Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/098d13-6d6d-4294-9753-a8773de768f7/1/GkFLh-DKoS2OU2iNYXveZXtGj6o.roa
File: GkFLh-DKoS2OU2iNYXveZXtGj6o.roa (raw, json)
Hash identifier: Fcj1xQWRoBV/ky/EZ0nSLy+xHQ7CbNQgSw/QUz1RBx8=
Subject key identifier: 1A:41:4B:87:E0:CA:A1:2D:8E:53:68:8D:61:7B:DE:65:7B:46:8F:AA
Certificate issuer: /CN=00aff6b4effe7c363ef200f6f3e5888b915ba681
Certificate serial: 0190B66EA4F00F3A82E21CFEFF9D7BE96E83
Authority key identifier: 00:AF:F6:B4:EF:FE:7C:36:3E:F2:00:F6:F3:E5:88:8B:91:5B:A6:81
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AK_2tO_-fDY-8gD28-WIi5FbpoE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/098d13-6d6d-4294-9753-a8773de768f7/1/GkFLh-DKoS2OU2iNYXveZXtGj6o.roa
Signing time: Mon 15 Jul 2024 12:47:02 +0000
ROA not before: Mon 15 Jul 2024 12:47:02 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 185.81.180.0/23 maxlen: 23
185.81.180.0/24 maxlen: 24
185.81.181.0/24 maxlen: 24
185.81.182.0/24 maxlen: 24
185.81.183.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:b6:6e:a4:f0:0f:3a:82:e2:1c:fe:ff:9d:7b:e9:6e:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00aff6b4effe7c363ef200f6f3e5888b915ba681
Validity
Not Before: Jul 15 12:47:02 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1a414b87e0caa12d8e53688d617bde657b468faa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:58:da:a7:07:03:39:f8:02:77:68:44:15:bf:
47:88:f1:09:5a:96:9f:6b:76:e3:4a:27:6f:26:8b:
84:2e:a8:66:c9:37:ec:8c:a1:e5:5e:b2:75:c0:0f:
c2:5d:dc:e1:4e:38:7d:f3:3b:cb:3c:fa:00:a7:9a:
6f:ab:91:00:d5:7f:32:80:b4:62:d5:05:9f:e1:d5:
63:59:a2:3e:8e:ff:59:48:26:e8:b7:63:85:7f:1b:
2f:0a:f0:b5:24:f2:af:17:63:07:66:f6:89:a9:0d:
4f:e6:af:5d:20:da:34:82:10:f9:0d:d2:54:98:f6:
41:aa:5f:13:06:a3:06:a3:b0:c6:7f:05:ce:f8:bc:
23:18:b5:4b:72:99:88:19:fb:12:ed:49:5b:ee:49:
44:8f:f4:36:1c:ab:47:3a:f0:ea:f4:a1:b6:fb:47:
b0:a6:d2:66:0a:d3:31:f0:92:32:91:8b:d5:1d:2f:
9c:6e:63:97:e7:d0:a5:22:bb:3e:6e:ad:8a:67:15:
ac:1c:00:13:04:2b:26:ae:0e:71:0e:93:e1:5b:5c:
3f:d8:c9:6f:ee:8a:d1:a1:88:53:2f:61:89:7c:65:
27:93:4c:09:81:1f:fe:05:82:4c:31:73:44:42:b7:
ff:94:68:51:91:bb:e1:4b:f5:be:11:c7:68:95:d0:
f0:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:41:4B:87:E0:CA:A1:2D:8E:53:68:8D:61:7B:DE:65:7B:46:8F:AA
X509v3 Authority Key Identifier:
keyid:00:AF:F6:B4:EF:FE:7C:36:3E:F2:00:F6:F3:E5:88:8B:91:5B:A6:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AK_2tO_-fDY-8gD28-WIi5FbpoE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/098d13-6d6d-4294-9753-a8773de768f7/1/GkFLh-DKoS2OU2iNYXveZXtGj6o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/098d13-6d6d-4294-9753-a8773de768f7/1/AK_2tO_-fDY-8gD28-WIi5FbpoE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.81.180.0/22
Signature Algorithm: sha256WithRSAEncryption
78:fd:1a:9c:f8:52:ca:d8:e4:38:23:23:be:c8:76:3d:9e:3e:
27:ab:3f:cd:52:90:89:dd:61:99:9c:47:73:89:bc:a1:2d:9d:
03:91:22:67:ab:f6:e9:d7:d4:c9:e2:e9:32:cf:97:b7:e2:4d:
7e:03:af:6d:7d:94:34:15:0d:a9:9c:d1:14:2f:e6:d3:79:3a:
06:77:23:9a:8e:96:89:95:3e:d6:d4:36:e7:24:75:1a:f7:16:
ee:63:5f:74:22:3e:e2:b5:38:94:a6:64:bb:dc:d6:3f:99:1f:
34:5a:41:35:e5:51:74:91:31:83:84:8b:35:a8:70:49:24:15:
9a:cc:92:b5:04:74:10:eb:69:62:b2:07:4d:7b:25:19:95:26:
58:86:d0:6b:71:11:e9:f6:af:32:8e:24:1b:3a:f5:2f:9a:51:
cb:78:2b:8f:97:3d:4a:4d:53:e5:3c:24:e5:41:78:90:33:cd:
19:e6:8d:98:b3:1f:7d:8f:f1:f8:a2:1a:41:04:89:d4:f0:04:
64:5e:6a:67:6b:b3:7a:1f:99:4b:9d:06:6d:fb:a0:81:1f:4d:
3a:00:1e:67:b4:cb:5a:e4:ee:7c:97:55:38:63:51:ee:2d:0f:
35:eb:a1:c2:a8:72:ee:22:a1:c4:5d:90:6a:0c:1e:28:e0:3a:
5f:c7:07:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 13:41:50 2025 by rpki-client