Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/79ff5d-6dfe-441b-a21d-135c40217b86/1/2zsDhKFLs8ev_OdwrKqrwqPCqTQ.roa
File: 2zsDhKFLs8ev_OdwrKqrwqPCqTQ.roa (raw, json)
Hash identifier: kzUE5N5EK/7O2Aj4X1C2CaQOBgn7QjRhwW0GclteEn4=
Subject key identifier: DB:3B:03:84:A1:4B:B3:C7:AF:FC:E7:70:AC:AA:AB:C2:A3:C2:A9:34
Certificate issuer: /CN=bc20d41ad3570ed888c3b9a395843d28c4bde70e
Certificate serial: 018CC8DFA66CB645B9E56B86B04CF221EFF5
Authority key identifier: BC:20:D4:1A:D3:57:0E:D8:88:C3:B9:A3:95:84:3D:28:C4:BD:E7:0E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vCDUGtNXDtiIw7mjlYQ9KMS95w4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/79ff5d-6dfe-441b-a21d-135c40217b86/1/2zsDhKFLs8ev_OdwrKqrwqPCqTQ.roa
Signing time: Tue 02 Jan 2024 06:32:29 +0000
ROA not before: Tue 02 Jan 2024 06:32:29 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 48417
IP address blocks: 94.247.32.0/21 maxlen: 24
185.21.160.0/23 maxlen: 32
185.21.160.0/22 maxlen: 32
2a02:db8::/32 maxlen: 32
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:df:a6:6c:b6:45:b9:e5:6b:86:b0:4c:f2:21:ef:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc20d41ad3570ed888c3b9a395843d28c4bde70e
Validity
Not Before: Jan 2 06:32:29 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=db3b0384a14bb3c7affce770acaaabc2a3c2a934
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:4b:ba:2e:d4:33:21:71:7c:50:a4:5a:cc:f1:
dc:47:6d:d9:18:c7:3a:3f:ed:8a:82:74:47:66:ef:
d4:5a:c8:d7:14:f7:1a:07:fc:3d:7d:d5:f0:a9:5b:
fd:73:91:5b:2b:64:50:a1:45:d9:2b:f7:01:82:4e:
4a:5a:5a:7b:e0:d2:98:b2:bf:74:88:b3:9b:37:30:
30:f4:a8:b4:f9:46:18:4e:ec:9e:59:38:91:45:23:
56:2c:9f:08:51:c1:e0:05:7d:a8:70:cb:9f:b7:4c:
0e:9b:87:e8:71:09:64:e8:01:d7:9c:da:e1:47:c9:
19:8d:0b:d8:30:f2:01:46:73:d5:2b:21:49:0c:6a:
cd:50:59:7f:2f:63:24:11:cb:e6:71:d0:bc:bd:85:
ec:f7:a9:70:0e:20:0a:63:c3:a1:90:67:5a:70:44:
4d:27:02:7a:3b:38:9c:ca:bb:7c:e4:e5:3e:e4:8a:
02:48:55:32:a6:de:0b:2a:c2:d3:4a:1c:7b:32:c9:
2e:cb:83:53:59:6e:ef:86:a8:ff:bb:7d:38:22:96:
7f:07:fc:51:d7:35:c6:5e:43:55:3c:ac:de:e1:32:
12:c6:21:d4:31:59:80:78:80:2b:48:2c:98:28:a4:
29:3d:c8:e0:6b:34:5e:9e:ab:3e:06:ba:8e:7c:13:
30:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:3B:03:84:A1:4B:B3:C7:AF:FC:E7:70:AC:AA:AB:C2:A3:C2:A9:34
X509v3 Authority Key Identifier:
keyid:BC:20:D4:1A:D3:57:0E:D8:88:C3:B9:A3:95:84:3D:28:C4:BD:E7:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vCDUGtNXDtiIw7mjlYQ9KMS95w4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/79ff5d-6dfe-441b-a21d-135c40217b86/1/2zsDhKFLs8ev_OdwrKqrwqPCqTQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/79ff5d-6dfe-441b-a21d-135c40217b86/1/vCDUGtNXDtiIw7mjlYQ9KMS95w4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.247.32.0/21
185.21.160.0/22
IPv6:
2a02:db8::/32
Signature Algorithm: sha256WithRSAEncryption
01:95:6c:66:95:9d:81:bb:ef:f6:31:ff:0e:8c:15:ed:5b:cf:
de:dc:85:c1:b9:06:20:26:5f:4f:79:b0:41:db:a7:6d:4a:47:
69:4a:4d:d6:0a:f8:19:05:8d:7b:71:26:8d:f7:d5:8e:5a:c1:
20:5b:5d:59:40:ec:90:c2:25:55:5d:1b:bb:db:f7:9b:4c:5e:
ca:89:a0:2c:0a:69:18:3f:a2:a1:d9:26:b3:d8:b8:11:49:83:
90:bc:d6:1e:93:67:32:e8:b7:f9:aa:9b:8b:71:28:83:94:a3:
36:c2:dd:55:7a:df:18:55:3b:fe:6b:ce:c8:70:a9:6c:5b:80:
c9:d8:eb:ac:f4:32:52:91:2a:6d:9d:49:cd:4b:3c:bd:c7:de:
65:d2:2e:a1:26:91:3a:5f:87:b0:9b:43:fd:de:b7:cb:46:3e:
7a:f6:04:72:51:8e:b4:90:9c:25:b5:21:f3:b8:c7:d2:69:15:
72:fa:8e:ce:41:c1:68:5a:f0:5b:35:dd:fd:28:d3:3f:3d:8b:
80:84:38:3b:d4:40:04:1e:2e:f1:b2:c3:71:8c:b6:bc:dd:8b:
88:0c:0d:16:b9:3a:ef:be:fe:ac:a2:18:b4:87:07:de:8b:6e:
68:15:f2:25:b9:7e:e4:af:7f:4f:f5:6e:6f:21:70:db:ce:3f:
30:3a:b2:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 05:36:19 2025 by rpki-client