Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/225bcb-6d3d-4c0e-824f-2f1c8e408b64/1/3qC0SI0frIF6hK-O1Q_ol3Im2cU.roa
File: 3qC0SI0frIF6hK-O1Q_ol3Im2cU.roa (raw, json)
Hash identifier: hrcOEFXWWcKl8GhPePR0NsLWggea7lXY8xkFUA9Bf3s=
Subject key identifier: DE:A0:B4:48:8D:1F:AC:81:7A:84:AF:8E:D5:0F:E8:97:72:26:D9:C5
Certificate issuer: /CN=32c78eeef7acb451fc37575feb9114dfccc1cdfb
Certificate serial: 018828A450F7E92CEC140D947E819B901A0B
Authority key identifier: 32:C7:8E:EE:F7:AC:B4:51:FC:37:57:5F:EB:91:14:DF:CC:C1:CD:FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MseO7vestFH8N1df65EU38zBzfs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/225bcb-6d3d-4c0e-824f-2f1c8e408b64/1/3qC0SI0frIF6hK-O1Q_ol3Im2cU.roa
Signing time: Wed 17 May 2023 07:37:17 +0000
ROA not before: Wed 17 May 2023 07:37:17 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 209235
IP address blocks: 45.141.242.0/24 maxlen: 24
45.141.255.0/24 maxlen: 24
193.38.224.0/24 maxlen: 24
2a09:c0c0::/29 maxlen: 32
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:28:a4:50:f7:e9:2c:ec:14:0d:94:7e:81:9b:90:1a:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=32c78eeef7acb451fc37575feb9114dfccc1cdfb
Validity
Not Before: May 17 07:37:17 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=dea0b4488d1fac817a84af8ed50fe8977226d9c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:11:0a:98:21:97:e0:de:73:38:d5:77:66:a9:
5f:94:a1:0d:b4:44:80:51:46:e9:f3:1b:b2:22:80:
81:e5:86:c8:ec:9f:88:56:20:92:74:2d:a2:2a:75:
09:55:df:05:25:c0:a4:40:6b:e7:92:6e:d8:a5:fc:
21:12:66:1e:52:bf:85:17:ec:7c:fc:24:c7:9a:48:
59:ff:c4:b0:1b:14:0c:8f:aa:e5:e1:a4:35:72:60:
64:72:7f:11:df:d5:b0:ac:c6:05:33:14:25:66:6d:
8f:66:f5:91:9e:23:e8:9a:cd:f9:ad:91:aa:4c:2a:
30:ed:68:a7:89:0f:be:ad:ed:be:e5:31:a7:aa:00:
d5:4e:85:19:13:94:9e:2e:e6:10:eb:06:80:2d:2d:
44:eb:81:b2:cd:ab:ed:80:73:9c:8e:1b:4f:0b:e9:
ff:6f:14:f3:ad:6f:c8:7c:e2:12:5a:76:ca:28:15:
95:8c:d0:80:c0:a7:cf:69:18:01:6d:f7:ea:dd:ac:
67:fb:92:c5:cb:9a:5c:b0:83:79:6d:2a:e6:1c:a3:
5a:8d:98:ac:7e:50:e8:8b:01:42:8f:1e:15:d6:fb:
95:5b:c2:d1:23:50:33:f9:d3:84:6f:c8:df:0f:02:
a7:e0:3d:1f:fc:0d:d6:66:db:4e:22:97:82:3b:ef:
c1:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:A0:B4:48:8D:1F:AC:81:7A:84:AF:8E:D5:0F:E8:97:72:26:D9:C5
X509v3 Authority Key Identifier:
keyid:32:C7:8E:EE:F7:AC:B4:51:FC:37:57:5F:EB:91:14:DF:CC:C1:CD:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MseO7vestFH8N1df65EU38zBzfs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/225bcb-6d3d-4c0e-824f-2f1c8e408b64/1/3qC0SI0frIF6hK-O1Q_ol3Im2cU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/225bcb-6d3d-4c0e-824f-2f1c8e408b64/1/MseO7vestFH8N1df65EU38zBzfs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.141.242.0/24
45.141.255.0/24
193.38.224.0/24
IPv6:
2a09:c0c0::/29
Signature Algorithm: sha256WithRSAEncryption
1c:c5:45:5c:ad:07:d5:80:02:50:79:9a:e5:a7:91:b4:ff:e5:
b3:57:9d:b2:da:ad:2b:16:9e:82:4f:80:42:d8:d4:5d:4e:92:
3d:69:60:8d:7f:45:ea:9f:ca:3b:42:32:9a:2d:9e:da:c0:89:
b2:f0:77:01:71:fe:78:67:e0:49:19:ee:64:8c:5f:9b:60:7b:
44:32:35:65:b1:cc:2c:23:54:4c:23:5e:2c:65:51:bf:4c:fc:
d5:04:a1:61:e4:cd:8e:46:13:cf:a2:d2:58:3c:74:4f:82:43:
88:07:6b:23:e4:b0:77:d4:28:58:48:49:b8:c4:89:c4:c7:5e:
32:04:44:67:09:3e:68:9a:94:1a:1c:1d:a1:11:ce:e4:c6:a8:
a2:88:f4:45:8a:c4:a4:a1:d9:c4:06:30:a9:d1:99:73:21:df:
8a:9b:36:70:53:12:b3:68:a8:18:cc:3f:ae:aa:df:07:45:a9:
25:ff:e4:c6:74:6b:52:0b:6c:56:8f:27:cb:ac:a9:89:5c:4d:
50:5f:e6:b4:2d:a2:d3:96:30:39:f7:e0:8b:0d:fa:55:c5:c8:
bf:5d:54:09:45:9d:68:11:50:c0:b2:e4:6a:0e:a2:cb:3b:68:
db:68:a5:76:4c:e3:8d:6d:a4:7a:cf:fd:a7:f9:7b:8e:96:d3:
da:af:c5:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 10:15:41 2025 by rpki-client