Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/8ea9b9-3b6e-4fdf-b5d1-f04fdcc09e51/1/G61PO_wHtThyC8ffbJ7G6wtp6DE.roa
File: G61PO_wHtThyC8ffbJ7G6wtp6DE.roa (raw, json)
Hash identifier: BbI7SwVgUZ+Yy2eEoB7nnb+5B/zyZKeTzm7lTeNvE9U=
Subject key identifier: 1B:AD:4F:3B:FC:07:B5:38:72:0B:C7:DF:6C:9E:C6:EB:0B:69:E8:31
Certificate issuer: /CN=992b86095ce558d2e9618728a44228a27be9098f
Certificate serial: 018571957B99DB9F40A3C0A686C8381FD614
Authority key identifier: 99:2B:86:09:5C:E5:58:D2:E9:61:87:28:A4:42:28:A2:7B:E9:09:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mSuGCVzlWNLpYYcopEIoonvpCY8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/8ea9b9-3b6e-4fdf-b5d1-f04fdcc09e51/1/G61PO_wHtThyC8ffbJ7G6wtp6DE.roa
Signing time: Mon 02 Jan 2023 08:24:59 +0000
ROA not before: Mon 02 Jan 2023 08:24:59 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 61317
IP address blocks: 166.108.248.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:95:7b:99:db:9f:40:a3:c0:a6:86:c8:38:1f:d6:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=992b86095ce558d2e9618728a44228a27be9098f
Validity
Not Before: Jan 2 08:24:59 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1bad4f3bfc07b538720bc7df6c9ec6eb0b69e831
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:4b:dc:2d:94:1e:2e:10:70:ee:34:2e:30:61:
56:9a:28:94:9f:0a:ca:4b:66:4d:26:a7:8e:3c:4b:
c6:eb:6e:c0:ec:cb:c6:6e:1c:e8:b5:ae:1f:8b:a2:
79:1a:80:a1:04:f5:8b:c7:6d:3f:10:33:3d:6b:40:
9a:ef:d2:a7:7c:0d:63:b0:a5:35:26:7d:3e:5f:f8:
6f:41:94:3b:f6:b1:03:ce:e8:e7:6e:e3:c6:04:75:
1d:06:a9:56:8e:d4:ed:05:96:d1:1a:48:34:56:7f:
42:5f:93:f9:c1:06:9a:cf:85:76:ac:f8:ac:8c:7f:
ca:79:3b:d8:16:63:c8:4e:4d:e1:f2:50:91:59:2a:
9a:45:fa:2f:dc:50:b6:98:ef:70:e8:06:30:7d:78:
7a:a5:82:84:54:94:46:eb:0d:88:ac:b5:2a:dd:bc:
38:6e:97:6b:c9:92:96:12:ae:e7:de:57:55:f6:73:
50:66:ac:e8:d7:91:40:d7:9c:82:92:40:12:de:f6:
2e:33:b9:ef:dc:89:bf:77:62:13:d1:82:4f:2e:1c:
53:29:e7:65:d2:e3:a8:95:8b:5f:75:55:a3:02:bf:
bb:3a:ad:0e:7b:8b:47:61:30:d9:17:e4:11:0d:37:
77:2e:b4:99:6c:0c:07:0c:ca:69:59:69:4e:1b:a3:
49:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:AD:4F:3B:FC:07:B5:38:72:0B:C7:DF:6C:9E:C6:EB:0B:69:E8:31
X509v3 Authority Key Identifier:
keyid:99:2B:86:09:5C:E5:58:D2:E9:61:87:28:A4:42:28:A2:7B:E9:09:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mSuGCVzlWNLpYYcopEIoonvpCY8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/8ea9b9-3b6e-4fdf-b5d1-f04fdcc09e51/1/G61PO_wHtThyC8ffbJ7G6wtp6DE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/8ea9b9-3b6e-4fdf-b5d1-f04fdcc09e51/1/mSuGCVzlWNLpYYcopEIoonvpCY8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
166.108.248.0/24
Signature Algorithm: sha256WithRSAEncryption
85:b2:fd:75:0a:79:38:60:9a:a9:3d:a8:fb:7f:28:45:08:98:
13:c0:6a:a5:9d:a2:06:32:d2:8f:79:75:8c:41:58:de:b3:2e:
09:58:0d:02:b2:f1:3f:de:cc:47:ae:d2:6a:c3:da:8b:9e:55:
4d:66:be:df:85:23:53:16:8d:b6:6b:8e:d9:27:c2:46:21:72:
7e:5c:3f:60:b9:b3:70:ed:c6:55:09:32:cf:4f:61:8b:70:2c:
68:54:0d:34:89:0c:4c:e1:d2:57:8b:37:05:fe:4b:ca:2e:e0:
b2:03:19:d6:75:f5:14:97:3e:d0:df:a4:fb:3b:d2:94:0b:6f:
54:a3:5b:5b:1c:25:f6:21:de:cb:8a:c5:e7:25:b8:37:ba:50:
04:1a:14:88:98:93:a5:09:09:76:06:68:f0:45:2e:b8:1d:49:
fc:cd:6a:6d:1d:c4:95:af:1c:bf:fd:e4:68:2e:c9:d9:13:e5:
81:cd:8b:c2:b0:07:0f:2c:5f:92:d2:0e:06:61:e8:16:ec:c0:
63:bd:66:3e:c7:46:f5:e6:26:56:a9:86:ff:c2:9a:82:17:16:
b3:14:4f:65:da:a3:7e:90:0c:8e:90:f1:cc:06:94:e6:04:6a:
0c:3c:57:9a:08:79:3e:9c:a7:53:c7:6a:f1:d4:35:da:b1:68:
fc:c4:f8:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 20:41:50 2025 by rpki-client