Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/s0b_5w1O_FqLkAPjKUscjDNvFx8.roa
File: s0b_5w1O_FqLkAPjKUscjDNvFx8.roa (raw, json)
Hash identifier: cI2Fd1vRbXlTuitMiakcP4fbxLzhRxrgiPNhqdZvneo=
Subject key identifier: B3:46:FF:E7:0D:4E:FC:5A:8B:90:03:E3:29:4B:1C:8C:33:6F:17:1F
Certificate issuer: /CN=d747017564c711bcbd57680a0dfd00f2a5d099db
Certificate serial: 0CF47C0B
Authority key identifier: D7:47:01:75:64:C7:11:BC:BD:57:68:0A:0D:FD:00:F2:A5:D0:99:DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/10cBdWTHEby9V2gKDf0A8qXQmds.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/s0b_5w1O_FqLkAPjKUscjDNvFx8.roa
Signing time: Wed 20 Apr 2022 07:27:25 +0000
ROA not before: Wed 20 Apr 2022 07:27:25 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 61138
IP address blocks: 195.180.148.0/24 maxlen: 24
195.180.158.0/24 maxlen: 24
195.180.178.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 217349131 (0xcf47c0b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d747017564c711bcbd57680a0dfd00f2a5d099db
Validity
Not Before: Apr 20 07:27:25 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b346ffe70d4efc5a8b9003e3294b1c8c336f171f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:5f:09:6e:42:2e:58:ad:40:8b:7f:5f:d8:3c:
6f:6a:c4:f7:90:b9:2d:03:a8:e8:26:83:9f:02:da:
bd:7f:87:15:aa:0e:48:83:fd:5c:4b:98:f3:31:9e:
38:c9:38:ef:d3:88:c7:b2:51:f8:1b:80:a1:60:a2:
01:07:a0:b9:fc:5f:7f:07:9a:13:0f:64:45:f3:7d:
23:a4:58:4f:42:4c:c6:fe:10:bd:8e:42:bc:59:bf:
ae:92:9d:17:1b:b4:a6:8a:58:7a:64:c2:47:1e:de:
e8:02:0f:92:b7:c8:45:29:88:6b:d4:fb:1a:f6:c8:
5b:a7:8d:6d:e5:64:5b:46:74:59:a2:b6:5d:fc:dc:
bb:a5:83:a2:33:2d:38:a0:bd:78:a0:98:1b:7f:47:
11:bc:79:83:7c:41:f5:f0:30:07:59:30:ae:0f:b6:
99:8c:76:b3:28:94:2e:55:06:3a:a0:2d:77:55:ad:
8c:97:74:8b:3e:b2:dd:42:dc:90:83:44:51:9f:03:
7a:c1:3e:59:f2:dc:12:3a:09:55:5f:52:a5:c9:05:
48:e9:a7:07:f0:c3:c3:54:32:c9:f6:00:35:5d:40:
f1:8b:86:4c:37:e1:2f:65:1e:53:d9:78:9c:bc:f2:
e7:12:91:4a:6d:f0:b1:fc:9f:db:45:b1:aa:7d:9c:
f4:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:46:FF:E7:0D:4E:FC:5A:8B:90:03:E3:29:4B:1C:8C:33:6F:17:1F
X509v3 Authority Key Identifier:
keyid:D7:47:01:75:64:C7:11:BC:BD:57:68:0A:0D:FD:00:F2:A5:D0:99:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/10cBdWTHEby9V2gKDf0A8qXQmds.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/s0b_5w1O_FqLkAPjKUscjDNvFx8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/10cBdWTHEby9V2gKDf0A8qXQmds.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.180.148.0/24
195.180.158.0/24
195.180.178.0/24
Signature Algorithm: sha256WithRSAEncryption
80:4d:2f:14:49:e4:80:d1:ef:62:cc:b7:83:ff:24:b7:dd:ec:
d7:a4:b1:8c:a2:93:80:b1:2b:2a:c7:58:11:23:bc:26:6a:55:
6a:a5:fa:ed:9c:07:74:66:c9:c7:24:ce:4a:ee:4f:bd:3d:fc:
55:00:00:db:2d:18:8c:a0:1a:d4:99:7b:29:de:c5:09:01:cc:
aa:91:e5:c8:47:68:9e:03:80:36:92:f7:a9:d3:c0:aa:70:2d:
7c:d5:2e:72:13:fc:e8:c5:74:f6:43:40:51:59:17:e7:55:0f:
ad:4a:24:d8:71:d8:6d:b4:4f:1e:01:53:d9:9c:58:aa:6a:3c:
af:5d:58:07:ff:2e:70:a9:6d:3b:1a:ba:eb:8c:36:e3:71:43:
a9:89:7f:c4:c4:51:c9:8a:7b:36:d6:5a:f1:4f:f4:44:3d:1b:
8f:4c:23:92:f3:c9:a1:a9:e1:c9:1e:3a:7c:80:3e:5c:6c:c0:
63:ae:09:51:78:da:17:f4:a9:1e:2b:b3:cc:f1:c0:3e:d4:61:
cd:ef:66:0b:ee:73:8d:cf:a4:72:db:f8:8c:5f:b0:b2:35:75:
32:f6:84:85:a3:34:ba:08:82:b0:80:e1:a1:7b:83:e7:5b:59:
d8:9a:c3:20:a7:ac:2c:83:50:76:b9:1f:ae:4c:0e:19:72:d3:
72:ba:15:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:06:41 2025 by rpki-client