Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/6ba39c-ef1d-4d48-982b-cf4b900997a0/1/p249RMFzL7GBmPnyiWHFULebLcI.roa
File: p249RMFzL7GBmPnyiWHFULebLcI.roa (raw, json)
Hash identifier: cGWzSa6JnN2u2fQMcU5Oz0U81vLx3Sep3Bnx2wp9TTM=
Subject key identifier: A7:6E:3D:44:C1:73:2F:B1:81:98:F9:F2:89:61:C5:50:B7:9B:2D:C2
Certificate issuer: /CN=ab71e9b13f5c339a58692eeabe72eaa406bbbd7d
Certificate serial: 018F87A0F908739189B8D096C117A32B33CB
Authority key identifier: AB:71:E9:B1:3F:5C:33:9A:58:69:2E:EA:BE:72:EA:A4:06:BB:BD:7D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q3HpsT9cM5pYaS7qvnLqpAa7vX0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/6ba39c-ef1d-4d48-982b-cf4b900997a0/1/p249RMFzL7GBmPnyiWHFULebLcI.roa
Signing time: Fri 17 May 2024 17:37:04 +0000
ROA not before: Fri 17 May 2024 17:37:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 3975563
IP address blocks: 91.151.85.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:87:a0:f9:08:73:91:89:b8:d0:96:c1:17:a3:2b:33:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab71e9b13f5c339a58692eeabe72eaa406bbbd7d
Validity
Not Before: May 17 17:37:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a76e3d44c1732fb18198f9f28961c550b79b2dc2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:96:a4:22:fb:0f:06:30:05:56:e6:bd:26:53:
81:d7:e2:16:41:f7:9b:86:d7:ac:eb:55:e8:94:bc:
64:74:e3:c7:6b:ff:2c:0f:88:64:3e:08:28:38:af:
c2:3a:e1:b1:cf:af:64:86:49:05:d1:32:19:35:0e:
23:ee:e0:7e:1b:38:18:11:96:52:9e:19:b1:56:01:
39:e4:ac:e2:94:45:6a:bc:e9:91:4c:f2:b0:65:35:
7e:60:d8:66:76:8a:11:45:a2:11:d7:39:eb:c7:b0:
3a:4b:13:6e:27:4e:8d:11:f3:77:c1:98:8a:27:66:
08:85:31:15:6d:a6:d3:7f:e3:35:3c:62:39:1e:9a:
9b:0f:a7:da:fe:42:c8:be:92:28:91:b7:9b:b9:77:
f7:fa:cf:90:44:8e:4e:db:5e:e7:f7:0a:2d:8c:38:
e0:85:4a:e5:a9:85:f0:ec:c0:ea:67:b2:14:95:63:
f8:08:e1:89:da:9a:ec:8d:68:0c:9e:e6:65:6a:e5:
14:b3:cd:91:23:41:c8:3c:94:86:44:45:f6:db:09:
36:25:1c:99:45:57:2f:58:f2:40:10:b9:e2:b5:40:
24:f6:fe:6f:b4:2b:e8:34:05:02:5b:ce:1e:86:95:
e0:1e:7f:6b:49:18:fc:36:69:51:9d:2f:9c:25:74:
2e:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:6E:3D:44:C1:73:2F:B1:81:98:F9:F2:89:61:C5:50:B7:9B:2D:C2
X509v3 Authority Key Identifier:
keyid:AB:71:E9:B1:3F:5C:33:9A:58:69:2E:EA:BE:72:EA:A4:06:BB:BD:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q3HpsT9cM5pYaS7qvnLqpAa7vX0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/6ba39c-ef1d-4d48-982b-cf4b900997a0/1/p249RMFzL7GBmPnyiWHFULebLcI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/6ba39c-ef1d-4d48-982b-cf4b900997a0/1/q3HpsT9cM5pYaS7qvnLqpAa7vX0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.151.85.0/24
Signature Algorithm: sha256WithRSAEncryption
88:e3:52:4d:d6:f5:89:76:1a:68:c7:04:80:7f:fe:4c:ec:ea:
50:42:f4:1a:ca:7b:0b:33:39:28:74:b8:38:6a:ac:cf:72:36:
ff:18:6d:23:be:19:d1:83:e5:49:73:c9:49:2a:09:b6:d6:41:
c4:5e:d3:3e:16:f5:01:63:90:7c:fe:5b:0f:6e:15:08:fb:8e:
16:d1:c3:61:25:d5:f6:1c:69:25:26:48:0f:4b:43:a4:77:42:
26:c7:10:0d:47:35:59:90:2c:f8:bd:de:1f:5b:9d:18:26:a1:
fc:78:0f:16:44:0f:b5:33:8f:6d:17:9f:80:d3:82:89:4e:4d:
1a:a1:30:fe:68:c5:bd:e4:b2:c6:bd:25:bd:91:c6:00:54:25:
d5:d4:9f:2b:99:d5:9d:a4:69:f5:0f:99:7f:6f:f0:f8:9e:9f:
75:8e:6d:da:b6:0a:64:e3:2c:b5:59:ba:10:71:14:84:76:72:
9f:5c:7c:10:f4:01:96:4c:a9:93:38:8c:1d:c3:6d:ed:5e:1c:
fd:97:32:b8:d6:ec:f8:97:aa:6d:40:05:a7:91:24:23:f8:79:
f2:30:a3:37:5a:48:58:33:c9:16:3e:ef:43:aa:37:10:6e:d1:
93:99:7b:55:34:c9:b2:15:2d:58:00:4c:33:25:8c:29:20:df:
1c:02:6f:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 16:00:20 2025 by rpki-client