Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/fe3dbe-9708-4242-9277-96b50bcc7a08/1/CZ0arj07qioCShjm-iw7NtQ3zCQ.roa
File: CZ0arj07qioCShjm-iw7NtQ3zCQ.roa (raw, json)
Hash identifier: Bs/6QTats2bLqMHWBhP4lrXPLRlzUMvQLDsXRaEk2rs=
Subject key identifier: 09:9D:1A:AE:3D:3B:AA:2A:02:4A:18:E6:FA:2C:3B:36:D4:37:CC:24
Certificate issuer: /CN=d8eeb20a880cdb494e9e62d43b2ef28c90cb9eef
Certificate serial: 0190210BB7A84A34278B96D463F3F0EE3531
Authority key identifier: D8:EE:B2:0A:88:0C:DB:49:4E:9E:62:D4:3B:2E:F2:8C:90:CB:9E:EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2O6yCogM20lOnmLUOy7yjJDLnu8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/fe3dbe-9708-4242-9277-96b50bcc7a08/1/CZ0arj07qioCShjm-iw7NtQ3zCQ.roa
Signing time: Sun 16 Jun 2024 12:35:34 +0000
ROA not before: Sun 16 Jun 2024 12:35:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 91.217.219.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:21:0b:b7:a8:4a:34:27:8b:96:d4:63:f3:f0:ee:35:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d8eeb20a880cdb494e9e62d43b2ef28c90cb9eef
Validity
Not Before: Jun 16 12:35:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=099d1aae3d3baa2a024a18e6fa2c3b36d437cc24
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:2e:1a:ec:d0:25:21:07:23:c4:48:48:76:7b:
52:02:5d:23:a7:ac:3f:d9:5b:13:54:a1:68:13:2e:
86:3d:3f:01:f6:73:15:b7:1e:f7:6f:9c:a8:2b:94:
cb:1f:e0:cf:e6:cf:8b:f4:47:3a:4e:f4:ee:4e:2c:
22:6d:d5:e7:b0:5d:64:db:2f:ef:73:fa:60:ea:b1:
78:39:e0:51:a8:99:1f:d1:ce:0b:d1:69:2a:41:0b:
db:95:aa:23:b3:41:6a:a7:b1:ca:9b:72:e8:50:08:
c1:eb:e4:d1:80:1b:01:5b:da:4e:3e:79:6d:5c:ad:
b1:7c:b4:97:73:3b:7c:98:8b:98:8f:8b:da:90:79:
25:7c:9b:1c:61:2e:b7:9e:eb:04:05:dc:cb:fd:49:
98:d9:2f:08:38:3f:a2:70:48:a6:91:ea:ad:f3:38:
33:c6:b3:55:ef:b1:33:3e:62:33:5d:77:58:1e:de:
61:52:fd:64:41:61:c8:a7:54:68:ac:1f:84:56:2d:
eb:07:c9:c5:10:d5:57:76:a1:ae:25:03:e3:80:0a:
18:4c:d3:25:57:12:92:7f:82:85:54:d7:dd:9b:2b:
59:a6:4c:5e:ef:cf:91:b3:3d:4d:25:5f:0c:21:89:
5e:0d:30:0b:39:87:a0:03:8c:0d:ea:22:38:4d:1d:
db:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:9D:1A:AE:3D:3B:AA:2A:02:4A:18:E6:FA:2C:3B:36:D4:37:CC:24
X509v3 Authority Key Identifier:
keyid:D8:EE:B2:0A:88:0C:DB:49:4E:9E:62:D4:3B:2E:F2:8C:90:CB:9E:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2O6yCogM20lOnmLUOy7yjJDLnu8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/fe3dbe-9708-4242-9277-96b50bcc7a08/1/CZ0arj07qioCShjm-iw7NtQ3zCQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/fe3dbe-9708-4242-9277-96b50bcc7a08/1/2O6yCogM20lOnmLUOy7yjJDLnu8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.217.219.0/24
Signature Algorithm: sha256WithRSAEncryption
d6:3a:28:bc:ac:b3:01:41:39:73:61:ac:38:f3:8b:ad:cc:3b:
e4:69:b9:ed:4f:61:7f:ab:69:eb:ca:6b:8a:53:34:f9:fb:79:
3b:ee:5f:ab:0d:5b:c3:db:b2:ba:56:d2:80:50:07:c4:55:49:
8b:79:1d:c2:ba:49:68:38:50:8d:25:69:05:cd:dd:99:1f:95:
38:7b:61:76:75:84:69:64:cf:e8:f0:22:aa:bc:1a:09:78:89:
3b:98:7e:27:c8:5e:d9:c1:27:cb:13:c3:a7:84:78:ad:f7:16:
db:86:76:9c:ca:e0:66:17:25:95:a4:c0:ed:59:e7:4c:9c:0b:
67:3e:61:29:9f:bc:ed:ed:e8:70:8f:19:7e:47:f4:0c:a7:da:
49:72:dd:02:f6:c3:e6:d3:d2:46:f6:26:c8:d3:5b:b0:26:6a:
37:e9:d1:7c:28:dc:62:06:fb:a7:15:ee:c8:ab:8f:a0:5f:3d:
26:a1:f4:29:97:f3:f4:87:b6:e7:2a:14:f6:31:14:f6:dd:a2:
fc:1e:47:fa:6a:93:5b:6b:cb:c6:c6:f6:82:92:04:0f:19:9f:
3e:8e:c2:1e:2e:31:54:68:93:ce:7b:1a:78:7d:e6:67:89:cc:
ae:9c:40:d1:ca:2d:96:1b:a7:13:01:36:93:cc:a0:f2:06:07:
93:ab:b3:0a
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZAhC7eoSjQni5bUY/Pw7jUxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ4ZWViMjBhODgwY2RiNDk0ZTllNjJkNDNiMmVmMjhjOTBj
YjllZWYwHhcNMjQwNjE2MTIzNTM0WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwOTlkMWFhZTNkM2JhYTJhMDI0YTE4ZTZmYTJjM2IzNmQ0MzdjYzI0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyC4a7NAlIQcjxEhIdntSAl0jp6w/
2VsTVKFoEy6GPT8B9nMVtx73b5yoK5TLH+DP5s+L9Ec6TvTuTiwibdXnsF1k2y/v
c/pg6rF4OeBRqJkf0c4L0WkqQQvblaojs0Fqp7HKm3LoUAjB6+TRgBsBW9pOPnlt
XK2xfLSXczt8mIuYj4vakHklfJscYS63nusEBdzL/UmY2S8IOD+icEimkeqt8zgz
xrNV77EzPmIzXXdYHt5hUv1kQWHIp1RorB+EVi3rB8nFENVXdqGuJQPjgAoYTNMl
VxKSf4KFVNfdmytZpkxe78+Rsz1NJV8MIYleDTALOYegA4wN6iI4TR3b5QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFAmdGq49O6oqAkoY5vosOzbUN8wkMB8GA1UdIwQY
MBaAFNjusgqIDNtJTp5i1Dsu8oyQy57vMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMk82eUNvZ00yMGxPbm1MVU95N3lqSkRMbnU4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNi9mZTNkYmUtOTcwOC00MjQyLTkyNzct
OTZiNTBiY2M3YTA4LzEvQ1owYXJqMDdxaW9DU2hqbS1pdzdOdFEzekNRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNi9mZTNkYmUtOTcwOC00MjQyLTkyNzctOTZiNTBiY2M3YTA4
LzEvMk82eUNvZ00yMGxPbm1MVU95N3lqSkRMbnU4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW9nbMA0G
CSqGSIb3DQEBCwUAA4IBAQDWOii8rLMBQTlzYaw484utzDvkabntT2F/q2nrymuK
UzT5+3k77l+rDVvD27K6VtKAUAfEVUmLeR3CukloOFCNJWkFzd2ZH5U4e2F2dYRp
ZM/o8CKqvBoJeIk7mH4nyF7ZwSfLE8OnhHit9xbbhnacyuBmFyWVpMDtWedMnAtn
PmEpn7zt7ehwjxl+R/QMp9pJct0C9sPm09JG9ibI01uwJmo36dF8KNxiBvunFe7I
q4+gXz0mofQpl/P0h7bnKhT2MRT23aL8Hkf6apNba8vGxvaCkgQPGZ8+jsIeLjFU
aJPOexp4feZnicyunEDRyi2WG6cTATaTzKDyBgeTq7MK
-----END CERTIFICATE-----
Generated at Mon Jun 16 04:52:14 2025 by rpki-client