Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/Y_3j8OgacaFwnC6DuH3gwHHY5g8.roa
File: Y_3j8OgacaFwnC6DuH3gwHHY5g8.roa (raw, json)
Hash identifier: tiiG3POmoLrZZ73tle3X4Q0dskrsw9G+0c2ZIZAi7EU=
Subject key identifier: 63:FD:E3:F0:E8:1A:71:A1:70:9C:2E:83:B8:7D:E0:C0:71:D8:E6:0F
Certificate issuer: /CN=d747017564c711bcbd57680a0dfd00f2a5d099db
Certificate serial: 018CC7935706FF31612E2F550F6916D542C2
Authority key identifier: D7:47:01:75:64:C7:11:BC:BD:57:68:0A:0D:FD:00:F2:A5:D0:99:DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/10cBdWTHEby9V2gKDf0A8qXQmds.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/Y_3j8OgacaFwnC6DuH3gwHHY5g8.roa
Signing time: Tue 02 Jan 2024 00:29:31 +0000
ROA not before: Tue 02 Jan 2024 00:29:31 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 60721
IP address blocks: 195.180.176.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:93:57:06:ff:31:61:2e:2f:55:0f:69:16:d5:42:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d747017564c711bcbd57680a0dfd00f2a5d099db
Validity
Not Before: Jan 2 00:29:31 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=63fde3f0e81a71a1709c2e83b87de0c071d8e60f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:a3:f1:a6:da:d5:c5:e5:65:3e:d5:8f:bd:3b:
b9:6d:f0:9c:f8:4c:70:81:10:d7:6c:f6:c4:c1:1d:
2c:9d:8b:4d:a1:66:ad:64:73:e2:d0:b4:be:01:9a:
29:92:b6:08:a8:ef:0e:a7:00:d3:31:91:31:fa:6d:
ad:06:38:4b:10:c3:d3:0b:1c:ac:3d:78:b9:f3:97:
74:40:5c:20:74:05:f1:f6:dd:10:e5:c2:77:d7:5e:
db:1d:c0:8e:ae:b4:d3:26:b5:45:a3:65:a4:bb:a3:
18:5c:26:17:f1:e5:c9:dd:6e:8b:1c:24:35:69:20:
5e:2c:c9:3e:44:bf:06:7b:14:c4:62:81:a5:a3:ed:
96:c7:8d:c3:37:87:11:ee:ef:c9:0d:5a:5c:e0:f9:
60:11:9e:11:a3:ad:27:cc:83:44:40:82:65:74:08:
fd:45:3b:ce:6d:79:d5:84:53:c4:69:ad:d9:72:b8:
07:fc:aa:80:cf:68:5d:b0:bf:d7:ce:59:6c:44:86:
60:bf:e7:3d:71:30:42:de:44:20:04:fd:7f:4d:b7:
b5:68:f1:85:cf:ab:6c:cb:41:ef:56:05:c7:23:94:
26:a7:00:4e:0d:01:06:1f:d2:4c:c9:85:64:ff:fb:
52:5f:60:7a:fb:6b:4c:2d:fa:8d:e3:0e:86:8b:30:
6d:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:FD:E3:F0:E8:1A:71:A1:70:9C:2E:83:B8:7D:E0:C0:71:D8:E6:0F
X509v3 Authority Key Identifier:
keyid:D7:47:01:75:64:C7:11:BC:BD:57:68:0A:0D:FD:00:F2:A5:D0:99:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/10cBdWTHEby9V2gKDf0A8qXQmds.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/Y_3j8OgacaFwnC6DuH3gwHHY5g8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/10cBdWTHEby9V2gKDf0A8qXQmds.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.180.176.0/24
Signature Algorithm: sha256WithRSAEncryption
3d:ec:ff:56:3e:76:4b:93:a4:c9:ed:d2:67:9e:c0:98:7a:2c:
ac:8e:64:79:6b:18:99:66:d8:d5:01:7e:3d:b6:b5:9d:07:46:
92:78:ea:25:f1:c3:28:9d:28:79:bd:28:60:a8:5a:c2:c8:f3:
a7:ba:44:05:84:53:49:c1:e2:24:4a:cd:ad:3a:98:05:02:51:
79:c7:39:4c:d0:38:f1:94:91:54:1e:96:c6:08:da:6a:36:d4:
9c:7f:dc:43:d1:48:25:84:cf:1a:25:fc:a6:a5:63:db:60:9b:
79:c7:4b:57:a7:19:cf:0e:e9:86:a0:2c:1f:b3:98:91:8b:f5:
3c:d9:60:81:d9:ef:6d:9f:18:6e:52:f3:8b:33:af:bb:5d:d1:
11:e9:ab:cb:3c:62:79:dc:3b:4a:94:ff:ab:05:37:ba:40:aa:
00:ef:aa:09:2e:6d:21:a1:67:c4:e9:c2:c0:47:cf:56:f5:fe:
5d:83:aa:b9:83:33:92:39:08:cc:f3:00:77:23:56:3f:ba:1c:
38:3f:14:10:d7:4a:ec:81:30:7c:8b:bf:28:c3:d5:d6:70:83:
5d:94:77:e4:bd:c4:29:6f:23:dd:d7:94:4d:40:ca:66:51:8b:
33:84:e9:22:f8:30:39:0c:ab:6e:d8:46:82:e6:82:74:18:83:
47:ee:28:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:04:34 2025 by rpki-client