Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/715d15-2810-4827-8dbd-0bee06126b1a/1/f_GQMFgnc8X0YKgCeTSyCkw05Mk.roa
File: f_GQMFgnc8X0YKgCeTSyCkw05Mk.roa (raw, json)
Hash identifier: fWYCe0xRyAVzF5wxiybhtiiDjjF3+mQt3350wv7+GxQ=
Subject key identifier: 7F:F1:90:30:58:27:73:C5:F4:60:A8:02:79:34:B2:0A:4C:34:E4:C9
Certificate issuer: /CN=adf491488a7cd8448a420945871c0b99672dc66e
Certificate serial: 018FD40E2554E89DE3E933A1255BD4741F49
Authority key identifier: AD:F4:91:48:8A:7C:D8:44:8A:42:09:45:87:1C:0B:99:67:2D:C6:6E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rfSRSIp82ESKQglFhxwLmWctxm4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/715d15-2810-4827-8dbd-0bee06126b1a/1/f_GQMFgnc8X0YKgCeTSyCkw05Mk.roa
Signing time: Sat 01 Jun 2024 13:47:27 +0000
ROA not before: Sat 01 Jun 2024 13:47:27 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 215350
IP address blocks: 217.60.236.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:d4:0e:25:54:e8:9d:e3:e9:33:a1:25:5b:d4:74:1f:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=adf491488a7cd8448a420945871c0b99672dc66e
Validity
Not Before: Jun 1 13:47:27 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7ff19030582773c5f460a8027934b20a4c34e4c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:ae:32:01:3f:49:7b:ae:52:a6:cf:b9:e1:1f:
a3:88:18:f4:01:94:72:35:40:03:b3:e8:8b:6f:c2:
16:f7:db:dc:d2:57:e3:9f:93:25:04:4b:32:21:b2:
6e:4e:a6:41:99:24:fd:dd:ad:1f:af:47:e7:9f:c1:
32:25:f5:76:35:c6:cb:6d:09:87:9e:4a:29:35:99:
c6:23:4a:3a:e4:3d:d1:b2:65:03:b1:af:2e:5e:3a:
ca:a0:47:7d:c5:a9:4f:8b:36:93:9a:43:a7:71:12:
06:bd:95:39:e2:1a:39:c9:af:34:06:26:7b:d7:af:
5a:1c:a2:af:30:81:e7:87:4e:6e:35:6c:d6:77:a9:
0b:f0:26:9a:5f:5a:d1:d7:6d:1d:ec:74:85:53:e3:
1f:00:9d:08:2b:15:26:15:3f:23:26:85:44:3a:10:
3f:61:9b:b6:68:97:1a:ed:1e:ab:7d:10:9b:22:6c:
3f:ad:9e:3e:68:03:93:59:75:89:e0:5f:14:84:d6:
d7:4c:8b:ee:e4:6b:90:2f:38:ef:ac:8f:38:28:28:
ae:4b:2a:8b:21:13:d4:48:d7:f5:ce:3f:f5:1a:fd:
f1:0e:63:cf:dd:24:a6:ac:7a:e4:d6:9b:41:ec:62:
16:19:e3:f2:28:46:68:fe:bb:67:66:49:6d:d7:58:
72:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:F1:90:30:58:27:73:C5:F4:60:A8:02:79:34:B2:0A:4C:34:E4:C9
X509v3 Authority Key Identifier:
keyid:AD:F4:91:48:8A:7C:D8:44:8A:42:09:45:87:1C:0B:99:67:2D:C6:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rfSRSIp82ESKQglFhxwLmWctxm4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/715d15-2810-4827-8dbd-0bee06126b1a/1/f_GQMFgnc8X0YKgCeTSyCkw05Mk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/715d15-2810-4827-8dbd-0bee06126b1a/1/rfSRSIp82ESKQglFhxwLmWctxm4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.60.236.0/24
Signature Algorithm: sha256WithRSAEncryption
20:0a:f9:59:8c:f1:95:d1:d6:81:50:ca:3b:d6:35:25:3d:66:
9d:41:d5:a1:db:31:3d:c4:14:60:11:95:83:d5:b4:99:a3:87:
c8:4e:a2:d7:87:bc:f3:1a:e7:06:4d:f8:89:d8:c8:e6:e3:ed:
1d:2e:91:38:0b:95:a9:b2:a0:73:80:a4:54:1e:93:f9:41:69:
25:46:5a:fa:b2:40:f6:f6:60:f7:95:5f:55:7b:ca:ed:a1:b4:
09:63:93:59:e4:2e:ff:ab:ff:c1:ec:73:ef:14:e1:07:2a:90:
a8:d2:1f:14:6d:12:0e:03:09:d8:31:34:2c:18:ed:ad:12:02:
08:f3:28:36:3d:e9:da:4e:75:95:b7:17:d2:5f:99:64:c3:34:
5b:58:60:1e:cc:f0:de:5d:79:f6:3c:08:78:43:59:b8:2c:2c:
c9:64:0e:1a:4e:02:e9:37:10:a5:2c:ab:77:b4:0f:9d:4b:dd:
e7:34:0b:74:7f:33:d3:c2:b0:0d:40:b2:ee:e6:1f:a6:11:b9:
8f:4f:9d:24:4b:64:25:1b:1c:fe:95:fe:7c:12:28:22:80:43:
f7:f3:dc:f8:e2:83:da:92:b7:1f:c9:c3:75:a3:83:f1:15:da:
06:aa:93:5e:66:24:9f:b2:2e:60:88:da:9a:ca:b3:90:cd:97:
1d:5e:f9:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 12:11:25 2025 by rpki-client