Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/a59fc5-2049-42de-b1b0-10e24e9d0fa7/1/6gcvZTZXP4ZLMiI5jebyFlo2UHw.roa
File: 6gcvZTZXP4ZLMiI5jebyFlo2UHw.roa (raw, json)
Hash identifier: RQsjYw0xdW4sDKfB24mkwlHzLhlqiQP7AvUyqjMzN5A=
Subject key identifier: EA:07:2F:65:36:57:3F:86:4B:32:22:39:8D:E6:F2:16:5A:36:50:7C
Certificate issuer: /CN=47b80caa97c13147d680c80976f8a4b15cade04f
Certificate serial: 019463E184EF7B0D66211BF889DD40E748E9
Authority key identifier: 47:B8:0C:AA:97:C1:31:47:D6:80:C8:09:76:F8:A4:B1:5C:AD:E0:4F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/R7gMqpfBMUfWgMgJdviksVyt4E8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/a59fc5-2049-42de-b1b0-10e24e9d0fa7/1/6gcvZTZXP4ZLMiI5jebyFlo2UHw.roa
Signing time: Tue 14 Jan 2025 08:15:11 +0000
ROA not before: Tue 14 Jan 2025 08:15:11 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 44547
IP address blocks: 185.161.122.0/24 maxlen: 24
185.171.88.0/24 maxlen: 24
185.171.91.0/24 maxlen: 24
2a07:5dc0::/29 maxlen: 29
2a0c:f500::/29 maxlen: 29
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:63:e1:84:ef:7b:0d:66:21:1b:f8:89:dd:40:e7:48:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=47b80caa97c13147d680c80976f8a4b15cade04f
Validity
Not Before: Jan 14 08:15:11 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ea072f6536573f864b3222398de6f2165a36507c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:2c:3d:fc:eb:c6:94:7c:10:ae:1f:fe:c2:d4:
f0:f4:48:f9:d1:46:2d:b3:d1:1a:c4:57:38:ee:3a:
fe:a8:44:6a:ee:09:a1:5f:ad:67:03:84:c9:5e:2b:
68:ee:6f:8a:ed:5d:9b:44:ab:fd:cc:c1:c0:b8:d8:
c7:f4:ac:c0:c7:39:d7:ab:d2:63:84:5c:7d:25:30:
1a:e5:3a:d4:09:79:72:aa:f9:52:73:87:46:89:cf:
b0:7e:79:2f:85:68:aa:38:26:3b:9e:90:ba:9d:17:
6e:5c:12:ed:d2:db:c0:62:e7:a2:69:91:3b:2a:fa:
f3:49:33:36:05:5c:d4:f3:0e:e6:1b:d3:c7:6c:af:
4b:f4:b7:7d:82:ed:f7:86:39:e5:07:cf:e9:fe:d0:
c2:fb:f8:b1:dc:c3:a5:d6:a8:de:45:ef:be:79:d4:
a8:b8:ee:54:84:11:63:24:0e:d4:f6:7d:76:30:37:
60:d4:a2:4f:28:12:49:83:db:fd:2c:c8:1d:3e:c3:
97:3a:6f:a6:13:cf:e7:c0:72:f5:21:aa:a8:72:aa:
e8:9b:4a:e7:23:ce:c9:cb:69:d6:35:0e:50:cd:cb:
d9:37:0b:28:a2:76:1d:9a:d7:53:20:5c:26:e3:4b:
05:a4:5d:10:f3:dd:38:2c:e3:4f:63:22:72:16:15:
08:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:07:2F:65:36:57:3F:86:4B:32:22:39:8D:E6:F2:16:5A:36:50:7C
X509v3 Authority Key Identifier:
keyid:47:B8:0C:AA:97:C1:31:47:D6:80:C8:09:76:F8:A4:B1:5C:AD:E0:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R7gMqpfBMUfWgMgJdviksVyt4E8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/a59fc5-2049-42de-b1b0-10e24e9d0fa7/1/6gcvZTZXP4ZLMiI5jebyFlo2UHw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/a59fc5-2049-42de-b1b0-10e24e9d0fa7/1/R7gMqpfBMUfWgMgJdviksVyt4E8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.161.122.0/24
185.171.88.0/24
185.171.91.0/24
IPv6:
2a07:5dc0::/29
2a0c:f500::/29
Signature Algorithm: sha256WithRSAEncryption
10:ce:2c:f4:36:5a:28:eb:96:7b:84:a8:d7:a3:90:33:f5:7b:
08:8e:b8:1b:8e:cb:55:51:d8:41:03:65:29:f9:46:10:c5:e6:
5f:7d:ed:f0:0f:ae:1d:d2:d0:ae:c1:f1:0c:7a:1f:ae:88:8f:
90:f0:ce:39:2a:2f:7e:73:6a:fa:24:ca:b9:50:9f:83:25:b6:
4f:6e:08:58:87:71:05:22:e8:af:ce:44:1f:77:e5:67:81:2d:
de:8d:80:5f:27:e1:06:09:1d:b9:89:59:02:c5:ef:61:b6:ad:
6b:c7:d7:49:9a:dd:6f:dd:d3:79:f5:20:7b:bc:8b:b4:55:16:
d3:e3:ce:f9:ea:00:77:57:d8:8d:6f:14:3c:11:a5:2b:bc:38:
c4:e1:f4:b5:5e:7f:11:12:fc:9a:db:d4:4b:e1:03:54:5a:71:
3c:59:53:c9:49:21:53:06:47:74:db:de:f9:83:a7:30:c0:5a:
22:86:be:3d:4b:cf:0e:39:cc:3a:c7:e8:d8:1d:cf:a9:7d:e0:
de:66:fa:08:98:7b:88:d3:88:9e:17:c7:89:be:34:d1:a8:a5:
ea:11:57:a8:70:5b:df:7c:11:ae:f4:dc:c4:89:15:4a:95:e3:
7b:04:f7:c8:7b:db:d1:fb:fe:6a:e8:cd:84:3b:ea:e2:62:e8:
28:e6:0d:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 20:51:20 2025 by rpki-client