Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/25cdb4-e508-4b37-81bc-36f82bd379bd/1/ZZfajncMxzbpJrkNquQjYkrgha0.roa
File: ZZfajncMxzbpJrkNquQjYkrgha0.roa (raw, json)
Hash identifier: Sb4rUgHhO3Xg6N7zj5N+Jt6ym97xc9Bzxsp7dDNaeWw=
Subject key identifier: 65:97:DA:8E:77:0C:C7:36:E9:26:B9:0D:AA:E4:23:62:4A:E0:85:AD
Certificate issuer: /CN=b10c3cf3dc53ca549c03e4f5f46d91ce90b8e070
Certificate serial: 07892C42
Authority key identifier: B1:0C:3C:F3:DC:53:CA:54:9C:03:E4:F5:F4:6D:91:CE:90:B8:E0:70
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sQw889xTylScA-T19G2RzpC44HA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/25cdb4-e508-4b37-81bc-36f82bd379bd/1/ZZfajncMxzbpJrkNquQjYkrgha0.roa
Signing time: Sat 01 Jan 2022 15:00:23 +0000
ROA not before: Sat 01 Jan 2022 15:00:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 208801
IP address blocks: 217.168.246.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 126430274 (0x7892c42)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b10c3cf3dc53ca549c03e4f5f46d91ce90b8e070
Validity
Not Before: Jan 1 15:00:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6597da8e770cc736e926b90daae423624ae085ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:16:52:72:d4:b4:65:ab:67:92:79:7a:18:ec:
c6:56:9d:41:14:32:80:86:f7:3f:12:f4:41:ee:ae:
db:9a:1c:68:d7:a8:a5:15:48:33:14:3d:c1:f5:2c:
7e:6d:fc:e7:4d:7a:d0:61:1f:40:bd:5a:6f:9b:b2:
a5:dd:50:84:36:b3:cc:4c:77:e0:98:40:4b:3b:fc:
1d:13:6d:60:20:6b:bb:e1:07:e4:42:af:63:85:61:
ad:a1:9d:29:99:42:5d:84:78:d5:17:96:50:3b:0a:
a5:25:c7:0c:b4:73:08:02:d8:24:0a:d0:2c:60:95:
bb:cf:40:e1:cc:5d:61:ab:42:d6:d0:79:c5:1e:48:
59:63:30:21:4d:ee:7b:0b:85:4b:4c:b3:d2:f7:0c:
52:90:b6:25:c7:39:c7:8b:5d:ef:ff:f9:ef:2a:f1:
f4:34:1c:bf:ec:bc:70:26:da:c1:0e:1a:22:a8:1e:
4c:14:11:3f:d0:a7:50:47:1e:10:3d:fe:48:f0:28:
8a:e1:8a:89:aa:d4:f1:af:d2:5e:76:45:23:e5:f8:
c2:71:7a:3a:5e:0b:76:bd:4f:05:73:b5:02:6c:1c:
17:5e:89:30:6b:e3:62:cd:82:d5:c5:d2:fb:69:02:
41:15:49:bb:d3:8a:e6:36:0a:b4:a4:05:9c:4a:37:
a9:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:97:DA:8E:77:0C:C7:36:E9:26:B9:0D:AA:E4:23:62:4A:E0:85:AD
X509v3 Authority Key Identifier:
keyid:B1:0C:3C:F3:DC:53:CA:54:9C:03:E4:F5:F4:6D:91:CE:90:B8:E0:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sQw889xTylScA-T19G2RzpC44HA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/25cdb4-e508-4b37-81bc-36f82bd379bd/1/ZZfajncMxzbpJrkNquQjYkrgha0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/25cdb4-e508-4b37-81bc-36f82bd379bd/1/sQw889xTylScA-T19G2RzpC44HA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.168.246.0/24
Signature Algorithm: sha256WithRSAEncryption
1d:f3:22:6c:4a:24:c9:ce:62:d7:c1:00:57:dc:76:bc:3c:7b:
2a:44:d7:33:a8:d8:e5:a5:d5:52:d3:ee:60:d3:53:b7:bc:08:
a5:9d:a2:9c:26:2a:32:51:c8:af:cc:4c:ec:39:c2:f8:16:db:
16:8c:3e:e0:ee:3d:a2:5c:c4:91:b8:59:2e:8f:98:c8:0f:35:
41:5d:2b:bb:a3:c2:7d:f0:30:1a:c5:ed:9d:f8:9d:38:62:da:
2f:f3:6e:54:87:fe:00:fc:4d:3a:d9:1a:5b:db:60:92:db:5b:
3c:10:03:f6:9f:34:d8:46:a2:54:6c:38:6f:ae:39:f3:16:b4:
cd:42:57:5a:47:2d:fa:99:a2:86:cf:89:50:63:f9:b9:6f:8f:
df:d4:ea:22:d4:e5:ac:46:6e:1b:c0:d9:8a:69:90:0c:1d:c5:
3f:b4:95:78:a6:61:f3:76:a1:cf:d7:7e:96:55:d8:2e:a4:1d:
8f:0d:da:e2:8e:fa:7c:0c:1c:9e:a3:d0:0b:9c:c2:19:c4:55:
e7:f4:f6:44:7a:d2:c6:dc:80:34:6d:52:16:c8:e2:b9:83:d8:
72:26:48:e1:24:4f:60:7e:0d:3d:4e:eb:e5:4b:b2:e2:d5:0f:
42:c0:07:bc:08:3d:5e:7d:3e:97:cb:5f:95:1e:74:7b:bd:cd:
cd:58:87:6a
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEB4ksQjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhi
MTBjM2NmM2RjNTNjYTU0OWMwM2U0ZjVmNDZkOTFjZTkwYjhlMDcwMB4XDTIyMDEw
MTE1MDAyM1oXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoNjU5N2RhOGU3NzBj
YzczNmU5MjZiOTBkYWFlNDIzNjI0YWUwODVhZDCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAOsWUnLUtGWrZ5J5ehjsxladQRQygIb3PxL0Qe6u25ocaNeo
pRVIMxQ9wfUsfm3850160GEfQL1ab5uypd1QhDazzEx34JhASzv8HRNtYCBru+EH
5EKvY4VhraGdKZlCXYR41ReWUDsKpSXHDLRzCALYJArQLGCVu89A4cxdYatC1tB5
xR5IWWMwIU3uewuFS0yz0vcMUpC2Jcc5x4td7//57yrx9DQcv+y8cCbawQ4aIqge
TBQRP9CnUEceED3+SPAoiuGKiarU8a/SXnZFI+X4wnF6Ol4Ldr1PBXO1AmwcF16J
MGvjYs2C1cXS+2kCQRVJu9OK5jYKtKQFnEo3qdsCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBRll9qOdwzHNukmuQ2q5CNiSuCFrTAfBgNVHSMEGDAWgBSxDDzz3FPKVJwD
5PX0bZHOkLjgcDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L3NRdzg4OXhUeWxTY0EtVDE5RzJSenBDNDRIQS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvZmUvMjVjZGI0LWU1MDgtNGIzNy04MWJjLTM2ZjgyYmQzNzliZC8x
L1paZmFqbmNNeHpicEpya05xdVFqWWtyZ2hhMC5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZmUv
MjVjZGI0LWU1MDgtNGIzNy04MWJjLTM2ZjgyYmQzNzliZC8xL3NRdzg4OXhUeWxT
Y0EtVDE5RzJSenBDNDRIQS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEANmo9jANBgkqhkiG9w0BAQsFAAOC
AQEAHfMibEokyc5i18EAV9x2vDx7KkTXM6jY5aXVUtPuYNNTt7wIpZ2inCYqMlHI
r8xM7DnC+BbbFow+4O49olzEkbhZLo+YyA81QV0ru6PCffAwGsXtnfidOGLaL/Nu
VIf+APxNOtkaW9tgkttbPBAD9p802EaiVGw4b6458xa0zUJXWkct+pmihs+JUGP5
uW+P39TqItTlrEZuG8DZimmQDB3FP7SVeKZh83ahz9d+llXYLqQdjw3a4o76fAwc
nqPQC5zCGcRV5/T2RHrSxtyANG1SFsjiuYPYciZI4SRPYH4NPU7r5Uuy4tUPQsAH
vAg9Xn0+l8tflR50e73NzViHag==
-----END CERTIFICATE-----
Generated at Mon May 12 07:17:14 2025 by rpki-client