Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/70a8f1-d8eb-42b5-bddb-6265521f6df7/1/ViQbvbyPhq7p93ILqd7R3r9BszA.roa
File: ViQbvbyPhq7p93ILqd7R3r9BszA.roa (raw, json)
Hash identifier: O6yUv+kdJqIjlDgzJEgEaiPUWNmIXHP36WYyXx2ll8w=
Subject key identifier: 56:24:1B:BD:BC:8F:86:AE:E9:F7:72:0B:A9:DE:D1:DE:BF:41:B3:30
Certificate issuer: /CN=8db34774b01979284fd9e754fea68fa3c61783d0
Certificate serial: 01893AEF05E241B90D73766ABFF0DB7FE90E
Authority key identifier: 8D:B3:47:74:B0:19:79:28:4F:D9:E7:54:FE:A6:8F:A3:C6:17:83:D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jbNHdLAZeShP2edU_qaPo8YXg9A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/70a8f1-d8eb-42b5-bddb-6265521f6df7/1/ViQbvbyPhq7p93ILqd7R3r9BszA.roa
Signing time: Sun 09 Jul 2023 13:54:50 +0000
ROA not before: Sun 09 Jul 2023 13:54:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 61220
IP address blocks: 84.54.15.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:3a:ef:05:e2:41:b9:0d:73:76:6a:bf:f0:db:7f:e9:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8db34774b01979284fd9e754fea68fa3c61783d0
Validity
Not Before: Jul 9 13:54:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=56241bbdbc8f86aee9f7720ba9ded1debf41b330
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:7a:9b:ff:a9:5f:80:0a:d3:8b:6c:d8:a1:bb:
44:2e:bc:dd:0d:2b:3f:1d:42:27:63:d8:b1:06:d7:
9b:e8:ce:a2:44:68:6d:52:be:6e:0c:da:c3:47:43:
d1:d7:ed:ac:bd:8d:ab:9f:8d:8d:b8:55:cd:5c:35:
1b:35:a9:ba:1d:ad:6e:fd:5d:57:5e:03:b8:8d:07:
dd:c2:d8:ce:ce:82:8c:75:8d:42:25:87:11:c5:ba:
56:3a:e0:0a:b1:5d:c3:f1:92:28:64:d1:a5:9b:bf:
ff:94:2c:01:82:45:1e:29:bc:ef:bf:7d:e1:c2:42:
a0:48:8d:2d:76:e1:c3:a4:ec:72:47:52:36:f8:fa:
66:14:0f:52:75:3b:c7:19:0f:47:2d:a1:2c:26:3c:
6a:f6:55:89:13:3c:44:72:47:e9:8e:0e:d0:3f:1f:
16:94:22:ad:71:c0:28:4d:ec:a1:81:e2:45:82:6a:
9f:31:69:d8:e1:ea:6f:1d:db:48:63:69:9a:5d:63:
5c:fd:2d:c7:84:a1:c7:6b:5f:38:52:21:a8:83:ac:
63:7f:05:e7:9b:d2:cf:ad:6e:3e:ef:b5:24:6f:b5:
59:16:66:55:05:de:5c:b9:6b:fb:68:83:99:32:5c:
be:d0:3b:aa:7d:03:71:f4:b9:ed:cb:13:69:84:e3:
ea:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:24:1B:BD:BC:8F:86:AE:E9:F7:72:0B:A9:DE:D1:DE:BF:41:B3:30
X509v3 Authority Key Identifier:
keyid:8D:B3:47:74:B0:19:79:28:4F:D9:E7:54:FE:A6:8F:A3:C6:17:83:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jbNHdLAZeShP2edU_qaPo8YXg9A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/70a8f1-d8eb-42b5-bddb-6265521f6df7/1/ViQbvbyPhq7p93ILqd7R3r9BszA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/70a8f1-d8eb-42b5-bddb-6265521f6df7/1/jbNHdLAZeShP2edU_qaPo8YXg9A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.54.15.0/24
Signature Algorithm: sha256WithRSAEncryption
c9:7b:78:f6:05:21:e5:a8:ef:d7:29:43:ce:b0:8d:9c:25:0e:
e4:f6:5b:a1:b6:0d:eb:ed:ee:f7:9b:3f:c9:46:21:d1:5f:45:
56:8c:02:5f:dd:c1:24:10:f3:96:5c:05:1e:91:d5:31:35:33:
29:08:2b:a2:08:88:69:e5:33:b1:f0:b1:a5:1f:2b:a7:95:10:
85:ea:4f:bf:a1:56:9c:1d:9c:d8:d5:26:d3:7f:fb:31:0a:88:
6f:6a:16:21:32:d8:c1:5c:0f:ce:7e:31:ad:23:1a:c6:49:11:
e0:a5:81:19:e8:fa:26:83:cd:43:74:47:7b:27:0c:57:59:ff:
ce:63:20:08:69:41:fe:9e:e1:e5:c9:7d:b8:60:c0:9a:23:c3:
f8:26:84:41:70:1f:9c:ce:a1:9a:40:ff:36:06:eb:ee:11:83:
10:d2:21:58:42:26:05:d9:7d:b0:15:8d:d7:80:db:87:fb:d4:
a3:46:62:67:1f:8a:31:b5:fd:d8:1a:b8:ce:33:d8:97:4c:35:
33:9f:34:23:01:96:13:3d:92:1d:c3:9e:42:26:91:aa:41:9a:
f8:f8:80:f2:90:d3:55:8b:de:03:c6:3c:0b:2d:cf:ef:2b:93:
ca:d7:4e:60:4a:9f:c7:20:61:53:54:d7:e0:f1:17:e0:3b:df:
1b:a9:ba:60
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYk67wXiQbkNc3Zqv/Dbf+kOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhkYjM0Nzc0YjAxOTc5Mjg0ZmQ5ZTc1NGZlYTY4ZmEzYzYx
NzgzZDAwHhcNMjMwNzA5MTM1NDUwWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1NjI0MWJiZGJjOGY4NmFlZTlmNzcyMGJhOWRlZDFkZWJmNDFiMzMwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlnqb/6lfgArTi2zYobtELrzdDSs/
HUInY9ixBteb6M6iRGhtUr5uDNrDR0PR1+2svY2rn42NuFXNXDUbNam6Ha1u/V1X
XgO4jQfdwtjOzoKMdY1CJYcRxbpWOuAKsV3D8ZIoZNGlm7//lCwBgkUeKbzvv33h
wkKgSI0tduHDpOxyR1I2+PpmFA9SdTvHGQ9HLaEsJjxq9lWJEzxEckfpjg7QPx8W
lCKtccAoTeyhgeJFgmqfMWnY4epvHdtIY2maXWNc/S3HhKHHa184UiGog6xjfwXn
m9LPrW4+77Ukb7VZFmZVBd5cuWv7aIOZMly+0DuqfQNx9LntyxNphOPqfwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFFYkG728j4au6fdyC6ne0d6/QbMwMB8GA1UdIwQY
MBaAFI2zR3SwGXkoT9nnVP6mj6PGF4PQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvamJOSGRMQVplU2hQMmVkVV9xYVBvOFlYZzlBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNy83MGE4ZjEtZDhlYi00MmI1LWJkZGIt
NjI2NTUyMWY2ZGY3LzEvVmlRYnZieVBocTdwOTNJTHFkN1IzcjlCc3pBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNy83MGE4ZjEtZDhlYi00MmI1LWJkZGItNjI2NTUyMWY2ZGY3
LzEvamJOSGRMQVplU2hQMmVkVV9xYVBvOFlYZzlBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAVDYPMA0G
CSqGSIb3DQEBCwUAA4IBAQDJe3j2BSHlqO/XKUPOsI2cJQ7k9luhtg3r7e73mz/J
RiHRX0VWjAJf3cEkEPOWXAUekdUxNTMpCCuiCIhp5TOx8LGlHyunlRCF6k+/oVac
HZzY1SbTf/sxCohvahYhMtjBXA/OfjGtIxrGSRHgpYEZ6Pomg81DdEd7JwxXWf/O
YyAIaUH+nuHlyX24YMCaI8P4JoRBcB+czqGaQP82BuvuEYMQ0iFYQiYF2X2wFY3X
gNuH+9SjRmJnH4oxtf3YGrjOM9iXTDUznzQjAZYTPZIdw55CJpGqQZr4+IDykNNV
i94DxjwLLc/vK5PK105gSp/HIGFTVNfg8RfgO98bqbpg
-----END CERTIFICATE-----
Generated at Mon May 12 21:37:19 2025 by rpki-client