Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/e12f62-c9ab-4cf0-ae60-e66186c7a689/1/kCSrhfVjufyaZQJLxrSim_yjjiY.roa
File: kCSrhfVjufyaZQJLxrSim_yjjiY.roa (raw, json)
Hash identifier: /KSSfv8exQXmKH3nk9d1nGLlVMR4W9V9kTA7yQ2OlJw=
Subject key identifier: 90:24:AB:85:F5:63:B9:FC:9A:65:02:4B:C6:B4:A2:9B:FC:A3:8E:26
Certificate issuer: /CN=575024fa222d09f6ed99d0c8e6b7ced168e3a775
Certificate serial: 11074F9C
Authority key identifier: 57:50:24:FA:22:2D:09:F6:ED:99:D0:C8:E6:B7:CE:D1:68:E3:A7:75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V1Ak-iItCfbtmdDI5rfO0Wjjp3U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/e12f62-c9ab-4cf0-ae60-e66186c7a689/1/kCSrhfVjufyaZQJLxrSim_yjjiY.roa
Signing time: Sat 01 Jan 2022 16:06:06 +0000
ROA not before: Sat 01 Jan 2022 16:06:06 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 206150
IP address blocks: 176.103.222.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 285691804 (0x11074f9c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=575024fa222d09f6ed99d0c8e6b7ced168e3a775
Validity
Not Before: Jan 1 16:06:06 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=9024ab85f563b9fc9a65024bc6b4a29bfca38e26
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:d7:81:80:f6:c1:87:03:c8:78:50:d3:04:e5:
f5:eb:16:30:d6:8a:8e:d8:68:0a:27:9e:f6:36:06:
48:04:d6:74:65:06:3d:4c:38:5c:6a:a2:4f:07:51:
78:d7:0d:91:96:f2:27:0b:fe:60:ef:5b:99:14:8d:
da:8f:d2:06:ad:7e:86:90:d4:17:cd:56:ec:f6:19:
fa:f7:71:7c:e0:1c:3a:b8:27:60:ec:62:17:cf:9b:
41:0a:0b:22:04:e0:f6:e1:34:dc:01:83:c7:fc:df:
fc:54:46:b7:d4:ea:e2:6a:f8:b2:ad:99:a7:85:84:
4e:9d:bc:ac:ce:d4:de:b9:07:de:70:55:ab:9d:09:
db:9a:29:7f:67:c5:1a:a5:f7:98:5f:c2:b2:14:ed:
70:71:d2:97:42:79:78:a9:41:ea:f7:93:62:48:b0:
70:66:0a:93:5f:83:50:5f:63:a6:1d:e5:85:6a:8b:
a6:4f:19:ce:2b:52:33:c6:48:b7:4c:20:03:10:1d:
53:d6:e8:f5:5c:e1:26:ca:63:4f:27:1f:25:c0:2c:
d5:6c:66:e2:ec:4b:84:83:a9:1e:64:81:05:07:5d:
d8:8a:0b:7d:35:ee:af:7f:5b:10:8b:53:b8:2d:ab:
dc:7b:43:39:a1:69:93:f9:e5:88:7f:6f:e8:a9:01:
03:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:24:AB:85:F5:63:B9:FC:9A:65:02:4B:C6:B4:A2:9B:FC:A3:8E:26
X509v3 Authority Key Identifier:
keyid:57:50:24:FA:22:2D:09:F6:ED:99:D0:C8:E6:B7:CE:D1:68:E3:A7:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V1Ak-iItCfbtmdDI5rfO0Wjjp3U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/e12f62-c9ab-4cf0-ae60-e66186c7a689/1/kCSrhfVjufyaZQJLxrSim_yjjiY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/e12f62-c9ab-4cf0-ae60-e66186c7a689/1/V1Ak-iItCfbtmdDI5rfO0Wjjp3U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.103.222.0/24
Signature Algorithm: sha256WithRSAEncryption
98:4f:01:66:7c:68:92:4d:85:22:99:a9:54:23:ff:fb:13:90:
d0:d4:3e:fa:c4:8b:c3:a6:c4:93:21:eb:e7:09:6c:d9:a5:c0:
44:33:c2:92:4e:ca:a0:f2:22:b2:77:58:01:34:c4:45:10:75:
75:0e:87:c1:2b:ce:29:9f:20:64:a2:63:88:e4:b2:57:3b:cb:
b8:ff:6d:f9:4d:2e:f8:ff:4c:1e:d2:44:df:c3:19:d4:51:bd:
30:ef:0d:e3:44:b0:67:f6:66:72:93:aa:33:80:ff:d5:35:6b:
e2:b9:c2:10:6f:e2:c8:cb:2a:69:66:8e:ff:86:25:93:98:cd:
01:1e:f6:f4:fa:25:83:85:b0:7c:de:57:2a:a9:b1:53:8d:94:
5f:cf:0d:e4:05:c4:8d:49:10:fa:38:00:99:6b:7f:f4:ec:c0:
a5:35:19:88:ac:57:56:1a:b3:98:a7:44:8a:a5:be:6c:28:86:
16:da:b7:59:45:51:87:0b:8e:5b:49:ec:60:ba:b9:57:1f:a1:
05:1e:15:ba:bf:4a:be:70:1b:a9:a3:02:f8:45:7f:df:02:c5:
47:5a:5d:95:84:fb:3f:d9:3e:fc:d8:1a:9d:f8:0e:32:c1:41:
8e:e8:dc:36:5e:09:15:a5:80:f0:14:58:97:eb:e1:2a:67:3d:
d0:3d:1d:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 15:07:49 2025 by rpki-client