Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/caa9a2-0be2-4825-8558-40f90d8c74e2/1/yEQ81N25QMrK33UxJFdp-qQ0UKw.roa
File: yEQ81N25QMrK33UxJFdp-qQ0UKw.roa (raw, json)
Hash identifier: cvTSlf/v/DX8gYhEYTJECYC8DqF86D0NuhCFAkN6T+4=
Subject key identifier: C8:44:3C:D4:DD:B9:40:CA:CA:DF:75:31:24:57:69:FA:A4:34:50:AC
Certificate issuer: /CN=f2bdd0dfc21fcb2f41c841d3589691b22b9eea05
Certificate serial: 0197D6353D7392E2F68C3913A724F23601E9
Authority key identifier: F2:BD:D0:DF:C2:1F:CB:2F:41:C8:41:D3:58:96:91:B2:2B:9E:EA:05
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8r3Q38Ifyy9ByEHTWJaRsiue6gU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/caa9a2-0be2-4825-8558-40f90d8c74e2/1/yEQ81N25QMrK33UxJFdp-qQ0UKw.roa
Signing time: Fri 04 Jul 2025 16:11:42 +0000
ROA not before: Fri 04 Jul 2025 16:11:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 216423
IP address blocks: 178.219.158.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:d6:35:3d:73:92:e2:f6:8c:39:13:a7:24:f2:36:01:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f2bdd0dfc21fcb2f41c841d3589691b22b9eea05
Validity
Not Before: Jul 4 16:11:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c8443cd4ddb940cacadf7531245769faa43450ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:06:d3:c9:75:b8:4d:92:3e:00:c8:ff:5a:29:
9c:95:79:bf:bc:78:2d:c5:73:3b:f0:b0:20:0a:54:
87:76:95:97:30:54:d4:aa:bb:73:38:9a:da:59:84:
d5:12:a5:c9:2c:7c:37:1f:68:fd:10:a5:0a:71:8b:
62:7b:31:9e:9f:eb:b4:e7:4e:eb:32:bb:04:48:94:
f6:29:82:76:e6:f1:bf:1c:a0:26:2f:a7:c1:94:3e:
67:70:6e:76:5e:f6:6b:8f:0d:7d:ff:07:17:80:12:
b8:38:07:42:7a:eb:f3:8d:2d:71:e3:5b:96:4f:96:
72:6d:e2:8e:9f:b0:12:c1:1d:a1:3a:f5:5b:ab:2b:
41:03:a8:2b:7c:a6:dc:5a:1f:5f:28:fd:ae:16:6e:
51:97:8e:a7:5f:3f:de:8e:be:24:84:c4:98:3e:4e:
5e:e4:53:b4:69:5b:0a:81:4d:7f:41:59:fa:d0:cd:
b1:7c:2b:bf:86:9b:14:65:e5:3d:0c:55:90:4e:46:
de:2b:a6:42:1a:0b:98:2a:a0:77:8a:3a:5f:23:a5:
54:46:58:a5:65:45:e2:c8:41:4d:01:0e:7a:38:80:
4f:03:ba:65:ff:46:d9:7a:52:77:65:ee:6c:8a:1e:
5c:c5:47:3f:b5:56:ac:b3:34:32:3b:97:c4:93:be:
bc:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:44:3C:D4:DD:B9:40:CA:CA:DF:75:31:24:57:69:FA:A4:34:50:AC
X509v3 Authority Key Identifier:
keyid:F2:BD:D0:DF:C2:1F:CB:2F:41:C8:41:D3:58:96:91:B2:2B:9E:EA:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8r3Q38Ifyy9ByEHTWJaRsiue6gU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/caa9a2-0be2-4825-8558-40f90d8c74e2/1/yEQ81N25QMrK33UxJFdp-qQ0UKw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/96/caa9a2-0be2-4825-8558-40f90d8c74e2/1/8r3Q38Ifyy9ByEHTWJaRsiue6gU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.219.158.0/24
Signature Algorithm: sha256WithRSAEncryption
01:36:a3:1b:75:68:28:0e:d4:43:82:6a:5f:4a:22:a3:39:90:
71:58:ca:42:44:a1:36:40:fe:5d:7c:d6:1a:e8:82:8a:72:7e:
66:e4:ee:f3:cf:a8:16:35:20:5e:45:d2:d1:17:76:a8:a0:ab:
ca:55:23:b8:d7:1e:c9:9c:bd:f8:a3:70:f7:e1:00:b8:e5:a8:
6d:2f:d9:b6:94:48:a3:2c:50:d0:19:f2:e2:32:69:25:8e:6d:
ce:cc:12:c6:45:3b:40:84:41:36:b5:fc:34:13:b6:b8:cb:89:
58:3e:9c:0f:b0:33:fb:a8:c7:bf:11:31:99:2a:04:fa:e5:b2:
e3:46:7c:5c:c0:ab:d7:4e:cf:83:56:df:fe:5c:a8:1c:d8:84:
a6:3c:af:0b:2d:36:91:bb:3c:c2:48:e4:5e:29:3c:c8:72:42:
f7:d2:f4:45:d3:06:0b:9e:8c:aa:e5:9b:dd:8b:b9:ff:9a:33:
b3:13:cf:b8:fc:8d:82:d4:ab:3f:44:eb:8d:cd:0e:82:4c:96:
87:65:0a:e4:e9:f4:cf:a3:40:b7:58:9e:8c:8b:d3:d1:2d:7f:
d5:21:a8:b9:f8:35:ea:66:68:a9:58:e9:2c:94:7b:43:d6:49:
76:d3:4c:c1:a0:39:c1:c8:b7:cc:57:4f:a4:f2:07:a4:ad:90:
dd:ec:fb:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 21 12:32:16 2025 by rpki-client