Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/zzlx9L7zkM1DehuGT4ht7sEhkhc.roa
File: zzlx9L7zkM1DehuGT4ht7sEhkhc.roa (raw, json)
Hash identifier: Sr0kRR/zrkEZFdGJj//Y6WjRJ1S6Ik83kQCO8wjXhro=
Subject key identifier: CF:39:71:F4:BE:F3:90:CD:43:7A:1B:86:4F:88:6D:EE:C1:21:92:17
Certificate issuer: /CN=6f75e4e94b5cb74517b7b01568015da9e6eecdb6
Certificate serial: 018CA0D4EE7F65A94BD2CD83A15CE0D9C627
Authority key identifier: 6F:75:E4:E9:4B:5C:B7:45:17:B7:B0:15:68:01:5D:A9:E6:EE:CD:B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b3Xk6Utct0UXt7AVaAFdqebuzbY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/zzlx9L7zkM1DehuGT4ht7sEhkhc.roa
Signing time: Mon 25 Dec 2023 11:55:58 +0000
ROA not before: Mon 25 Dec 2023 11:55:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 62240
IP address blocks: 95.82.0.0/21 maxlen: 21
95.82.8.0/21 maxlen: 21
95.82.32.0/21 maxlen: 21
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:a0:d4:ee:7f:65:a9:4b:d2:cd:83:a1:5c:e0:d9:c6:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f75e4e94b5cb74517b7b01568015da9e6eecdb6
Validity
Not Before: Dec 25 11:55:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=cf3971f4bef390cd437a1b864f886deec1219217
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:d4:c7:c7:2b:3e:12:e7:12:70:f1:61:88:1f:
b0:8c:ca:e8:fd:dc:15:77:e1:42:13:83:e1:42:0d:
8b:86:d0:42:74:dc:0a:48:73:db:a8:76:5a:78:2b:
b7:82:21:4f:cd:be:b3:e7:d2:36:ed:20:50:77:50:
e6:47:8e:d2:0c:e2:02:a9:0c:45:ca:70:5d:aa:8d:
9a:18:13:3d:d3:b0:78:ab:f8:b2:08:25:ea:c2:cd:
f3:6d:bb:dc:5d:23:6a:37:f9:8d:30:0b:58:de:99:
3b:b9:53:fb:64:d5:3b:a4:22:6a:45:0f:cf:60:0a:
ff:6c:1f:e8:7f:5e:20:01:71:ee:4c:1b:fa:bf:12:
df:4a:9e:50:c5:43:a5:29:37:4f:bb:4e:5f:1a:91:
c2:29:a1:bf:60:a3:ba:2c:d7:9b:f5:c1:b8:b6:df:
28:8b:11:ef:74:eb:02:11:52:a5:37:be:e8:1b:d6:
c2:f5:a8:fc:91:84:d3:55:8a:84:05:79:2a:49:70:
f5:b8:0c:fb:2a:29:2b:31:7b:62:a7:a3:0a:0c:65:
5a:4b:fd:4c:d6:2e:89:0e:ec:bc:92:ff:93:d1:03:
87:b3:57:c9:3d:5a:df:6f:3d:96:98:e5:ba:bd:36:
b0:3b:18:3a:5f:ef:9e:c4:5b:b5:a1:72:c9:32:41:
e9:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:39:71:F4:BE:F3:90:CD:43:7A:1B:86:4F:88:6D:EE:C1:21:92:17
X509v3 Authority Key Identifier:
keyid:6F:75:E4:E9:4B:5C:B7:45:17:B7:B0:15:68:01:5D:A9:E6:EE:CD:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3Xk6Utct0UXt7AVaAFdqebuzbY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/zzlx9L7zkM1DehuGT4ht7sEhkhc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/b3Xk6Utct0UXt7AVaAFdqebuzbY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.82.0.0/20
95.82.32.0/21
Signature Algorithm: sha256WithRSAEncryption
93:d3:46:eb:66:e7:63:63:c4:11:92:d2:19:9f:57:6c:d9:16:
3a:41:4f:5a:32:9f:14:8b:3b:7a:2e:0c:67:c8:27:5e:75:3f:
46:f4:21:73:ac:9b:26:22:54:92:b3:e2:57:e9:92:f1:51:6d:
4c:bf:62:b9:84:3b:77:7f:74:6d:56:7a:b2:ee:6a:f2:cc:76:
47:eb:31:3a:32:4b:64:e5:77:39:56:46:98:fb:2e:9a:f3:aa:
65:89:c1:83:c2:3c:67:64:3f:c8:0e:36:43:84:7c:5b:58:f2:
d8:23:f3:ad:f2:2a:e1:5e:21:a3:6e:e6:a2:a3:01:fd:1a:db:
01:57:40:53:63:e4:a7:75:62:26:b4:e9:72:17:f1:b0:5a:7a:
16:67:03:3c:25:fd:b1:5f:28:8d:32:0c:6c:b6:72:58:11:1e:
53:e3:16:f6:d7:94:46:da:39:8d:f5:33:f5:82:fe:35:f0:38:
4e:f0:e3:45:e6:df:72:fd:e0:82:f3:68:fe:00:9d:56:4d:d4:
d1:e6:59:bd:6e:eb:94:42:4d:80:8d:65:b8:41:9e:6c:2c:8a:
f3:96:4b:9f:da:48:ec:5d:92:25:28:cb:45:a4:f2:b0:82:1d:
71:11:fe:d4:10:84:57:c7:93:c0:b1:c2:65:31:45:3d:95:92:
1a:4c:92:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:27:53 2025 by rpki-client