Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/74e17f-f9f4-4789-92b7-9dd6e88fcc8d/1/JDX-8J9d41-kNA0O2qQb08zxaO8.roa
File: JDX-8J9d41-kNA0O2qQb08zxaO8.roa (raw, json)
Hash identifier: pw1XAcndTMCHMdl30zI5fsZ96t3kVYeEGtE+LKu9Eqw=
Subject key identifier: 24:35:FE:F0:9F:5D:E3:5F:A4:34:0D:0E:DA:A4:1B:D3:CC:F1:68:EF
Certificate issuer: /CN=b91b91504983091506a1a944457a4558b94dab7f
Certificate serial: 381F6926
Authority key identifier: B9:1B:91:50:49:83:09:15:06:A1:A9:44:45:7A:45:58:B9:4D:AB:7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uRuRUEmDCRUGoalERXpFWLlNq38.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/74e17f-f9f4-4789-92b7-9dd6e88fcc8d/1/JDX-8J9d41-kNA0O2qQb08zxaO8.roa
Signing time: Sat 01 Jan 2022 09:59:28 +0000
ROA not before: Sat 01 Jan 2022 09:59:28 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 203912
IP address blocks: 178.175.181.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 941582630 (0x381f6926)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b91b91504983091506a1a944457a4558b94dab7f
Validity
Not Before: Jan 1 09:59:28 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=2435fef09f5de35fa4340d0edaa41bd3ccf168ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:70:13:78:a8:e1:2d:06:e9:58:0d:18:2b:08:
62:d5:a8:f7:f4:f9:66:15:fe:e5:3f:92:fd:bc:13:
be:88:34:4e:6b:47:b9:39:1f:56:3f:bd:b4:26:a6:
8d:d2:ac:6b:ce:bc:7b:5b:44:d7:11:72:cc:6b:d9:
d6:c9:64:c9:14:ce:47:a6:00:7f:7e:94:30:59:06:
00:15:a4:df:a0:ee:2f:b4:f5:b6:d2:59:12:b1:2a:
95:13:ff:c1:4e:54:66:28:42:2b:6b:f7:b9:dc:73:
67:25:6d:5a:78:b4:84:04:60:ee:30:41:fc:bc:f3:
1a:38:8d:fb:a6:dd:79:81:c3:07:e6:f8:3e:e9:77:
8c:43:c3:88:c3:4a:c8:7a:91:d1:d7:02:0d:ef:41:
ec:e9:46:14:29:c7:f3:49:82:bc:c0:24:5f:86:53:
4b:ba:64:9e:36:4b:4c:14:31:11:f5:af:ba:a8:cb:
6c:1c:07:3b:8e:1a:df:80:33:a1:5f:53:39:42:5c:
2b:59:0d:65:cb:c8:41:68:e2:c0:1e:a9:81:cd:2e:
83:73:64:97:4a:62:9c:ab:ec:1c:61:92:37:c1:b8:
d5:60:30:97:32:d4:fd:29:46:42:85:b8:dd:6d:aa:
96:76:8d:b8:fb:12:17:50:38:0e:4a:9d:05:e0:de:
18:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:35:FE:F0:9F:5D:E3:5F:A4:34:0D:0E:DA:A4:1B:D3:CC:F1:68:EF
X509v3 Authority Key Identifier:
keyid:B9:1B:91:50:49:83:09:15:06:A1:A9:44:45:7A:45:58:B9:4D:AB:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uRuRUEmDCRUGoalERXpFWLlNq38.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/74e17f-f9f4-4789-92b7-9dd6e88fcc8d/1/JDX-8J9d41-kNA0O2qQb08zxaO8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/74e17f-f9f4-4789-92b7-9dd6e88fcc8d/1/uRuRUEmDCRUGoalERXpFWLlNq38.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.175.181.0/24
Signature Algorithm: sha256WithRSAEncryption
0e:5c:29:38:78:98:6f:70:1a:d5:47:c7:62:e4:1e:22:f0:25:
6d:09:e4:c2:79:ff:22:5c:2c:5b:15:82:a5:dd:e5:50:af:09:
3a:97:16:40:df:66:58:ff:2d:6e:60:5b:66:6e:6d:65:fb:54:
1c:fa:a7:e1:5d:95:6e:c3:7f:52:36:57:c6:c2:2c:90:ab:ea:
37:d3:f8:34:65:d5:c5:2c:a1:17:4c:87:2c:89:ee:f7:70:53:
97:1a:b9:1a:8d:f4:75:7d:94:84:4d:17:80:fe:de:8a:7d:ee:
90:7a:d1:b5:6b:e6:8c:fb:ef:b0:e5:de:4e:0d:4c:df:eb:05:
c3:8d:0d:db:13:72:3f:7b:0c:e0:33:05:6c:bc:2d:67:f2:19:
24:44:b7:2f:42:cf:06:01:0a:0b:e4:ac:8e:39:03:79:4a:e2:
35:9c:8a:9d:99:a7:69:bc:02:1d:25:ae:2c:20:f7:d7:c1:5f:
50:f4:5b:3c:9a:4a:d4:a2:34:82:48:4a:a8:c9:31:4a:0e:0f:
59:93:da:2f:a9:d4:b3:2a:fb:bb:61:6e:fc:03:7f:58:67:f2:
87:95:99:af:0e:fc:24:4a:55:a5:97:67:dd:e3:6e:1f:de:b5:
3d:c1:45:6a:bf:ee:71:d2:e1:26:b5:4b:37:3a:3c:12:f4:0f:
e2:c4:14:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:36:59 2025 by rpki-client