Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/d10841-7d44-46da-b29c-381f23f183d7/1/i36P_Zc6biWqBKkd_vZ57MLHe5o.roa
File: i36P_Zc6biWqBKkd_vZ57MLHe5o.roa (raw, json)
Hash identifier: slDPX1LPZTPkD4I/883E/ueARzdIOpK7ryz2cPWlS3g=
Subject key identifier: 8B:7E:8F:FD:97:3A:6E:25:AA:04:A9:1D:FE:F6:79:EC:C2:C7:7B:9A
Certificate issuer: /CN=1a14445259732aa6736c248234465947fc2374d0
Certificate serial: 01897C4BC15872796A34A5C248DCDFC49C4D
Authority key identifier: 1A:14:44:52:59:73:2A:A6:73:6C:24:82:34:46:59:47:FC:23:74:D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GhREUllzKqZzbCSCNEZZR_wjdNA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/d10841-7d44-46da-b29c-381f23f183d7/1/i36P_Zc6biWqBKkd_vZ57MLHe5o.roa
Signing time: Sat 22 Jul 2023 06:31:26 +0000
ROA not before: Sat 22 Jul 2023 06:31:26 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 30823
IP address blocks: 91.214.160.0/22 maxlen: 22
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:7c:4b:c1:58:72:79:6a:34:a5:c2:48:dc:df:c4:9c:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a14445259732aa6736c248234465947fc2374d0
Validity
Not Before: Jul 22 06:31:26 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8b7e8ffd973a6e25aa04a91dfef679ecc2c77b9a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:32:9a:81:1f:05:14:9b:17:63:34:2d:c4:b3:
37:cf:85:17:0a:dc:74:09:63:a4:5f:d1:ba:13:3a:
1a:f0:b2:9c:8c:78:ae:5d:e2:45:51:77:94:cf:20:
bc:b9:35:a4:04:71:e3:dc:59:d6:bd:af:2d:3c:20:
58:b1:12:81:82:43:b0:45:ba:77:66:cb:aa:28:04:
d1:37:87:66:26:d6:fc:e8:09:73:f0:c6:4a:81:d5:
33:16:89:cb:83:e5:7c:6e:4e:93:39:83:e0:23:d8:
37:29:43:9c:bd:bc:df:d2:b8:a9:12:9a:29:bf:1b:
01:ff:a7:91:f7:f7:71:8c:51:b3:31:5d:a7:c8:2a:
b5:bd:c3:58:5d:69:18:96:c0:98:da:ce:87:ae:af:
76:06:46:a5:f7:67:a6:33:4f:a0:0a:cc:a9:c2:1d:
ea:47:6a:22:86:bf:7d:a2:ad:04:9b:d3:10:34:c4:
c3:4d:30:fc:45:43:9b:82:92:3c:98:3e:b7:06:23:
e4:b6:d3:88:14:75:39:45:e4:b4:93:25:39:34:1c:
2e:d9:77:04:d2:fe:a3:48:b0:74:93:ba:0c:db:af:
a7:a6:9c:75:66:6a:84:42:96:4e:61:1e:a0:9e:14:
fe:7b:9a:df:3c:62:35:6a:82:c9:55:60:4d:52:e9:
7f:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:7E:8F:FD:97:3A:6E:25:AA:04:A9:1D:FE:F6:79:EC:C2:C7:7B:9A
X509v3 Authority Key Identifier:
keyid:1A:14:44:52:59:73:2A:A6:73:6C:24:82:34:46:59:47:FC:23:74:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GhREUllzKqZzbCSCNEZZR_wjdNA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/d10841-7d44-46da-b29c-381f23f183d7/1/i36P_Zc6biWqBKkd_vZ57MLHe5o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/d10841-7d44-46da-b29c-381f23f183d7/1/GhREUllzKqZzbCSCNEZZR_wjdNA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.214.160.0/22
Signature Algorithm: sha256WithRSAEncryption
59:5f:65:29:a8:aa:d9:c4:fb:36:ca:60:6c:0a:55:7d:69:4a:
75:1e:ff:bd:01:4e:85:5d:28:68:04:96:55:05:28:17:7a:bc:
99:bb:12:2b:07:e5:d7:62:70:bd:61:d0:31:97:31:8a:97:e5:
c4:9e:03:95:b3:ea:fe:17:32:65:1a:5b:0a:f7:87:69:f7:8c:
21:a0:94:f9:bd:1a:b1:7f:92:41:ca:11:5c:b9:36:46:9c:41:
34:e8:c1:0f:44:50:10:e1:5a:03:0b:6d:4b:8a:48:d0:b5:f6:
2f:5e:45:73:5f:6c:09:09:d4:dc:00:9b:1b:3b:4b:52:47:26:
a6:7d:5c:90:d0:6b:98:03:fb:39:af:c4:ca:f8:9a:69:86:93:
bf:10:93:87:6e:3a:04:af:7c:89:55:a4:f5:d3:12:a8:2b:0e:
c9:b7:a0:16:f8:80:f8:61:fa:f3:4c:2d:93:76:41:05:e1:27:
f1:04:72:57:1b:d3:7f:34:11:73:e8:71:80:3a:b3:39:c4:d2:
ca:8d:cb:7d:40:36:d8:4d:f1:81:ea:88:a5:69:46:a9:2c:49:
05:87:e8:bb:be:5a:72:f1:00:42:09:ad:15:06:95:be:c9:f7:
54:09:18:48:9d:ab:53:50:02:5a:fa:b5:7f:d7:85:c6:24:30:
09:d9:68:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 23:04:59 2025 by rpki-client