Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/b3987a-4504-4749-9d73-df572fe9672a/1/xTcowbRvGOcAO2ojLVVkD6eoCgM.roa
File: xTcowbRvGOcAO2ojLVVkD6eoCgM.roa (raw, json)
Hash identifier: c1bcN0BULb5kGOBBjrq3QoJvNCCCTDZMIX6V7BY2xZI=
Subject key identifier: C5:37:28:C1:B4:6F:18:E7:00:3B:6A:23:2D:55:64:0F:A7:A8:0A:03
Certificate issuer: /CN=dbb396dfa951ec4157f211e5ed740ed97e1b0f3f
Certificate serial: 019422FC2B017B903DA4676E61C3D880550A
Authority key identifier: DB:B3:96:DF:A9:51:EC:41:57:F2:11:E5:ED:74:0E:D9:7E:1B:0F:3F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/27OW36lR7EFX8hHl7XQO2X4bDz8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/b3987a-4504-4749-9d73-df572fe9672a/1/xTcowbRvGOcAO2ojLVVkD6eoCgM.roa
Signing time: Wed 01 Jan 2025 17:48:58 +0000
ROA not before: Wed 01 Jan 2025 17:48:58 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 61371
IP address blocks: 94.131.196.0/23 maxlen: 23
94.131.198.0/23 maxlen: 23
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fc:2b:01:7b:90:3d:a4:67:6e:61:c3:d8:80:55:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dbb396dfa951ec4157f211e5ed740ed97e1b0f3f
Validity
Not Before: Jan 1 17:48:58 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c53728c1b46f18e7003b6a232d55640fa7a80a03
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:8a:d4:e6:44:33:88:13:ff:d7:51:eb:a0:8f:
9c:05:c0:5e:08:f2:41:9a:b7:64:b9:b1:57:9b:91:
c7:66:f1:31:d7:ac:19:17:3e:4e:00:1e:c7:80:d6:
68:e2:b3:bb:2c:35:f0:23:41:de:64:02:d1:21:06:
f9:1f:c1:15:f4:e6:19:43:1a:d6:18:6b:6e:1f:60:
81:aa:40:99:2e:4f:da:be:3c:c4:ed:ec:02:71:b8:
3d:57:81:b8:2c:5b:01:7a:fe:30:94:ab:85:8c:71:
a1:c7:a7:e2:2b:2d:75:34:c3:7a:e6:0c:c7:f1:64:
2d:31:9a:7f:32:c9:aa:02:67:ee:57:98:28:ea:b0:
11:85:4d:95:ee:bd:15:3d:19:03:89:ad:55:00:8f:
80:a1:16:27:2e:96:fa:aa:13:42:01:c5:51:6c:d5:
bc:b2:b4:ef:4e:38:6f:9a:93:04:85:9b:67:ac:07:
56:32:2a:8a:d4:d1:bb:2d:ba:7a:f3:03:99:3c:0d:
0e:b9:07:1d:09:43:eb:d2:3e:de:8f:37:38:26:28:
2b:2b:eb:11:e9:ad:9c:db:8c:6f:e8:1e:7c:28:dc:
c0:5d:3a:47:c4:f6:65:59:55:70:56:77:84:5f:33:
81:65:26:e9:1d:ea:14:75:bb:fe:3b:bd:0c:2d:ca:
ff:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:37:28:C1:B4:6F:18:E7:00:3B:6A:23:2D:55:64:0F:A7:A8:0A:03
X509v3 Authority Key Identifier:
keyid:DB:B3:96:DF:A9:51:EC:41:57:F2:11:E5:ED:74:0E:D9:7E:1B:0F:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/27OW36lR7EFX8hHl7XQO2X4bDz8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/b3987a-4504-4749-9d73-df572fe9672a/1/xTcowbRvGOcAO2ojLVVkD6eoCgM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/b3987a-4504-4749-9d73-df572fe9672a/1/27OW36lR7EFX8hHl7XQO2X4bDz8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.131.196.0/22
Signature Algorithm: sha256WithRSAEncryption
4b:f5:14:01:d0:82:60:94:3d:15:f9:dd:94:c4:71:87:0a:7b:
04:4c:20:5e:d7:3f:b3:86:4e:7f:85:55:74:e1:4e:01:21:ed:
50:c6:c0:9d:ce:66:85:29:54:22:d3:84:60:5c:7c:3d:a2:e9:
4b:d7:0d:bf:3a:88:73:2f:ab:d3:78:60:26:9b:3f:bc:19:2f:
8a:a9:a2:02:00:60:da:c3:21:3a:07:b3:82:c7:bf:de:fd:93:
88:4e:d6:ed:2d:07:ef:54:d8:e1:2f:4c:2a:4d:ba:ed:b5:c3:
a1:11:4a:dc:dd:4b:65:9a:a5:7e:ac:b9:14:8a:0a:63:fe:b9:
2a:55:86:10:9d:d1:12:21:8a:0d:a9:ea:a9:7d:74:65:eb:36:
77:ee:b3:8f:c8:26:5b:78:db:4b:98:d9:af:17:09:c8:00:dc:
3b:9e:4b:5d:58:51:ce:f2:be:8e:3a:7a:c7:b2:c4:a4:93:c0:
57:49:07:b5:1f:db:44:b7:b2:13:69:6d:fb:d9:cd:8b:24:1e:
8f:71:e4:10:5e:8c:8e:f8:7e:85:31:16:84:f6:81:8f:58:c9:
9b:c2:3f:3f:00:c4:0a:02:34:b8:88:f7:02:2b:d3:04:82:84:
83:5a:9f:4e:e9:6f:0b:9a:2c:79:f9:4f:d0:d8:a7:63:63:cd:
da:76:e4:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 23 06:43:07 2025 by rpki-client