Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/400685-f48e-4ab9-8e3f-042446b70fb1/1/eVW9h0SiyI7UdFXG_aRGIvi8qQg.roa
File: eVW9h0SiyI7UdFXG_aRGIvi8qQg.roa (raw, json)
Hash identifier: dJslDGwf5M9eZxnGFhCi7airDPAkwoYKryAlbcOCqN4=
Subject key identifier: 79:55:BD:87:44:A2:C8:8E:D4:74:55:C6:FD:A4:46:22:F8:BC:A9:08
Certificate issuer: /CN=c6169716d0ae64068703140aa3730e3788fdd4c6
Certificate serial: 0187A44470B49C81487B4620E6F9AC906463
Authority key identifier: C6:16:97:16:D0:AE:64:06:87:03:14:0A:A3:73:0E:37:88:FD:D4:C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xhaXFtCuZAaHAxQKo3MON4j91MY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/400685-f48e-4ab9-8e3f-042446b70fb1/1/eVW9h0SiyI7UdFXG_aRGIvi8qQg.roa
Signing time: Fri 21 Apr 2023 14:42:41 +0000
ROA not before: Fri 21 Apr 2023 14:42:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 208485
IP address blocks: 185.192.20.0/23 maxlen: 23
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:a4:44:70:b4:9c:81:48:7b:46:20:e6:f9:ac:90:64:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c6169716d0ae64068703140aa3730e3788fdd4c6
Validity
Not Before: Apr 21 14:42:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7955bd8744a2c88ed47455c6fda44622f8bca908
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:83:20:5c:c6:92:bf:54:c5:39:8e:a6:c0:c2:
64:2e:e4:60:d9:33:a0:a8:9d:0a:b4:9d:39:54:e0:
5e:4c:f7:7c:48:c9:5a:2b:4a:e1:38:55:f2:93:dc:
20:b5:58:ea:fa:b0:92:a6:47:45:da:9e:0f:63:78:
e8:c3:b7:43:bd:80:7d:0d:f4:76:ed:c7:70:e4:f4:
d2:39:41:0a:bc:41:fc:32:44:e5:c6:f8:97:b5:7c:
c1:00:c1:bd:6f:ff:40:d2:a2:db:26:b1:84:bf:01:
ab:26:0d:84:c5:0a:68:dc:de:2b:7d:80:2e:b7:dd:
aa:68:81:15:4b:6f:ce:89:a7:b3:46:c2:9f:a9:a8:
31:67:34:b0:02:66:e0:9e:60:ad:d0:01:6f:bf:17:
ef:69:6c:e1:fc:12:35:c1:7d:d7:00:78:17:0e:9c:
d6:5d:dc:37:48:d4:44:7d:5d:09:c7:c3:4d:23:d1:
15:97:3e:a3:ff:7f:c0:79:11:28:4b:e4:b2:68:97:
21:97:f8:06:6e:9a:5e:91:1f:09:ff:b3:00:24:e7:
26:10:92:67:ee:fd:a4:4f:33:77:fe:61:90:11:33:
c3:74:17:ca:fb:2d:d4:92:01:13:a8:c0:c8:c4:26:
dc:c2:3b:58:7f:3a:6b:25:b3:89:e9:b9:93:2f:22:
a7:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:55:BD:87:44:A2:C8:8E:D4:74:55:C6:FD:A4:46:22:F8:BC:A9:08
X509v3 Authority Key Identifier:
keyid:C6:16:97:16:D0:AE:64:06:87:03:14:0A:A3:73:0E:37:88:FD:D4:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xhaXFtCuZAaHAxQKo3MON4j91MY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/400685-f48e-4ab9-8e3f-042446b70fb1/1/eVW9h0SiyI7UdFXG_aRGIvi8qQg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/400685-f48e-4ab9-8e3f-042446b70fb1/1/xhaXFtCuZAaHAxQKo3MON4j91MY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.192.20.0/23
Signature Algorithm: sha256WithRSAEncryption
78:fa:58:19:e8:4a:7d:fe:3b:14:1e:b4:59:76:10:bb:ff:48:
8a:56:9f:d6:3c:95:7c:aa:35:65:36:aa:d7:3a:3b:90:dd:a4:
37:3e:34:5e:bf:dc:80:20:aa:e4:6f:57:b9:68:a6:d5:f7:d4:
9f:1a:7f:62:ad:3b:15:7c:ef:b4:b4:54:63:80:90:05:29:9c:
d4:5d:36:3a:5d:f8:1f:8f:17:63:16:55:47:8a:04:30:f8:3c:
6c:ab:6f:c6:63:95:10:05:33:8d:7d:b2:d4:05:9b:79:da:a4:
fd:f0:2c:f1:58:57:13:ce:50:5e:f4:b5:10:d0:a9:87:e2:9d:
86:3a:97:21:4d:f7:f4:f5:50:98:8a:09:5e:e8:b1:3d:bc:5a:
71:4a:94:9b:f3:a9:0e:ab:11:11:4e:e5:6d:d6:3a:5e:b8:4b:
77:2a:ee:b9:2b:c0:07:25:1e:46:42:4a:40:cd:61:61:6a:a3:
fc:9b:d9:e3:19:bf:07:da:38:cb:ec:aa:b4:d0:76:99:f8:b1:
50:cd:aa:d8:e4:2d:f9:83:6a:29:16:bf:ff:30:10:5e:98:83:
23:f7:14:4a:df:ba:9c:fc:f7:42:9b:fc:9b:ab:7b:f7:c1:8a:
1a:c6:25:23:5e:10:6c:bd:cf:70:c3:d5:f3:be:7d:a0:09:8b:
09:a8:cd:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 11:34:13 2025 by rpki-client