Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/715d15-2810-4827-8dbd-0bee06126b1a/1/sJJyDBDfrWGkpQeDVXIktBozsGQ.roa
File: sJJyDBDfrWGkpQeDVXIktBozsGQ.roa (raw, json)
Hash identifier: 0TZwpBZF98lc6WREfkgc2fAcgph9P2UgWEjgPO8xWrg=
Subject key identifier: B0:92:72:0C:10:DF:AD:61:A4:A5:07:83:55:72:24:B4:1A:33:B0:64
Certificate issuer: /CN=adf491488a7cd8448a420945871c0b99672dc66e
Certificate serial: 018D9BD839896CCABB367B072712F7DBFD83
Authority key identifier: AD:F4:91:48:8A:7C:D8:44:8A:42:09:45:87:1C:0B:99:67:2D:C6:6E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rfSRSIp82ESKQglFhxwLmWctxm4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/715d15-2810-4827-8dbd-0bee06126b1a/1/sJJyDBDfrWGkpQeDVXIktBozsGQ.roa
Signing time: Mon 12 Feb 2024 05:44:15 +0000
ROA not before: Mon 12 Feb 2024 05:44:15 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 50057
IP address blocks: 217.60.255.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:9b:d8:39:89:6c:ca:bb:36:7b:07:27:12:f7:db:fd:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=adf491488a7cd8448a420945871c0b99672dc66e
Validity
Not Before: Feb 12 05:44:15 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b092720c10dfad61a4a50783557224b41a33b064
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:9a:ec:6d:52:de:a3:e3:e6:bd:37:54:41:a6:
20:5e:e5:c3:1c:82:07:3e:c1:87:d9:42:1d:fb:d7:
3f:d7:3e:71:55:15:0c:79:cf:87:32:5d:29:6f:8e:
9f:02:f6:8d:42:7f:20:22:54:d7:c4:ea:3c:33:37:
4a:82:a5:63:6b:64:8a:d8:1f:16:ce:ee:2b:cb:1b:
71:91:d7:13:80:fe:fc:ea:3e:18:f9:a4:53:61:fe:
c2:04:15:53:e5:b0:ea:2f:65:6e:9c:8d:2f:b3:e9:
96:2e:7f:52:99:20:19:e2:16:f2:10:64:f5:cf:de:
01:c5:7e:40:8b:34:20:d2:92:92:2e:e3:7a:aa:95:
e8:0a:2e:17:5a:08:5c:55:c2:7a:05:b5:a5:a0:01:
28:c1:68:a5:5c:0d:cf:92:a9:2b:62:7d:33:cb:94:
ca:ad:61:ac:f1:f0:ff:82:6c:a1:da:43:f5:2f:1e:
66:5b:88:89:87:ff:d3:68:d9:06:03:97:7b:28:8d:
88:f2:e2:aa:4b:6d:ff:c3:f5:d6:50:d8:8f:72:9c:
94:d6:16:ec:ad:ba:a3:d5:bd:0a:ee:eb:d3:2b:3f:
ce:f4:b2:31:87:1c:4e:28:bf:d8:78:8e:a6:0f:6c:
19:09:de:48:c0:0b:f7:77:00:e5:83:69:7c:18:b5:
26:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:92:72:0C:10:DF:AD:61:A4:A5:07:83:55:72:24:B4:1A:33:B0:64
X509v3 Authority Key Identifier:
keyid:AD:F4:91:48:8A:7C:D8:44:8A:42:09:45:87:1C:0B:99:67:2D:C6:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rfSRSIp82ESKQglFhxwLmWctxm4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/715d15-2810-4827-8dbd-0bee06126b1a/1/sJJyDBDfrWGkpQeDVXIktBozsGQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/715d15-2810-4827-8dbd-0bee06126b1a/1/rfSRSIp82ESKQglFhxwLmWctxm4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.60.255.0/24
Signature Algorithm: sha256WithRSAEncryption
0a:34:6b:bc:2d:52:06:8e:ae:6f:00:63:42:be:b6:29:b8:c4:
7e:c5:b9:12:a2:88:a7:87:73:bb:82:ea:29:83:21:17:c1:ea:
12:dc:61:ae:e2:a2:13:49:54:bd:1f:eb:77:42:ea:1f:c7:f5:
1c:6a:c6:a3:e8:76:50:c9:08:6b:62:66:09:58:15:da:71:85:
78:7c:9f:c7:cf:96:43:0b:af:89:46:a2:64:90:db:ca:8c:30:
e5:e0:04:d5:91:ca:c7:ae:4a:ec:db:58:70:b5:bd:fa:0e:f1:
4e:63:a0:f7:ed:53:9d:5c:75:16:74:07:24:5c:17:ec:a0:41:
9e:86:59:0a:54:bd:e2:d0:95:33:9f:b0:ec:34:bc:91:15:30:
5d:18:c4:87:5c:42:16:e0:35:06:0b:62:8f:ff:46:cf:f9:f9:
2a:14:e6:e6:24:1a:e8:f4:53:40:a6:14:24:3e:89:18:65:ab:
69:34:e6:54:4c:20:6e:51:79:c0:d3:76:cd:7b:0b:08:dc:9d:
bd:13:b6:c7:ac:46:83:af:3d:23:28:c6:0b:93:ad:fa:6c:e9:
d6:f3:41:ef:fe:3e:b7:e3:b1:dc:08:d1:38:30:4c:3f:46:4a:
91:42:19:17:02:22:61:cc:14:51:44:97:ef:a5:9d:e5:97:e3:
3d:0d:a5:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 22:55:17 2025 by rpki-client