Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/e55e30-97c6-40e6-81b7-507011570ee6/1/8ZQxAqBtcNw-FdBAJlMT_Oti8nE.roa
File: 8ZQxAqBtcNw-FdBAJlMT_Oti8nE.roa (raw, json)
Hash identifier: 1pPNy53rvIqJl5xKtOmqkNxNkKD0TbW59rv72fSPaqY=
Subject key identifier: F1:94:31:02:A0:6D:70:DC:3E:15:D0:40:26:53:13:FC:EB:62:F2:71
Certificate issuer: /CN=a04845af1dc0087b274cee52a4a9e0880335435d
Certificate serial: 018F1F32142DDED1D2A16C38F50F3E7030DF
Authority key identifier: A0:48:45:AF:1D:C0:08:7B:27:4C:EE:52:A4:A9:E0:88:03:35:43:5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oEhFrx3ACHsnTO5SpKngiAM1Q10.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/e55e30-97c6-40e6-81b7-507011570ee6/1/8ZQxAqBtcNw-FdBAJlMT_Oti8nE.roa
Signing time: Sat 27 Apr 2024 10:55:26 +0000
ROA not before: Sat 27 Apr 2024 10:55:26 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 56582
IP address blocks: 46.235.8.0/24 maxlen: 32
46.235.9.0/24 maxlen: 24
46.235.10.0/24 maxlen: 32
46.235.11.0/24 maxlen: 32
178.210.160.0/24 maxlen: 24
178.210.161.0/24 maxlen: 24
178.210.162.0/24 maxlen: 24
178.210.163.0/24 maxlen: 24
178.210.164.0/24 maxlen: 24
178.210.165.0/24 maxlen: 24
178.210.166.0/24 maxlen: 24
178.210.168.0/24 maxlen: 24
178.210.169.0/24 maxlen: 24
178.210.170.0/24 maxlen: 24
178.210.171.0/24 maxlen: 24
178.210.172.0/24 maxlen: 24
178.210.173.0/24 maxlen: 24
178.210.174.0/24 maxlen: 24
178.210.175.0/24 maxlen: 24
178.210.176.0/24 maxlen: 24
178.210.177.0/24 maxlen: 24
178.210.178.0/24 maxlen: 32
178.210.180.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:1f:32:14:2d:de:d1:d2:a1:6c:38:f5:0f:3e:70:30:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a04845af1dc0087b274cee52a4a9e0880335435d
Validity
Not Before: Apr 27 10:55:26 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f1943102a06d70dc3e15d040265313fceb62f271
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:6e:52:44:39:a8:7d:fd:14:b8:1f:76:0c:91:
3b:c3:c9:9f:fc:96:d2:8e:6a:13:da:c6:32:1b:a1:
96:a5:d7:b5:c9:32:85:34:51:a4:77:b6:c2:c8:5b:
f9:e0:82:d9:df:07:3d:05:61:4c:99:c6:52:23:f5:
ff:4e:76:1e:b2:8c:4c:4e:ab:8b:b7:4b:ac:50:9d:
ee:6c:45:02:6e:34:39:fd:41:4e:e4:3d:9f:13:03:
f8:64:4f:89:30:72:aa:60:bc:37:05:33:cd:ab:9d:
d4:bc:ba:13:0a:d3:26:41:bc:79:4a:19:b7:17:a1:
82:59:f5:7c:8a:35:d6:18:5b:e3:be:8b:29:16:47:
bb:34:74:e2:b2:da:cb:d0:7e:1d:ad:34:5e:72:32:
08:3b:5b:8b:48:3d:09:e3:f5:10:da:c1:44:77:e7:
1a:56:38:d2:23:51:f2:31:e0:29:75:c2:a5:e4:b9:
0f:92:c0:a5:a3:86:90:78:cc:9f:ab:83:cb:1e:0a:
c1:34:90:ca:e9:97:a5:53:e5:79:1a:1f:1a:d7:75:
d1:5a:77:fe:da:5a:b4:80:e7:9c:f8:b2:5b:9e:b7:
b6:05:dc:2d:50:53:49:b1:06:5e:47:a6:35:f5:ab:
b4:af:d2:9a:53:ab:92:e8:f8:c5:e7:e2:fa:64:b7:
07:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:94:31:02:A0:6D:70:DC:3E:15:D0:40:26:53:13:FC:EB:62:F2:71
X509v3 Authority Key Identifier:
keyid:A0:48:45:AF:1D:C0:08:7B:27:4C:EE:52:A4:A9:E0:88:03:35:43:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oEhFrx3ACHsnTO5SpKngiAM1Q10.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/e55e30-97c6-40e6-81b7-507011570ee6/1/8ZQxAqBtcNw-FdBAJlMT_Oti8nE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/e55e30-97c6-40e6-81b7-507011570ee6/1/oEhFrx3ACHsnTO5SpKngiAM1Q10.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.235.8.0/22
178.210.160.0-178.210.166.255
178.210.168.0-178.210.178.255
178.210.180.0/24
Signature Algorithm: sha256WithRSAEncryption
54:8d:63:82:e8:99:fb:64:20:05:66:76:fa:b5:8f:d9:f6:a3:
55:8f:d3:d8:0f:e9:79:46:2f:ab:8f:2b:9e:41:d3:44:18:f9:
12:86:f4:76:2b:8c:e1:1d:cf:94:8d:8d:e9:50:58:22:6f:ce:
96:d7:8b:54:e6:af:7b:8d:7d:a4:40:fb:69:16:39:41:ea:9d:
42:74:64:42:66:2c:fb:a3:08:3a:ec:3f:67:5c:4f:db:3a:11:
d5:8b:05:a4:f1:26:06:b1:e3:87:38:fd:1b:0d:03:0f:e5:02:
07:07:ff:68:c0:40:e6:f9:97:7b:40:2d:34:f4:00:b6:e4:62:
ae:54:b8:54:11:1d:db:6f:87:f5:21:fc:1f:48:d1:10:fa:09:
c6:b9:65:c0:b8:c8:c6:f0:3e:84:c6:32:30:99:09:40:60:59:
83:54:dd:71:ac:b3:56:bc:a5:26:ec:a9:0f:6d:a2:b2:56:2d:
e4:f3:79:ec:90:49:5e:f2:e9:25:e4:f2:29:da:ba:8a:a1:d5:
1c:72:d6:5f:9b:ff:1d:2c:82:06:94:ce:30:6a:12:c6:21:d7:
2f:4a:3b:f6:dc:e8:b1:96:90:6b:cb:b7:95:0a:e0:d0:51:35:
59:fd:9d:1a:68:fc:37:49:7c:3e:9b:95:bb:cc:9a:b0:67:08:
47:36:5b:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:46:35 2025 by rpki-client