Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/gOqeHZG7UfzZOa_Ghplc2znz9lY.roa
File: gOqeHZG7UfzZOa_Ghplc2znz9lY.roa (raw, json)
Hash identifier: hO8xlkQbT62qLpOOjGOyRn8Y2Fne3VzNkrJF5t4ANME=
Subject key identifier: 80:EA:9E:1D:91:BB:51:FC:D9:39:AF:C6:86:99:5C:DB:39:F3:F6:56
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 01937DF640A1FAED4A90992EECD67B6B2E9C
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/gOqeHZG7UfzZOa_Ghplc2znz9lY.roa
Signing time: Sat 30 Nov 2024 16:45:10 +0000
ROA not before: Sat 30 Nov 2024 16:45:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 215224
IP address blocks: 212.192.214.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:7d:f6:40:a1:fa:ed:4a:90:99:2e:ec:d6:7b:6b:2e:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Nov 30 16:45:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=80ea9e1d91bb51fcd939afc686995cdb39f3f656
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:41:3c:ca:e6:76:57:6b:ed:0e:4d:12:fc:a7:
2b:ac:21:29:06:a8:5d:69:f5:38:73:b6:80:3f:65:
c5:6f:ba:65:25:42:61:8e:28:f3:45:29:fc:6f:be:
9b:0b:40:72:36:51:40:f2:ac:40:95:f0:69:16:3e:
24:73:50:04:aa:12:80:de:c0:77:63:e4:83:54:86:
19:fb:54:7e:f9:95:1f:59:ca:79:26:e4:df:e2:15:
38:7e:b6:23:41:a5:99:ca:fc:60:38:2f:eb:e5:2d:
6f:fa:32:62:bf:3c:c2:63:cf:da:3e:06:0c:a3:f4:
f5:b7:2d:4e:49:a3:7f:c1:d8:ed:ec:e8:d1:00:ba:
86:23:7e:ae:fe:5e:10:47:92:43:53:33:4e:13:e6:
a8:ca:3b:3e:eb:94:d8:0c:2a:fb:a0:c4:51:17:29:
46:58:4e:59:51:a3:99:da:3d:3e:09:27:fb:a4:c7:
fc:7b:50:93:62:57:94:4f:a6:75:cb:60:d0:6c:e3:
39:80:9d:b9:15:4f:e0:81:10:f8:20:f2:7f:c0:1d:
31:fe:76:73:75:75:3d:1b:f5:cf:83:e6:95:48:95:
53:f3:ff:46:2b:7a:7c:66:91:d4:27:f9:b6:e1:88:
f0:b5:3b:b2:a1:01:b1:5f:74:42:df:6e:74:9a:bf:
fe:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:EA:9E:1D:91:BB:51:FC:D9:39:AF:C6:86:99:5C:DB:39:F3:F6:56
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/gOqeHZG7UfzZOa_Ghplc2znz9lY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.192.214.0/24
Signature Algorithm: sha256WithRSAEncryption
0d:af:6d:b6:1f:a4:4c:1e:1e:ea:28:d9:f9:0b:c6:f3:a7:6f:
bd:98:7d:52:b2:8a:a3:51:1d:fd:65:87:13:71:3e:22:18:38:
94:ed:55:bc:da:f5:e6:ed:0e:f5:04:ce:d3:89:5a:ff:23:f2:
e6:6d:f4:80:53:e2:19:bf:07:f1:ce:67:6d:ef:ac:af:fe:51:
a0:d3:4d:f5:e3:83:55:68:6e:0c:99:d1:6e:ee:95:b2:49:d5:
49:7c:41:59:8c:a1:30:4b:28:88:43:5d:d0:6d:70:c5:37:da:
2d:94:06:0a:28:b1:f4:85:5f:86:ff:2b:51:59:98:a9:39:d6:
50:f4:50:48:96:de:79:2d:73:30:00:be:ec:7e:e9:0b:fa:dc:
49:b0:1a:3e:cb:72:72:12:06:44:cf:d0:e4:0d:e8:b2:80:1d:
ee:b0:b3:5a:16:cf:28:14:fa:a5:bc:a7:e5:1e:2b:91:7f:f6:
89:99:0a:09:d4:11:5d:88:c6:8b:6c:48:c4:93:5d:b2:f2:6b:
5b:1b:a6:69:b6:9e:15:88:df:32:ac:07:6e:4e:fc:59:5e:4a:
e9:ac:1a:ed:be:8b:6d:de:14:24:61:87:62:6f:2c:2d:4e:48:
e2:dc:4d:cf:60:3f:1e:dd:53:f9:b4:27:21:89:9f:f2:c5:74:
a9:50:d0:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 14:59:13 2025 by rpki-client