Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/OyB8pyiumSOjz3or4Q4vNwx7RHc.roa
File: OyB8pyiumSOjz3or4Q4vNwx7RHc.roa (raw, json)
Hash identifier: ZU+pmT8DPEKYG+AX8tz9D3q/+1uXWp14gLbGiQoBCkU=
Subject key identifier: 3B:20:7C:A7:28:AE:99:23:A3:CF:7A:2B:E1:0E:2F:37:0C:7B:44:77
Certificate issuer: /CN=c2778de2a9be9802120382e750d159e95872c2ae
Certificate serial: 019427B58B94E0FA2076028BC48FCE4974B1
Authority key identifier: C2:77:8D:E2:A9:BE:98:02:12:03:82:E7:50:D1:59:E9:58:72:C2:AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wneN4qm-mAISA4LnUNFZ6Vhywq4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/OyB8pyiumSOjz3or4Q4vNwx7RHc.roa
Signing time: Thu 02 Jan 2025 15:49:56 +0000
ROA not before: Thu 02 Jan 2025 15:49:56 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212238
IP address blocks: 178.253.12.0/23 maxlen: 24
178.253.16.0/24 maxlen: 24
178.253.44.0/23 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b5:8b:94:e0:fa:20:76:02:8b:c4:8f:ce:49:74:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2778de2a9be9802120382e750d159e95872c2ae
Validity
Not Before: Jan 2 15:49:56 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3b207ca728ae9923a3cf7a2be10e2f370c7b4477
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:0b:ad:ee:de:6b:6f:16:98:11:07:c0:fd:f9:
77:31:6b:ff:34:04:f6:55:4b:ce:70:21:2f:5a:02:
7b:5e:bc:58:cb:e2:36:ca:87:7e:83:0b:dc:31:75:
06:31:9d:7b:a1:2e:9f:f6:84:1f:45:5a:61:63:60:
65:da:41:44:47:36:65:e4:77:e0:be:26:3e:b3:cc:
bd:0d:57:e1:05:2b:ae:a3:35:a4:1b:16:b1:47:e8:
51:00:f0:90:dd:48:74:57:10:04:de:a8:40:8e:8a:
fc:25:31:7b:22:13:ee:dc:15:c8:06:dc:70:0d:94:
60:15:4a:f8:71:72:56:de:a2:bc:95:4d:48:e8:4e:
c2:c9:e3:ab:05:be:d3:2f:2e:12:73:d3:32:22:c6:
69:ee:c7:20:9f:cf:2e:63:9d:c9:82:8e:a6:c7:96:
7d:a8:bb:9a:b0:46:1c:2a:45:38:b5:5b:4a:10:d3:
c0:b0:2c:67:8b:85:d8:2d:11:57:36:8e:61:38:8f:
d4:04:3c:a3:4c:10:4f:0f:b1:67:2f:eb:51:27:12:
f6:cc:99:4e:94:6d:74:73:47:ff:78:e4:be:f1:4f:
af:72:58:6e:6f:8e:b0:63:31:aa:86:39:7e:2c:5d:
13:e9:1c:49:92:66:7e:3b:5f:08:88:0f:9f:1f:8c:
b0:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:20:7C:A7:28:AE:99:23:A3:CF:7A:2B:E1:0E:2F:37:0C:7B:44:77
X509v3 Authority Key Identifier:
keyid:C2:77:8D:E2:A9:BE:98:02:12:03:82:E7:50:D1:59:E9:58:72:C2:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wneN4qm-mAISA4LnUNFZ6Vhywq4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/OyB8pyiumSOjz3or4Q4vNwx7RHc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/wneN4qm-mAISA4LnUNFZ6Vhywq4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.253.12.0/23
178.253.16.0/24
178.253.44.0/23
Signature Algorithm: sha256WithRSAEncryption
3c:17:11:3b:f9:96:4a:3b:a6:ad:20:2f:dd:96:92:e0:8a:2f:
8e:c0:02:1f:9b:3b:7e:7a:45:15:46:64:db:00:a7:06:05:ac:
e0:63:aa:96:bc:69:63:8e:56:5d:82:26:f1:af:5b:b6:fe:43:
39:05:da:59:0e:27:51:ea:5e:9e:a5:2c:c6:6a:26:73:d4:21:
b8:b5:e0:86:d5:03:07:3d:84:9a:9c:c4:05:2c:8c:11:e8:de:
9e:f3:ab:f1:f1:3e:5d:b3:3a:8c:85:47:57:bb:41:09:11:20:
07:5c:16:a6:91:f1:4a:6e:a4:41:e7:9a:bf:54:36:a4:d9:75:
1f:06:48:23:43:77:5a:e9:40:3e:19:5b:55:be:56:0d:03:b0:
ba:db:87:77:0a:17:66:44:6a:82:32:3f:72:27:ff:0b:90:cb:
18:48:6f:24:33:2c:e8:9c:af:e5:cb:81:46:27:24:ba:5a:e7:
50:51:9e:62:22:52:2e:5f:a4:cc:93:e7:9f:e0:af:7c:3c:b0:
0e:f4:4c:a1:1a:f9:a3:21:b7:98:03:19:19:4b:0e:e2:6f:d6:
9a:cd:0b:a0:bd:ed:64:77:3f:79:dd:76:6b:07:71:79:ef:e1:
c5:4b:e7:c5:b4:00:bb:e8:1d:32:fe:b5:07:74:46:9b:98:79:
12:38:52:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 10:49:25 2025 by rpki-client