Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/e55e30-97c6-40e6-81b7-507011570ee6/1/iGxzmgAS-SShCNxQmoZ7RRoTVtM.roa
File: iGxzmgAS-SShCNxQmoZ7RRoTVtM.roa (raw, json)
Hash identifier: oQUqjs7qaziv5Ot6s+3OAzaKogvWVGZwktLlSaMNwc8=
Subject key identifier: 88:6C:73:9A:00:12:F9:24:A1:08:DC:50:9A:86:7B:45:1A:13:56:D3
Certificate issuer: /CN=a04845af1dc0087b274cee52a4a9e0880335435d
Certificate serial: 019324CAEFCBCB047FFFA0226331C3ECF281
Authority key identifier: A0:48:45:AF:1D:C0:08:7B:27:4C:EE:52:A4:A9:E0:88:03:35:43:5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oEhFrx3ACHsnTO5SpKngiAM1Q10.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/e55e30-97c6-40e6-81b7-507011570ee6/1/iGxzmgAS-SShCNxQmoZ7RRoTVtM.roa
Signing time: Wed 13 Nov 2024 09:11:39 +0000
ROA not before: Wed 13 Nov 2024 09:11:39 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 56582
IP address blocks: 46.235.8.0/24 maxlen: 32
46.235.10.0/24 maxlen: 32
46.235.11.0/24 maxlen: 32
178.210.160.0/24 maxlen: 24
178.210.161.0/24 maxlen: 24
178.210.162.0/24 maxlen: 24
178.210.163.0/24 maxlen: 24
178.210.164.0/24 maxlen: 24
178.210.165.0/24 maxlen: 24
178.210.166.0/24 maxlen: 24
178.210.168.0/24 maxlen: 24
178.210.169.0/24 maxlen: 24
178.210.170.0/24 maxlen: 24
178.210.171.0/24 maxlen: 24
178.210.172.0/24 maxlen: 24
178.210.173.0/24 maxlen: 24
178.210.174.0/24 maxlen: 24
178.210.175.0/24 maxlen: 24
178.210.176.0/24 maxlen: 24
178.210.177.0/24 maxlen: 24
178.210.178.0/24 maxlen: 32
178.210.180.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:24:ca:ef:cb:cb:04:7f:ff:a0:22:63:31:c3:ec:f2:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a04845af1dc0087b274cee52a4a9e0880335435d
Validity
Not Before: Nov 13 09:11:39 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=886c739a0012f924a108dc509a867b451a1356d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:8e:1b:a9:c1:21:5f:b0:1c:3c:ad:a8:3c:4d:
cd:b1:33:a6:74:ad:16:5f:59:7c:21:3b:c8:c3:49:
fd:54:1f:e8:8f:bf:b9:43:e7:f9:8e:ff:06:89:8f:
db:39:34:4e:13:85:6f:98:c3:c2:f2:ec:17:65:99:
5a:86:c7:00:a8:a7:6c:66:04:20:fc:31:27:a1:a5:
4c:1a:6f:31:da:14:45:d0:9f:f1:46:46:b1:dc:54:
69:dc:a2:86:35:68:79:84:e5:fd:00:11:b9:5c:cb:
c6:b2:08:08:25:1f:8f:1e:7c:c7:74:dd:ac:1c:50:
14:86:b1:6e:0c:dc:f1:a9:64:66:58:f4:f5:22:4b:
3c:d8:a4:e5:02:ac:f4:59:ec:71:29:b2:7c:5f:26:
1a:45:06:b1:46:63:ca:3a:2a:ed:28:c9:df:97:56:
9c:e8:ae:fb:e2:13:c3:20:4a:da:09:c6:0d:8e:b7:
78:fc:d7:cd:b3:df:71:60:4d:a3:65:b5:5b:86:92:
7f:dc:9c:e0:c6:9d:09:07:f4:4e:29:15:0f:d5:22:
a1:87:0c:c1:e8:ba:fb:eb:ef:8c:79:2c:28:bc:1a:
d8:58:04:1d:03:70:1e:ea:bf:03:f7:60:25:cb:c1:
d5:ed:20:73:b5:5f:10:45:ea:3d:b2:31:ea:d9:9d:
ed:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:6C:73:9A:00:12:F9:24:A1:08:DC:50:9A:86:7B:45:1A:13:56:D3
X509v3 Authority Key Identifier:
keyid:A0:48:45:AF:1D:C0:08:7B:27:4C:EE:52:A4:A9:E0:88:03:35:43:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oEhFrx3ACHsnTO5SpKngiAM1Q10.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/e55e30-97c6-40e6-81b7-507011570ee6/1/iGxzmgAS-SShCNxQmoZ7RRoTVtM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/e55e30-97c6-40e6-81b7-507011570ee6/1/oEhFrx3ACHsnTO5SpKngiAM1Q10.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.235.8.0/24
46.235.10.0/23
178.210.160.0-178.210.166.255
178.210.168.0-178.210.178.255
178.210.180.0/24
Signature Algorithm: sha256WithRSAEncryption
b7:fc:13:ec:5e:67:2d:e1:2a:e2:0a:39:24:bb:ac:da:93:8e:
ee:ab:ce:f2:ca:47:22:3f:1d:8f:28:40:4c:c7:03:01:08:44:
ac:ce:13:62:fe:ae:94:19:99:c5:19:e7:9b:e9:71:ab:ad:7d:
48:de:bf:38:60:bd:df:fc:cc:d6:93:69:c0:d1:5a:27:28:a9:
30:98:ac:a6:4e:c0:6f:f4:17:61:a4:e0:6a:e5:57:2e:0a:ed:
6f:32:9f:c5:e2:8d:c3:c8:41:08:40:61:18:97:49:7e:b2:6b:
0d:26:bd:0a:b1:56:29:ed:71:f6:ea:ad:3f:37:94:09:4f:d1:
ea:a4:f5:93:e1:de:69:9e:ae:a0:ae:d2:a0:11:64:f0:75:29:
01:2e:cc:91:5e:ea:2e:10:ec:df:92:7e:bd:ef:e1:f3:6b:55:
1c:55:8a:80:be:84:72:1c:c3:27:03:7c:6f:05:f0:f3:a4:59:
96:7b:d1:62:c3:04:27:8b:a7:f9:cd:16:e8:fc:f6:68:b2:e7:
64:d6:d3:51:3f:89:5f:63:0a:b4:a7:92:0f:94:53:2e:3c:92:
07:95:03:2b:9f:59:b3:05:21:c7:73:cc:89:a8:7d:b3:4e:96:
7b:12:b4:b4:fc:e6:97:c6:dc:0a:3c:aa:a2:30:58:18:4e:ed:
f7:87:7b:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 8 10:02:33 2025 by rpki-client