Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/e55e30-97c6-40e6-81b7-507011570ee6/1/OTHnGTYi9ZwNNM--x0dHOjlLjEE.roa
File: OTHnGTYi9ZwNNM--x0dHOjlLjEE.roa (raw, json)
Hash identifier: 3OAXtkcL4sD6JZPkjb/k2rtI6j1vkeYbBvuQAvJwxWw=
Subject key identifier: 39:31:E7:19:36:22:F5:9C:0D:34:CF:BE:C7:47:47:3A:39:4B:8C:41
Certificate issuer: /CN=a04845af1dc0087b274cee52a4a9e0880335435d
Certificate serial: 0196ED682BCCB3203F792BB4E4626ADE4D8B
Authority key identifier: A0:48:45:AF:1D:C0:08:7B:27:4C:EE:52:A4:A9:E0:88:03:35:43:5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oEhFrx3ACHsnTO5SpKngiAM1Q10.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/e55e30-97c6-40e6-81b7-507011570ee6/1/OTHnGTYi9ZwNNM--x0dHOjlLjEE.roa
Signing time: Tue 20 May 2025 11:15:49 +0000
ROA not before: Tue 20 May 2025 11:15:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 56582
IP address blocks: 178.210.160.0/24 maxlen: 24
178.210.161.0/24 maxlen: 24
178.210.162.0/24 maxlen: 24
178.210.163.0/24 maxlen: 24
178.210.164.0/24 maxlen: 24
178.210.165.0/24 maxlen: 24
178.210.166.0/24 maxlen: 24
178.210.168.0/24 maxlen: 24
178.210.169.0/24 maxlen: 24
178.210.170.0/24 maxlen: 24
178.210.171.0/24 maxlen: 24
178.210.172.0/24 maxlen: 24
178.210.173.0/24 maxlen: 24
178.210.174.0/24 maxlen: 24
178.210.175.0/24 maxlen: 24
178.210.176.0/24 maxlen: 24
178.210.177.0/24 maxlen: 24
178.210.178.0/24 maxlen: 32
178.210.180.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:ed:68:2b:cc:b3:20:3f:79:2b:b4:e4:62:6a:de:4d:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a04845af1dc0087b274cee52a4a9e0880335435d
Validity
Not Before: May 20 11:15:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3931e7193622f59c0d34cfbec747473a394b8c41
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:ab:46:77:a1:3c:6d:02:45:bf:c3:29:aa:bd:
21:41:cc:1f:8b:38:b2:f4:9d:de:a2:a9:bd:92:3d:
03:21:fd:e6:68:ac:48:ac:18:c4:5c:69:08:10:90:
81:7f:6d:19:08:41:b6:9d:a9:bb:57:e4:e0:b2:15:
75:6c:95:1e:ff:c4:8a:87:f1:f8:14:59:c1:de:a5:
3b:02:c7:a2:59:05:e1:aa:cf:46:73:cb:b1:a4:35:
e9:97:a3:9c:7c:c3:30:5c:be:08:d3:13:a9:4d:1b:
ef:04:f2:72:6f:14:78:24:c7:0c:a6:f3:40:fb:48:
6c:f1:0b:78:7d:8b:9e:ae:8a:8e:5a:ca:2b:cd:cf:
cd:43:72:cc:1c:ea:13:52:21:a7:73:2d:93:13:82:
85:6e:c6:c1:cd:55:b8:63:88:ad:87:36:2d:7b:2c:
21:67:97:f1:0c:9d:1f:5b:b7:e6:f5:42:01:de:fe:
10:de:10:6d:ff:2e:f1:10:ae:02:a8:c9:80:8c:1d:
03:a7:53:fc:40:8e:a9:4d:9a:27:41:4a:c3:de:8e:
62:c5:08:69:31:75:e3:c9:13:f5:22:72:16:01:67:
b7:4b:43:60:30:59:18:38:eb:e7:b2:32:79:02:fa:
58:48:66:41:fe:83:32:b3:aa:ca:c4:5a:24:80:92:
5d:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:31:E7:19:36:22:F5:9C:0D:34:CF:BE:C7:47:47:3A:39:4B:8C:41
X509v3 Authority Key Identifier:
keyid:A0:48:45:AF:1D:C0:08:7B:27:4C:EE:52:A4:A9:E0:88:03:35:43:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oEhFrx3ACHsnTO5SpKngiAM1Q10.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/e55e30-97c6-40e6-81b7-507011570ee6/1/OTHnGTYi9ZwNNM--x0dHOjlLjEE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/e55e30-97c6-40e6-81b7-507011570ee6/1/oEhFrx3ACHsnTO5SpKngiAM1Q10.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.210.160.0-178.210.166.255
178.210.168.0-178.210.178.255
178.210.180.0/24
Signature Algorithm: sha256WithRSAEncryption
a3:a4:d1:18:fc:cc:ed:f6:b9:0e:2a:f9:2e:a7:fc:51:41:83:
fb:22:bb:6d:1b:93:6c:85:94:db:ba:c7:71:c3:a3:21:c2:52:
90:15:31:09:f2:48:3e:ce:48:0e:77:77:e4:17:27:c7:3d:fb:
26:27:b8:2b:95:fc:1d:fc:26:c8:f7:f0:aa:a1:9a:9f:23:64:
e2:8d:b1:d7:93:86:fd:8a:a1:be:8d:d9:7c:1e:67:2d:e7:d7:
48:32:a3:09:70:31:1f:7c:04:9f:3e:be:26:5f:90:26:13:66:
45:57:e1:c4:4d:e3:c7:79:81:6d:ef:cc:ab:8b:47:dd:3c:dc:
dc:ec:fb:b0:20:b9:3d:58:26:d0:d9:29:ab:8a:5f:93:e3:30:
4b:ae:b0:72:91:b4:67:ab:75:0d:57:8b:54:41:25:ce:5d:6b:
1a:2c:1a:3e:95:cf:c1:9e:fc:e0:c1:b4:9d:13:23:11:89:f7:
ee:17:cf:2f:09:58:4c:8f:bb:cf:f3:8a:14:de:81:58:4a:13:
5d:0a:9a:30:e6:d0:ae:4f:89:8c:e6:06:36:72:8b:ee:cb:c3:
a9:5b:a5:b1:e8:77:65:67:d5:f9:77:56:67:20:97:23:40:3a:
b9:d3:54:c1:d8:94:0e:9a:d0:04:fa:a7:f3:9b:52:54:64:be:
bd:f2:39:dc
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZbtaCvMsyA/eSu05GJq3k2LMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEwNDg0NWFmMWRjMDA4N2IyNzRjZWU1MmE0YTllMDg4MDMz
NTQzNWQwHhcNMjUwNTIwMTExNTQ5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzOTMxZTcxOTM2MjJmNTljMGQzNGNmYmVjNzQ3NDczYTM5NGI4YzQxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1atGd6E8bQJFv8Mpqr0hQcwfiziy
9J3eoqm9kj0DIf3maKxIrBjEXGkIEJCBf20ZCEG2nam7V+TgshV1bJUe/8SKh/H4
FFnB3qU7AseiWQXhqs9Gc8uxpDXpl6OcfMMwXL4I0xOpTRvvBPJybxR4JMcMpvNA
+0hs8Qt4fYueroqOWsorzc/NQ3LMHOoTUiGncy2TE4KFbsbBzVW4Y4ithzYteywh
Z5fxDJ0fW7fm9UIB3v4Q3hBt/y7xEK4CqMmAjB0Dp1P8QI6pTZonQUrD3o5ixQhp
MXXjyRP1InIWAWe3S0NgMFkYOOvnsjJ5AvpYSGZB/oMys6rKxFokgJJdKQIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFDkx5xk2IvWcDTTPvsdHRzo5S4xBMB8GA1UdIwQY
MBaAFKBIRa8dwAh7J0zuUqSp4IgDNUNdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb0VoRnJ4M0FDSHNuVE81U3BLbmdpQU0xUTEwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OS9lNTVlMzAtOTdjNi00MGU2LTgxYjct
NTA3MDExNTcwZWU2LzEvT1RIbkdUWWk5WndOTk0tLXgwZEhPamxMakVFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82OS9lNTVlMzAtOTdjNi00MGU2LTgxYjctNTA3MDExNTcwZWU2
LzEvb0VoRnJ4M0FDSHNuVE81U3BLbmdpQU0xUTEwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDsGCCsGAQUFBwEHAQH/BCwwKjAoBAIAATAiMAwDBAWy0qAD
BACy0qYwDAMEA7LSqAMEALLSsgMEALLStDANBgkqhkiG9w0BAQsFAAOCAQEAo6TR
GPzM7fa5Dir5Lqf8UUGD+yK7bRuTbIWU27rHccOjIcJSkBUxCfJIPs5IDnd35Bcn
xz37Jie4K5X8HfwmyPfwqqGanyNk4o2x15OG/Yqhvo3ZfB5nLefXSDKjCXAxH3wE
nz6+Jl+QJhNmRVfhxE3jx3mBbe/Mq4tH3Tzc3Oz7sCC5PVgm0Nkpq4pfk+MwS66w
cpG0Z6t1DVeLVEElzl1rGiwaPpXPwZ784MG0nRMjEYn37hfPLwlYTI+7z/OKFN6B
WEoTXQqaMObQrk+JjOYGNnKL7svDqVulseh3ZWfV+XdWZyCXI0A6udNUwdiUDprQ
BPqn85tSVGS+vfI53A==
-----END CERTIFICATE-----
Generated at Sun Jun 8 01:52:15 2025 by rpki-client