Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/eb4c6e-a2b0-4e5b-9aea-8b7cf9b86764/1/JWd0Mg0ONKZtIBKvOWfGdVH-UuE.roa
File: JWd0Mg0ONKZtIBKvOWfGdVH-UuE.roa (raw, json)
Hash identifier: RdFazRJUHivJL/FXBgdkaYBgyrkrP20OBaaLxA6cSGs=
Subject key identifier: 25:67:74:32:0D:0E:34:A6:6D:20:12:AF:39:67:C6:75:51:FE:52:E1
Certificate issuer: /CN=76b8ec733b9f994d5a858c5e555178e8ae8aa2ed
Certificate serial: 018572CCA60360C8FE6765690915579DB19B
Authority key identifier: 76:B8:EC:73:3B:9F:99:4D:5A:85:8C:5E:55:51:78:E8:AE:8A:A2:ED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/drjsczufmU1ahYxeVVF46K6Kou0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/eb4c6e-a2b0-4e5b-9aea-8b7cf9b86764/1/JWd0Mg0ONKZtIBKvOWfGdVH-UuE.roa
Signing time: Mon 02 Jan 2023 14:04:52 +0000
ROA not before: Mon 02 Jan 2023 14:04:52 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 50873
IP address blocks: 185.79.125.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:cc:a6:03:60:c8:fe:67:65:69:09:15:57:9d:b1:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=76b8ec733b9f994d5a858c5e555178e8ae8aa2ed
Validity
Not Before: Jan 2 14:04:52 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=256774320d0e34a66d2012af3967c67551fe52e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:7a:1d:18:b5:d9:54:30:33:60:6d:fc:13:34:
47:9c:c7:37:66:26:87:f5:4f:bb:d0:c7:d1:16:64:
d6:ef:dd:db:20:3f:6c:61:27:bb:9a:5a:34:42:f1:
3a:92:a9:25:d1:82:98:84:d7:c4:81:2b:0c:ee:e3:
98:05:07:0c:b3:4c:42:20:f0:11:9c:63:5e:c6:fb:
27:e4:7c:5d:38:65:4a:5c:0a:24:da:1e:b9:d7:fd:
ce:77:a8:52:eb:c0:9b:76:5e:63:c9:da:0e:b8:32:
dd:2d:58:6b:3c:bb:4e:aa:9c:c8:3e:56:01:17:93:
f1:cf:e9:fd:5a:d5:d3:4c:36:33:92:6c:85:66:e6:
70:f5:4b:22:0a:3d:2e:83:13:cb:3e:39:67:d9:23:
cc:44:2d:05:21:f2:ad:41:e0:b0:7d:52:31:64:84:
f8:a1:1a:8a:40:4b:a0:8b:b8:94:3a:ef:b8:1d:46:
68:d6:29:bb:71:09:39:bb:ac:f0:e9:08:9d:3b:fe:
f7:41:81:60:8f:f5:53:dc:e8:fb:86:9f:40:96:eb:
a9:99:c2:c2:b1:a9:67:80:22:ac:42:39:49:60:83:
dc:43:37:19:f3:35:88:e5:b3:18:97:eb:de:8d:8c:
be:c1:41:c3:46:37:45:60:f1:6f:75:3b:9a:27:24:
a0:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:67:74:32:0D:0E:34:A6:6D:20:12:AF:39:67:C6:75:51:FE:52:E1
X509v3 Authority Key Identifier:
keyid:76:B8:EC:73:3B:9F:99:4D:5A:85:8C:5E:55:51:78:E8:AE:8A:A2:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/drjsczufmU1ahYxeVVF46K6Kou0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/eb4c6e-a2b0-4e5b-9aea-8b7cf9b86764/1/JWd0Mg0ONKZtIBKvOWfGdVH-UuE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/eb4c6e-a2b0-4e5b-9aea-8b7cf9b86764/1/drjsczufmU1ahYxeVVF46K6Kou0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.79.125.0/24
Signature Algorithm: sha256WithRSAEncryption
63:9b:0f:59:8c:20:73:83:59:1d:62:a7:f1:27:40:52:e2:12:
94:43:54:58:74:ec:ae:6c:fd:10:87:75:e2:a7:9a:93:9d:58:
17:ed:e9:c6:4f:e7:57:d1:2b:32:2a:3e:c8:01:e2:e5:7d:ab:
d3:a2:ce:c4:e8:30:0c:54:0a:d3:72:72:99:33:f9:61:68:d4:
76:2f:a6:27:69:86:4a:24:ad:bc:75:c2:df:4d:21:2d:4f:82:
6b:61:c0:e4:53:5d:37:7e:b0:63:bd:99:1f:c5:0c:d9:6d:9a:
54:e0:b2:6f:2a:9d:0c:39:aa:c3:54:47:5c:2d:cd:a5:d4:9a:
31:f0:8d:02:a9:1c:2a:37:95:f6:1f:70:96:92:b0:c1:41:55:
44:9b:5a:24:5b:00:b7:02:42:fc:11:25:bb:1d:00:6d:98:2f:
80:d5:f8:4a:3f:b1:d9:30:8e:04:45:cd:d8:95:6d:98:b2:9c:
5a:96:b7:93:0c:f2:e2:3e:f0:66:16:74:44:28:a8:30:39:de:
53:2c:05:e3:86:52:80:83:a3:ec:a8:24:ff:27:81:f3:f9:e0:
95:e1:5e:6f:3b:36:18:82:62:51:55:27:5a:98:b1:99:f1:26:
78:40:d4:b5:ad:af:9f:42:63:5c:6e:09:0b:44:8c:17:6a:41:
17:56:07:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:54:39 2025 by rpki-client