Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/1bb45a-551c-4967-95ca-77344bcc9191/1/Gva4jK5PQdh5MDhUEjG1c8RGZXM.roa
File: Gva4jK5PQdh5MDhUEjG1c8RGZXM.roa (raw, json)
Hash identifier: HaJcRPdcDtU+TgTeFlOPNHJHWbFJPeR17WrJBFghmkE=
Subject key identifier: 1A:F6:B8:8C:AE:4F:41:D8:79:30:38:54:12:31:B5:73:C4:46:65:73
Certificate issuer: /CN=3c4ed942e5c742e77bfb9beb954f872534f52848
Certificate serial: 0188A6948C5E82A53DEB511DC269BCD0792F
Authority key identifier: 3C:4E:D9:42:E5:C7:42:E7:7B:FB:9B:EB:95:4F:87:25:34:F5:28:48
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PE7ZQuXHQud7-5vrlU-HJTT1KEg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/1bb45a-551c-4967-95ca-77344bcc9191/1/Gva4jK5PQdh5MDhUEjG1c8RGZXM.roa
Signing time: Sat 10 Jun 2023 18:32:13 +0000
ROA not before: Sat 10 Jun 2023 18:32:13 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 210476
IP address blocks: 62.182.171.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:a6:94:8c:5e:82:a5:3d:eb:51:1d:c2:69:bc:d0:79:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c4ed942e5c742e77bfb9beb954f872534f52848
Validity
Not Before: Jun 10 18:32:13 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1af6b88cae4f41d8793038541231b573c4466573
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:e5:2c:5a:68:ff:d8:45:90:08:d0:57:d3:27:
0b:75:df:ab:6b:ce:54:de:61:eb:0d:de:74:55:cd:
9b:a1:cc:72:36:19:5e:f3:48:e7:32:0c:08:c8:6e:
30:d2:e3:07:a0:8d:e9:b5:30:64:c2:df:8b:dc:2e:
4c:05:84:1b:50:3d:d2:db:ad:26:de:8e:ff:36:30:
dc:85:56:30:fe:1d:e9:fc:9a:e4:1d:18:0f:56:be:
37:02:54:3a:f4:3a:9d:a5:0b:5a:50:6d:84:51:64:
aa:b2:27:04:8c:db:6c:63:3c:13:1d:ef:7e:e1:3a:
ca:b2:a6:fa:f0:31:c9:24:eb:ef:32:70:9e:0c:d0:
0f:db:c8:a2:98:36:ed:cb:32:12:25:99:06:2e:6a:
41:2b:cd:10:b7:09:e8:01:29:41:a6:23:bf:e5:da:
4c:fb:73:12:a1:c8:98:6d:8e:a4:2f:35:8e:e8:47:
13:fc:9d:32:c0:b9:89:3f:8c:41:4f:63:ba:59:4f:
41:47:2a:77:6f:2f:3f:6d:9c:d6:3e:1f:b3:7b:3f:
07:c4:e5:ae:77:08:77:e6:59:51:6d:c4:a5:1d:ce:
81:a1:b9:17:7d:ed:43:36:0f:5e:0d:30:25:74:25:
4c:ce:f4:4a:8f:3d:c3:43:c1:6a:8f:ee:f0:a7:12:
0c:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:F6:B8:8C:AE:4F:41:D8:79:30:38:54:12:31:B5:73:C4:46:65:73
X509v3 Authority Key Identifier:
keyid:3C:4E:D9:42:E5:C7:42:E7:7B:FB:9B:EB:95:4F:87:25:34:F5:28:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PE7ZQuXHQud7-5vrlU-HJTT1KEg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/1bb45a-551c-4967-95ca-77344bcc9191/1/Gva4jK5PQdh5MDhUEjG1c8RGZXM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/1bb45a-551c-4967-95ca-77344bcc9191/1/PE7ZQuXHQud7-5vrlU-HJTT1KEg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.182.171.0/24
Signature Algorithm: sha256WithRSAEncryption
86:6d:ea:cc:69:36:d1:e7:7c:6a:5e:e1:85:2d:32:37:0b:c1:
13:b2:f5:87:13:2a:fe:7e:7f:01:a4:26:4e:74:7d:c1:6c:f1:
84:5b:cc:5d:a5:4c:a0:0a:79:4e:11:be:11:85:ae:f5:47:08:
c6:d7:a6:64:82:2f:b2:e2:15:35:2a:de:4d:49:3b:95:3f:d4:
31:05:fd:e8:2b:1a:e0:03:f2:88:ce:f4:d1:99:28:48:4a:0a:
1c:96:3c:22:15:bd:e3:2c:90:3f:00:8e:79:83:5d:a1:9f:75:
fb:d9:be:68:d3:93:59:8d:20:c4:e9:87:5b:1d:0c:8e:0b:bb:
12:69:46:a0:79:40:7a:de:dc:5b:ce:41:80:3a:8b:0b:c2:c4:
b0:f7:1b:d3:58:d6:2b:9b:fa:55:ce:eb:53:0b:3e:13:7f:ae:
7a:a7:e8:35:c0:0a:30:ac:68:35:de:84:29:4b:b2:76:19:f3:
91:58:6f:54:87:24:fc:5e:d9:51:ff:ff:86:f5:71:ce:cc:02:
e1:2f:09:06:3a:f8:50:e7:25:c0:e3:04:fc:99:6b:3d:86:f1:
ec:69:e5:19:66:08:46:91:ef:6c:a5:39:54:b3:fb:22:44:ed:
3a:4c:27:02:b8:4f:71:6b:46:53:a6:97:09:9c:0f:65:de:7e:
a5:2d:ad:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:29:53 2025 by rpki-client