Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/715d15-2810-4827-8dbd-0bee06126b1a/1/CiOKgpmFfcNKaiqonTVb3vc3kuE.roa
File: CiOKgpmFfcNKaiqonTVb3vc3kuE.roa (raw, json)
Hash identifier: ENCYg2YZQnuk6drGp49owwhk5By3K/8eu67VXcEahlc=
Subject key identifier: 0A:23:8A:82:99:85:7D:C3:4A:6A:2A:A8:9D:35:5B:DE:F7:37:92:E1
Certificate issuer: /CN=adf491488a7cd8448a420945871c0b99672dc66e
Certificate serial: 018DC189FC48775A756B673129E2D61C4DCB
Authority key identifier: AD:F4:91:48:8A:7C:D8:44:8A:42:09:45:87:1C:0B:99:67:2D:C6:6E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rfSRSIp82ESKQglFhxwLmWctxm4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/715d15-2810-4827-8dbd-0bee06126b1a/1/CiOKgpmFfcNKaiqonTVb3vc3kuE.roa
Signing time: Mon 19 Feb 2024 13:24:22 +0000
ROA not before: Mon 19 Feb 2024 13:24:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 200436
IP address blocks: 217.60.253.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:c1:89:fc:48:77:5a:75:6b:67:31:29:e2:d6:1c:4d:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=adf491488a7cd8448a420945871c0b99672dc66e
Validity
Not Before: Feb 19 13:24:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0a238a8299857dc34a6a2aa89d355bdef73792e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:85:35:55:6f:ff:e6:6d:e3:76:42:cd:4c:ab:
e3:b8:56:3a:aa:64:9b:70:d9:05:05:cc:1f:6b:8c:
7c:fe:11:ac:f4:5d:5c:1c:11:96:4c:e9:4e:74:31:
57:8c:b3:95:59:da:08:21:d4:35:b9:43:1d:4c:0d:
97:9d:02:e7:74:ae:0c:44:02:cd:2b:27:0e:20:6c:
82:ec:89:db:9c:0e:6e:44:8c:77:82:d4:43:b3:e1:
0e:1d:c9:27:21:e9:f4:98:2d:f1:c8:d9:6e:eb:48:
3f:ef:1c:67:8a:58:f4:44:a4:d1:8d:32:28:66:7a:
12:52:0b:33:f5:42:67:ff:d6:28:6a:5b:1e:bd:99:
0f:81:5c:35:15:64:ec:46:ac:42:34:bd:93:4e:14:
3a:46:bc:cf:bb:91:6b:e6:5f:a2:fb:00:bc:cf:e7:
5e:2b:4a:45:fc:29:a1:de:39:b9:06:a2:09:8c:69:
a5:5a:c0:65:86:51:f1:24:0b:06:67:7c:ae:30:0f:
ab:99:ef:92:0c:03:7d:5e:9b:46:b9:86:80:06:73:
de:06:db:ed:33:3e:17:14:6c:43:e6:12:9f:74:63:
80:6a:b2:66:7c:cb:79:07:9e:83:8e:1c:13:cf:4d:
8f:9a:d8:90:5c:ca:0b:36:37:29:3d:be:8c:4d:bd:
d1:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:23:8A:82:99:85:7D:C3:4A:6A:2A:A8:9D:35:5B:DE:F7:37:92:E1
X509v3 Authority Key Identifier:
keyid:AD:F4:91:48:8A:7C:D8:44:8A:42:09:45:87:1C:0B:99:67:2D:C6:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rfSRSIp82ESKQglFhxwLmWctxm4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/715d15-2810-4827-8dbd-0bee06126b1a/1/CiOKgpmFfcNKaiqonTVb3vc3kuE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/715d15-2810-4827-8dbd-0bee06126b1a/1/rfSRSIp82ESKQglFhxwLmWctxm4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.60.253.0/24
Signature Algorithm: sha256WithRSAEncryption
25:f2:1e:88:43:78:a3:85:1e:34:bf:68:c3:bc:a0:52:a8:b4:
86:8f:c5:ab:7b:1a:7f:aa:8b:4e:2d:b2:dd:fe:8d:ce:fb:19:
bc:78:7e:db:06:9d:7c:37:dd:4b:4d:3d:6a:79:a9:36:ab:c4:
4e:a9:bc:9c:eb:b8:43:49:c8:84:e6:22:b9:6b:1f:17:d0:27:
3d:5a:c9:c4:84:9a:b0:5b:c0:c1:db:a9:df:3e:3c:92:16:49:
72:a0:14:b7:88:5d:20:18:b7:7c:c4:10:c9:5a:49:95:b7:d2:
11:cb:e5:7b:08:b5:0f:f9:d6:e4:3c:3c:a5:f0:ad:9d:e6:0b:
15:92:6d:07:bf:e3:1a:9c:de:3f:25:bb:ce:59:90:8e:fc:49:
28:a2:e4:c5:62:05:bb:34:af:5e:f5:81:66:c2:f8:46:29:0e:
52:eb:cf:32:3a:60:30:29:bd:a2:f0:8e:0a:d5:4a:68:b3:b8:
5c:67:63:64:63:36:6e:12:92:ec:61:3a:f1:6d:85:57:01:a8:
f5:a0:b7:88:62:62:54:30:1e:2e:3e:73:99:aa:88:3a:70:de:
28:cf:2f:52:83:b2:8a:b6:d9:e3:42:4d:e8:b9:57:e4:f1:08:
d9:79:a1:f3:a8:2a:fb:a4:ef:31:1a:ae:52:77:bf:3a:54:44:
64:df:b2:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 19:22:08 2025 by rpki-client