Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/abe16b-92cc-48e3-b5b9-86a2f067b4e8/1/nwI_AKzRjJNe6UQhwTv3fsIo0IA.roa
File: nwI_AKzRjJNe6UQhwTv3fsIo0IA.roa (raw, json)
Hash identifier: ZKiPxzl64Gap+zscJRhnjIxQkG9yF5kTJpa2y3Ja7m8=
Subject key identifier: 9F:02:3F:00:AC:D1:8C:93:5E:E9:44:21:C1:3B:F7:7E:C2:28:D0:80
Certificate issuer: /CN=b404cc0e038eb0e697ec6e7ae49d0286146e0c1a
Certificate serial: 01961AAB8B3A7A9A328F029552FADCF0BC78
Authority key identifier: B4:04:CC:0E:03:8E:B0:E6:97:EC:6E:7A:E4:9D:02:86:14:6E:0C:1A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tATMDgOOsOaX7G565J0ChhRuDBo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/abe16b-92cc-48e3-b5b9-86a2f067b4e8/1/nwI_AKzRjJNe6UQhwTv3fsIo0IA.roa
Signing time: Wed 09 Apr 2025 13:09:32 +0000
ROA not before: Wed 09 Apr 2025 13:09:32 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 58026
IP address blocks: 104.167.24.0/21 maxlen: 21
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:1a:ab:8b:3a:7a:9a:32:8f:02:95:52:fa:dc:f0:bc:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b404cc0e038eb0e697ec6e7ae49d0286146e0c1a
Validity
Not Before: Apr 9 13:09:32 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9f023f00acd18c935ee94421c13bf77ec228d080
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:22:df:fa:b8:a1:6e:5b:7e:1b:09:a5:4c:ce:
2f:a2:55:f0:5e:59:96:be:be:93:d2:c1:31:03:c3:
d9:dd:ca:f2:da:91:69:1c:03:7b:4b:3d:ff:ef:73:
03:27:b3:f7:dc:93:2b:8c:01:71:6a:e5:0f:eb:09:
7a:c6:03:84:7e:72:eb:ba:2e:27:a4:40:74:e7:7b:
2f:93:29:d1:d4:d2:a2:ca:ed:c1:1a:c3:fa:0b:ef:
08:71:72:31:cf:ce:70:01:bf:c4:9a:44:bc:04:16:
17:c7:62:03:9b:b5:cc:6c:c0:f3:f4:02:27:54:15:
5d:28:c5:83:e9:25:1a:7c:09:62:64:9e:48:5c:3e:
eb:fe:e4:3f:2f:32:4f:c3:63:48:eb:e1:91:40:43:
40:5d:6a:cd:93:1f:73:1d:d5:08:a4:19:df:b6:c4:
77:d8:f5:23:89:db:34:60:3b:6e:70:77:3c:66:e4:
b2:cd:cd:ee:c6:6b:1a:6b:3c:79:0d:5f:85:f6:98:
e7:d0:b8:1a:14:d6:17:d6:e2:48:20:73:81:c3:1b:
6e:2d:e7:6c:80:92:c3:fd:c3:6c:93:20:56:99:16:
bf:42:49:ab:7f:32:fe:a9:5d:a1:3f:e7:58:b2:2a:
87:f8:cc:97:fa:5d:df:97:42:38:c0:22:0d:05:55:
4d:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:02:3F:00:AC:D1:8C:93:5E:E9:44:21:C1:3B:F7:7E:C2:28:D0:80
X509v3 Authority Key Identifier:
keyid:B4:04:CC:0E:03:8E:B0:E6:97:EC:6E:7A:E4:9D:02:86:14:6E:0C:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tATMDgOOsOaX7G565J0ChhRuDBo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/abe16b-92cc-48e3-b5b9-86a2f067b4e8/1/nwI_AKzRjJNe6UQhwTv3fsIo0IA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/88/abe16b-92cc-48e3-b5b9-86a2f067b4e8/1/tATMDgOOsOaX7G565J0ChhRuDBo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
104.167.24.0/21
Signature Algorithm: sha256WithRSAEncryption
95:fc:66:ae:7c:91:c7:b9:d0:d6:03:56:56:93:c8:92:84:17:
95:56:cf:ce:22:c4:bb:1d:01:9f:15:8c:d6:f1:c4:62:7f:52:
98:6b:51:de:e8:af:11:45:dc:ed:d3:30:fa:9d:71:fc:ef:b4:
c4:b0:63:55:40:44:f6:98:b1:d1:f4:cc:3b:ab:06:0a:a1:e8:
e7:31:dd:07:08:11:74:1d:8d:1e:35:5e:50:4e:50:fa:ca:bb:
4b:55:f6:9b:a9:81:59:ae:92:db:d8:4d:c8:5c:4f:d3:a5:d8:
7a:26:bf:a4:90:81:6f:f7:16:1e:ae:47:81:5c:3a:b7:ed:2c:
6b:cd:74:48:b3:e2:41:2c:55:37:a7:c0:fd:95:88:4d:cc:f1:
17:d6:00:d7:3d:08:58:55:f0:70:ad:49:be:c7:d5:3a:b9:87:
c5:7e:ac:4b:db:13:2c:78:54:db:47:69:a0:14:6f:22:ef:b5:
4d:f9:31:41:f7:4e:08:0f:dc:7c:f7:88:6f:30:15:bf:ff:44:
8f:f3:3e:e0:bf:9e:71:37:3a:8c:1b:ad:e5:d7:79:1d:83:c9:
64:1a:aa:20:ec:b2:a3:94:8d:73:eb:be:10:84:a1:87:af:68:
12:56:58:f6:4c:9d:2c:c0:88:56:9f:fd:92:08:cc:84:6f:a7:
f1:ac:68:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 17:10:41 2025 by rpki-client