Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/92332f-03e0-4116-b6f3-c82f424b6d0d/1/13SNEW9fBubHoMsl8qM4uz2e3Mk.roa
File: 13SNEW9fBubHoMsl8qM4uz2e3Mk.roa (raw, json)
Hash identifier: +qCs9BR5RmhZ+aqn9WKOo5BKCBeADRaQOXk6UMqMdpI=
Subject key identifier: D7:74:8D:11:6F:5F:06:E6:C7:A0:CB:25:F2:A3:38:BB:3D:9E:DC:C9
Certificate issuer: /CN=0cda5c874354d83826e43c2535b76e20d5b61b05
Certificate serial: 1B426BAD
Authority key identifier: 0C:DA:5C:87:43:54:D8:38:26:E4:3C:25:35:B7:6E:20:D5:B6:1B:05
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DNpch0NU2Dgm5DwlNbduINW2GwU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/92332f-03e0-4116-b6f3-c82f424b6d0d/1/13SNEW9fBubHoMsl8qM4uz2e3Mk.roa
Signing time: Thu 17 Mar 2022 08:14:05 +0000
ROA not before: Thu 17 Mar 2022 08:14:05 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 51433
IP address blocks: 185.162.217.0/24 maxlen: 27
185.162.218.0/24 maxlen: 27
185.162.219.0/24 maxlen: 27
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 457337773 (0x1b426bad)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0cda5c874354d83826e43c2535b76e20d5b61b05
Validity
Not Before: Mar 17 08:14:05 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d7748d116f5f06e6c7a0cb25f2a338bb3d9edcc9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:91:ab:47:43:7e:24:8a:47:9a:4c:57:31:25:
41:a2:04:90:dc:a6:0d:9a:04:27:79:06:9d:f0:c4:
4a:13:76:17:a8:af:be:d9:14:25:b4:18:8d:ee:fd:
cc:da:e2:b8:db:6d:01:94:ba:92:e2:c3:ae:69:66:
f3:6b:a1:fe:85:29:2d:70:56:84:1d:c8:33:93:49:
87:8b:94:a5:52:94:bf:eb:ec:28:eb:ad:fc:3c:87:
a9:5d:a9:0c:41:2e:14:d8:a2:58:2b:23:cd:b6:2d:
27:66:79:6a:ed:40:1a:0e:81:a8:0b:56:f5:d9:1a:
f5:b4:e7:c6:bb:8e:8d:f8:12:2b:9f:00:6c:f9:53:
b3:ac:80:7f:cf:76:d4:55:aa:5c:ef:92:6d:da:a8:
b4:d4:e5:c8:63:29:67:bd:2d:c2:22:2c:64:f9:24:
de:de:ff:64:d4:45:51:98:f8:ca:18:55:6b:04:3a:
99:45:ac:41:a1:ba:2b:11:4c:d4:64:14:0c:d5:8d:
ee:18:ee:dd:bf:2e:65:4e:dd:9d:b9:1c:57:1f:79:
aa:0e:2e:f7:6f:67:07:77:aa:54:04:c1:27:31:ae:
e4:a8:f2:f4:a6:f1:14:98:0b:5a:86:61:73:9f:2a:
db:5b:bf:24:cc:81:0a:68:81:54:c0:27:0a:af:f8:
28:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:74:8D:11:6F:5F:06:E6:C7:A0:CB:25:F2:A3:38:BB:3D:9E:DC:C9
X509v3 Authority Key Identifier:
keyid:0C:DA:5C:87:43:54:D8:38:26:E4:3C:25:35:B7:6E:20:D5:B6:1B:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DNpch0NU2Dgm5DwlNbduINW2GwU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/92332f-03e0-4116-b6f3-c82f424b6d0d/1/13SNEW9fBubHoMsl8qM4uz2e3Mk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/92332f-03e0-4116-b6f3-c82f424b6d0d/1/DNpch0NU2Dgm5DwlNbduINW2GwU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.162.217.0-185.162.219.255
Signature Algorithm: sha256WithRSAEncryption
76:7d:a1:72:51:f9:22:d6:93:9a:6f:6d:5b:87:4d:0d:14:17:
5b:ae:29:9c:0a:c1:00:e5:fa:4d:47:24:54:6c:14:2f:16:3f:
0b:8b:79:73:d5:d9:37:c1:22:14:1e:f5:fb:06:d5:9f:64:6c:
76:d0:6b:b4:55:51:b7:ce:49:10:bf:5e:19:ba:5c:37:5a:2a:
2c:26:1b:96:f4:af:32:8a:c9:cd:0a:17:79:35:b7:77:4a:67:
dc:8f:c7:ef:d8:62:3c:0e:74:16:de:af:70:76:02:b6:9f:7f:
1a:a9:4b:09:3c:1a:30:dd:18:d6:b4:e8:ed:e2:6e:b0:f3:2e:
72:97:9a:00:9f:07:38:9f:14:ed:e7:a4:1f:41:13:a7:7a:f3:
74:0f:3f:88:a6:4f:80:48:06:8f:40:f4:bf:12:03:9a:21:f0:
c4:a1:4f:35:8e:1c:8e:c4:75:4c:e5:54:88:c5:f2:d4:54:9d:
89:af:dc:02:1d:21:88:59:83:34:e9:7c:8e:bf:d8:82:46:16:
a7:ad:01:5e:b9:32:64:7f:64:6d:0e:76:d3:59:a3:c5:b9:e1:
34:49:73:29:d2:49:96:52:d3:0c:6d:d1:cf:d4:fb:08:c1:29:
10:94:45:fb:5d:d5:b8:e1:33:6b:30:7c:e6:52:55:7f:67:2e:
50:1a:6c:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 22:59:18 2025 by rpki-client