Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/225bcb-6d3d-4c0e-824f-2f1c8e408b64/1/it-CtIBoGadrzQojyRcAR3Euqfg.roa
File: it-CtIBoGadrzQojyRcAR3Euqfg.roa (raw, json)
Hash identifier: RelVzPeSFtP4qKd58yHDmgxpC+E5JQkUtYxOxKOk4fM=
Subject key identifier: 8A:DF:82:B4:80:68:19:A7:6B:CD:0A:23:C9:17:00:47:71:2E:A9:F8
Certificate issuer: /CN=32c78eeef7acb451fc37575feb9114dfccc1cdfb
Certificate serial: 018804931BE1352BBCEE8E4D421B5BCB4C9A
Authority key identifier: 32:C7:8E:EE:F7:AC:B4:51:FC:37:57:5F:EB:91:14:DF:CC:C1:CD:FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MseO7vestFH8N1df65EU38zBzfs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/225bcb-6d3d-4c0e-824f-2f1c8e408b64/1/it-CtIBoGadrzQojyRcAR3Euqfg.roa
Signing time: Wed 10 May 2023 07:32:09 +0000
ROA not before: Wed 10 May 2023 07:32:09 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 209235
IP address blocks: 45.141.242.0/24 maxlen: 24
45.141.255.0/24 maxlen: 24
193.38.224.0/24 maxlen: 24
2a09:c0c0::/29 maxlen: 32
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:04:93:1b:e1:35:2b:bc:ee:8e:4d:42:1b:5b:cb:4c:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=32c78eeef7acb451fc37575feb9114dfccc1cdfb
Validity
Not Before: May 10 07:32:09 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8adf82b4806819a76bcd0a23c9170047712ea9f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:f6:9e:86:00:b0:c8:e0:b9:d1:a0:16:a3:40:
56:6e:a3:0e:76:e9:93:31:50:8b:cc:4b:04:5e:16:
b3:3d:b2:79:da:09:60:e8:3e:ee:7d:f5:30:cc:09:
e8:25:93:28:45:ea:0a:4f:10:76:dc:b9:f0:0c:fb:
2d:4f:f4:c3:b5:a2:a0:3b:14:31:9a:b0:ae:e1:7a:
a1:92:71:b2:1e:bb:40:ab:16:3b:7a:d9:2d:36:99:
af:94:61:42:bf:3a:8b:8f:6e:c4:5d:dd:38:57:d1:
5c:d9:2f:15:2e:4f:bf:40:6b:17:46:18:c0:ed:df:
55:87:d2:03:35:2d:04:1e:b2:27:a6:c4:af:22:46:
65:a5:fb:69:31:7e:0c:a8:18:c1:ad:a9:17:98:b1:
a3:24:f0:bb:f7:65:a6:0c:ba:f8:65:d3:22:bd:a8:
64:fa:f4:2e:35:6d:44:9c:e3:39:48:8c:ec:e6:7b:
99:83:7a:d9:fd:82:db:80:24:5d:c2:61:60:e0:2c:
d1:bc:7b:8e:36:21:44:cc:21:ad:b8:45:79:a0:0f:
13:6c:fc:11:f5:58:3d:6a:65:25:80:4c:58:2d:09:
72:3c:93:61:8e:5f:5a:f6:ee:89:90:51:55:37:7a:
31:49:32:70:8a:36:bb:da:81:3c:c8:92:5a:f8:74:
4c:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:DF:82:B4:80:68:19:A7:6B:CD:0A:23:C9:17:00:47:71:2E:A9:F8
X509v3 Authority Key Identifier:
keyid:32:C7:8E:EE:F7:AC:B4:51:FC:37:57:5F:EB:91:14:DF:CC:C1:CD:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MseO7vestFH8N1df65EU38zBzfs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/225bcb-6d3d-4c0e-824f-2f1c8e408b64/1/it-CtIBoGadrzQojyRcAR3Euqfg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/225bcb-6d3d-4c0e-824f-2f1c8e408b64/1/MseO7vestFH8N1df65EU38zBzfs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.141.242.0/24
45.141.255.0/24
193.38.224.0/24
IPv6:
2a09:c0c0::/29
Signature Algorithm: sha256WithRSAEncryption
53:6a:a9:95:08:20:cb:07:3e:d8:61:b8:24:3d:42:1d:fd:21:
18:60:86:1d:98:6d:68:23:00:a9:40:3b:64:30:9f:1e:e1:a2:
c8:52:85:43:01:fc:a5:f8:1d:cb:c1:38:59:1d:14:92:51:b4:
52:83:e2:33:ab:30:a4:fd:9b:05:1f:0d:15:ec:da:f9:e0:a6:
83:29:17:d4:d0:91:85:db:4f:8f:9a:4b:b9:84:20:b6:42:22:
85:11:2a:11:93:ba:4d:de:0f:98:1d:4d:0b:ae:e8:37:be:c4:
01:69:8b:85:42:c5:3b:ac:cf:75:2e:6c:3b:cb:e5:08:c0:a3:
a9:0e:96:d1:a8:bc:37:05:f8:aa:66:fa:8c:6e:fa:0a:40:9b:
d8:f4:a2:71:26:70:f6:69:4f:c7:d0:82:00:fa:07:65:c0:33:
60:e1:f6:f6:5a:62:c2:d9:49:a9:57:2d:ed:05:b5:ff:7e:ab:
c2:0b:7c:bc:9a:02:7f:28:fd:9c:b0:18:1d:d8:4d:37:6e:72:
86:a6:a7:cc:9c:50:c2:ed:e2:da:59:34:3b:a9:d2:66:8d:e3:
f7:c8:fc:65:83:76:2a:d1:52:ab:43:fb:a9:ff:fd:d7:58:01:
50:1e:db:b8:7b:6e:ff:bd:ed:ef:82:82:8a:8a:21:41:6d:57:
dd:9d:2f:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 21:19:52 2025 by rpki-client