Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/266caf-3b43-49e0-b6e1-9c174e53e4fe/1/O6mM9YmKKuxmc4ykfa7AGrTBuVM.roa
File: O6mM9YmKKuxmc4ykfa7AGrTBuVM.roa (raw, json)
Hash identifier: nka7zl4WNmBQSyM9BN8FgI3CMtHqWrEw3Amw1zfyxcc=
Subject key identifier: 3B:A9:8C:F5:89:8A:2A:EC:66:73:8C:A4:7D:AE:C0:1A:B4:C1:B9:53
Certificate issuer: /CN=1045dacc837798c3e6cf31f4d27946a33b0de661
Certificate serial: 2B119AB3
Authority key identifier: 10:45:DA:CC:83:77:98:C3:E6:CF:31:F4:D2:79:46:A3:3B:0D:E6:61
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EEXazIN3mMPmzzH00nlGozsN5mE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/266caf-3b43-49e0-b6e1-9c174e53e4fe/1/O6mM9YmKKuxmc4ykfa7AGrTBuVM.roa
Signing time: Tue 19 Apr 2022 12:31:44 +0000
ROA not before: Tue 19 Apr 2022 12:31:44 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 59793
IP address blocks: 93.179.70.0/23 maxlen: 23
93.179.72.0/21 maxlen: 21
93.179.80.0/21 maxlen: 21
79.133.112.0/21 maxlen: 21
95.181.240.0/21 maxlen: 21
2a02:d0c2:1::/48 maxlen: 48
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 722574003 (0x2b119ab3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1045dacc837798c3e6cf31f4d27946a33b0de661
Validity
Not Before: Apr 19 12:31:44 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=3ba98cf5898a2aec66738ca47daec01ab4c1b953
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:54:d9:76:ba:bc:00:37:25:5a:4d:75:64:3b:
ec:93:02:3d:cb:64:33:ea:f3:fb:b5:dd:3f:bf:37:
90:d2:0e:b1:2a:88:c9:db:85:67:b7:2b:ad:86:b8:
ed:5f:c7:4f:b3:88:bc:97:53:a6:e2:ea:61:f9:76:
58:25:ac:62:6b:75:14:16:3d:9e:f6:d8:b5:bb:d5:
1d:55:35:e1:e4:dc:46:10:b3:50:da:c2:1c:a3:11:
d7:e6:06:8b:3c:57:5b:e7:5e:ef:94:c7:ff:dc:19:
c9:3f:65:0f:f8:e8:8f:7c:7f:26:c4:e7:ce:0d:dd:
58:96:15:03:73:96:d1:ff:f0:1e:5c:d0:26:1d:d9:
62:c4:7a:96:10:46:57:e8:90:ee:6d:5a:3c:b2:ae:
36:be:1c:45:16:76:a5:90:03:5a:63:6f:06:44:a9:
88:bf:4b:5e:f7:62:aa:47:93:b2:b4:34:9e:63:e6:
79:8e:2a:42:db:48:f5:49:40:db:a9:76:3d:4a:47:
11:9c:b3:be:3e:2e:fe:eb:14:3a:17:4b:83:30:aa:
34:0e:ff:eb:4e:d3:b5:e3:f4:91:e1:ac:1c:04:6c:
3e:f4:85:cb:25:bb:88:ce:d9:0b:be:91:64:c6:1d:
57:0a:dc:ac:db:a2:2b:58:4b:d7:91:af:76:f9:90:
a6:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:A9:8C:F5:89:8A:2A:EC:66:73:8C:A4:7D:AE:C0:1A:B4:C1:B9:53
X509v3 Authority Key Identifier:
keyid:10:45:DA:CC:83:77:98:C3:E6:CF:31:F4:D2:79:46:A3:3B:0D:E6:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EEXazIN3mMPmzzH00nlGozsN5mE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/266caf-3b43-49e0-b6e1-9c174e53e4fe/1/O6mM9YmKKuxmc4ykfa7AGrTBuVM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/266caf-3b43-49e0-b6e1-9c174e53e4fe/1/EEXazIN3mMPmzzH00nlGozsN5mE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.133.112.0/21
93.179.70.0-93.179.87.255
95.181.240.0/21
IPv6:
2a02:d0c2:1::/48
Signature Algorithm: sha256WithRSAEncryption
56:89:9e:55:72:3f:a4:be:a7:fe:60:f2:b7:a9:ab:bc:19:13:
7a:aa:53:2e:4a:42:e9:26:9d:39:dd:34:27:4d:7a:53:56:49:
81:a2:34:c4:d2:09:17:eb:fc:38:40:34:a4:00:3f:6b:2a:c0:
11:3e:b0:49:27:de:d3:ba:28:c7:2d:2e:35:a9:75:d9:60:ac:
3c:74:53:16:2a:ae:1f:81:3c:e4:99:bd:01:d2:04:96:00:22:
3c:34:15:e2:e1:ef:94:45:ec:4c:b9:d3:ad:93:cb:1d:e5:d0:
54:dc:c2:75:56:8f:4b:30:fe:e6:1c:1c:d2:56:74:f3:97:71:
82:ce:2f:1b:2f:44:dc:40:f1:bb:a0:31:5b:ca:d8:eb:10:07:
6a:9d:c1:7d:fb:7a:df:4e:6f:c4:dc:72:bf:7f:22:d2:57:d3:
0b:e8:9d:e8:40:cd:f7:cd:f3:03:0d:da:cc:9e:b4:3b:98:75:
e0:af:b3:2d:12:70:98:92:22:b9:9b:48:15:23:90:a5:39:ca:
64:4a:21:24:65:dd:a0:25:be:60:c0:0f:25:62:4b:ae:42:2f:
12:dd:a7:b5:e5:6e:45:dd:8e:cf:55:d1:5f:ce:46:80:e9:77:
ac:91:12:33:86:4b:45:ec:0d:d9:8e:4c:51:76:7b:78:60:f0:
31:bf:2e:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:46:11 2025 by rpki-client