Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/1ccf25-20de-4b2e-a0e1-de4acf447fae/1/vw8FqkCDezAECyQviYQYn8wO3TA.roa
File: vw8FqkCDezAECyQviYQYn8wO3TA.roa (raw, json)
Hash identifier: lR+5CijZUx1osWUg+oDIvRfVnhYpk8TyiI/OOj3ahqA=
Subject key identifier: BF:0F:05:AA:40:83:7B:30:04:0B:24:2F:89:84:18:9F:CC:0E:DD:30
Certificate issuer: /CN=7979863cea82aeb8e9df384b39aa5176f4bcfa61
Certificate serial: 018A6ACFB6EF08205EF6EFC494AADAB4E394
Authority key identifier: 79:79:86:3C:EA:82:AE:B8:E9:DF:38:4B:39:AA:51:76:F4:BC:FA:61
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eXmGPOqCrrjp3zhLOapRdvS8-mE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/1ccf25-20de-4b2e-a0e1-de4acf447fae/1/vw8FqkCDezAECyQviYQYn8wO3TA.roa
Signing time: Wed 06 Sep 2023 14:05:12 +0000
ROA not before: Wed 06 Sep 2023 14:05:12 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 43370
IP address blocks: 37.46.48.0/22 maxlen: 22
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:6a:cf:b6:ef:08:20:5e:f6:ef:c4:94:aa:da:b4:e3:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7979863cea82aeb8e9df384b39aa5176f4bcfa61
Validity
Not Before: Sep 6 14:05:12 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=bf0f05aa40837b30040b242f8984189fcc0edd30
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:71:e4:a0:f9:90:dd:ca:61:3c:3b:20:83:92:
a3:1d:f5:e6:77:f5:82:87:19:7a:a0:49:53:ac:53:
4c:32:fe:62:e8:5b:d3:f5:5f:69:cc:44:ab:55:99:
12:48:5f:0e:21:1d:50:de:cc:6f:56:57:8b:0a:00:
8c:9f:c4:9a:93:a9:1c:bf:fa:ca:6e:36:6d:28:b6:
94:c0:82:97:e4:a6:88:1e:11:65:9a:f3:6b:b4:20:
bf:d2:e7:3a:36:87:da:7f:7f:2c:25:a2:99:8c:08:
81:ff:20:36:9d:f7:86:3c:99:ee:ed:3d:b8:96:47:
4f:23:a9:e8:04:57:95:88:d5:50:85:79:13:0f:cd:
49:9b:1c:65:f8:1b:e8:2e:71:d1:85:65:4e:e8:e6:
28:6a:c8:1c:1a:96:eb:89:9c:a3:47:42:44:1f:39:
4f:bc:1a:54:ad:2c:c3:34:c5:c2:7f:cb:ca:63:d4:
5a:b3:9d:1e:0c:e0:65:70:7e:15:c9:2a:32:df:b3:
c1:ba:eb:e9:e3:42:cd:59:db:7a:21:fa:d6:75:c4:
e2:56:90:b4:47:fa:ff:19:58:f1:6a:8e:d8:b5:69:
4c:f4:9c:9b:e4:28:bf:2c:6f:c1:89:97:41:fb:67:
a8:da:84:df:54:ad:35:89:b2:2d:15:eb:df:2e:09:
94:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:0F:05:AA:40:83:7B:30:04:0B:24:2F:89:84:18:9F:CC:0E:DD:30
X509v3 Authority Key Identifier:
keyid:79:79:86:3C:EA:82:AE:B8:E9:DF:38:4B:39:AA:51:76:F4:BC:FA:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eXmGPOqCrrjp3zhLOapRdvS8-mE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/1ccf25-20de-4b2e-a0e1-de4acf447fae/1/vw8FqkCDezAECyQviYQYn8wO3TA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/1ccf25-20de-4b2e-a0e1-de4acf447fae/1/eXmGPOqCrrjp3zhLOapRdvS8-mE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.46.48.0/22
Signature Algorithm: sha256WithRSAEncryption
16:8a:2e:92:76:c5:d4:57:cc:08:5b:0f:84:1f:5d:ed:36:40:
fc:5b:02:83:c7:5d:ea:b6:01:0a:57:73:34:3f:e2:d3:44:66:
64:f3:dc:0e:56:98:f2:2e:32:52:2b:e9:b9:dc:25:35:0b:43:
68:fb:b3:a6:ec:49:a5:df:67:d6:e8:08:71:32:eb:17:9b:7c:
63:cb:e7:d6:95:db:17:7b:4b:af:24:9f:03:3b:1c:9a:44:ad:
a7:d2:d6:bd:ea:76:81:0a:2a:64:33:0e:d6:8e:0a:9a:2c:c1:
a3:66:cf:b8:3e:28:ac:56:80:a1:1b:73:61:5c:28:31:fe:35:
a8:70:4e:6d:75:43:fd:4a:1f:f5:61:d8:1c:85:77:98:95:87:
47:8c:06:a1:be:cc:98:7c:51:7a:9d:4d:16:5c:55:83:07:3f:
7d:96:cc:48:87:44:41:b3:52:3f:8e:ed:a3:cb:f6:2e:10:87:
d6:bd:5f:88:7b:f8:4f:60:d2:1e:71:11:29:13:01:d5:67:19:
07:18:78:63:9f:30:70:83:65:5c:9d:0a:10:9a:05:06:89:3b:
ac:c2:76:0b:75:cf:77:3b:1b:b6:c3:cd:d0:db:1a:fa:e4:47:
cd:b3:c4:53:3e:48:60:d0:1d:3d:30:24:83:34:b2:99:8a:6d:
77:d2:07:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:49:11 2025 by rpki-client