Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/e9d9cc-2668-42fc-8315-7525d4d408b5/1/c35QFOdWUx1DwFKVO5-bss7Qgus.roa
File: c35QFOdWUx1DwFKVO5-bss7Qgus.roa (raw, json)
Hash identifier: nihwiaxQNSzdSep0gRjnExsMSeGAwOAbddXLNJh1cGQ=
Subject key identifier: 73:7E:50:14:E7:56:53:1D:43:C0:52:95:3B:9F:9B:B2:CE:D0:82:EB
Certificate issuer: /CN=1ada225cb7f29416e7534695fbfb21762fee93c8
Certificate serial: 0194214455D02D83014233F324A7562B0F98
Authority key identifier: 1A:DA:22:5C:B7:F2:94:16:E7:53:46:95:FB:FB:21:76:2F:EE:93:C8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GtoiXLfylBbnU0aV-_shdi_uk8g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/e9d9cc-2668-42fc-8315-7525d4d408b5/1/c35QFOdWUx1DwFKVO5-bss7Qgus.roa
Signing time: Wed 01 Jan 2025 09:48:34 +0000
ROA not before: Wed 01 Jan 2025 09:48:34 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 59816
IP address blocks: 194.70.152.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:44:55:d0:2d:83:01:42:33:f3:24:a7:56:2b:0f:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1ada225cb7f29416e7534695fbfb21762fee93c8
Validity
Not Before: Jan 1 09:48:34 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=737e5014e756531d43c052953b9f9bb2ced082eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:04:f7:f1:e5:60:69:55:9c:54:f5:ba:de:62:
8d:94:87:a1:ea:f6:69:1b:e1:f6:30:34:d1:c9:e7:
92:c8:41:8f:b4:d2:80:7f:2f:16:d8:2e:fb:17:30:
9d:28:cd:e2:51:34:f1:a8:9c:fb:96:56:c2:93:38:
ad:99:d5:d2:f8:65:38:17:39:3f:30:f8:83:97:99:
33:7a:5d:b7:85:57:86:ed:17:3b:9e:7d:46:f2:72:
2d:c7:c5:81:34:25:0f:77:e4:38:a3:84:b1:c7:13:
0a:a4:c2:10:9d:0a:b4:51:66:72:ca:0e:ec:3c:2b:
45:07:53:e2:98:54:f4:e1:0a:00:8e:0b:e5:14:d0:
64:a6:6d:c9:4f:40:38:b8:df:57:cd:9a:40:98:29:
20:eb:27:df:9a:e1:09:9c:49:bb:e1:ca:ae:bd:b1:
24:96:13:a0:9c:2d:c0:a5:74:38:53:b6:a6:b6:6f:
5c:21:ce:84:a8:44:0a:81:76:4e:4d:86:6f:50:57:
cc:fe:80:f6:9a:9f:17:99:09:2a:ea:34:73:96:48:
c3:68:78:f0:2a:16:d2:37:7f:8a:02:ff:69:ee:2a:
97:c1:13:5a:53:f5:1b:9f:7f:8b:dc:2e:e1:cf:f5:
2b:37:84:63:52:2d:41:a0:5f:ec:d9:2d:cc:f7:fa:
04:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:7E:50:14:E7:56:53:1D:43:C0:52:95:3B:9F:9B:B2:CE:D0:82:EB
X509v3 Authority Key Identifier:
keyid:1A:DA:22:5C:B7:F2:94:16:E7:53:46:95:FB:FB:21:76:2F:EE:93:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GtoiXLfylBbnU0aV-_shdi_uk8g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/e9d9cc-2668-42fc-8315-7525d4d408b5/1/c35QFOdWUx1DwFKVO5-bss7Qgus.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/e9d9cc-2668-42fc-8315-7525d4d408b5/1/GtoiXLfylBbnU0aV-_shdi_uk8g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.70.152.0/24
Signature Algorithm: sha256WithRSAEncryption
96:33:5e:57:77:35:c9:b0:d8:b6:8f:b5:75:c7:9d:93:08:c9:
9c:f3:67:36:b2:b4:87:aa:ab:95:34:5c:f2:a9:0c:05:2e:cd:
08:b6:cb:5c:b5:ca:a1:14:1a:3e:db:db:e9:e8:34:6c:5f:f1:
88:33:55:6a:bf:e1:4e:7f:ef:6d:15:15:d3:d4:81:10:5d:e0:
cc:f5:ab:26:90:9a:cc:59:69:bc:93:f0:ab:4d:7f:76:bc:e1:
e5:e7:9c:d3:2d:9e:bc:86:ef:01:ad:c0:83:ce:fb:74:27:3b:
b0:47:f0:f0:c0:79:30:20:5b:ab:32:94:be:01:68:2d:83:08:
13:d4:c3:44:23:d8:af:27:85:ae:c0:c6:1d:e7:1a:d1:ee:a6:
dc:09:fa:15:f9:52:1e:59:3c:0e:2e:ea:b4:9e:2f:3f:1a:c0:
c5:2a:9a:12:ea:40:8a:84:62:a8:db:94:20:8e:fc:4f:a9:f1:
2f:89:10:4d:12:15:a7:be:6e:5c:98:b1:7f:de:fd:74:82:9d:
76:7e:09:c6:df:35:16:55:8d:08:38:20:0f:46:cf:69:f7:f9:
78:f5:db:77:cb:0c:fb:27:a2:2c:a3:dd:c9:7b:85:f8:95:94:
98:89:a3:d1:06:a1:f5:a4:ca:85:d7:b7:de:94:c5:cb:3e:1d:
de:e3:53:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 00:39:04 2025 by rpki-client