Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/ca4ff5-48a8-4ecc-ba73-8d0710f3d276/1/zHRt4HVwE6uiQb2jUTNMQfJMnaI.roa
File: zHRt4HVwE6uiQb2jUTNMQfJMnaI.roa (raw, json)
Hash identifier: tXTff5jJyAh8jqP0EhQmZtCTFRfrSEOJU/IHufKOvVQ=
Subject key identifier: CC:74:6D:E0:75:70:13:AB:A2:41:BD:A3:51:33:4C:41:F2:4C:9D:A2
Certificate issuer: /CN=852bc145c5b22394d6feae996bc0bb25254801c6
Certificate serial: 0194221FD0CAFB12FCF163FC6F591260CB42
Authority key identifier: 85:2B:C1:45:C5:B2:23:94:D6:FE:AE:99:6B:C0:BB:25:25:48:01:C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hSvBRcWyI5TW_q6Za8C7JSVIAcY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/ca4ff5-48a8-4ecc-ba73-8d0710f3d276/1/zHRt4HVwE6uiQb2jUTNMQfJMnaI.roa
Signing time: Wed 01 Jan 2025 13:48:17 +0000
ROA not before: Wed 01 Jan 2025 13:48:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 197731
IP address blocks: 83.137.192.0/21 maxlen: 24
83.137.192.0/22 maxlen: 24
83.137.196.0/24 maxlen: 24
2a00:a0c0::/32 maxlen: 48
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:1f:d0:ca:fb:12:fc:f1:63:fc:6f:59:12:60:cb:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=852bc145c5b22394d6feae996bc0bb25254801c6
Validity
Not Before: Jan 1 13:48:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=cc746de0757013aba241bda351334c41f24c9da2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:85:97:94:1b:8b:93:04:f3:1a:e5:53:69:cd:
42:ad:24:92:b0:2d:02:ef:cb:e9:a7:4f:90:c5:07:
e2:f4:b6:b7:50:53:4c:97:bb:41:c2:76:65:b7:b9:
15:68:72:00:c7:30:c5:7e:2a:21:60:fb:5b:1c:e3:
39:36:c3:b9:34:33:5a:77:f7:d2:d4:10:ed:ad:bb:
9c:2d:a4:b3:83:70:61:ab:d6:06:4d:14:8c:80:c9:
4f:33:c5:f3:a4:fa:63:43:b1:eb:33:23:c3:36:99:
27:f9:ff:0a:ad:9f:78:05:0a:7e:1f:a7:f4:41:f5:
d7:9c:f1:e0:6e:19:76:8e:2c:d8:04:1e:06:e2:a9:
b5:78:f0:ab:4b:34:bb:8e:a5:89:82:37:8a:52:8a:
dc:5b:bd:de:99:f4:ab:71:77:36:25:af:5c:2e:de:
a1:01:f4:03:6d:4d:67:6a:84:c1:85:ac:cf:8d:bf:
c8:7b:ab:39:66:42:26:df:cd:b0:7d:c4:f4:c9:a3:
c5:1e:1b:d7:d8:18:01:67:a1:9c:ed:c9:a1:1f:de:
26:ae:c7:77:4a:7e:c0:04:fe:83:6f:4c:69:4b:2c:
a0:c7:e3:49:36:28:62:c5:e2:7d:a5:cd:89:a1:9a:
26:0d:1c:de:77:6d:aa:5e:79:b9:2c:70:88:7b:4f:
0b:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:74:6D:E0:75:70:13:AB:A2:41:BD:A3:51:33:4C:41:F2:4C:9D:A2
X509v3 Authority Key Identifier:
keyid:85:2B:C1:45:C5:B2:23:94:D6:FE:AE:99:6B:C0:BB:25:25:48:01:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hSvBRcWyI5TW_q6Za8C7JSVIAcY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/ca4ff5-48a8-4ecc-ba73-8d0710f3d276/1/zHRt4HVwE6uiQb2jUTNMQfJMnaI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/ca4ff5-48a8-4ecc-ba73-8d0710f3d276/1/hSvBRcWyI5TW_q6Za8C7JSVIAcY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.137.192.0/21
IPv6:
2a00:a0c0::/32
Signature Algorithm: sha256WithRSAEncryption
36:4d:7c:90:11:58:89:08:bd:10:ba:1e:c8:2b:46:26:b7:25:
66:d4:6f:d0:45:10:91:8f:36:e8:cf:cb:6c:81:77:85:0c:35:
b4:56:fd:39:1e:55:00:9b:6e:f7:de:3f:07:4c:1c:af:ec:e9:
4c:72:ae:ab:26:f3:68:c4:1a:e9:9e:03:d6:bc:ae:6a:c4:02:
3a:b5:3e:9c:23:2c:b6:64:df:df:c4:fb:e1:de:35:cd:9b:70:
e6:fd:a2:57:fb:a6:c1:d7:66:2e:55:4e:e0:e7:23:41:42:7d:
8e:34:29:ee:79:3a:2b:87:42:ed:92:49:7e:4e:52:4a:33:e1:
0f:0d:52:9b:0b:65:a4:77:7b:c1:98:2a:73:ef:f8:7b:31:2a:
9b:34:97:63:59:eb:58:0d:94:0a:90:3a:52:e8:8c:9f:78:b4:
a8:ad:e0:26:08:2b:ed:f3:67:64:65:79:c4:5d:09:80:31:74:
0c:85:e7:39:53:7d:64:93:bf:a5:1b:4c:f7:a2:1a:bc:68:fc:
70:22:f3:38:e0:97:94:a8:e0:ab:b5:39:62:29:fb:2c:b1:17:
89:79:05:d7:31:50:48:35:95:81:76:66:5d:36:fe:ad:11:17:
31:ad:c7:9f:79:5f:a2:2f:af:4d:8a:9d:90:f0:9d:53:94:74:
6a:68:1a:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 22:02:09 2025 by rpki-client