Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/1ea2b0-6b9a-44d7-a2e5-2206cc2e691c/1/3-LlNx-ATBAcLU5HzRDEH1bpvrY.roa
File: 3-LlNx-ATBAcLU5HzRDEH1bpvrY.roa (raw, json)
Hash identifier: 8wafc5scHIha6JRS4Q1xiP0hTHMbkKTEVrfW2oTV1Sw=
Subject key identifier: DF:E2:E5:37:1F:80:4C:10:1C:2D:4E:47:CD:10:C4:1F:56:E9:BE:B6
Certificate issuer: /CN=81cca9f15e1921953a628c8ad2ac4be977b6c303
Certificate serial: 019423D72283E2B380652E673349CF480FD3
Authority key identifier: 81:CC:A9:F1:5E:19:21:95:3A:62:8C:8A:D2:AC:4B:E9:77:B6:C3:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gcyp8V4ZIZU6YoyK0qxL6Xe2wwM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/1ea2b0-6b9a-44d7-a2e5-2206cc2e691c/1/3-LlNx-ATBAcLU5HzRDEH1bpvrY.roa
Signing time: Wed 01 Jan 2025 21:48:09 +0000
ROA not before: Wed 01 Jan 2025 21:48:09 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214737
IP address blocks: 92.242.218.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d7:22:83:e2:b3:80:65:2e:67:33:49:cf:48:0f:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=81cca9f15e1921953a628c8ad2ac4be977b6c303
Validity
Not Before: Jan 1 21:48:09 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=dfe2e5371f804c101c2d4e47cd10c41f56e9beb6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:a5:ea:7e:b0:86:df:72:db:89:48:d5:98:ca:
4f:cc:da:c8:2e:dc:32:2c:f7:f5:e4:f8:44:65:2b:
91:f9:7d:42:b0:7e:b9:d2:26:b6:05:53:61:15:d9:
dd:b2:97:68:78:aa:1c:64:52:bd:35:29:1d:58:15:
8c:ab:43:82:cd:0d:9a:b4:15:3c:44:21:c3:32:84:
6a:65:71:5a:17:e6:b0:3f:82:cc:2b:ac:71:7e:2c:
b0:96:ec:cc:02:ad:3a:0a:5b:73:22:04:89:56:35:
84:40:87:af:0c:6e:0d:51:7f:22:35:14:78:97:ba:
d6:d9:7c:f8:42:6d:98:f0:17:6e:54:4c:10:b8:c2:
16:56:56:e7:cc:97:cf:93:96:74:03:cd:4f:65:94:
c1:e9:9f:af:91:d4:97:05:b4:24:3f:2f:f4:a8:47:
bc:09:1d:a3:44:c1:cf:1b:91:55:66:1b:b7:62:37:
48:fa:86:90:52:e9:cf:c8:f6:69:1d:57:be:4a:7e:
09:1b:79:40:39:b6:61:b0:cc:57:21:61:71:2b:71:
14:a7:d3:9f:27:d3:58:67:35:78:e7:49:c1:ae:ac:
10:d0:40:29:3a:c4:62:42:eb:2d:60:d6:79:60:2a:
2f:f4:4a:4f:20:bc:4a:7c:90:a9:45:69:c9:0a:c2:
76:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:E2:E5:37:1F:80:4C:10:1C:2D:4E:47:CD:10:C4:1F:56:E9:BE:B6
X509v3 Authority Key Identifier:
keyid:81:CC:A9:F1:5E:19:21:95:3A:62:8C:8A:D2:AC:4B:E9:77:B6:C3:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gcyp8V4ZIZU6YoyK0qxL6Xe2wwM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/1ea2b0-6b9a-44d7-a2e5-2206cc2e691c/1/3-LlNx-ATBAcLU5HzRDEH1bpvrY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/1ea2b0-6b9a-44d7-a2e5-2206cc2e691c/1/gcyp8V4ZIZU6YoyK0qxL6Xe2wwM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.242.218.0/24
Signature Algorithm: sha256WithRSAEncryption
18:72:4d:a6:e0:e7:a6:b0:dc:1d:68:b9:22:39:80:f9:6e:b5:
e8:f8:db:24:b4:8a:3b:c1:ed:ae:8a:de:fc:b9:a1:90:41:5d:
04:16:45:61:90:75:4b:54:63:a4:66:b6:73:56:45:11:f4:7a:
84:8d:76:5a:81:5e:ab:4e:ff:e7:59:f4:bc:37:1c:c2:f1:04:
78:36:58:cf:ee:59:1b:56:e8:56:3e:f3:78:0e:9d:2e:40:fb:
65:99:91:35:09:91:5b:20:a6:5b:19:3f:d6:09:fa:0e:d7:59:
72:65:1c:16:b3:64:8e:2f:ed:f8:2d:e5:0f:9c:b1:53:69:cb:
31:c2:20:dc:1f:7f:81:14:5d:6e:73:92:a4:14:ce:fb:d4:3d:
99:48:ad:d1:e2:10:ea:6f:c8:4b:81:3c:d5:02:2d:dc:bf:b6:
e0:c0:1a:d0:89:5a:a9:0a:da:c5:e3:64:0d:ac:55:89:10:42:
40:83:88:71:fc:c5:a4:46:b1:f5:df:51:fd:94:96:a9:af:81:
be:34:ca:09:27:ec:b0:77:9c:91:6a:49:cb:eb:f6:4f:5f:a0:
70:20:0c:33:d6:42:46:b0:4f:ae:a1:86:73:c1:30:fd:1d:ea:
39:2b:4a:3f:33:9f:ff:41:23:f4:8c:20:dc:32:04:d7:0b:42:
ee:5a:a9:7b
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQj1yKD4rOAZS5nM0nPSA/TMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgxY2NhOWYxNWUxOTIxOTUzYTYyOGM4YWQyYWM0YmU5Nzdi
NmMzMDMwHhcNMjUwMTAxMjE0ODA5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkZmUyZTUzNzFmODA0YzEwMWMyZDRlNDdjZDEwYzQxZjU2ZTliZWI2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp6XqfrCG33LbiUjVmMpPzNrILtwy
LPf15PhEZSuR+X1CsH650ia2BVNhFdndspdoeKocZFK9NSkdWBWMq0OCzQ2atBU8
RCHDMoRqZXFaF+awP4LMK6xxfiywluzMAq06CltzIgSJVjWEQIevDG4NUX8iNRR4
l7rW2Xz4Qm2Y8BduVEwQuMIWVlbnzJfPk5Z0A81PZZTB6Z+vkdSXBbQkPy/0qEe8
CR2jRMHPG5FVZhu3YjdI+oaQUunPyPZpHVe+Sn4JG3lAObZhsMxXIWFxK3EUp9Of
J9NYZzV450nBrqwQ0EApOsRiQustYNZ5YCov9EpPILxKfJCpRWnJCsJ22wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFN/i5TcfgEwQHC1OR80QxB9W6b62MB8GA1UdIwQY
MBaAFIHMqfFeGSGVOmKMitKsS+l3tsMDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ2N5cDhWNFpJWlU2WW95SzBxeEw2WGUyd3dNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNC8xZWEyYjAtNmI5YS00NGQ3LWEyZTUt
MjIwNmNjMmU2OTFjLzEvMy1MbE54LUFUQkFjTFU1SHpSREVIMWJwdnJZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNC8xZWEyYjAtNmI5YS00NGQ3LWEyZTUtMjIwNmNjMmU2OTFj
LzEvZ2N5cDhWNFpJWlU2WW95SzBxeEw2WGUyd3dNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAXPLaMA0G
CSqGSIb3DQEBCwUAA4IBAQAYck2m4OemsNwdaLkiOYD5brXo+NsktIo7we2uit78
uaGQQV0EFkVhkHVLVGOkZrZzVkUR9HqEjXZagV6rTv/nWfS8NxzC8QR4NljP7lkb
VuhWPvN4Dp0uQPtlmZE1CZFbIKZbGT/WCfoO11lyZRwWs2SOL+34LeUPnLFTacsx
wiDcH3+BFF1uc5KkFM771D2ZSK3R4hDqb8hLgTzVAi3cv7bgwBrQiVqpCtrF42QN
rFWJEEJAg4hx/MWkRrH131H9lJapr4G+NMoJJ+ywd5yRaknL6/ZPX6BwIAwz1kJG
sE+uoYZzwTD9Heo5K0o/M5//QSP0jCDcMgTXC0LuWql7
-----END CERTIFICATE-----
Generated at Mon Apr 28 15:28:32 2025 by rpki-client