Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/70a8f1-d8eb-42b5-bddb-6265521f6df7/1/fYOOSM15whMcVvZ5tcFiBd0Qo9E.roa
File: fYOOSM15whMcVvZ5tcFiBd0Qo9E.roa (raw, json)
Hash identifier: P7sYbtKWK8O7ktUBrn2OGQXrmI6ml9SSTOTmn2X4zgA=
Subject key identifier: 7D:83:8E:48:CD:79:C2:13:1C:56:F6:79:B5:C1:62:05:DD:10:A3:D1
Certificate issuer: /CN=8db34774b01979284fd9e754fea68fa3c61783d0
Certificate serial: 018CC8DF647E29383B0B714B4DB3C015F34A
Authority key identifier: 8D:B3:47:74:B0:19:79:28:4F:D9:E7:54:FE:A6:8F:A3:C6:17:83:D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jbNHdLAZeShP2edU_qaPo8YXg9A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/70a8f1-d8eb-42b5-bddb-6265521f6df7/1/fYOOSM15whMcVvZ5tcFiBd0Qo9E.roa
Signing time: Tue 02 Jan 2024 06:32:12 +0000
ROA not before: Tue 02 Jan 2024 06:32:12 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 212953
IP address blocks: 176.98.41.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:df:64:7e:29:38:3b:0b:71:4b:4d:b3:c0:15:f3:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8db34774b01979284fd9e754fea68fa3c61783d0
Validity
Not Before: Jan 2 06:32:12 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7d838e48cd79c2131c56f679b5c16205dd10a3d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:bf:bc:61:8a:aa:08:db:28:77:2c:ad:94:5d:
cf:72:7c:8d:60:67:58:4a:6b:71:c3:89:ac:f6:cd:
46:cc:3c:ad:3a:bd:85:48:cd:26:6b:58:43:9e:c9:
cb:96:8f:8d:38:90:1a:c4:eb:03:15:9b:53:d8:af:
3a:4f:c8:f5:40:12:68:49:d7:1b:c5:65:fb:26:5e:
f9:bc:9c:cb:8c:c5:59:e1:69:02:47:28:36:0d:2e:
d2:d3:70:d1:c6:07:58:2d:11:b8:b5:f6:9c:1c:ac:
8f:34:15:83:0d:7d:5e:c7:57:85:eb:60:89:b5:59:
ab:6a:2c:f4:f4:d3:47:4b:e0:f9:7a:f5:ab:01:46:
87:56:9f:81:11:9e:d2:ce:f4:a9:d2:fe:4e:09:57:
02:04:25:a4:fa:98:1b:47:ba:dc:a0:a2:95:9a:d0:
d9:9e:8a:c1:a3:10:86:12:b2:db:cb:17:22:dc:91:
fb:2b:39:8b:31:d1:df:51:b9:27:e9:bc:be:3e:1a:
d8:15:c2:92:88:c2:b9:f6:75:86:37:b9:56:c6:be:
c7:91:b2:aa:24:d9:bb:ad:59:e1:23:ec:1a:22:da:
92:0e:8f:fe:37:ef:cb:11:17:a7:18:bf:27:49:1e:
e9:5f:c6:4c:62:b5:8b:bc:b0:fc:a3:ad:0b:9f:c4:
28:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:83:8E:48:CD:79:C2:13:1C:56:F6:79:B5:C1:62:05:DD:10:A3:D1
X509v3 Authority Key Identifier:
keyid:8D:B3:47:74:B0:19:79:28:4F:D9:E7:54:FE:A6:8F:A3:C6:17:83:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jbNHdLAZeShP2edU_qaPo8YXg9A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/70a8f1-d8eb-42b5-bddb-6265521f6df7/1/fYOOSM15whMcVvZ5tcFiBd0Qo9E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/70a8f1-d8eb-42b5-bddb-6265521f6df7/1/jbNHdLAZeShP2edU_qaPo8YXg9A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.98.41.0/24
Signature Algorithm: sha256WithRSAEncryption
cc:d8:d4:66:3e:df:69:c3:ac:af:04:b1:ce:b1:2d:c3:57:d7:
7c:8e:93:51:d8:a0:65:69:d4:b6:a1:93:f9:c3:a5:70:91:0b:
33:05:96:7f:70:61:e9:fa:39:4e:83:ba:dd:9d:a2:2f:e0:8e:
61:ac:85:b8:87:e5:87:d1:46:cd:5a:53:4f:74:b8:d4:cf:88:
4f:6f:5b:bc:49:6b:ea:62:00:28:b2:2d:d1:88:fe:48:f0:a3:
6f:2e:73:dd:08:6d:99:3d:9e:51:18:9e:3b:6e:34:94:55:ca:
0e:2d:7c:c9:db:37:72:ab:f2:89:f0:77:55:c7:20:91:a3:6d:
9d:f4:f4:44:4a:9c:f7:9d:28:4a:a9:a4:7e:de:13:48:b8:e8:
31:39:2b:4b:5a:53:42:59:a6:79:75:26:7c:b6:bd:b3:55:41:
e3:a3:44:6b:b0:f2:00:10:32:1f:ae:ef:52:b2:2b:01:4d:5c:
b5:ae:76:0d:c9:33:14:a1:66:cd:e7:f0:fc:e8:55:e8:dc:a8:
14:7e:75:6e:39:51:6e:b6:0a:49:92:31:13:cb:e9:fc:c2:9f:
81:bb:b6:2d:93:2f:f2:6d:59:72:4e:20:89:06:f4:99:55:1e:
63:c7:87:0c:79:cc:60:0e:89:4e:eb:69:eb:ab:f8:6a:74:cd:
54:19:cf:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 22:54:33 2025 by rpki-client