Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/4bba7c-a81f-40e1-8814-65daad632957/1/WewXdSsBCiWi9GBOd6HssJ6ru4I.roa
File: WewXdSsBCiWi9GBOd6HssJ6ru4I.roa (raw, json)
Hash identifier: 3aWtTwYb2Ys/oQ+yiI3HeczoGxwsx2qNtkczXWE/2vs=
Subject key identifier: 59:EC:17:75:2B:01:0A:25:A2:F4:60:4E:77:A1:EC:B0:9E:AB:BB:82
Certificate issuer: /CN=942588b91da9cca81b49e603a988e2b1eabddc98
Certificate serial: 0195AAA402C0B23EB1F3DEF1E1BE6F25E16E
Authority key identifier: 94:25:88:B9:1D:A9:CC:A8:1B:49:E6:03:A9:88:E2:B1:EA:BD:DC:98
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lCWIuR2pzKgbSeYDqYjiseq93Jg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/4bba7c-a81f-40e1-8814-65daad632957/1/WewXdSsBCiWi9GBOd6HssJ6ru4I.roa
Signing time: Tue 18 Mar 2025 19:03:50 +0000
ROA not before: Tue 18 Mar 2025 19:03:50 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 8647
IP address blocks: 193.200.175.0/24 maxlen: 24
2a0f:3a00::/29 maxlen: 29
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:aa:a4:02:c0:b2:3e:b1:f3:de:f1:e1:be:6f:25:e1:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=942588b91da9cca81b49e603a988e2b1eabddc98
Validity
Not Before: Mar 18 19:03:50 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=59ec17752b010a25a2f4604e77a1ecb09eabbb82
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:bc:83:6e:c9:4b:20:1f:3d:8e:d7:03:5a:df:
26:da:93:57:38:da:70:94:86:35:c7:11:83:08:08:
0c:18:dd:f6:20:62:da:31:19:9f:c2:3d:cb:59:95:
c4:d0:94:f2:29:41:76:17:4c:d9:ea:af:f0:df:a6:
d1:ec:80:90:13:e1:7d:d1:ba:3c:9a:f4:48:31:5d:
52:ea:cf:9f:4a:d3:b8:af:ec:67:9f:38:81:9c:c1:
3a:3b:47:c9:11:fd:00:c0:34:fc:6d:0d:04:2f:4a:
70:e0:b2:59:48:0c:54:3f:b9:b2:67:48:93:34:a1:
7c:46:dd:64:86:92:76:6a:7a:77:b9:73:b3:bc:7d:
a2:b4:e7:eb:35:3e:89:9a:c2:a4:48:bb:01:d3:e2:
0b:91:8b:31:7b:1c:3e:e7:7c:c5:41:1f:73:61:a0:
bd:85:18:65:bb:09:4e:fb:b5:75:99:b7:7d:b1:a9:
3a:41:81:b3:56:25:de:11:5a:f9:cb:9d:00:f3:70:
a2:d9:16:12:31:fc:81:95:c9:ca:36:90:6c:8f:94:
d6:d5:cd:6b:c4:25:d2:b1:d9:73:23:00:3a:aa:04:
6d:9e:bc:69:c4:44:f6:60:9d:2f:9a:0f:5e:3c:c6:
21:e9:ae:d1:21:8c:6d:2b:09:e3:14:44:71:6d:fe:
62:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:EC:17:75:2B:01:0A:25:A2:F4:60:4E:77:A1:EC:B0:9E:AB:BB:82
X509v3 Authority Key Identifier:
keyid:94:25:88:B9:1D:A9:CC:A8:1B:49:E6:03:A9:88:E2:B1:EA:BD:DC:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lCWIuR2pzKgbSeYDqYjiseq93Jg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/4bba7c-a81f-40e1-8814-65daad632957/1/WewXdSsBCiWi9GBOd6HssJ6ru4I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/4bba7c-a81f-40e1-8814-65daad632957/1/lCWIuR2pzKgbSeYDqYjiseq93Jg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.200.175.0/24
IPv6:
2a0f:3a00::/29
Signature Algorithm: sha256WithRSAEncryption
73:7e:b4:a0:8e:55:8f:dc:a9:23:4c:e6:9a:eb:61:2f:c2:67:
db:92:dc:76:bd:fa:32:16:80:b4:69:1c:ab:db:32:80:62:3c:
5c:a1:2e:1c:f3:9b:df:7e:58:f8:df:5e:e1:54:f5:c9:ef:d2:
38:81:a5:60:c8:08:05:05:c9:ec:77:96:67:10:c0:b1:10:fb:
e7:1f:4b:48:f8:c4:d9:a1:f4:4f:fa:78:a9:77:14:f3:ea:ba:
15:90:ab:70:25:fb:d7:f9:f9:ab:65:02:f9:d0:17:68:d9:8e:
f8:44:b8:74:30:82:49:37:8a:0e:58:16:ad:49:c5:58:c9:7e:
b9:17:7e:cb:6b:b7:e1:d7:59:d5:90:f6:fc:bf:9f:06:da:1b:
36:53:a7:ba:eb:7e:c4:03:17:69:4e:f9:59:83:90:55:aa:67:
c2:68:28:b0:d6:a2:23:4e:90:db:43:1c:51:ba:7e:c6:2a:73:
22:76:dc:8f:23:a2:bd:8d:e8:64:7a:34:83:88:c0:4f:a0:97:
dc:8c:68:c7:cb:2b:c2:98:6e:a2:a1:d4:89:b3:32:82:9f:ad:
3a:45:61:9c:e2:e2:25:a2:f1:b3:55:e5:c5:51:f5:bf:3e:c1:
cf:74:19:b8:ed:5f:f9:37:9a:5b:d7:9f:19:ac:0e:7d:df:78:
83:09:c6:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 23:37:51 2025 by rpki-client