Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/74e17f-f9f4-4789-92b7-9dd6e88fcc8d/1/VRd7DdVKm1-0t6s2krKRRiGw2Is.roa
File: VRd7DdVKm1-0t6s2krKRRiGw2Is.roa (raw, json)
Hash identifier: kjqJfmHWmYenXS4Lc3TmmzV+RrTh7Hi2tR6DU2pssOk=
Subject key identifier: 55:17:7B:0D:D5:4A:9B:5F:B4:B7:AB:36:92:B2:91:46:21:B0:D8:8B
Certificate issuer: /CN=b91b91504983091506a1a944457a4558b94dab7f
Certificate serial: 3821CDFE
Authority key identifier: B9:1B:91:50:49:83:09:15:06:A1:A9:44:45:7A:45:58:B9:4D:AB:7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uRuRUEmDCRUGoalERXpFWLlNq38.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/74e17f-f9f4-4789-92b7-9dd6e88fcc8d/1/VRd7DdVKm1-0t6s2krKRRiGw2Is.roa
Signing time: Sat 01 Jan 2022 09:59:29 +0000
ROA not before: Sat 01 Jan 2022 09:59:29 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 211279
IP address blocks: 178.175.186.0/23 maxlen: 23
178.175.184.0/23 maxlen: 24
178.175.182.0/23 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 941739518 (0x3821cdfe)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b91b91504983091506a1a944457a4558b94dab7f
Validity
Not Before: Jan 1 09:59:29 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=55177b0dd54a9b5fb4b7ab3692b2914621b0d88b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:64:5a:8a:48:c2:a3:a7:b9:1a:56:12:ba:9d:
88:d6:ed:7d:16:a9:c2:56:12:d7:80:d3:09:34:7b:
00:9d:28:78:45:4a:0c:00:df:d1:41:0c:74:38:5d:
25:ac:7b:27:46:33:93:32:34:12:5d:69:73:13:07:
3b:77:e2:98:b7:ec:04:bc:f3:2a:5b:0b:78:d7:24:
2f:8b:17:89:9f:f5:09:a6:da:db:bd:70:86:8c:f8:
4a:bb:a1:1b:67:fa:aa:9c:1c:fe:11:d7:32:fb:67:
ca:35:53:15:5f:c1:c2:cf:e1:1f:77:cc:75:f0:70:
8e:f7:69:aa:a1:0d:72:00:60:e1:71:eb:67:ff:69:
6c:a8:c0:2e:f0:25:20:24:11:df:65:c2:44:dd:4e:
50:06:ad:ad:25:08:a4:3c:8b:e1:a6:f3:8f:20:16:
68:08:4d:6c:c4:e9:b0:00:08:cf:e7:9d:c7:0c:5f:
94:c6:cb:96:a5:eb:09:82:67:3b:50:7f:72:b0:56:
af:36:33:a6:e6:2d:c0:ef:31:d3:9c:ac:44:3d:ed:
8a:69:5c:7c:24:c5:0a:38:87:82:cb:73:36:e1:a8:
5e:06:67:68:8e:0a:2f:5a:f7:01:46:6c:d5:a7:8d:
17:c0:1b:02:e9:0f:11:2a:84:70:47:cb:24:75:88:
7a:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:17:7B:0D:D5:4A:9B:5F:B4:B7:AB:36:92:B2:91:46:21:B0:D8:8B
X509v3 Authority Key Identifier:
keyid:B9:1B:91:50:49:83:09:15:06:A1:A9:44:45:7A:45:58:B9:4D:AB:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uRuRUEmDCRUGoalERXpFWLlNq38.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/74e17f-f9f4-4789-92b7-9dd6e88fcc8d/1/VRd7DdVKm1-0t6s2krKRRiGw2Is.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/74e17f-f9f4-4789-92b7-9dd6e88fcc8d/1/uRuRUEmDCRUGoalERXpFWLlNq38.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.175.182.0-178.175.187.255
Signature Algorithm: sha256WithRSAEncryption
af:6f:5a:5d:d0:52:5f:3c:32:d4:d5:e1:90:a1:c8:11:4d:81:
ae:8c:c1:88:09:ab:c6:96:50:9b:1e:2b:da:79:d1:e5:9e:3c:
f5:bc:66:03:4d:fa:96:71:71:27:2c:45:da:ec:63:82:15:0b:
1c:11:10:af:d1:e4:69:f1:db:9b:f3:53:cc:f6:2b:20:86:90:
0b:f2:fb:e2:e6:1a:c8:09:2c:a1:18:c3:1e:43:39:c6:65:b0:
b9:6f:f1:81:e5:e8:f8:bd:26:0f:9d:f8:6d:d9:65:a5:b5:6c:
01:9a:95:f9:2f:f7:9e:c3:de:eb:0a:24:89:79:cc:2e:da:fe:
9a:d4:78:f1:ad:3d:ee:4d:d5:62:21:cb:b3:1e:46:f0:f5:3a:
19:9f:56:54:32:da:20:a7:e9:54:8c:a3:1a:a3:93:50:58:d5:
67:04:ba:eb:ba:c3:5d:2b:9e:db:53:93:61:b9:99:e8:a1:24:
66:cc:1c:bc:9c:15:6e:04:57:25:e1:fc:96:19:fe:3f:c2:0d:
f5:89:5c:2d:cf:af:6f:86:65:5d:69:d2:2c:58:2a:b7:a1:77:
c5:94:dc:94:26:2f:e2:de:a0:be:69:55:8e:35:cf:ca:ee:bc:
f9:fe:52:dd:65:ce:4a:2b:1d:62:dd:8f:0b:9a:17:c1:09:f6:
cf:3e:59:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:32:40 2025 by rpki-client