Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/225bcb-6d3d-4c0e-824f-2f1c8e408b64/1/3tivne7zIIBNrX8VMZYDilVGTBM.roa
File: 3tivne7zIIBNrX8VMZYDilVGTBM.roa (raw, json)
Hash identifier: cZ8ObidVtvgF9r1Ni52oMPhUZjdKbEswMn3NHNgw5SU=
Subject key identifier: DE:D8:AF:9D:EE:F3:20:80:4D:AD:7F:15:31:96:03:8A:55:46:4C:13
Certificate issuer: /CN=32c78eeef7acb451fc37575feb9114dfccc1cdfb
Certificate serial: 01850905CCE49C975201CB044F49B6D47537
Authority key identifier: 32:C7:8E:EE:F7:AC:B4:51:FC:37:57:5F:EB:91:14:DF:CC:C1:CD:FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MseO7vestFH8N1df65EU38zBzfs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/225bcb-6d3d-4c0e-824f-2f1c8e408b64/1/3tivne7zIIBNrX8VMZYDilVGTBM.roa
Signing time: Tue 13 Dec 2022 01:07:33 +0000
ROA not before: Tue 13 Dec 2022 01:07:33 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 62236
IP address blocks: 2.56.84.0/24 maxlen: 24
2.56.85.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:09:05:cc:e4:9c:97:52:01:cb:04:4f:49:b6:d4:75:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=32c78eeef7acb451fc37575feb9114dfccc1cdfb
Validity
Not Before: Dec 13 01:07:33 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ded8af9deef320804dad7f153196038a55464c13
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:f8:65:06:73:16:94:3f:34:1d:cb:3b:7f:95:
5a:e0:d4:80:14:b2:86:be:0a:b7:8b:d0:81:22:67:
29:d3:a0:9a:58:f9:38:db:27:3c:b3:28:94:5c:57:
d9:4f:d4:8a:9f:6a:1c:bf:b6:8a:fb:df:a1:c2:7c:
72:9f:b6:1f:0f:ff:56:b5:7f:40:c1:a2:4d:d5:68:
71:eb:43:6e:f7:51:c1:1d:3c:34:c5:94:8d:08:c1:
8e:1a:95:c5:7a:66:ee:b7:f1:3e:b1:f0:1f:98:89:
67:9a:0b:3e:3d:ba:1c:0f:f6:eb:62:9e:5a:93:b5:
85:3f:97:8b:d6:38:80:1b:d8:36:34:fb:d6:26:96:
52:d9:85:1f:84:91:35:8a:39:a8:aa:2d:29:a0:eb:
d7:17:35:d8:07:73:dc:a5:b3:1a:41:7e:2e:77:69:
60:19:0f:fc:2d:61:0a:17:91:4c:e1:03:92:d1:14:
55:37:db:8d:cf:1a:c6:39:81:ed:3e:40:16:48:ff:
57:d5:d5:26:f4:c4:cb:e7:39:01:dc:11:05:88:4c:
91:ba:64:3f:ec:51:04:f8:c1:0d:46:16:46:11:3c:
e7:69:e5:e2:75:eb:9c:cc:42:99:24:00:cc:bc:da:
83:5a:1e:c9:c9:1e:9c:2d:c7:60:32:06:c3:7d:18:
6b:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:D8:AF:9D:EE:F3:20:80:4D:AD:7F:15:31:96:03:8A:55:46:4C:13
X509v3 Authority Key Identifier:
keyid:32:C7:8E:EE:F7:AC:B4:51:FC:37:57:5F:EB:91:14:DF:CC:C1:CD:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MseO7vestFH8N1df65EU38zBzfs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/225bcb-6d3d-4c0e-824f-2f1c8e408b64/1/3tivne7zIIBNrX8VMZYDilVGTBM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/225bcb-6d3d-4c0e-824f-2f1c8e408b64/1/MseO7vestFH8N1df65EU38zBzfs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.56.84.0/23
Signature Algorithm: sha256WithRSAEncryption
0e:2f:46:e8:7d:af:08:c5:1f:56:0a:36:8e:47:ea:d3:a1:00:
ed:57:fc:ef:db:7f:ea:17:d9:04:b8:47:10:f0:24:f1:40:8d:
6c:bb:57:56:e1:ef:f2:26:8e:81:7e:78:ef:68:33:40:f2:c6:
79:9f:46:7b:31:91:44:5e:a6:08:01:91:eb:8b:bd:e7:fe:7e:
67:64:77:33:1d:13:12:47:88:85:44:d2:3c:73:8d:b8:2e:6a:
2c:7c:ba:77:90:d0:8c:fe:fd:d7:35:4f:b6:1f:38:d2:f3:be:
2d:f7:8e:cb:0f:dd:2e:23:97:ad:b3:a0:d1:81:5d:20:c1:8a:
8b:b6:72:5f:e8:9a:fc:89:9a:5b:af:08:fd:44:48:56:84:b6:
43:f7:99:99:43:de:0c:01:d4:ff:b0:25:40:ab:91:ae:c5:48:
91:f1:11:05:55:ef:ed:ab:b0:8a:5f:43:b1:fc:59:b9:64:e5:
7b:f0:fb:c3:77:bc:e4:9f:da:bf:54:2e:61:d8:75:59:c5:d2:
9a:aa:8a:7b:86:f7:0e:44:ff:b2:94:83:f5:c9:1f:d2:23:b8:
c7:10:64:5a:bd:29:da:0b:ab:19:87:3f:3a:59:0e:2a:29:e5:
ef:cf:14:3e:59:d7:57:4b:e0:bd:37:d5:1a:6d:23:f6:b3:7a:
47:7a:8c:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 7 07:44:42 2025 by rpki-client