Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/74e17f-f9f4-4789-92b7-9dd6e88fcc8d/1/9ApdLi7LHvD0HkCPmGXrohet2iU.roa
File: 9ApdLi7LHvD0HkCPmGXrohet2iU.roa (raw, json)
Hash identifier: uWf6G9sIVcwYNhHEsQauPelYVNi11We6/19dpjXULds=
Subject key identifier: F4:0A:5D:2E:2E:CB:1E:F0:F4:1E:40:8F:98:65:EB:A2:17:AD:DA:25
Certificate issuer: /CN=b91b91504983091506a1a944457a4558b94dab7f
Certificate serial: 39461A73
Authority key identifier: B9:1B:91:50:49:83:09:15:06:A1:A9:44:45:7A:45:58:B9:4D:AB:7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uRuRUEmDCRUGoalERXpFWLlNq38.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/74e17f-f9f4-4789-92b7-9dd6e88fcc8d/1/9ApdLi7LHvD0HkCPmGXrohet2iU.roa
Signing time: Tue 03 May 2022 13:26:10 +0000
ROA not before: Tue 03 May 2022 13:26:10 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 35534
IP address blocks: 178.175.178.0/23 maxlen: 24
178.175.176.0/23 maxlen: 24
178.175.174.0/23 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 960895603 (0x39461a73)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b91b91504983091506a1a944457a4558b94dab7f
Validity
Not Before: May 3 13:26:10 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f40a5d2e2ecb1ef0f41e408f9865eba217adda25
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:ec:42:ed:3d:f7:8e:ce:ba:60:c9:f4:7f:9d:
97:46:17:b1:2f:59:e3:dd:05:17:f5:55:83:ff:69:
c7:2d:2f:75:aa:5d:dc:a2:9f:6e:f9:e4:4d:81:1c:
25:03:1d:57:7d:71:02:2c:ed:92:ff:34:e3:a0:1f:
26:39:2d:1d:4a:44:d3:99:24:3c:75:b7:6e:91:db:
7c:4e:c9:15:61:19:b6:bf:d0:a9:8b:11:e3:de:e0:
f8:4c:f7:70:02:08:33:c8:68:05:d3:75:bb:8d:49:
19:d2:a5:79:ed:2e:6e:80:42:8f:9d:62:72:dc:d0:
5c:26:c2:c0:64:5e:81:05:d8:38:66:87:82:e3:61:
ac:aa:71:b3:a0:d3:6f:68:31:78:b5:d0:44:0e:72:
01:a1:a2:02:8d:e6:07:64:76:ea:51:c6:e6:96:be:
a1:87:fc:21:bd:6a:a6:01:87:82:ae:5d:1e:cb:11:
20:97:87:a9:fa:d1:d3:73:d6:9b:8f:92:35:37:c8:
6b:fc:e4:e8:34:5e:07:05:f2:5f:fb:49:28:58:c5:
25:d4:b5:9b:4b:41:2e:4c:7d:0c:d1:15:9a:ed:d2:
2a:4c:df:54:f0:39:e4:ab:54:f3:fb:ab:e6:41:2f:
d5:9c:ee:ef:33:a5:14:aa:78:40:3e:b8:64:fd:1f:
6f:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:0A:5D:2E:2E:CB:1E:F0:F4:1E:40:8F:98:65:EB:A2:17:AD:DA:25
X509v3 Authority Key Identifier:
keyid:B9:1B:91:50:49:83:09:15:06:A1:A9:44:45:7A:45:58:B9:4D:AB:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uRuRUEmDCRUGoalERXpFWLlNq38.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/74e17f-f9f4-4789-92b7-9dd6e88fcc8d/1/9ApdLi7LHvD0HkCPmGXrohet2iU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/74e17f-f9f4-4789-92b7-9dd6e88fcc8d/1/uRuRUEmDCRUGoalERXpFWLlNq38.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.175.174.0-178.175.179.255
Signature Algorithm: sha256WithRSAEncryption
61:98:91:a5:72:f7:73:f2:d2:59:a7:a4:af:45:09:e4:0e:04:
57:ad:d0:02:f5:48:73:a1:d9:c2:aa:c7:64:18:96:b7:00:a6:
7b:0c:28:4b:ad:bc:cc:0b:83:f1:f4:42:57:a0:d1:6c:a3:22:
a0:e6:88:23:09:9f:3e:58:30:71:79:db:ce:30:b8:d5:2b:b3:
8d:af:9e:aa:d4:a5:3c:7f:1e:90:b2:b2:84:f0:48:eb:00:ce:
1e:e6:e3:45:27:94:f8:b0:25:23:6e:31:b9:59:1d:14:89:2d:
b6:7d:8a:c4:1a:83:3e:79:60:01:55:b7:4a:85:1c:85:fe:7b:
f2:53:f9:4b:92:4c:b4:c8:db:b0:76:a3:07:90:09:ac:9c:ce:
55:de:c3:05:d2:f7:06:89:42:70:32:0f:f3:ee:a0:2b:42:40:
e5:41:8d:31:ae:e9:d3:07:30:c5:69:1b:cc:3b:54:94:30:7e:
4a:c6:71:17:bf:03:77:b4:ff:81:41:1c:26:e0:31:c1:5f:69:
86:cb:6e:b9:30:57:4f:09:37:d8:c1:1b:be:a8:d9:a2:c1:15:
d5:3c:ec:f5:d8:bf:84:dc:04:76:bf:db:7e:b0:9d:e5:a3:40:
b2:59:fd:aa:b9:7d:ac:2c:10:83:0b:bf:60:92:c6:86:99:ce:
4f:e3:39:1d
-----BEGIN CERTIFICATE-----
MIIE9zCCA9+gAwIBAgIEOUYaczANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhi
OTFiOTE1MDQ5ODMwOTE1MDZhMWE5NDQ0NTdhNDU1OGI5NGRhYjdmMB4XDTIyMDUw
MzEzMjYxMFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoZjQwYTVkMmUyZWNi
MWVmMGY0MWU0MDhmOTg2NWViYTIxN2FkZGEyNTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAOjsQu09947OumDJ9H+dl0YXsS9Z490FF/VVg/9pxy0vdapd
3KKfbvnkTYEcJQMdV31xAiztkv8046AfJjktHUpE05kkPHW3bpHbfE7JFWEZtr/Q
qYsR497g+Ez3cAIIM8hoBdN1u41JGdKlee0uboBCj51ictzQXCbCwGRegQXYOGaH
guNhrKpxs6DTb2gxeLXQRA5yAaGiAo3mB2R26lHG5pa+oYf8Ib1qpgGHgq5dHssR
IJeHqfrR03PWm4+SNTfIa/zk6DReBwXyX/tJKFjFJdS1m0tBLkx9DNEVmu3SKkzf
VPA55KtU8/ur5kEv1Zzu7zOlFKp4QD64ZP0fb3cCAwEAAaOCAhEwggINMB0GA1Ud
DgQWBBT0Cl0uLsse8PQeQI+YZeuiF63aJTAfBgNVHSMEGDAWgBS5G5FQSYMJFQah
qURFekVYuU2rfzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L3VSdVJVRW1EQ1JVR29hbEVSWHBGV0xsTnEzOC5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvMTUvNzRlMTdmLWY5ZjQtNDc4OS05MmI3LTlkZDZlODhmY2M4ZC8x
LzlBcGRMaTdMSHZEMEhrQ1BtR1hyb2hldDJpVS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMTUv
NzRlMTdmLWY5ZjQtNDc4OS05MmI3LTlkZDZlODhmY2M4ZC8xL3VSdVJVRW1EQ1JV
R29hbEVSWHBGV0xsTnEzOC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAn
BggrBgEFBQcBBwEB/wQYMBYwFAQCAAEwDjAMAwQBsq+uAwQCsq+wMA0GCSqGSIb3
DQEBCwUAA4IBAQBhmJGlcvdz8tJZp6SvRQnkDgRXrdAC9UhzodnCqsdkGJa3AKZ7
DChLrbzMC4Px9EJXoNFsoyKg5ogjCZ8+WDBxedvOMLjVK7ONr56q1KU8fx6QsrKE
8EjrAM4e5uNFJ5T4sCUjbjG5WR0UiS22fYrEGoM+eWABVbdKhRyF/nvyU/lLkky0
yNuwdqMHkAmsnM5V3sMF0vcGiUJwMg/z7qArQkDlQY0xrunTBzDFaRvMO1SUMH5K
xnEXvwN3tP+BQRwm4DHBX2mGy265MFdPCTfYwRu+qNmiwRXVPOz12L+E3AR2v9t+
sJ3lo0CyWf2quX2sLBCDC79gksaGmc5P4zkd
-----END CERTIFICATE-----
Generated at Wed Feb 19 22:30:34 2025 by rpki-client