Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/986dde-5f68-4c21-b546-d540df886bab/1/xQ9gVOrbZmLAtMZ0M-rOABTkKYU.roa
File: xQ9gVOrbZmLAtMZ0M-rOABTkKYU.roa (raw, json)
Hash identifier: MTczlR5Nj5kG+vQ3d3LH5RJ2mzcHtuPinoYoSAJrE8Y=
Subject key identifier: C5:0F:60:54:EA:DB:66:62:C0:B4:C6:74:33:EA:CE:00:14:E4:29:85
Certificate issuer: /CN=e795c9617ca5a6a3bff263fc1837992fd1ac47f2
Certificate serial: 03FDA05E
Authority key identifier: E7:95:C9:61:7C:A5:A6:A3:BF:F2:63:FC:18:37:99:2F:D1:AC:47:F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/55XJYXylpqO_8mP8GDeZL9GsR_I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/986dde-5f68-4c21-b546-d540df886bab/1/xQ9gVOrbZmLAtMZ0M-rOABTkKYU.roa
Signing time: Wed 23 Feb 2022 09:58:01 +0000
ROA not before: Wed 23 Feb 2022 09:58:01 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 61317
IP address blocks: 45.149.153.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 66953310 (0x3fda05e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e795c9617ca5a6a3bff263fc1837992fd1ac47f2
Validity
Not Before: Feb 23 09:58:01 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c50f6054eadb6662c0b4c67433eace0014e42985
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:ac:8f:51:d1:15:d5:11:c3:59:c6:8b:05:47:
b1:a5:ab:1c:c3:80:f3:3f:22:a3:a8:82:5d:bb:ac:
6b:36:b1:60:3e:f3:f4:b0:25:df:c2:69:4b:82:31:
0b:27:1a:aa:47:7d:76:bd:40:74:a3:d6:01:06:d3:
75:77:e1:9b:63:48:90:85:1e:f4:df:e7:d0:78:88:
ad:8e:61:6c:09:ab:d6:92:cf:a9:78:d4:8c:6e:db:
30:8e:3e:06:08:f0:7f:f5:55:31:b4:f8:4b:23:e9:
71:5c:87:fb:50:97:7e:74:30:05:ac:2f:34:98:d5:
3c:1c:4e:a2:3b:41:66:eb:d0:f3:9e:4c:aa:cb:88:
70:45:cd:e4:ff:2f:42:b7:af:ae:3a:56:cb:a4:63:
1e:fe:52:48:cb:ef:dc:d9:30:e9:11:c1:1a:f6:b4:
d9:95:d0:a0:5a:c5:c9:dc:a1:d9:00:d8:74:88:86:
06:43:a2:05:f6:9c:a9:f8:ee:38:bd:f9:fa:5e:ec:
6b:d0:0f:bd:42:83:4d:21:77:47:dc:7e:f3:bb:b7:
b2:10:f9:da:7c:0d:e7:15:a5:ed:b6:1a:54:b5:ba:
11:f8:4f:c5:01:50:cf:11:8a:13:fe:05:83:82:13:
5d:47:bf:c1:eb:70:aa:9b:6e:de:a9:e1:f9:ce:31:
66:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:0F:60:54:EA:DB:66:62:C0:B4:C6:74:33:EA:CE:00:14:E4:29:85
X509v3 Authority Key Identifier:
keyid:E7:95:C9:61:7C:A5:A6:A3:BF:F2:63:FC:18:37:99:2F:D1:AC:47:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/55XJYXylpqO_8mP8GDeZL9GsR_I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/986dde-5f68-4c21-b546-d540df886bab/1/xQ9gVOrbZmLAtMZ0M-rOABTkKYU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/986dde-5f68-4c21-b546-d540df886bab/1/55XJYXylpqO_8mP8GDeZL9GsR_I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.149.153.0/24
Signature Algorithm: sha256WithRSAEncryption
3b:ae:0c:f8:c5:43:9f:af:b1:bc:3c:68:14:78:87:8b:7c:ef:
a7:ff:79:e3:62:2f:a8:41:97:a5:71:8b:3f:09:b3:04:9f:c4:
e6:67:66:6b:76:5a:e7:cb:69:82:d2:b8:39:d7:bb:1a:39:4b:
ab:00:3f:32:64:03:e2:e7:62:bc:44:0b:d3:32:1c:14:93:d2:
63:19:cc:9e:2a:d0:0e:31:90:f0:1f:4c:f9:80:44:80:4b:eb:
49:95:b1:92:9a:34:51:09:c5:13:c9:52:96:e0:aa:d3:77:85:
37:ff:7e:92:82:4c:d6:60:90:44:ba:33:54:98:57:a9:17:6e:
40:86:ac:72:19:95:28:ed:56:85:e5:fc:af:d8:2f:38:8c:bb:
e3:ca:56:7c:c8:22:3c:06:52:e0:f7:aa:fc:b7:65:b1:68:9f:
c2:c0:d4:8d:3b:b3:df:66:a4:e5:e8:72:aa:38:60:b9:46:c7:
77:69:a7:b1:9c:08:15:1b:d8:25:9a:ff:b3:46:e6:5d:12:4b:
5c:51:3d:8b:5b:cb:3d:aa:47:42:de:2e:9c:8a:6e:7a:26:04:
aa:a2:e1:f5:11:1b:2c:f3:17:d0:a4:f4:88:69:42:4b:d6:58:
e4:7f:e1:59:77:22:55:bd:cf:f2:3d:86:16:42:28:7f:6a:89:
b7:7b:5b:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 13:47:53 2025 by rpki-client