Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/abe16b-92cc-48e3-b5b9-86a2f067b4e8/1/f_tRXxeIZ_FEiEWb9bWEaCTv0HM.roa
File: f_tRXxeIZ_FEiEWb9bWEaCTv0HM.roa (raw, json)
Hash identifier: O6Qj6/DNSRkA4027gGhdEgH0XDQ6nkdYnIcJECYPzHY=
Subject key identifier: 7F:FB:51:5F:17:88:67:F1:44:88:45:9B:F5:B5:84:68:24:EF:D0:73
Certificate issuer: /CN=b404cc0e038eb0e697ec6e7ae49d0286146e0c1a
Certificate serial: 018B175DA8240B08B1C1ADDEC7F433692596
Authority key identifier: B4:04:CC:0E:03:8E:B0:E6:97:EC:6E:7A:E4:9D:02:86:14:6E:0C:1A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tATMDgOOsOaX7G565J0ChhRuDBo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/abe16b-92cc-48e3-b5b9-86a2f067b4e8/1/f_tRXxeIZ_FEiEWb9bWEaCTv0HM.roa
Signing time: Tue 10 Oct 2023 02:14:55 +0000
ROA not before: Tue 10 Oct 2023 02:14:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 58026
IP address blocks: 104.167.16.0/20 maxlen: 20
45.3.32.0/19 maxlen: 19
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:17:5d:a8:24:0b:08:b1:c1:ad:de:c7:f4:33:69:25:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b404cc0e038eb0e697ec6e7ae49d0286146e0c1a
Validity
Not Before: Oct 10 02:14:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7ffb515f178867f14488459bf5b5846824efd073
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:28:9f:e0:e0:32:d4:21:9b:42:5a:3b:54:39:
09:42:29:81:15:a8:73:3d:5d:b9:5e:49:4e:85:52:
5c:57:fe:98:2e:68:1c:f3:3e:a4:d6:bd:53:34:97:
66:07:98:ec:95:5c:08:8f:c2:63:87:de:7c:6f:fe:
e5:b8:e9:ba:55:2b:32:9b:6a:51:81:96:82:bb:ea:
fc:c5:8d:d9:23:e2:96:3a:c6:60:8f:36:5d:09:e9:
38:e8:5c:bb:40:c8:ef:47:b6:2f:74:a6:c0:e6:70:
86:3d:ef:24:e9:96:99:3c:4b:39:ef:a4:21:64:cd:
b6:49:08:f8:30:c2:e9:52:92:02:c0:48:46:97:6f:
c5:ab:33:b5:4e:72:21:97:e0:29:d4:32:e0:70:2e:
79:92:a6:e4:a6:a0:ee:7e:6a:df:c5:4d:06:82:68:
50:f2:27:d0:d3:39:db:bc:d8:35:47:e4:26:3a:89:
e4:ff:83:3e:ea:f9:e4:d4:8e:de:06:c5:62:69:d2:
7d:a9:3d:42:4c:b2:a4:8a:e2:17:4e:7a:5a:c2:a1:
a2:6a:ae:f0:90:67:19:74:03:78:69:d1:db:25:03:
4d:68:9f:2d:7b:75:3f:b9:d0:9a:be:77:53:2c:a9:
18:d4:0b:6b:b1:a2:bf:74:31:15:8c:23:9b:8e:72:
8a:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:FB:51:5F:17:88:67:F1:44:88:45:9B:F5:B5:84:68:24:EF:D0:73
X509v3 Authority Key Identifier:
keyid:B4:04:CC:0E:03:8E:B0:E6:97:EC:6E:7A:E4:9D:02:86:14:6E:0C:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tATMDgOOsOaX7G565J0ChhRuDBo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/abe16b-92cc-48e3-b5b9-86a2f067b4e8/1/f_tRXxeIZ_FEiEWb9bWEaCTv0HM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/88/abe16b-92cc-48e3-b5b9-86a2f067b4e8/1/tATMDgOOsOaX7G565J0ChhRuDBo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.3.32.0/19
104.167.16.0/20
Signature Algorithm: sha256WithRSAEncryption
5d:59:af:0d:f2:89:23:21:7d:95:3b:42:c0:8b:61:b2:6e:87:
ca:e6:8c:17:9e:3a:ab:34:75:0c:77:f5:56:52:72:bc:05:6c:
71:74:16:80:f1:66:12:77:f2:98:70:07:0b:34:48:e6:c1:9d:
ea:8f:4f:a5:c3:6e:d8:24:ac:1f:5e:06:30:8d:eb:44:56:72:
a3:a6:86:0a:c2:d5:80:d6:4c:36:eb:9b:3c:be:7a:25:0a:d4:
d6:89:7b:a6:a5:78:98:6f:79:85:aa:b3:c5:ff:65:aa:76:2b:
96:2b:ac:88:6c:d6:ed:a9:72:d0:d1:d3:31:d8:e7:44:bc:63:
2f:74:dc:06:81:fb:30:20:b8:26:52:ac:a6:9d:45:1b:47:36:
2f:8c:dd:a4:99:d8:4c:cd:fa:dd:d6:97:49:ac:2b:79:c6:0d:
a9:2f:d6:a8:ec:b7:0a:f5:13:4a:f0:a3:bf:ac:dd:fc:49:6a:
d6:01:f0:c3:ce:26:7a:7b:8b:40:65:48:d4:4b:d2:fb:0b:7d:
88:b6:f9:2f:1f:0a:dd:70:9a:51:99:c6:b8:39:51:68:d7:02:
f3:c0:ba:07:a5:25:9c:8f:ab:dd:36:92:85:a2:e5:b1:8c:f5:
da:22:f8:b7:bf:df:df:2d:e6:be:19:c4:94:61:3c:52:28:49:
47:54:91:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 13:20:27 2025 by rpki-client