Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/266caf-3b43-49e0-b6e1-9c174e53e4fe/1/8XmwKPy9OoEeWJfyPhVcQmMGr7A.roa
File: 8XmwKPy9OoEeWJfyPhVcQmMGr7A.roa (raw, json)
Hash identifier: 1bovXl9o3TUbvNoKYnwVOsBx2pQutU8tKxPgikbPK+E=
Subject key identifier: F1:79:B0:28:FC:BD:3A:81:1E:58:97:F2:3E:15:5C:42:63:06:AF:B0
Certificate issuer: /CN=1045dacc837798c3e6cf31f4d27946a33b0de661
Certificate serial: 29F8A6BA
Authority key identifier: 10:45:DA:CC:83:77:98:C3:E6:CF:31:F4:D2:79:46:A3:3B:0D:E6:61
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EEXazIN3mMPmzzH00nlGozsN5mE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/266caf-3b43-49e0-b6e1-9c174e53e4fe/1/8XmwKPy9OoEeWJfyPhVcQmMGr7A.roa
Signing time: Sat 01 Jan 2022 13:54:30 +0000
ROA not before: Sat 01 Jan 2022 13:54:30 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 210342
IP address blocks: 79.133.99.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 704161466 (0x29f8a6ba)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1045dacc837798c3e6cf31f4d27946a33b0de661
Validity
Not Before: Jan 1 13:54:30 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f179b028fcbd3a811e5897f23e155c426306afb0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:94:7c:e5:99:a4:5a:ad:f7:81:48:8a:c2:46:
79:62:b3:3a:a6:67:27:01:63:d7:15:7f:ec:1e:65:
5d:c3:4e:0b:d6:41:9c:a6:07:53:60:fd:1f:e8:5f:
7b:fe:39:0f:bf:ac:76:c6:9c:5d:33:57:8f:d3:f6:
1b:bd:4a:de:0a:52:e3:33:9c:e5:06:0f:fa:b7:36:
b2:ae:2e:66:a6:d3:e1:0b:54:30:26:2a:9d:80:54:
43:07:ca:b3:5e:13:d2:4c:76:5c:c1:2b:3b:ff:aa:
fc:34:e7:f2:f0:4d:b4:38:07:c2:db:1a:8f:1a:0a:
10:75:45:50:88:23:35:a3:4c:cc:13:a9:f8:01:e7:
d7:0c:42:df:93:f5:35:cb:f8:52:4d:77:d4:74:ff:
27:18:e0:9c:8a:e7:2d:fb:ab:c5:b1:62:08:b1:99:
6a:46:bb:d8:1a:27:f0:41:f9:fe:43:5f:64:4c:d9:
15:ae:29:e1:dd:f3:3b:70:c1:a2:94:ba:70:4d:e1:
af:09:56:c9:f9:7d:89:84:1a:49:c6:bb:10:b1:05:
6d:9e:73:9d:50:96:78:60:77:5c:51:b0:7b:b1:48:
b9:b8:df:e0:75:ef:bd:3a:2d:4c:79:79:f1:f9:76:
cc:c1:07:26:54:56:5a:b2:24:02:a6:d7:4d:cf:44:
f7:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:79:B0:28:FC:BD:3A:81:1E:58:97:F2:3E:15:5C:42:63:06:AF:B0
X509v3 Authority Key Identifier:
keyid:10:45:DA:CC:83:77:98:C3:E6:CF:31:F4:D2:79:46:A3:3B:0D:E6:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EEXazIN3mMPmzzH00nlGozsN5mE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/266caf-3b43-49e0-b6e1-9c174e53e4fe/1/8XmwKPy9OoEeWJfyPhVcQmMGr7A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/266caf-3b43-49e0-b6e1-9c174e53e4fe/1/EEXazIN3mMPmzzH00nlGozsN5mE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.133.99.0/24
Signature Algorithm: sha256WithRSAEncryption
d9:34:ca:e0:d6:6f:d6:ef:9e:03:8a:96:32:0f:3b:19:88:86:
d3:97:20:55:ab:00:1a:6a:10:f3:4e:de:39:2c:e2:e0:14:02:
4a:45:46:cc:7e:01:ef:e0:d9:09:e2:94:31:b6:11:3c:59:96:
4f:61:1e:ae:d2:f5:8c:47:2a:4c:8e:8e:5f:61:ff:26:28:f2:
1b:24:6f:5a:dc:6d:ad:74:c3:98:80:00:51:9e:a2:93:b7:24:
47:fb:17:cf:79:5f:12:74:60:f0:15:96:0c:13:5a:d0:b2:be:
d7:95:4e:08:3c:89:34:66:52:d9:8e:0c:7c:ce:1f:e0:bb:3a:
62:17:8d:9a:cd:98:0b:a1:37:15:07:e9:ef:d0:e1:52:d8:45:
da:9c:bd:27:b6:8d:7f:0b:8a:e0:ce:d0:2c:9f:00:24:3f:06:
0f:e1:b3:4e:73:35:06:ee:69:da:e0:76:ee:0a:ec:64:72:9c:
fe:a5:c2:10:8d:cd:2e:f0:e1:b9:ad:f3:27:3d:38:a3:f3:05:
eb:50:ab:73:a4:62:e4:8b:99:1c:f5:e7:31:7c:b1:74:ee:48:
05:66:06:eb:29:6d:c2:9e:31:03:8b:68:3d:f1:c1:da:24:72:
c4:06:09:1a:1f:d0:5c:2e:80:d9:58:4f:39:f3:08:d5:10:ee:
b0:52:39:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:36:40 2025 by rpki-client