Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/225bcb-6d3d-4c0e-824f-2f1c8e408b64/1/uPJWhrzYgdd7ZwAfcrdGXoWpOZA.roa
File: uPJWhrzYgdd7ZwAfcrdGXoWpOZA.roa (raw, json)
Hash identifier: X4vqOZLxZYX7aEo9quQWq61EKGJHW11zbZO42l0Qmbg=
Subject key identifier: B8:F2:56:86:BC:D8:81:D7:7B:67:00:1F:72:B7:46:5E:85:A9:39:90
Certificate issuer: /CN=32c78eeef7acb451fc37575feb9114dfccc1cdfb
Certificate serial: 018CC26CF6F43446E9BF2A81F40D030EA670
Authority key identifier: 32:C7:8E:EE:F7:AC:B4:51:FC:37:57:5F:EB:91:14:DF:CC:C1:CD:FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MseO7vestFH8N1df65EU38zBzfs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/225bcb-6d3d-4c0e-824f-2f1c8e408b64/1/uPJWhrzYgdd7ZwAfcrdGXoWpOZA.roa
Signing time: Mon 01 Jan 2024 00:29:30 +0000
ROA not before: Mon 01 Jan 2024 00:29:30 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 209235
IP address blocks: 45.141.242.0/24 maxlen: 24
45.141.255.0/24 maxlen: 24
2a09:c0c0::/29 maxlen: 32
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:6c:f6:f4:34:46:e9:bf:2a:81:f4:0d:03:0e:a6:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=32c78eeef7acb451fc37575feb9114dfccc1cdfb
Validity
Not Before: Jan 1 00:29:30 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b8f25686bcd881d77b67001f72b7465e85a93990
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:57:42:d6:fb:cb:84:6f:4c:f6:7c:f1:e6:cc:
42:18:a7:82:61:81:58:43:44:a8:8f:d1:4d:07:e7:
25:ca:b4:9d:ec:16:1e:a5:94:81:79:3d:2e:bb:9e:
09:b9:95:e6:d6:c8:5b:24:51:2c:d7:e7:52:87:e1:
96:1e:86:ab:2c:29:01:75:fd:97:1a:da:a3:a1:4c:
7e:8e:ab:42:eb:7e:c7:e9:f2:8b:3a:64:fb:c1:7a:
f0:5d:33:25:71:d7:92:f7:8a:f8:35:83:e0:fb:51:
8a:3c:01:e4:74:e3:1a:57:67:e2:f9:67:01:cb:33:
cb:53:86:e1:4b:13:f1:97:df:9e:68:c0:99:b8:34:
54:fa:cc:22:50:3b:75:c9:db:48:9b:de:90:92:91:
4f:26:44:8e:95:9a:c1:5c:e5:c9:67:9e:3e:74:fd:
19:45:20:75:6b:15:ad:b3:47:b5:32:e9:b4:72:1d:
7f:19:b0:a5:64:c4:42:a3:96:8f:f1:6b:2a:61:ce:
a9:3a:a5:57:fb:59:9b:86:2b:ae:d5:0c:be:fe:00:
95:ec:d5:39:fd:c4:bd:6f:24:62:ba:ff:cb:d5:3c:
ed:3b:c0:20:65:d1:c9:df:87:c8:6e:86:51:11:f1:
a8:89:17:7d:9b:6e:26:53:4a:9a:d1:c4:21:ee:12:
93:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:F2:56:86:BC:D8:81:D7:7B:67:00:1F:72:B7:46:5E:85:A9:39:90
X509v3 Authority Key Identifier:
keyid:32:C7:8E:EE:F7:AC:B4:51:FC:37:57:5F:EB:91:14:DF:CC:C1:CD:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MseO7vestFH8N1df65EU38zBzfs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/225bcb-6d3d-4c0e-824f-2f1c8e408b64/1/uPJWhrzYgdd7ZwAfcrdGXoWpOZA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/225bcb-6d3d-4c0e-824f-2f1c8e408b64/1/MseO7vestFH8N1df65EU38zBzfs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.141.242.0/24
45.141.255.0/24
IPv6:
2a09:c0c0::/29
Signature Algorithm: sha256WithRSAEncryption
6f:ed:08:cc:1f:b3:43:b5:ab:35:e7:de:8f:e0:26:a9:66:94:
b0:be:0b:a6:be:85:dc:df:9f:a7:34:a2:19:06:55:a8:de:e0:
f9:40:bc:75:97:14:3e:b4:c7:23:fd:c9:da:d9:19:4a:81:1b:
4a:62:2f:c7:0a:73:db:99:33:8a:a6:9d:e0:05:42:b7:59:f5:
63:8b:5c:cd:c6:7a:a4:98:85:44:21:4f:b9:f9:67:5d:58:4e:
1e:63:8e:5d:d6:49:c8:de:f8:57:14:41:bd:5c:4d:e5:47:2e:
8c:98:bc:da:fc:0c:0d:48:54:29:38:35:5c:18:36:00:f7:67:
5a:7c:8d:fe:04:1b:11:cc:3f:a8:4b:b1:ca:c7:48:87:8d:69:
93:45:1f:bd:38:5e:9b:bb:cb:d9:94:d9:84:47:12:78:86:7e:
ba:6c:e1:1f:1b:f6:98:de:e0:3f:92:6c:3a:fa:a2:d6:64:05:
e3:15:f7:69:cf:11:1d:e6:1b:b3:af:e5:19:d2:0f:04:8a:4c:
bb:9b:84:fe:96:09:83:1d:52:b9:df:a8:ad:16:2d:db:73:03:
3b:7d:73:50:eb:1b:5d:c0:a6:d0:29:be:48:2c:9f:86:10:9f:
8d:9f:0d:42:b2:f1:24:f1:35:a2:9e:a5:1d:a6:05:f5:13:52:
05:24:9a:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 22:13:58 2025 by rpki-client