Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/e12f62-c9ab-4cf0-ae60-e66186c7a689/1/I1y9dSqUuhLj1SmjQ1AM_zjpMz4.roa
File: I1y9dSqUuhLj1SmjQ1AM_zjpMz4.roa (raw, json)
Hash identifier: BEdkbBvHQgMhIo8FPuZ3H/QIyuqxyBm655ALTiHvV/4=
Subject key identifier: 23:5C:BD:75:2A:94:BA:12:E3:D5:29:A3:43:50:0C:FF:38:E9:33:3E
Certificate issuer: /CN=575024fa222d09f6ed99d0c8e6b7ced168e3a775
Certificate serial: 110610FA
Authority key identifier: 57:50:24:FA:22:2D:09:F6:ED:99:D0:C8:E6:B7:CE:D1:68:E3:A7:75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V1Ak-iItCfbtmdDI5rfO0Wjjp3U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/e12f62-c9ab-4cf0-ae60-e66186c7a689/1/I1y9dSqUuhLj1SmjQ1AM_zjpMz4.roa
Signing time: Sat 01 Jan 2022 16:06:05 +0000
ROA not before: Sat 01 Jan 2022 16:06:05 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 61317
IP address blocks: 176.103.222.0/23 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 285610234 (0x110610fa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=575024fa222d09f6ed99d0c8e6b7ced168e3a775
Validity
Not Before: Jan 1 16:06:05 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=235cbd752a94ba12e3d529a343500cff38e9333e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:93:65:31:69:b8:ef:d8:c3:85:50:3d:80:a6:
9d:78:65:d8:76:12:13:0b:95:f5:4a:e2:b0:e5:18:
57:e4:28:60:db:d5:04:aa:ab:57:f3:ae:b8:e6:0f:
bc:ca:9a:11:62:80:82:de:cb:7d:69:6a:23:cd:53:
96:e6:b5:44:4d:52:5a:2d:5e:19:05:47:eb:a1:d3:
47:cd:54:a1:be:c2:f2:2c:c7:9b:77:47:c8:c9:9c:
47:b4:12:7f:7a:a2:f9:ae:b1:61:66:34:24:8b:7f:
6f:1a:cc:92:96:1e:ce:21:a8:9a:64:2c:17:53:fa:
21:8e:54:93:7e:1d:b1:68:46:23:47:67:87:88:0a:
d2:04:d5:e2:24:15:c5:de:9b:e5:25:54:d0:13:f4:
47:50:08:8b:6d:63:54:7d:89:88:39:b1:ce:19:a3:
d9:2b:cc:c3:ca:6d:4c:35:4f:76:24:ba:7f:1a:96:
dc:a9:1f:1b:95:5b:f5:d5:ce:9a:36:86:57:43:df:
aa:e1:14:ba:8a:2b:4c:f2:8d:24:aa:7f:14:4d:8d:
66:ac:f3:5a:b0:df:ca:a9:df:25:e0:8c:ab:54:c0:
03:36:32:81:ee:53:54:f2:db:74:ee:81:39:1a:2a:
27:ef:c5:e7:14:4a:85:53:6b:9e:f5:cc:d6:8b:6a:
f3:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:5C:BD:75:2A:94:BA:12:E3:D5:29:A3:43:50:0C:FF:38:E9:33:3E
X509v3 Authority Key Identifier:
keyid:57:50:24:FA:22:2D:09:F6:ED:99:D0:C8:E6:B7:CE:D1:68:E3:A7:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V1Ak-iItCfbtmdDI5rfO0Wjjp3U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/e12f62-c9ab-4cf0-ae60-e66186c7a689/1/I1y9dSqUuhLj1SmjQ1AM_zjpMz4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/e12f62-c9ab-4cf0-ae60-e66186c7a689/1/V1Ak-iItCfbtmdDI5rfO0Wjjp3U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.103.222.0/23
Signature Algorithm: sha256WithRSAEncryption
7f:d6:98:1f:ff:89:8a:11:bd:7c:00:81:c7:17:0f:86:10:4e:
57:5d:4c:50:52:d7:20:fa:d8:d6:b8:8f:a8:c3:3b:f0:5d:4d:
a1:ec:dd:26:2d:db:d2:22:66:ed:ff:39:b4:9a:90:9e:7c:b7:
24:f1:07:97:2d:b4:3f:41:f9:ee:d1:40:9e:50:3e:2c:24:a2:
ba:66:27:c5:ed:7d:10:f3:3b:51:36:00:56:77:b8:58:80:37:
45:1e:76:7b:82:31:69:b3:33:26:f4:6b:6a:31:11:4c:3c:2a:
e2:e3:3e:ab:52:b9:88:66:3b:9a:55:04:ab:e1:73:16:c5:c8:
ee:03:77:ee:91:6e:94:34:4c:93:2e:c5:b9:4f:fe:d7:c8:49:
ed:7b:08:8f:44:56:ca:c8:35:cf:2e:9c:06:75:e8:48:ce:da:
7c:b9:29:f3:57:f1:3b:8d:18:47:5a:4d:4b:5d:f0:5b:c3:64:
41:2f:d4:d4:7d:42:1e:96:88:0a:c3:b0:fe:5c:73:3b:bb:29:
c1:ce:cb:db:0d:f9:b5:2e:e1:fa:50:f3:8c:36:3f:cd:5b:7c:
13:bd:5d:d0:e9:c5:6e:29:0a:c1:f1:6d:d3:31:16:ac:44:09:
b0:39:5f:14:82:41:cf:c0:08:b5:10:01:3f:b2:a5:60:62:cf:
ce:8e:69:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 05:29:57 2025 by rpki-client