Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/dffa9b-1d69-4869-9dc4-867d1d877140/1/75mC2d42_mhygwrXTmCUsNxRpYk.roa
File: 75mC2d42_mhygwrXTmCUsNxRpYk.roa (raw, json)
Hash identifier: iPel1nnMQP9G+eknZiUcqdQ5jxH3NY36YgEkkJTvwXU=
Subject key identifier: EF:99:82:D9:DE:36:FE:68:72:83:0A:D7:4E:60:94:B0:DC:51:A5:89
Certificate issuer: /CN=a0a8631e6e5a7ac66da4fb160fd5b4fca9378805
Certificate serial: 018CC2DADC329D46CB76CA39CDECE98E52B3
Authority key identifier: A0:A8:63:1E:6E:5A:7A:C6:6D:A4:FB:16:0F:D5:B4:FC:A9:37:88:05
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oKhjHm5aesZtpPsWD9W0_Kk3iAU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/dffa9b-1d69-4869-9dc4-867d1d877140/1/75mC2d42_mhygwrXTmCUsNxRpYk.roa
Signing time: Mon 01 Jan 2024 02:29:32 +0000
ROA not before: Mon 01 Jan 2024 02:29:32 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 14618
IP address blocks: 46.17.216.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:da:dc:32:9d:46:cb:76:ca:39:cd:ec:e9:8e:52:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a0a8631e6e5a7ac66da4fb160fd5b4fca9378805
Validity
Not Before: Jan 1 02:29:32 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ef9982d9de36fe6872830ad74e6094b0dc51a589
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:51:9c:ca:80:47:9c:ad:80:10:b6:8b:a8:29:
91:30:8c:84:f7:04:7b:a0:5c:ee:04:f5:49:f7:da:
7f:41:6e:aa:71:2d:5a:82:6a:35:b6:9e:c4:6e:91:
3a:d4:bd:6c:c5:51:a3:c9:ec:46:da:c4:16:77:4b:
24:4f:12:06:24:b3:12:d5:9a:64:4e:a9:d2:a1:ee:
2f:53:82:fe:cd:76:8a:40:43:76:5b:38:3b:9b:c7:
56:8d:f5:16:38:ad:e7:49:99:36:68:56:2d:b4:45:
06:88:de:79:de:98:f9:0e:b3:64:20:60:4f:2f:3c:
de:0a:13:61:ba:68:f0:ed:c7:53:a5:22:2d:bd:1c:
d2:6d:77:d9:4a:03:f3:9f:54:ca:af:30:f0:cb:a1:
6c:05:3a:c3:f1:d3:00:48:28:20:55:52:e7:45:af:
09:85:cb:11:8b:d1:a8:bb:e7:51:d5:ab:1c:34:4b:
a8:d3:a9:d3:ca:ad:60:b5:33:16:a6:22:78:5e:c3:
b1:61:da:4b:59:39:0f:95:c2:68:ae:17:39:f5:2c:
0a:86:64:d4:a4:c0:52:9a:9d:e4:34:0e:5b:94:a6:
53:72:59:fd:32:07:0d:57:8b:bf:56:5f:94:8f:52:
8d:09:74:66:7d:28:3d:48:c5:84:84:82:80:37:90:
76:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:99:82:D9:DE:36:FE:68:72:83:0A:D7:4E:60:94:B0:DC:51:A5:89
X509v3 Authority Key Identifier:
keyid:A0:A8:63:1E:6E:5A:7A:C6:6D:A4:FB:16:0F:D5:B4:FC:A9:37:88:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oKhjHm5aesZtpPsWD9W0_Kk3iAU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/dffa9b-1d69-4869-9dc4-867d1d877140/1/75mC2d42_mhygwrXTmCUsNxRpYk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/dffa9b-1d69-4869-9dc4-867d1d877140/1/oKhjHm5aesZtpPsWD9W0_Kk3iAU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.17.216.0/24
Signature Algorithm: sha256WithRSAEncryption
3b:04:5a:87:be:3e:8e:3c:5e:ee:f1:58:45:3d:94:7a:4a:7c:
b5:b1:f5:5a:66:57:6e:28:f8:03:4d:67:d7:84:a7:e1:49:b3:
5b:e5:aa:3d:79:84:da:b9:64:54:e0:e7:0c:c3:08:33:f7:a9:
73:f4:94:5a:27:8b:dc:2d:8d:89:a1:fe:cf:6b:6f:38:2b:fd:
03:d1:ff:af:93:04:3d:58:6f:d7:b2:ea:b2:f6:04:7b:2e:4f:
58:91:45:f1:76:37:78:1d:8f:3e:32:ed:00:21:f8:a0:62:0f:
1f:2c:63:64:ad:88:31:a9:24:17:c4:5e:62:e7:88:32:b8:3c:
b3:77:ef:07:9e:ad:6f:4b:c2:88:43:17:2a:4d:e2:b6:22:4f:
72:be:26:23:82:5c:bb:6a:1f:a6:db:8c:c3:1d:cf:37:15:6d:
8c:6b:8b:ac:c8:bb:34:42:7c:3e:80:b5:1d:1a:a8:7c:cf:a5:
1c:93:48:ad:0d:ce:46:3d:99:58:6a:52:db:14:b7:18:26:72:
e1:85:5b:1e:19:fb:95:6a:27:05:11:78:4d:4f:c2:da:09:1a:
bb:da:ae:2b:13:7c:f5:d3:16:06:2e:b0:d1:c7:e5:2d:db:05:
35:3d:51:a3:05:7a:18:03:ea:f6:48:0b:34:60:e5:bc:b7:4b:
87:f7:56:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:36:28 2025 by rpki-client