Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/gFsY6xhfyRbsztPfbTzMghyuk8E.roa
File: gFsY6xhfyRbsztPfbTzMghyuk8E.roa (raw, json)
Hash identifier: 6TrjlxmBWGyhi2PF6qEec63pAFEkmlkYXENBAop75W8=
Subject key identifier: 80:5B:18:EB:18:5F:C9:16:EC:CE:D3:DF:6D:3C:CC:82:1C:AE:93:C1
Certificate issuer: /CN=c2778de2a9be9802120382e750d159e95872c2ae
Certificate serial: 019427B5884572FD15EA07829151B8F496DD
Authority key identifier: C2:77:8D:E2:A9:BE:98:02:12:03:82:E7:50:D1:59:E9:58:72:C2:AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wneN4qm-mAISA4LnUNFZ6Vhywq4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/gFsY6xhfyRbsztPfbTzMghyuk8E.roa
Signing time: Thu 02 Jan 2025 15:49:55 +0000
ROA not before: Thu 02 Jan 2025 15:49:55 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 133973
IP address blocks: 178.253.52.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b5:88:45:72:fd:15:ea:07:82:91:51:b8:f4:96:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2778de2a9be9802120382e750d159e95872c2ae
Validity
Not Before: Jan 2 15:49:55 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=805b18eb185fc916ecced3df6d3ccc821cae93c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:47:2e:1c:a1:5b:65:f8:4c:fb:7c:be:e2:a9:
a9:90:4b:10:99:44:39:db:65:fb:bd:07:79:0d:bb:
93:b2:f7:59:66:e2:ae:0e:02:57:83:aa:71:4a:a7:
ad:d0:47:9b:6a:f2:37:51:18:9a:6e:92:60:44:a1:
95:b3:65:81:f5:2d:ae:17:9c:73:7b:cb:2a:55:66:
02:97:27:9d:2b:2f:f8:7f:b5:0d:a7:8b:d4:20:81:
a6:81:d9:2a:16:23:e0:56:6d:08:b6:c4:99:a2:a1:
fc:98:0b:5b:86:bd:db:01:f3:1f:b0:c2:3a:ec:cd:
5d:c4:02:43:d1:fa:d5:1d:c7:cb:29:85:87:b1:16:
0e:44:37:fb:1d:ed:f1:7f:55:5a:28:9a:23:37:ea:
06:08:c3:eb:79:a5:e4:bf:da:0d:aa:ae:02:79:95:
7f:0a:78:35:1d:0f:b7:80:a5:06:d0:f1:59:f4:2b:
97:10:37:d8:71:ed:42:08:44:8c:11:8f:3e:2d:40:
90:24:04:28:40:19:f3:d0:69:e1:ea:f3:c1:3f:2b:
64:c1:e6:90:23:79:f8:99:21:a2:36:3e:c5:10:97:
b5:83:6b:9f:ba:69:de:b7:2b:4b:c7:bc:c4:6a:d3:
c8:d8:4b:06:00:a6:ce:41:a4:77:4d:ed:af:52:eb:
9c:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:5B:18:EB:18:5F:C9:16:EC:CE:D3:DF:6D:3C:CC:82:1C:AE:93:C1
X509v3 Authority Key Identifier:
keyid:C2:77:8D:E2:A9:BE:98:02:12:03:82:E7:50:D1:59:E9:58:72:C2:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wneN4qm-mAISA4LnUNFZ6Vhywq4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/gFsY6xhfyRbsztPfbTzMghyuk8E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/wneN4qm-mAISA4LnUNFZ6Vhywq4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.253.52.0/24
Signature Algorithm: sha256WithRSAEncryption
6f:fd:14:56:f9:ad:7d:0e:a7:27:60:c2:94:1b:4b:40:ab:ae:
ff:b5:07:ac:df:29:cc:c9:66:c9:3b:28:99:16:dd:cd:f3:e5:
12:0c:4a:3c:c9:bf:77:f3:d9:14:ef:8a:36:57:c4:96:54:e7:
78:68:27:3f:4b:a6:6b:3d:89:f6:58:8e:12:ac:e6:bd:1e:70:
e0:8b:96:76:3e:e1:f5:17:e0:d5:aa:94:e6:b6:27:fb:ad:54:
9b:f9:02:eb:53:c1:20:00:54:c8:78:f1:69:35:8f:cc:58:2f:
f0:8e:ba:c0:13:be:a9:55:49:6b:5c:ce:21:d8:7e:9c:a1:85:
fe:54:55:f7:21:87:1f:78:91:1a:b5:c9:7b:7c:6d:5f:7b:4f:
d1:75:39:91:6d:ba:5e:12:59:3e:94:62:09:8f:b6:36:c1:5c:
fa:2d:54:18:82:b2:9e:35:d9:df:f1:92:2d:b8:56:61:2c:40:
6a:9d:20:ce:1f:2b:1b:89:4e:b3:3c:f3:7d:4f:f9:d0:dd:73:
f2:67:3a:26:57:f4:d4:f9:e1:ce:89:4b:22:ad:04:1c:21:a1:
dd:7f:cd:6a:7f:a8:7b:6e:11:3f:d2:4a:41:02:4d:60:b4:39:
f8:95:d7:6d:89:17:45:f9:c8:1e:cb:35:60:df:6f:66:ed:26:
3d:e6:c4:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 10:44:55 2025 by rpki-client