Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/KcGCYgXJI1O9FIhXjo3lpwrbJJI.roa
File: KcGCYgXJI1O9FIhXjo3lpwrbJJI.roa (raw, json)
Hash identifier: TChGo+qDQNf85CYWSoHbHLFE0XZBYKiIdfhRYc4Ipog=
Subject key identifier: 29:C1:82:62:05:C9:23:53:BD:14:88:57:8E:8D:E5:A7:0A:DB:24:92
Certificate issuer: /CN=6f75e4e94b5cb74517b7b01568015da9e6eecdb6
Certificate serial: 018B6669DF3E6D38B0CBA80B5DD44BBD8422
Authority key identifier: 6F:75:E4:E9:4B:5C:B7:45:17:B7:B0:15:68:01:5D:A9:E6:EE:CD:B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b3Xk6Utct0UXt7AVaAFdqebuzbY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/KcGCYgXJI1O9FIhXjo3lpwrbJJI.roa
Signing time: Wed 25 Oct 2023 10:38:16 +0000
ROA not before: Wed 25 Oct 2023 10:38:16 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 95.82.0.0/21 maxlen: 24
176.221.16.0/21 maxlen: 21
176.221.24.0/21 maxlen: 21
176.221.28.0/22 maxlen: 24
37.128.248.0/22 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:66:69:df:3e:6d:38:b0:cb:a8:0b:5d:d4:4b:bd:84:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f75e4e94b5cb74517b7b01568015da9e6eecdb6
Validity
Not Before: Oct 25 10:38:16 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=29c1826205c92353bd1488578e8de5a70adb2492
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:44:f8:5d:57:c5:d2:ba:5e:5e:9e:e9:37:b8:
61:4d:1d:5a:85:93:f5:48:08:03:1f:0b:47:35:a9:
e6:dc:63:89:6f:05:30:f9:98:ef:18:19:03:af:71:
db:d9:ae:fb:30:46:93:12:47:54:40:0c:58:55:46:
5f:f2:f4:90:cc:06:78:2c:64:b9:a4:7d:a8:65:38:
b9:9f:7b:5e:81:c2:bb:00:f4:99:33:35:d7:e4:12:
2b:97:3e:b8:eb:e1:d8:a8:98:2a:50:69:aa:f7:f1:
62:8f:58:83:97:a9:39:14:c5:e2:ba:90:f6:88:8a:
b0:b9:88:6f:66:b3:6d:c6:6a:83:7b:8b:82:ca:49:
42:6f:13:25:a5:0a:31:54:f7:80:d5:f4:7c:56:39:
0a:33:2c:e9:8f:b5:87:74:45:0a:69:14:98:66:a5:
a7:89:81:8c:20:34:ce:5f:72:0c:a5:e8:f4:36:57:
ae:bf:21:01:6c:a5:f5:1b:58:00:85:53:fa:c5:1a:
60:c5:dd:9c:9d:7c:ef:33:e7:4e:92:b7:66:3a:00:
4a:41:c4:d1:cd:56:2e:18:75:86:ce:13:cd:28:2d:
16:6c:4e:b1:f0:de:53:30:11:fe:11:20:93:ac:0f:
0a:30:df:8c:71:63:ce:1f:71:9e:7d:29:f8:b4:fd:
23:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:C1:82:62:05:C9:23:53:BD:14:88:57:8E:8D:E5:A7:0A:DB:24:92
X509v3 Authority Key Identifier:
keyid:6F:75:E4:E9:4B:5C:B7:45:17:B7:B0:15:68:01:5D:A9:E6:EE:CD:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3Xk6Utct0UXt7AVaAFdqebuzbY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/KcGCYgXJI1O9FIhXjo3lpwrbJJI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/b3Xk6Utct0UXt7AVaAFdqebuzbY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.128.248.0/22
95.82.0.0/21
176.221.16.0/20
Signature Algorithm: sha256WithRSAEncryption
9d:66:61:7a:c2:d7:6e:f2:67:4d:2e:ca:90:54:38:cf:ae:c7:
ba:94:3b:fa:ec:4e:f4:0b:28:e5:bd:58:db:2a:09:65:26:32:
1c:61:a2:0d:7a:75:b8:61:07:10:59:49:77:b6:19:e1:23:ac:
1c:98:5e:3f:7c:4f:73:83:c8:11:9a:50:4d:d8:82:5f:b5:67:
95:ae:77:bb:cc:0b:1f:3e:36:60:9a:bd:50:59:e1:02:4e:68:
40:1e:7e:f7:41:39:7c:b9:64:b9:be:3b:20:f9:41:e4:3f:47:
ab:60:97:8f:c0:b1:94:a3:31:48:ba:fb:f6:2c:7c:74:95:25:
a8:a1:ab:9d:81:13:b4:bb:41:5a:fb:43:d9:d1:13:04:7f:0a:
2f:7d:b9:bc:ed:84:41:67:fd:08:ad:6c:71:4e:01:39:53:56:
f8:bb:4e:4e:9a:df:8b:b4:15:13:5c:ec:f5:d9:2c:04:e8:af:
21:8d:9b:c0:c3:ef:03:3d:d3:03:e0:b8:63:b0:83:fc:5a:41:
b0:e7:1d:0b:4e:9c:c1:94:60:0d:a1:50:b3:33:d5:7d:16:00:
9d:74:43:02:8e:d5:60:40:c2:28:de:73:46:b7:67:6a:c5:9a:
b5:64:66:1b:fa:bf:e4:2d:8e:eb:9e:37:64:d4:ec:5f:a2:aa:
f3:1b:c6:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:20:52 2025 by rpki-client