Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/U2Xn_6BQzi6h87H6WoXH2lsTTlE.roa
File: U2Xn_6BQzi6h87H6WoXH2lsTTlE.roa (raw, json)
Hash identifier: e6y6MiU4l1oRMbPA9cZMRYVdNQfuX/lRFTjDgENMDnU=
Subject key identifier: 53:65:E7:FF:A0:50:CE:2E:A1:F3:B1:FA:5A:85:C7:DA:5B:13:4E:51
Certificate issuer: /CN=c2778de2a9be9802120382e750d159e95872c2ae
Certificate serial: 019427B58DC0C340215C497902E647DDBEF2
Authority key identifier: C2:77:8D:E2:A9:BE:98:02:12:03:82:E7:50:D1:59:E9:58:72:C2:AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wneN4qm-mAISA4LnUNFZ6Vhywq4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/U2Xn_6BQzi6h87H6WoXH2lsTTlE.roa
Signing time: Thu 02 Jan 2025 15:49:57 +0000
ROA not before: Thu 02 Jan 2025 15:49:57 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 395517
IP address blocks: 178.253.16.0/24 maxlen: 24
178.253.38.0/23 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b5:8d:c0:c3:40:21:5c:49:79:02:e6:47:dd:be:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2778de2a9be9802120382e750d159e95872c2ae
Validity
Not Before: Jan 2 15:49:57 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5365e7ffa050ce2ea1f3b1fa5a85c7da5b134e51
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:4c:ee:4b:73:6c:ac:eb:0d:64:fd:92:96:82:
d6:27:5f:5e:36:d7:c6:17:18:84:03:ba:f3:e4:b6:
e5:5d:52:38:fa:83:85:98:e7:8f:82:93:f1:50:4d:
1d:51:bf:49:8d:0b:55:d1:02:18:05:a0:d7:7f:b4:
97:9b:ea:0b:d9:a2:12:b2:99:4e:f5:27:be:7b:92:
0d:0a:39:b6:9f:71:5e:69:bb:ea:06:dc:22:4c:e1:
3e:12:f5:8c:60:9e:00:6e:79:a1:5a:cb:b0:eb:59:
ac:cd:ab:c1:43:f5:7f:0b:16:45:6a:12:8c:8e:3d:
7c:f4:b6:45:a8:a5:3e:50:49:51:11:cf:54:a5:dc:
fa:36:ab:64:38:ad:cf:da:23:05:b7:a1:76:2e:28:
56:40:13:e2:25:ea:1c:d7:6a:1f:e4:f3:6b:5a:91:
ac:02:63:59:e3:5b:d3:58:f2:52:9b:f5:19:cc:fc:
e9:6f:fc:21:33:e3:7f:cd:64:e4:cf:8e:ae:fa:c0:
db:08:53:97:2e:55:cd:91:27:26:06:27:56:4c:79:
5a:cd:ec:46:c1:25:11:93:43:63:6b:37:b3:54:30:
69:fa:0d:f5:9b:35:ca:cb:3f:ed:09:79:1e:e7:cf:
d3:ea:bb:97:28:44:71:e7:57:84:f8:e0:7d:1c:3a:
4f:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:65:E7:FF:A0:50:CE:2E:A1:F3:B1:FA:5A:85:C7:DA:5B:13:4E:51
X509v3 Authority Key Identifier:
keyid:C2:77:8D:E2:A9:BE:98:02:12:03:82:E7:50:D1:59:E9:58:72:C2:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wneN4qm-mAISA4LnUNFZ6Vhywq4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/U2Xn_6BQzi6h87H6WoXH2lsTTlE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/wneN4qm-mAISA4LnUNFZ6Vhywq4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.253.16.0/24
178.253.38.0/23
Signature Algorithm: sha256WithRSAEncryption
5a:05:e1:75:50:49:88:00:55:7f:56:e0:ba:f4:30:41:c2:45:
99:7f:23:36:fa:2f:b5:a3:fd:7c:ef:05:56:2b:a2:54:c9:0d:
0e:10:6d:e8:3b:1b:ea:15:ba:2b:8d:4b:2a:3e:09:e0:c9:8b:
16:80:b9:92:66:76:40:bc:3c:8b:f7:15:19:9a:14:3e:a8:4a:
73:4e:23:c2:fa:37:16:0d:79:77:85:f4:ae:59:9f:05:60:c0:
91:53:5d:c4:81:43:ea:92:79:95:bf:5e:50:84:ed:32:14:e2:
84:4d:f8:37:8a:13:c6:a5:1f:b0:23:86:f6:17:f0:6e:d8:4d:
31:56:cc:26:c7:39:05:1c:24:3e:6b:f0:f0:c3:8e:d6:6c:fe:
86:91:fe:b8:c0:64:51:f1:b4:23:3b:97:bc:16:7a:15:33:56:
8a:83:a4:89:95:15:85:32:78:1a:e3:25:8a:4c:80:ca:dc:2a:
f2:91:ca:1c:22:a3:2a:94:2d:89:be:e5:61:39:e8:59:36:cf:
5e:1e:aa:16:97:eb:2e:47:4b:e7:d4:12:b6:1b:5b:05:ac:78:
2a:05:49:c8:a3:d7:14:35:a7:f3:bf:b3:80:55:e6:32:8f:72:
ad:2a:54:09:27:d3:44:61:77:f4:5c:b1:fc:ab:ec:5b:ac:db:
8e:c5:7e:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 10:47:39 2025 by rpki-client