Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/d582c4-36e3-4a57-8752-e641e713d1fa/1/xth1GvYA9-e2JhE6MBVN6QxGko8.roa
File: xth1GvYA9-e2JhE6MBVN6QxGko8.roa (raw, json)
Hash identifier: Gash3nloJCHtpyViMUobhPqs2M7YVxxa56n5SacnKsU=
Subject key identifier: C6:D8:75:1A:F6:00:F7:E7:B6:26:11:3A:30:15:4D:E9:0C:46:92:8F
Certificate issuer: /CN=d0299cf12b38ff12d95ffc0d13ac12c69fe2c1ca
Certificate serial: 019294DCCEE925668C707FA146AA6B926040
Authority key identifier: D0:29:9C:F1:2B:38:FF:12:D9:5F:FC:0D:13:AC:12:C6:9F:E2:C1:CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0Cmc8Ss4_xLZX_wNE6wSxp_iwco.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/d582c4-36e3-4a57-8752-e641e713d1fa/1/xth1GvYA9-e2JhE6MBVN6QxGko8.roa
Signing time: Wed 16 Oct 2024 10:25:51 +0000
ROA not before: Wed 16 Oct 2024 10:25:51 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 59956
IP address blocks: 176.117.84.0/22 maxlen: 22
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:94:dc:ce:e9:25:66:8c:70:7f:a1:46:aa:6b:92:60:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d0299cf12b38ff12d95ffc0d13ac12c69fe2c1ca
Validity
Not Before: Oct 16 10:25:51 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c6d8751af600f7e7b626113a30154de90c46928f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f9:bb:43:65:00:8b:c0:9d:6d:e6:36:d9:aa:82:
a7:05:fd:4d:52:41:3c:19:9c:f9:88:d1:bb:0a:b3:
4b:7a:1a:fe:90:24:a2:e6:4b:f5:09:0d:67:3b:56:
41:e9:b4:4a:6f:53:20:63:c3:55:8c:c1:bd:e7:50:
78:04:09:27:6b:49:5f:b1:1b:0e:f9:f9:23:74:32:
ec:09:28:77:7c:80:c1:84:bc:7f:5f:10:e5:7a:0b:
3e:7c:a7:6d:f4:a8:13:5e:d5:e4:7b:e2:a6:3f:e1:
76:8d:5e:36:07:ec:90:b8:ce:7d:ca:43:58:e8:eb:
a5:90:21:9d:b5:21:f7:40:07:f2:d9:a0:66:d3:3d:
1d:84:c4:de:3e:45:3b:93:7b:36:45:7e:77:f5:dc:
11:7d:94:46:ae:10:8e:6b:92:da:0b:78:81:16:59:
bd:97:0e:15:5f:10:88:90:5c:92:b0:56:ee:f3:f9:
81:77:64:7d:ac:09:ca:f3:b6:a2:12:bf:88:10:d4:
d8:14:c9:86:ac:c1:56:14:26:fd:be:6d:a4:a0:98:
b7:93:ca:6b:b7:2c:12:06:2b:16:23:ac:99:44:4e:
86:a8:b9:a6:66:50:24:b6:31:1c:77:4f:ae:61:a3:
a3:24:c2:0e:c0:12:6c:2c:4e:0c:92:49:b0:a0:30:
27:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:D8:75:1A:F6:00:F7:E7:B6:26:11:3A:30:15:4D:E9:0C:46:92:8F
X509v3 Authority Key Identifier:
keyid:D0:29:9C:F1:2B:38:FF:12:D9:5F:FC:0D:13:AC:12:C6:9F:E2:C1:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0Cmc8Ss4_xLZX_wNE6wSxp_iwco.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/d582c4-36e3-4a57-8752-e641e713d1fa/1/xth1GvYA9-e2JhE6MBVN6QxGko8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/d582c4-36e3-4a57-8752-e641e713d1fa/1/0Cmc8Ss4_xLZX_wNE6wSxp_iwco.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.117.84.0/22
Signature Algorithm: sha256WithRSAEncryption
3b:36:d9:7f:25:14:8d:16:9c:70:79:9f:e2:e8:e7:eb:a2:a5:
4b:af:ab:d8:52:20:e2:29:9d:74:0e:ff:1e:9a:f2:f3:e9:ac:
fe:81:9f:df:42:c2:b2:fe:4f:ae:17:6d:69:60:c3:64:e3:f7:
aa:07:15:d0:ad:84:b2:b5:43:f0:2a:71:10:c8:9a:d2:e7:eb:
6c:27:6b:b0:04:41:51:77:56:86:d5:ca:c5:cb:84:a7:6d:17:
ff:c9:a4:c8:a6:af:25:25:c3:c3:84:2d:b2:8b:0c:23:6e:f8:
a1:f1:be:a3:a6:a7:62:e9:89:15:f2:d2:74:ea:4d:84:e5:98:
dd:81:78:05:fb:02:e1:40:af:58:4c:ea:fd:6f:2a:02:de:91:
89:e9:df:b0:b8:36:54:ae:e6:ca:10:89:7d:eb:3d:e4:9d:96:
bd:99:28:4e:e9:cd:b8:da:90:b9:24:ba:53:f9:ea:7a:5e:35:
20:66:7b:c2:cf:d6:3a:bb:49:b4:74:ee:40:b7:63:47:6e:26:
83:f8:1c:a5:3b:16:4a:6a:35:e2:f7:bf:6b:78:c4:01:33:e6:
1f:1c:d2:ba:94:05:29:ae:84:7f:c9:df:05:70:f2:18:44:1c:
e9:4e:19:98:aa:dc:c9:53:1e:5e:49:ba:50:bf:a5:0c:4b:b7:
cd:1a:dc:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:23:11 2025 by rpki-client