Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/715d15-2810-4827-8dbd-0bee06126b1a/1/rdIgKB4PjgmAlITYKG3yc1V-wm8.roa
File: rdIgKB4PjgmAlITYKG3yc1V-wm8.roa (raw, json)
Hash identifier: R3LRr4YwJ19p8LhS0y7kmlpIeJ568r+h8BUZ7GfkHVg=
Subject key identifier: AD:D2:20:28:1E:0F:8E:09:80:94:84:D8:28:6D:F2:73:55:7E:C2:6F
Certificate issuer: /CN=adf491488a7cd8448a420945871c0b99672dc66e
Certificate serial: 018F18D8CF884003DE044840BA85100FD5C8
Authority key identifier: AD:F4:91:48:8A:7C:D8:44:8A:42:09:45:87:1C:0B:99:67:2D:C6:6E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rfSRSIp82ESKQglFhxwLmWctxm4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/715d15-2810-4827-8dbd-0bee06126b1a/1/rdIgKB4PjgmAlITYKG3yc1V-wm8.roa
Signing time: Fri 26 Apr 2024 05:20:13 +0000
ROA not before: Fri 26 Apr 2024 05:20:13 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 198154
IP address blocks: 217.60.242.0/24 maxlen: 24
217.60.244.0/24 maxlen: 24
217.60.247.0/24 maxlen: 24
217.60.249.0/24 maxlen: 24
217.60.252.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:18:d8:cf:88:40:03:de:04:48:40:ba:85:10:0f:d5:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=adf491488a7cd8448a420945871c0b99672dc66e
Validity
Not Before: Apr 26 05:20:13 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=add220281e0f8e09809484d8286df273557ec26f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:89:6e:20:0f:a2:74:6d:26:3e:09:35:c2:7b:
93:33:49:17:c5:ca:07:ff:c5:cd:ff:a4:61:a6:82:
c5:fa:c8:35:cf:32:03:dd:e5:30:08:99:2b:f6:2a:
ca:61:63:16:4a:b1:4a:1a:35:9e:4d:ef:da:6a:73:
45:a2:c9:c2:10:db:66:97:97:5d:4b:e6:0a:6c:d0:
26:27:72:88:ea:cd:50:a0:0f:be:4f:d2:0e:19:09:
2f:ba:be:4a:20:ec:48:06:de:d9:c9:c8:0c:da:e5:
70:9f:9a:a2:df:e4:98:db:71:34:21:09:26:c1:ae:
1f:77:96:7d:e9:25:c4:16:a5:70:d3:c2:62:9d:98:
30:9e:92:a3:63:9e:f7:87:bc:10:fa:c7:bb:df:bb:
c3:c7:e4:39:68:b0:a4:a2:fe:c1:da:41:ae:d2:37:
ce:1e:eb:1e:3f:1b:aa:c7:19:a9:7c:b1:de:20:a0:
bb:33:77:8c:3d:f1:9d:27:b9:85:ad:d3:f2:13:86:
41:89:d0:a4:f7:ac:86:85:83:d6:01:0a:c6:9b:39:
e5:bd:0c:83:67:12:b2:65:a6:56:b8:c8:2f:96:9c:
d9:1a:3a:51:65:8c:a6:8b:0f:8c:d6:72:1a:75:32:
ef:f4:26:b8:5f:1d:f9:f1:62:01:91:a3:51:98:4c:
ba:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:D2:20:28:1E:0F:8E:09:80:94:84:D8:28:6D:F2:73:55:7E:C2:6F
X509v3 Authority Key Identifier:
keyid:AD:F4:91:48:8A:7C:D8:44:8A:42:09:45:87:1C:0B:99:67:2D:C6:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rfSRSIp82ESKQglFhxwLmWctxm4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/715d15-2810-4827-8dbd-0bee06126b1a/1/rdIgKB4PjgmAlITYKG3yc1V-wm8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/715d15-2810-4827-8dbd-0bee06126b1a/1/rfSRSIp82ESKQglFhxwLmWctxm4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.60.242.0/24
217.60.244.0/24
217.60.247.0/24
217.60.249.0/24
217.60.252.0/24
Signature Algorithm: sha256WithRSAEncryption
b6:40:5a:8e:2e:a0:5f:c0:ce:98:cd:78:10:8e:aa:0f:ef:f7:
1c:c9:ef:3a:e9:bd:67:1e:7a:dd:c5:ea:3a:ed:85:50:84:1c:
03:f6:db:c8:41:0e:6b:b4:4e:41:7d:04:54:11:a2:f9:19:5d:
bd:5b:26:81:e1:73:99:d9:ca:10:28:67:1c:a4:53:af:af:05:
5b:80:c4:01:ab:41:ca:3f:87:4a:12:5e:b8:6f:80:f5:96:d8:
4d:83:c6:f3:de:66:e6:a2:1a:37:57:5b:d7:34:00:5a:cf:f1:
cc:53:21:b6:f3:c9:c4:68:51:83:86:92:05:7d:fb:67:e5:3c:
66:a8:be:d9:10:74:41:d1:8d:21:10:2b:bf:29:84:13:49:35:
69:27:8d:93:fd:d1:4b:57:98:27:70:62:e5:24:51:04:42:1c:
d7:bb:4d:d8:cb:d9:5e:17:56:57:92:78:65:fe:bf:d8:38:48:
63:9f:9e:e6:8b:d6:c1:03:42:89:1b:6a:d8:83:7b:c1:c0:b9:
3b:d0:19:9d:c7:7e:bc:01:be:e7:5f:5a:cf:b7:3d:fd:94:19:
f8:d6:96:d4:60:f8:2b:a3:f3:15:c7:b4:2f:d1:dc:69:4f:db:
fc:93:bc:a7:d1:62:77:06:2c:85:75:6b:b6:32:57:17:69:9d:
37:2b:3a:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 23:16:01 2025 by rpki-client