Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/47a9c9-d457-4579-b2b0-e5212574f9ec/1/WeKPxik7o32ADSkFYosoUaxcufc.roa
File: WeKPxik7o32ADSkFYosoUaxcufc.roa (raw, json)
Hash identifier: 4wcKhWDGo7PIJgZRi++NBEO077TlkMuk/XK8OgBsqLY=
Subject key identifier: 59:E2:8F:C6:29:3B:A3:7D:80:0D:29:05:62:8B:28:51:AC:5C:B9:F7
Certificate issuer: /CN=add9207994ba9c7d91ea7e479fefd1b8099f62ce
Certificate serial: 07605DA1
Authority key identifier: AD:D9:20:79:94:BA:9C:7D:91:EA:7E:47:9F:EF:D1:B8:09:9F:62:CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rdkgeZS6nH2R6n5Hn-_RuAmfYs4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/47a9c9-d457-4579-b2b0-e5212574f9ec/1/WeKPxik7o32ADSkFYosoUaxcufc.roa
Signing time: Sat 01 Jan 2022 04:57:39 +0000
ROA not before: Sat 01 Jan 2022 04:57:39 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 49717
IP address blocks: 109.94.124.0/23 maxlen: 23
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 123755937 (0x7605da1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=add9207994ba9c7d91ea7e479fefd1b8099f62ce
Validity
Not Before: Jan 1 04:57:39 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=59e28fc6293ba37d800d2905628b2851ac5cb9f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:f1:56:34:76:ee:40:a8:28:ee:ee:30:22:05:
8c:c0:64:08:d2:31:6e:44:d2:1e:3c:bd:e6:e2:88:
c4:95:a5:7b:c1:ce:67:de:a3:44:e8:4a:37:84:86:
97:be:c5:0d:f3:4f:32:90:7e:3e:b2:30:7b:cf:20:
ff:ec:38:84:eb:aa:32:be:76:a4:2c:4b:ba:54:d7:
32:02:68:5f:d4:2a:87:b2:2c:b6:82:bf:84:c0:50:
c4:db:36:e4:19:37:6d:77:84:05:71:9c:8d:b1:9c:
f5:ee:a1:53:a2:ec:89:f6:3c:94:73:17:18:6c:21:
29:ed:1d:0f:53:dc:a6:cb:21:10:76:cd:ec:f4:2b:
44:2c:0c:03:70:8e:2e:97:10:75:2e:73:bd:63:f1:
db:71:44:a3:f0:30:8d:2d:a2:07:24:22:24:1f:c8:
55:7a:80:55:e4:8c:e7:97:f9:97:46:b9:cd:0b:e9:
c3:d8:62:3a:aa:c7:14:a3:5b:bd:b8:c6:4e:5f:d0:
1b:a4:ab:03:20:c1:bb:04:65:ad:0f:6a:48:9e:13:
f6:c1:d2:28:26:d1:3b:f5:c8:a1:8f:00:f5:96:b8:
e7:34:f4:dd:fa:a9:aa:41:38:c9:46:45:18:a3:06:
33:ef:e6:eb:40:2e:b6:48:8e:ad:5f:61:31:34:28:
a1:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:E2:8F:C6:29:3B:A3:7D:80:0D:29:05:62:8B:28:51:AC:5C:B9:F7
X509v3 Authority Key Identifier:
keyid:AD:D9:20:79:94:BA:9C:7D:91:EA:7E:47:9F:EF:D1:B8:09:9F:62:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rdkgeZS6nH2R6n5Hn-_RuAmfYs4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/47a9c9-d457-4579-b2b0-e5212574f9ec/1/WeKPxik7o32ADSkFYosoUaxcufc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/47a9c9-d457-4579-b2b0-e5212574f9ec/1/rdkgeZS6nH2R6n5Hn-_RuAmfYs4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.94.124.0/23
Signature Algorithm: sha256WithRSAEncryption
59:58:56:44:27:1a:d3:1e:dd:43:22:3b:48:a0:10:1a:8c:da:
a5:56:7a:a7:ab:f9:26:f2:ac:5b:cb:57:18:44:b8:00:77:c1:
3d:57:80:62:e6:72:79:31:34:a2:5e:c6:fc:ed:42:ba:f7:ff:
a8:a5:ef:7b:16:6f:26:ce:90:2f:30:83:ff:e8:6b:2c:63:b9:
c1:06:97:82:3a:96:a5:9d:f4:f3:9d:ba:5f:94:19:03:78:b4:
ed:cd:80:c8:9e:7f:10:04:fb:8f:1c:4e:90:60:c6:ff:9c:e1:
14:6a:40:2d:7d:a5:f4:bd:d2:6e:0c:c7:bd:f4:43:9f:37:5e:
92:2a:06:61:7a:df:53:33:24:c8:d7:42:4b:56:c2:04:ab:ee:
53:81:ac:f4:ad:1a:1e:f5:a7:d4:dc:45:3f:2d:a2:a2:f5:97:
c6:84:d3:9e:68:bf:ca:22:ff:46:a0:60:de:64:86:e6:55:e6:
96:b2:b8:eb:69:0d:d9:9c:63:74:f5:6d:0a:c2:5f:44:0e:28:
66:87:b7:83:7c:44:c6:f4:c2:e9:5d:0f:5d:bd:37:1c:d0:53:
8a:9b:c9:7e:76:b6:e7:b4:6a:84:ad:ab:53:69:24:58:b3:34:
c3:9c:22:25:e8:2c:0b:24:ec:90:3a:fa:43:9f:a0:69:0e:06:
09:bd:f1:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 09:47:00 2025 by rpki-client