roa (raw, json)
Hash identifier: jlN0q8RLiXnzQUyz2ZmA/p9tkig+qSQA+QDYWYb68kI=
Subject key identifier: 46:A0:DC:AE:54:36:16:A5:46:3F:48:49:64:DD:73:08:F2:F7:21:ED
Certificate issuer: /CN=e795c9617ca5a6a3bff263fc1837992fd1ac47f2
Certificate serial: 0424A799
Authority key identifier: E7:95:C9:61:7C:A5:A6:A3:BF:F2:63:FC:18:37:99:2F:D1:AC:47:F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/55XJYXylpqO_8mP8GDeZL9GsR_I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/986dde-5f68-4c21-b546-d540df886bab/1/RqDcrlQ2FqVGP0hJZN1zCPL3Ie0.roa
Signing time: Thu 10 Mar 2022 17:01:05 +0000
ROA not before: Thu 10 Mar 2022 17:01:05 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 61317
IP address blocks: 45.149.154.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 69511065 (0x424a799)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e795c9617ca5a6a3bff263fc1837992fd1ac47f2
Validity
Not Before: Mar 10 17:01:05 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=46a0dcae543616a5463f484964dd7308f2f721ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:42:10:6a:ff:67:4d:ac:a6:3a:c5:60:c6:e4:
24:57:46:2c:ed:90:67:9a:52:10:34:f9:6c:9a:11:
63:3f:15:c7:56:e3:aa:c6:64:12:97:0c:7e:21:7e:
0d:6e:d8:61:f7:45:61:80:8a:93:e3:01:db:2e:da:
dc:be:04:73:bd:59:9c:e5:e6:7d:dc:7d:3f:99:18:
45:d3:8b:66:5d:46:d5:e2:c1:a1:dd:be:c5:c7:2e:
fd:b7:4a:2c:ce:88:5c:90:ac:98:6b:4f:35:4d:49:
71:c9:d3:3f:7a:d3:25:7d:3d:47:82:10:70:b9:75:
60:7f:ae:4f:db:85:fb:1a:1d:4c:a5:9d:65:e1:5d:
ab:32:04:32:0b:1a:f4:b0:eb:0e:46:b9:16:1e:dd:
be:25:38:07:15:c0:e9:f0:a5:f4:6e:54:b9:a6:e8:
32:10:fa:5c:86:0e:ff:ba:71:fb:b3:79:36:04:d5:
c5:18:16:95:d3:fe:5f:74:2e:e9:ad:6a:9e:73:f2:
f0:d1:5a:fe:85:f7:81:37:30:21:82:dd:c7:77:fb:
98:be:c0:1b:a0:52:a0:27:ec:bb:f8:d5:c8:31:dd:
5a:5c:da:36:ee:f9:99:ab:ca:26:5d:3b:88:77:4c:
44:2d:0b:f1:97:6b:cf:7f:81:60:a7:25:09:cc:20:
cc:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:A0:DC:AE:54:36:16:A5:46:3F:48:49:64:DD:73:08:F2:F7:21:ED
X509v3 Authority Key Identifier:
keyid:E7:95:C9:61:7C:A5:A6:A3:BF:F2:63:FC:18:37:99:2F:D1:AC:47:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/55XJYXylpqO_8mP8GDeZL9GsR_I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/986dde-5f68-4c21-b546-d540df886bab/1/RqDcrlQ2FqVGP0hJZN1zCPL3Ie0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/986dde-5f68-4c21-b546-d540df886bab/1/55XJYXylpqO_8mP8GDeZL9GsR_I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.149.154.0/24
Signature Algorithm: sha256WithRSAEncryption
0d:27:81:95:4d:c9:94:95:c2:76:2c:a7:61:52:8c:d1:7e:a6:
ce:36:71:43:d4:bc:9e:2f:b3:42:a2:82:11:bf:43:e7:07:db:
ea:24:4e:a8:49:c1:bb:46:df:b6:91:a9:a2:0b:c6:17:3e:25:
54:fd:59:dc:31:c8:fb:a7:cc:a5:b7:9c:5a:c9:56:1e:04:6f:
f2:3a:36:e7:84:4c:8d:d6:9a:3d:73:3c:e2:c8:7e:72:66:d2:
4a:00:e7:ee:6e:20:87:4f:d5:ba:23:82:8f:80:c4:5c:d3:f0:
15:45:be:7b:a9:49:0f:88:60:5a:4e:f7:da:44:ec:13:d0:7c:
a4:68:af:1b:49:4e:d1:a9:6d:f8:61:3a:4a:da:db:7b:0f:79:
87:05:6b:7d:9f:bd:32:a1:ca:94:2f:73:ce:ea:d9:c8:23:52:
37:d8:d4:78:83:79:7f:f7:8b:4e:52:6f:92:b9:e6:8b:0d:1e:
9a:c8:fc:c2:8e:f3:91:a6:8c:4a:9c:38:ba:ab:83:6f:10:a5:
40:ba:38:a8:f8:c8:49:eb:7e:86:30:4b:29:e1:fd:55:bf:9f:
99:40:b7:53:d2:25:8d:96:f7:90:1c:cb:35:58:ff:23:40:f3:
a9:e6:ff:40:e5:c2:37:06:4b:44:d9:af:0f:60:69:b4:80:d2:
a1:e2:c4:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 13:52:45 2025 by rpki-client