Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/225bcb-6d3d-4c0e-824f-2f1c8e408b64/1/1-rNGykXUCmNzkF3dwFgTPsClz2o.roa
File: 1-rNGykXUCmNzkF3dwFgTPsClz2o.roa (raw, json)
Hash identifier: VQbBomqmyjlZSNGv5vyoy7uE/X6Sfod8M6F4W+rDIao=
Subject key identifier: FA:B3:46:CA:45:D4:0A:63:73:90:5D:DD:C0:58:13:3E:C0:A5:CF:6A
Certificate issuer: /CN=32c78eeef7acb451fc37575feb9114dfccc1cdfb
Certificate serial: 018D408E26360D0DCF8A82FA507510108922
Authority key identifier: 32:C7:8E:EE:F7:AC:B4:51:FC:37:57:5F:EB:91:14:DF:CC:C1:CD:FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MseO7vestFH8N1df65EU38zBzfs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/225bcb-6d3d-4c0e-824f-2f1c8e408b64/1/1-rNGykXUCmNzkF3dwFgTPsClz2o.roa
Signing time: Thu 25 Jan 2024 12:17:54 +0000
ROA not before: Thu 25 Jan 2024 12:17:54 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 209235
IP address blocks: 45.141.242.0/24 maxlen: 24
2a09:c0c0::/29 maxlen: 32
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:40:8e:26:36:0d:0d:cf:8a:82:fa:50:75:10:10:89:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=32c78eeef7acb451fc37575feb9114dfccc1cdfb
Validity
Not Before: Jan 25 12:17:54 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=fab346ca45d40a6373905dddc058133ec0a5cf6a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:01:1c:a7:5b:b4:ad:ce:2a:8a:a7:00:16:c4:
17:e1:d4:68:47:4f:ef:ee:f2:c4:5b:94:7a:a1:cf:
9b:e6:b5:d1:d6:f3:89:d6:12:5c:23:63:79:20:19:
b6:7c:1b:49:bb:62:31:11:69:7a:e3:3f:0f:6c:0a:
69:db:77:20:11:db:04:3f:ec:e4:47:ca:9f:9a:aa:
67:60:92:ee:b2:03:48:7f:43:c6:2b:83:ba:50:a5:
42:22:ca:da:08:94:1f:96:a5:f3:8d:be:57:c9:7f:
aa:e8:1d:00:f4:d7:5d:e2:69:4c:4b:89:dc:de:40:
a0:73:36:a9:ac:5d:e1:f2:f0:31:1f:02:c9:49:81:
b7:2e:e4:79:4d:93:1a:72:a3:5f:68:a5:d4:81:9f:
e8:59:83:83:4e:3b:b7:b3:af:e9:1c:ae:49:8a:ab:
92:45:46:1b:cb:ad:c2:2b:04:cd:56:da:da:26:39:
1b:06:f1:79:28:4e:58:dc:4d:4b:60:7f:0f:74:78:
4a:a9:fd:3c:00:18:ae:4a:61:e7:74:3e:a1:0c:c8:
78:1b:8d:14:77:2e:26:6e:05:12:42:53:10:dd:14:
37:40:e2:36:d0:bd:bb:db:eb:90:20:88:9b:59:63:
27:ba:ed:ed:f0:b0:aa:61:a5:64:9a:66:88:08:3c:
e7:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:B3:46:CA:45:D4:0A:63:73:90:5D:DD:C0:58:13:3E:C0:A5:CF:6A
X509v3 Authority Key Identifier:
keyid:32:C7:8E:EE:F7:AC:B4:51:FC:37:57:5F:EB:91:14:DF:CC:C1:CD:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MseO7vestFH8N1df65EU38zBzfs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/225bcb-6d3d-4c0e-824f-2f1c8e408b64/1/1-rNGykXUCmNzkF3dwFgTPsClz2o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/225bcb-6d3d-4c0e-824f-2f1c8e408b64/1/MseO7vestFH8N1df65EU38zBzfs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.141.242.0/24
IPv6:
2a09:c0c0::/29
Signature Algorithm: sha256WithRSAEncryption
19:a5:12:d5:da:b8:16:47:3c:36:05:f4:57:d8:24:04:88:b9:
ce:3d:cd:3d:54:f8:85:c2:5a:12:8c:01:8f:67:c9:19:0c:31:
36:b0:27:b9:88:83:68:ef:9a:21:be:47:ba:75:d7:19:f8:71:
81:92:60:5a:94:6b:a2:d7:5a:71:76:de:2f:9f:e0:fb:01:6d:
27:c0:95:25:cd:07:d6:46:ce:a1:d1:ea:c9:b2:c4:e8:e7:16:
da:b9:66:76:d7:89:c3:c4:f9:dd:24:94:e2:4f:5d:6b:8b:53:
94:da:46:84:8c:3d:d9:62:95:92:57:90:b1:51:44:6b:27:d1:
14:34:71:6a:f3:1a:69:8b:a9:da:04:44:b1:53:e7:8b:0d:6f:
06:48:0d:8e:df:3e:3b:70:ed:cc:b7:df:aa:1c:ba:3c:79:27:
ec:23:97:9c:24:2e:8e:75:7e:cf:96:e6:5e:5c:ea:d7:31:57:
c8:df:b6:58:2f:46:5b:5c:90:7c:ba:07:fe:b4:6f:d3:14:62:
85:57:c1:64:f3:de:6f:f3:9e:80:ba:70:0e:c8:4f:6c:06:3c:
24:74:7d:5c:98:60:ea:ad:67:60:f2:4f:ec:09:9f:a0:af:b6:
82:4d:3d:d0:d4:d0:77:c6:55:f0:be:3f:56:89:c3:b6:84:a5:
1a:ef:34:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 15:20:44 2025 by rpki-client