Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/CQr_lw2X9e0s-4MqEEY5fDwxxGM.roa
File: CQr_lw2X9e0s-4MqEEY5fDwxxGM.roa (raw, json)
Hash identifier: zTzdIsqWP8yuKZj4sFhSu0BGeGNfhcdnSW93N4cVa2I=
Subject key identifier: 09:0A:FF:97:0D:97:F5:ED:2C:FB:83:2A:10:46:39:7C:3C:31:C4:63
Certificate issuer: /CN=cdaaa0e082360360acda347664eb8314eb11da10
Certificate serial: 018EA4698FCDE23CC683CE36A2C552C584C1
Authority key identifier: CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/CQr_lw2X9e0s-4MqEEY5fDwxxGM.roa
Signing time: Wed 03 Apr 2024 14:42:45 +0000
ROA not before: Wed 03 Apr 2024 14:42:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 60542
IP address blocks: 178.210.237.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:a4:69:8f:cd:e2:3c:c6:83:ce:36:a2:c5:52:c5:84:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cdaaa0e082360360acda347664eb8314eb11da10
Validity
Not Before: Apr 3 14:42:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=090aff970d97f5ed2cfb832a1046397c3c31c463
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:e2:5a:c8:60:6e:b0:a5:df:50:32:02:5f:17:
28:30:ec:7c:f2:f0:a9:60:5c:da:2a:f8:d3:2e:96:
2c:4f:9a:a9:c7:c3:b1:d2:18:30:c3:59:5f:dc:2c:
cc:73:97:6d:db:3d:4d:50:28:45:ea:d2:72:1f:e4:
00:ad:81:fc:2a:22:f0:4a:1f:08:5f:e0:9a:c6:28:
9a:62:ca:dd:27:0f:5c:c8:32:dc:c4:db:ea:5f:bb:
19:95:68:45:63:e0:23:96:4f:2f:eb:ca:11:4b:39:
85:0b:c0:d7:cf:e7:2e:1b:da:c6:f3:97:5f:14:37:
b7:16:e8:24:70:29:37:8b:05:94:c2:70:bd:fa:2b:
85:f5:50:b0:57:a8:2f:91:6f:51:7a:89:ce:ee:7f:
4f:f5:09:3b:06:46:6f:53:e4:72:fb:a3:2e:4b:49:
1f:31:1b:0f:1e:c0:3e:cb:6e:e2:90:b4:d9:28:cf:
aa:2c:34:86:6d:fe:5d:2f:39:50:aa:f8:11:cd:8e:
0f:9a:42:8c:3d:06:86:f0:88:92:cf:fa:34:ac:9a:
f0:15:c4:55:7b:ec:b3:05:d1:3d:e4:ca:c8:4d:59:
3a:a7:28:5e:60:0f:d5:38:35:ce:15:d0:04:b6:1e:
98:0c:ea:da:79:ee:83:2e:99:9a:ff:fa:15:8f:d3:
59:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:0A:FF:97:0D:97:F5:ED:2C:FB:83:2A:10:46:39:7C:3C:31:C4:63
X509v3 Authority Key Identifier:
keyid:CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/CQr_lw2X9e0s-4MqEEY5fDwxxGM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.210.237.0/24
Signature Algorithm: sha256WithRSAEncryption
6a:6f:30:be:df:d2:31:e2:a0:33:18:67:2a:94:52:93:3c:21:
14:7a:d1:e2:6a:a9:4a:b0:81:8d:48:97:d1:c7:ad:b8:06:9c:
de:19:8a:b0:9f:9f:f1:2b:7e:cb:67:cc:73:eb:4a:64:ce:57:
85:7f:a4:99:1b:c9:d3:aa:63:20:bd:b6:32:7c:29:0c:90:08:
44:f3:d9:cd:66:ba:e9:91:75:8a:10:d5:5b:b1:68:3f:23:a0:
e5:57:ff:5f:73:60:f7:13:00:7a:4c:8a:e8:f9:5d:2f:c9:29:
92:f9:aa:d1:6f:2a:e8:91:bb:f0:83:3d:a4:64:e9:18:ea:9c:
0c:1b:85:e6:5f:98:6f:70:fd:81:5b:bf:06:53:3c:e0:38:45:
4e:60:d0:fe:58:26:f7:97:39:14:3f:99:24:f9:9e:7e:ca:a8:
fa:41:e2:fd:81:85:58:ac:b2:83:03:cc:10:c7:6a:6b:64:eb:
3f:45:86:05:a3:27:02:de:df:8a:7d:1f:69:6c:31:4f:20:8c:
33:03:66:15:fa:29:92:21:8a:c7:79:79:93:54:d1:b8:f1:01:
2e:f6:b4:9f:af:c9:1e:89:2e:54:b2:3f:b2:1d:0d:97:b8:07:
7d:5b:6a:05:55:6d:e9:5e:24:08:69:70:ca:79:27:b1:43:b2:
0e:6d:3a:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 07:10:36 2025 by rpki-client