Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/25cdb4-e508-4b37-81bc-36f82bd379bd/1/3BOZNJ-2kC-d8EzLy5nX9x-ScRQ.roa
File: 3BOZNJ-2kC-d8EzLy5nX9x-ScRQ.roa (raw, json)
Hash identifier: a+Oh5ahOCNKAdA/5GuQ66pz5RpbQcqtqPfHB2+576A8=
Subject key identifier: DC:13:99:34:9F:B6:90:2F:9D:F0:4C:CB:CB:99:D7:F7:1F:92:71:14
Certificate issuer: /CN=b10c3cf3dc53ca549c03e4f5f46d91ce90b8e070
Certificate serial: 018CC500CEE316AA5A620708A9B5A03A2DDB
Authority key identifier: B1:0C:3C:F3:DC:53:CA:54:9C:03:E4:F5:F4:6D:91:CE:90:B8:E0:70
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sQw889xTylScA-T19G2RzpC44HA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/25cdb4-e508-4b37-81bc-36f82bd379bd/1/3BOZNJ-2kC-d8EzLy5nX9x-ScRQ.roa
Signing time: Mon 01 Jan 2024 12:30:13 +0000
ROA not before: Mon 01 Jan 2024 12:30:13 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 208801
IP address blocks: 217.168.246.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:00:ce:e3:16:aa:5a:62:07:08:a9:b5:a0:3a:2d:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b10c3cf3dc53ca549c03e4f5f46d91ce90b8e070
Validity
Not Before: Jan 1 12:30:13 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=dc1399349fb6902f9df04ccbcb99d7f71f927114
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:4c:17:9c:92:41:87:bc:2f:58:62:63:38:64:
b6:3c:2c:27:5e:d4:30:a1:05:d5:e9:38:db:ba:f3:
bb:4e:4f:20:f3:35:1d:53:91:dc:6a:3c:69:99:fb:
61:37:d6:14:1a:51:0f:c5:a1:2e:2a:7f:9e:8b:a4:
17:f4:d3:5f:1e:83:71:d2:f7:07:79:de:1c:7f:53:
83:3e:28:a6:9f:56:96:43:96:1c:07:5f:a6:61:ff:
98:31:19:ab:f4:53:07:00:f3:98:6c:47:38:d8:ff:
ee:71:bf:b4:1f:f2:1d:52:63:fe:d2:a9:68:93:20:
89:0e:18:36:fb:a2:e0:d7:43:23:32:98:fa:8e:8e:
ea:41:c5:0d:d9:56:5e:4e:52:ba:a2:06:bb:0f:21:
ec:d6:f9:05:7e:be:81:79:9c:ee:75:ef:97:27:2a:
ee:c9:2c:7d:d5:c4:cd:2f:63:f6:68:af:c1:35:76:
23:53:ab:2a:72:9a:5e:22:14:99:8e:8d:59:86:63:
bb:f7:cd:42:53:84:7f:96:fe:60:88:fa:a4:93:9e:
cd:9c:df:1f:d9:6e:95:05:ed:1e:ed:31:71:fa:51:
31:ae:8b:b7:2c:61:a4:43:71:fb:d0:13:d1:ab:7a:
8b:1e:02:64:03:f1:b1:06:b8:48:2e:38:93:83:54:
72:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:13:99:34:9F:B6:90:2F:9D:F0:4C:CB:CB:99:D7:F7:1F:92:71:14
X509v3 Authority Key Identifier:
keyid:B1:0C:3C:F3:DC:53:CA:54:9C:03:E4:F5:F4:6D:91:CE:90:B8:E0:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sQw889xTylScA-T19G2RzpC44HA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/25cdb4-e508-4b37-81bc-36f82bd379bd/1/3BOZNJ-2kC-d8EzLy5nX9x-ScRQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/25cdb4-e508-4b37-81bc-36f82bd379bd/1/sQw889xTylScA-T19G2RzpC44HA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.168.246.0/24
Signature Algorithm: sha256WithRSAEncryption
8c:a2:e5:71:72:1f:9c:bb:7a:56:73:4d:eb:df:ff:6b:4f:3b:
ea:60:8c:df:5b:2b:82:2a:41:93:43:11:e2:19:9e:d4:7a:e0:
32:56:d4:da:6d:ba:65:fe:b9:b9:fb:33:47:82:3c:aa:a9:0f:
e7:0f:82:a5:78:e1:b1:6a:88:62:0e:5c:0b:99:8d:9a:51:25:
74:b6:5d:d5:61:b8:d0:61:e9:71:e1:37:22:06:23:10:4b:43:
10:17:5b:a5:51:6f:15:90:08:8c:22:16:de:61:db:2f:c4:89:
bd:81:bd:a2:05:39:d6:ee:cb:9e:ae:ca:67:7c:0c:a0:92:8d:
54:64:53:30:96:1d:4f:a5:52:56:37:12:95:cd:00:91:e1:1b:
65:bc:e0:cc:27:d3:8e:dc:81:bf:da:29:b6:7e:8a:73:19:da:
ce:56:00:89:ae:8d:8a:b7:49:95:0c:32:2d:e0:e1:ac:cf:57:
36:5c:d8:f5:52:6d:4f:2f:c6:eb:6d:93:8d:5d:b0:a4:f2:08:
ee:33:76:d7:d9:fe:3b:f1:4c:29:0f:03:07:11:bc:97:10:00:
4f:4c:a5:8c:96:c5:21:c0:64:6b:14:ee:8f:c9:17:eb:6a:b2:
7d:f5:fa:7c:4b:a2:42:37:19:09:7b:fc:20:37:7d:42:fd:54:
a3:ea:91:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 06:14:16 2025 by rpki-client