Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/70a8f1-d8eb-42b5-bddb-6265521f6df7/1/gLHUxh79nvouIWFIpRJRj0hOs08.roa
File: gLHUxh79nvouIWFIpRJRj0hOs08.roa (raw, json)
Hash identifier: MzlLwCUR+/42ju1li3vp7PknITs0tmR5CbstxEOVcpw=
Subject key identifier: 80:B1:D4:C6:1E:FD:9E:FA:2E:21:61:48:A5:12:51:8F:48:4E:B3:4F
Certificate issuer: /CN=8db34774b01979284fd9e754fea68fa3c61783d0
Certificate serial: 09FFDD04
Authority key identifier: 8D:B3:47:74:B0:19:79:28:4F:D9:E7:54:FE:A6:8F:A3:C6:17:83:D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jbNHdLAZeShP2edU_qaPo8YXg9A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/70a8f1-d8eb-42b5-bddb-6265521f6df7/1/gLHUxh79nvouIWFIpRJRj0hOs08.roa
Signing time: Sat 01 Jan 2022 11:56:02 +0000
ROA not before: Sat 01 Jan 2022 11:56:02 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 211327
IP address blocks: 176.98.40.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 167763204 (0x9ffdd04)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8db34774b01979284fd9e754fea68fa3c61783d0
Validity
Not Before: Jan 1 11:56:02 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=80b1d4c61efd9efa2e216148a512518f484eb34f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:e5:f4:46:a7:66:7e:9b:51:e7:ae:23:24:dd:
15:6c:78:08:b0:69:94:30:cb:98:6f:94:f9:60:a4:
7e:b0:7b:4e:31:cb:22:39:d2:9f:e7:ce:95:b4:3a:
a4:e8:b5:c1:52:07:88:e3:bf:2b:b1:89:a0:89:15:
78:e1:88:04:4b:3b:2c:0b:0a:db:51:c4:8f:a6:df:
70:f5:90:f3:89:f9:54:5a:19:21:16:0c:e1:4d:b1:
88:d7:99:ae:6c:c5:9c:bf:83:ac:08:86:1f:e6:98:
70:30:ab:1c:09:7f:4a:86:c8:56:c4:87:62:d7:53:
a6:ab:80:92:7e:59:72:f8:85:75:27:81:ed:c5:bd:
9f:5f:c0:74:65:61:c5:d5:82:70:f7:57:b3:0d:ba:
02:29:7a:97:0e:46:9f:cc:89:af:d5:d1:6d:11:18:
83:76:45:91:25:7c:fb:7d:93:8c:89:42:46:ba:f9:
8f:15:83:11:65:45:ea:d4:b5:4e:47:db:5c:5f:0b:
6e:64:bf:53:97:9a:b8:43:9a:b3:ef:7d:b9:26:51:
6e:6d:44:ac:3b:e4:e3:c6:0b:8f:41:b4:5b:27:ef:
90:3d:d4:1a:9c:7b:2d:e4:32:26:36:4f:1a:4c:b5:
bc:52:b4:cd:85:84:6a:5e:b0:9f:78:e0:65:35:70:
f8:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:B1:D4:C6:1E:FD:9E:FA:2E:21:61:48:A5:12:51:8F:48:4E:B3:4F
X509v3 Authority Key Identifier:
keyid:8D:B3:47:74:B0:19:79:28:4F:D9:E7:54:FE:A6:8F:A3:C6:17:83:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jbNHdLAZeShP2edU_qaPo8YXg9A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/70a8f1-d8eb-42b5-bddb-6265521f6df7/1/gLHUxh79nvouIWFIpRJRj0hOs08.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/70a8f1-d8eb-42b5-bddb-6265521f6df7/1/jbNHdLAZeShP2edU_qaPo8YXg9A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.98.40.0/24
Signature Algorithm: sha256WithRSAEncryption
05:cf:21:04:9f:48:d5:1d:7a:97:65:a9:03:ef:2f:f7:aa:49:
6a:38:df:46:94:34:51:3f:87:bd:1b:b5:c3:65:83:c9:33:04:
63:4d:89:ac:4f:38:e1:e7:ae:57:8d:13:26:01:e4:5a:1e:5a:
54:a0:41:c6:f3:0b:04:03:d9:7f:24:7c:df:33:77:bd:45:32:
bd:aa:77:99:2b:cd:4c:81:46:d0:9d:6e:b6:dc:8f:38:fc:90:
71:60:54:56:0b:3b:ee:51:8b:70:8e:77:b3:7f:7b:e2:5d:f6:
f1:f6:5a:9c:36:ea:90:8a:af:3f:cf:70:65:1a:f0:3e:3f:d2:
85:07:1c:7d:46:bb:f2:a0:e2:1f:43:10:7a:7f:24:fa:43:73:
de:8e:45:85:5b:df:15:01:ab:aa:3d:94:61:13:50:58:3b:0b:
25:04:41:fe:9d:1f:28:e0:f3:ab:84:e5:c7:fc:a1:76:e3:b9:
a5:27:5c:2a:c2:52:76:ff:7c:23:e8:65:96:01:52:2d:c7:48:
80:f0:26:48:0d:10:75:a6:b5:a3:1f:35:10:ba:4a:e8:86:52:
5c:47:74:ad:04:79:ab:b9:97:a1:e1:08:f4:d9:5e:22:85:0c:
b2:02:16:77:04:c3:f5:3a:96:2e:4b:5d:38:c7:e2:ed:31:50:
92:36:30:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 23:02:57 2025 by rpki-client