Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/85b673-f1ad-43e2-bfe7-0cd7236b29b6/1/DSwcyzOGgEkJmDA8oDiyW0mWVDQ.roa
File: DSwcyzOGgEkJmDA8oDiyW0mWVDQ.roa (raw, json)
Hash identifier: PcmJbjC4gp6UkGx9FZdUSsFhpdWOeUqdW16e2lkXBN0=
Subject key identifier: 0D:2C:1C:CB:33:86:80:49:09:98:30:3C:A0:38:B2:5B:49:96:54:34
Certificate issuer: /CN=1da97cae7de6b29e56f0259af53c95926034a502
Certificate serial: 01856FC2969B3DFA297F0ACEE2A6632F7865
Authority key identifier: 1D:A9:7C:AE:7D:E6:B2:9E:56:F0:25:9A:F5:3C:95:92:60:34:A5:02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Hal8rn3msp5W8CWa9TyVkmA0pQI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/85b673-f1ad-43e2-bfe7-0cd7236b29b6/1/DSwcyzOGgEkJmDA8oDiyW0mWVDQ.roa
Signing time: Sun 01 Jan 2023 23:55:01 +0000
ROA not before: Sun 01 Jan 2023 23:55:01 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 59750
IP address blocks: 194.1.247.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:c2:96:9b:3d:fa:29:7f:0a:ce:e2:a6:63:2f:78:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1da97cae7de6b29e56f0259af53c95926034a502
Validity
Not Before: Jan 1 23:55:01 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0d2c1ccb338680490998303ca038b25b49965434
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:a3:49:24:04:69:48:5e:79:99:59:e2:22:c4:
a0:e9:77:82:de:92:00:40:fe:f0:58:78:48:c7:fa:
43:42:ba:60:73:ab:2e:b3:63:66:6a:2c:7a:75:19:
a5:12:b0:ca:a9:92:7e:40:9d:08:2a:0e:99:c0:c8:
bd:d1:20:e9:85:fc:4b:0d:2f:06:8e:fc:11:ec:b6:
91:de:a4:b4:9d:79:22:ff:8a:da:75:ed:79:45:16:
79:84:ae:28:8a:01:0e:8d:ca:bf:c2:28:f2:67:d2:
38:3b:cf:17:03:4a:6a:34:52:3e:cc:5b:f4:7e:e4:
59:15:fe:d2:9f:ec:b7:7a:cd:24:31:5b:fd:6f:cd:
2e:26:13:b6:af:f9:6b:5e:5d:f3:cb:2d:db:b7:19:
de:d6:6a:e6:a4:76:d6:9c:62:44:9f:8c:2d:05:b2:
ca:40:61:41:fc:0b:86:aa:58:af:3e:67:10:27:c5:
2a:e9:92:33:9b:77:97:dd:30:d7:db:14:25:4c:00:
7d:4f:14:da:a3:77:8e:20:c4:a9:36:24:96:76:48:
ee:47:42:ba:a7:80:45:7d:76:fc:98:46:8c:75:20:
16:db:f4:ae:c9:f8:5c:80:77:7f:87:d7:4c:94:ed:
f4:e2:45:15:ab:ae:59:07:ff:50:c5:a1:71:ce:f0:
3a:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:2C:1C:CB:33:86:80:49:09:98:30:3C:A0:38:B2:5B:49:96:54:34
X509v3 Authority Key Identifier:
keyid:1D:A9:7C:AE:7D:E6:B2:9E:56:F0:25:9A:F5:3C:95:92:60:34:A5:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hal8rn3msp5W8CWa9TyVkmA0pQI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/85b673-f1ad-43e2-bfe7-0cd7236b29b6/1/DSwcyzOGgEkJmDA8oDiyW0mWVDQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/85b673-f1ad-43e2-bfe7-0cd7236b29b6/1/Hal8rn3msp5W8CWa9TyVkmA0pQI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.1.247.0/24
Signature Algorithm: sha256WithRSAEncryption
57:63:e5:dc:06:94:a0:f1:e0:81:82:a5:11:3c:73:c0:06:c5:
9b:5d:dc:87:3f:a4:c8:5f:6d:9d:b1:97:23:34:29:52:99:1e:
2c:89:0e:3d:71:71:88:cb:c3:4d:eb:4d:76:cb:5a:67:f8:33:
75:e7:fa:7e:de:da:d9:21:46:a6:33:68:1c:6a:e6:af:1c:d0:
4e:d6:5c:ca:e6:32:1c:6a:cb:0f:6d:49:d0:2a:0f:3c:46:e2:
2d:c4:f2:c9:6d:07:ff:f3:33:b4:d0:38:ed:8a:f2:fa:d2:c4:
d9:02:92:37:94:7c:6f:6b:69:bf:7c:78:12:39:45:02:c1:6b:
bc:92:27:10:8a:8f:24:93:8b:e3:e0:62:05:23:0d:83:52:81:
5c:43:0b:71:1f:99:dc:d5:7f:61:3f:6e:35:13:ab:2e:5c:e6:
8e:a9:d6:05:e3:a9:0b:37:0f:e3:59:80:b1:cf:81:69:4b:37:
60:e5:4b:d5:35:0f:9a:ca:2c:d3:f1:12:3a:21:15:f8:83:fd:
0f:0d:c5:47:9a:df:e2:60:0f:61:9f:67:5b:b0:41:f5:97:0d:
16:ca:c7:7f:1f:a6:da:71:fe:59:0b:4e:65:7f:c5:72:c6:d4:
b6:d4:5e:4a:9a:95:4f:11:d4:79:53:d3:75:a6:27:7c:4b:b0:
0d:7c:d4:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:56:09 2025 by rpki-client