Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/715d15-2810-4827-8dbd-0bee06126b1a/1/BwIJr3so7JOtLpTWRcTD9_syIR0.roa
File: BwIJr3so7JOtLpTWRcTD9_syIR0.roa (raw, json)
Hash identifier: 1nLxVqeTaR/JL1IK+hVHIQlHufWyEUGlTqAFZ69yrAE=
Subject key identifier: 07:02:09:AF:7B:28:EC:93:AD:2E:94:D6:45:C4:C3:F7:FB:32:21:1D
Certificate issuer: /CN=adf491488a7cd8448a420945871c0b99672dc66e
Certificate serial: 018E4CE959ABB92E91C984C37312F9B8BFF2
Authority key identifier: AD:F4:91:48:8A:7C:D8:44:8A:42:09:45:87:1C:0B:99:67:2D:C6:6E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rfSRSIp82ESKQglFhxwLmWctxm4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/715d15-2810-4827-8dbd-0bee06126b1a/1/BwIJr3so7JOtLpTWRcTD9_syIR0.roa
Signing time: Sun 17 Mar 2024 14:55:44 +0000
ROA not before: Sun 17 Mar 2024 14:55:44 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 198154
IP address blocks: 217.60.247.0/24 maxlen: 24
217.60.249.0/24 maxlen: 24
217.60.252.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:4c:e9:59:ab:b9:2e:91:c9:84:c3:73:12:f9:b8:bf:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=adf491488a7cd8448a420945871c0b99672dc66e
Validity
Not Before: Mar 17 14:55:44 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=070209af7b28ec93ad2e94d645c4c3f7fb32211d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:d1:7f:b0:7f:b4:7d:1a:56:5c:19:52:91:68:
82:3c:be:d3:b4:88:89:37:d1:48:05:8d:7e:73:83:
aa:63:b8:87:6c:05:17:35:f5:52:31:72:11:39:d9:
8b:f6:57:e8:fe:a5:1d:72:4b:81:db:cf:f6:f8:80:
bc:09:db:68:4d:a4:76:9b:a3:fe:50:06:c8:57:c1:
c2:0a:cf:5d:89:6d:8a:aa:9c:dc:e1:ea:a3:80:2e:
71:a9:e3:f2:60:81:2a:20:b4:06:5d:72:04:76:ae:
42:4d:e5:87:20:f5:d3:f9:51:9f:ce:03:91:68:3c:
cb:7b:34:e1:5f:e0:c4:a1:5e:69:ed:57:b9:0f:6c:
a6:55:2d:26:38:5f:2a:b1:5b:1c:20:11:99:f3:32:
2b:23:1c:10:77:db:83:c1:c9:78:d0:28:28:96:6c:
7f:d4:eb:95:ca:89:73:cb:a6:a3:dc:96:b3:17:b1:
d3:ef:4f:43:57:dc:d7:a0:3f:c4:7e:76:79:e5:8a:
ee:47:b2:31:29:fd:1c:d1:28:25:08:7f:99:52:ad:
a5:40:2a:d1:2c:8b:2f:ef:2d:c1:8a:bf:65:42:29:
61:e7:2f:a9:32:48:ee:ab:b8:ff:db:07:6f:d4:b1:
c6:d8:92:2b:d1:fa:5f:21:4f:2f:8d:67:5e:06:f8:
a0:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:02:09:AF:7B:28:EC:93:AD:2E:94:D6:45:C4:C3:F7:FB:32:21:1D
X509v3 Authority Key Identifier:
keyid:AD:F4:91:48:8A:7C:D8:44:8A:42:09:45:87:1C:0B:99:67:2D:C6:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rfSRSIp82ESKQglFhxwLmWctxm4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/715d15-2810-4827-8dbd-0bee06126b1a/1/BwIJr3so7JOtLpTWRcTD9_syIR0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/715d15-2810-4827-8dbd-0bee06126b1a/1/rfSRSIp82ESKQglFhxwLmWctxm4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.60.247.0/24
217.60.249.0/24
217.60.252.0/24
Signature Algorithm: sha256WithRSAEncryption
65:e3:50:23:d1:8b:88:d4:65:bd:0e:17:2d:89:8a:33:89:16:
2d:1d:a6:0b:03:ef:46:01:23:94:4a:28:c5:ea:ac:bc:7a:d0:
6a:5e:38:e4:48:3b:89:dc:e0:4d:c3:63:de:2d:e8:0c:b9:3f:
98:5e:14:00:cb:3e:70:9c:fe:31:11:cc:b9:65:47:5b:32:bd:
a3:03:a2:8d:50:f7:a9:bd:89:a3:57:28:8f:81:3e:bb:65:bb:
ff:f3:03:6e:c4:d4:4a:89:b7:aa:e1:68:99:f6:03:1c:db:d2:
24:a0:97:16:29:96:69:2b:f7:b4:d6:b6:e7:a9:b7:37:c1:3d:
46:0b:92:33:f2:0c:fe:72:db:1a:cf:6e:26:52:b1:ce:b6:5c:
8a:ce:e6:95:3c:9d:52:5b:c9:5d:50:e4:fd:04:9f:9b:8a:98:
d7:59:46:95:16:e1:19:46:3b:6a:e3:ff:3e:b9:fe:91:cb:4e:
16:8a:e0:db:47:d1:14:52:45:01:c8:2e:f1:97:dc:69:28:8f:
37:28:5f:82:f3:be:e5:60:b5:54:e9:a2:6c:89:7f:2e:74:7e:
26:b3:f8:e3:d1:44:22:72:de:46:8b:0e:8a:90:74:fa:4f:b4:
63:f4:24:f0:c7:79:4a:55:2e:bd:79:fb:82:8b:c8:70:66:aa:
76:b4:9c:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 23:02:23 2025 by rpki-client