Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/74e17f-f9f4-4789-92b7-9dd6e88fcc8d/1/kg3csbRuDB17YlWmp2sYvfENLiY.roa
File: kg3csbRuDB17YlWmp2sYvfENLiY.roa (raw, json)
Hash identifier: G2pc1zjwUwChPm/YCioii8t0NLQYHhetlBRREM+79iY=
Subject key identifier: 92:0D:DC:B1:B4:6E:0C:1D:7B:62:55:A6:A7:6B:18:BD:F1:0D:2E:26
Certificate issuer: /CN=b91b91504983091506a1a944457a4558b94dab7f
Certificate serial: 3819C2BE
Authority key identifier: B9:1B:91:50:49:83:09:15:06:A1:A9:44:45:7A:45:58:B9:4D:AB:7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uRuRUEmDCRUGoalERXpFWLlNq38.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/74e17f-f9f4-4789-92b7-9dd6e88fcc8d/1/kg3csbRuDB17YlWmp2sYvfENLiY.roa
Signing time: Sat 01 Jan 2022 09:59:25 +0000
ROA not before: Sat 01 Jan 2022 09:59:25 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 43289
IP address blocks: 178.175.128.0/18 maxlen: 32
178.17.160.0/20 maxlen: 32
103.197.148.0/22 maxlen: 24
2a00:1dc0::/29 maxlen: 128
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 941212350 (0x3819c2be)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b91b91504983091506a1a944457a4558b94dab7f
Validity
Not Before: Jan 1 09:59:25 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=920ddcb1b46e0c1d7b6255a6a76b18bdf10d2e26
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:ad:e3:07:67:0b:d1:29:72:9c:be:bc:e7:35:
c4:bd:a3:d7:f8:01:52:49:c8:75:45:31:7b:6a:55:
e6:08:f8:8e:d5:94:9f:5c:6d:08:6b:9f:11:5d:df:
4b:93:89:f2:b5:c8:2b:12:50:7c:00:3d:1e:d4:68:
06:1f:14:34:ad:9f:36:98:1d:01:d1:0d:59:0d:d7:
89:eb:89:a3:09:6a:f0:d6:88:d8:79:6d:b6:02:fe:
e2:4d:97:52:0c:4f:9f:60:d2:ff:74:e8:bb:fd:c2:
a5:45:7c:f0:d8:c0:a2:d6:ea:4c:e4:01:b0:ff:4f:
06:4a:d4:e2:6c:44:b3:d0:87:f2:c7:80:a2:95:ff:
cd:eb:2b:e6:25:50:5b:b9:f9:46:4f:06:9c:1e:68:
cf:5b:b3:15:4e:ae:99:87:61:a2:57:01:ed:2b:2c:
c9:91:3a:88:29:ab:ad:9e:93:16:18:06:02:1c:39:
05:6e:67:f3:7c:92:43:f0:b9:b8:d4:d4:1a:b7:76:
10:02:c2:56:92:39:3d:a2:ab:9c:fd:0b:73:d4:f2:
d0:06:53:55:f9:15:9e:50:65:6b:41:22:cf:3f:00:
53:3a:c8:9f:f8:c1:d0:3d:e2:9a:e6:47:25:98:a7:
c2:ce:d9:93:a2:32:9f:b8:52:54:dd:68:0f:d3:00:
32:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:0D:DC:B1:B4:6E:0C:1D:7B:62:55:A6:A7:6B:18:BD:F1:0D:2E:26
X509v3 Authority Key Identifier:
keyid:B9:1B:91:50:49:83:09:15:06:A1:A9:44:45:7A:45:58:B9:4D:AB:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uRuRUEmDCRUGoalERXpFWLlNq38.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/74e17f-f9f4-4789-92b7-9dd6e88fcc8d/1/kg3csbRuDB17YlWmp2sYvfENLiY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/74e17f-f9f4-4789-92b7-9dd6e88fcc8d/1/uRuRUEmDCRUGoalERXpFWLlNq38.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.197.148.0/22
178.17.160.0/20
178.175.128.0/18
IPv6:
2a00:1dc0::/29
Signature Algorithm: sha256WithRSAEncryption
45:2e:33:8e:f3:72:10:0d:c3:9a:be:b1:7a:b2:3b:50:70:2e:
19:f2:10:d7:f1:32:5b:ba:55:5c:2e:34:90:e7:eb:b0:ed:7b:
28:77:50:e4:8d:86:46:90:fa:26:58:e5:16:dc:83:c2:f2:be:
fb:93:3f:99:7b:42:2a:e5:e2:ff:2f:76:f0:b1:fb:95:89:9b:
22:54:0d:47:78:ae:2d:84:0d:5a:0a:c6:80:58:85:16:89:a1:
2e:53:39:5b:19:fe:4a:5b:71:a8:ab:5b:63:0f:df:4b:b0:cd:
9f:3d:fd:1d:05:b9:28:ac:1b:7f:7f:fe:1b:24:8f:63:76:00:
68:66:aa:25:6b:a3:b8:18:78:6c:b3:dc:30:9c:79:ca:9b:34:
ed:b2:48:48:5e:c2:92:14:de:d6:ab:14:d7:34:c7:38:31:f7:
81:8d:1f:db:22:3b:27:e2:43:de:dc:8a:60:69:b1:48:99:ae:
57:f8:58:25:fc:e4:81:f9:cd:ef:38:96:ed:6f:a8:e0:0f:8d:
50:aa:4c:03:88:de:e0:4b:65:f6:5f:0d:dd:f1:96:1b:cc:3d:
45:46:ea:1c:ca:31:91:9a:3f:f3:91:2d:a5:56:8c:c7:79:32:
38:e7:96:b0:9a:b1:8f:19:3b:7e:cb:d9:cd:d6:ac:29:7a:23:
4b:04:6f:d7
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Wed Feb 19 22:32:06 2025 by rpki-client