Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/R-WzDpnudDeQbuU7KYGjZ3lZpUM.roa
File: R-WzDpnudDeQbuU7KYGjZ3lZpUM.roa (raw, json)
Hash identifier: e5tayCBi1XXzmQLsgkw/0vShho9WByJL+CNLsok61uk=
Subject key identifier: 47:E5:B3:0E:99:EE:74:37:90:6E:E5:3B:29:81:A3:67:79:59:A5:43
Certificate issuer: /CN=c2778de2a9be9802120382e750d159e95872c2ae
Certificate serial: 018CC9BAA11E85C65AF5E55F28ABFA223004
Authority key identifier: C2:77:8D:E2:A9:BE:98:02:12:03:82:E7:50:D1:59:E9:58:72:C2:AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wneN4qm-mAISA4LnUNFZ6Vhywq4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/R-WzDpnudDeQbuU7KYGjZ3lZpUM.roa
Signing time: Tue 02 Jan 2024 10:31:40 +0000
ROA not before: Tue 02 Jan 2024 10:31:40 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 202492
IP address blocks: 83.147.196.0/22 maxlen: 22
83.147.195.0/24 maxlen: 24
94.241.188.0/22 maxlen: 22
83.147.200.0/22 maxlen: 22
83.147.204.0/22 maxlen: 22
83.147.208.0/24 maxlen: 24
83.147.210.0/24 maxlen: 24
83.147.211.0/24 maxlen: 24
83.147.209.0/24 maxlen: 24
83.147.218.0/23 maxlen: 23
83.147.220.0/23 maxlen: 23
83.147.224.0/22 maxlen: 22
83.147.228.0/22 maxlen: 22
83.147.236.0/22 maxlen: 22
178.253.0.0/21 maxlen: 21
94.241.144.0/21 maxlen: 21
178.253.14.0/23 maxlen: 23
178.253.17.0/24 maxlen: 24
178.253.18.0/23 maxlen: 23
178.253.20.0/23 maxlen: 23
178.253.24.0/23 maxlen: 23
178.253.28.0/23 maxlen: 24
178.253.30.0/24 maxlen: 24
178.253.36.0/23 maxlen: 23
178.253.34.0/23 maxlen: 23
178.253.46.0/23 maxlen: 23
178.253.54.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:ba:a1:1e:85:c6:5a:f5:e5:5f:28:ab:fa:22:30:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2778de2a9be9802120382e750d159e95872c2ae
Validity
Not Before: Jan 2 10:31:40 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=47e5b30e99ee7437906ee53b2981a3677959a543
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:73:33:30:f9:23:3f:03:15:56:db:04:37:85:
78:14:99:8c:03:c0:a1:df:be:a5:d5:0b:c1:44:cf:
2b:3e:ae:65:86:60:32:7b:ec:55:08:3f:6f:63:09:
a1:b2:30:c8:17:ff:2f:f7:98:4f:d0:23:5c:4a:2e:
06:ff:6f:c7:bb:a4:35:4a:06:54:2d:d0:b5:42:f2:
fa:75:42:c9:6a:b4:11:9e:6b:0b:cc:e3:a2:9f:d3:
0e:0d:84:f0:b0:b7:5b:cd:44:15:69:f4:41:be:38:
77:5b:97:c6:d3:68:cd:3c:89:3b:80:3d:6e:a7:b9:
8a:81:0d:8a:5c:20:cb:f9:31:de:e7:e4:0c:2e:cd:
5d:26:03:24:1e:be:c5:b3:6a:c0:8c:17:3b:3c:24:
dc:5c:7b:b4:67:c8:ed:b1:4c:18:be:4d:76:91:ea:
d1:ab:02:7f:e4:16:6d:8a:18:27:ac:0e:92:6d:79:
51:d9:65:e2:81:3d:43:63:7a:12:18:85:e7:5b:66:
c6:9b:d5:df:d3:cd:79:cf:60:6b:41:91:34:e2:e4:
76:d7:ec:d2:7e:dc:0a:d6:fb:3b:ff:85:10:e5:f7:
1a:45:9c:5e:0c:95:58:6e:2e:4e:ad:bd:39:15:00:
92:94:d8:25:a5:2a:2e:10:d4:c9:ea:9f:dd:88:8d:
d8:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:E5:B3:0E:99:EE:74:37:90:6E:E5:3B:29:81:A3:67:79:59:A5:43
X509v3 Authority Key Identifier:
keyid:C2:77:8D:E2:A9:BE:98:02:12:03:82:E7:50:D1:59:E9:58:72:C2:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wneN4qm-mAISA4LnUNFZ6Vhywq4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/R-WzDpnudDeQbuU7KYGjZ3lZpUM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/wneN4qm-mAISA4LnUNFZ6Vhywq4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.147.195.0-83.147.211.255
83.147.218.0-83.147.221.255
83.147.224.0/21
83.147.236.0/22
94.241.144.0/21
94.241.188.0/22
178.253.0.0/21
178.253.14.0/23
178.253.17.0-178.253.21.255
178.253.24.0/23
178.253.28.0-178.253.30.255
178.253.34.0-178.253.37.255
178.253.46.0/23
178.253.54.0/24
Signature Algorithm: sha256WithRSAEncryption
63:33:59:f3:dd:c9:df:c0:7a:d8:1d:41:7e:e0:b3:bb:fb:c7:
f7:3c:8c:39:07:ba:d4:d9:fd:d8:cd:46:2f:5b:aa:22:c9:05:
72:40:b6:f6:cc:b4:de:5e:ac:97:5e:3c:fb:7d:39:e2:7c:c3:
f9:2c:4b:da:d2:dc:81:66:50:6e:0f:53:12:ee:7e:df:38:69:
75:cd:35:72:b4:a2:b0:b0:cc:bc:4c:4b:ae:73:85:ae:e8:49:
79:22:3c:5f:c1:05:ff:8e:38:c2:9d:3b:bb:a6:e6:63:24:0d:
ec:e9:28:ac:d1:45:73:24:be:0b:73:15:62:f7:9a:46:44:36:
6a:b6:4a:7a:bb:ea:bf:e9:80:73:a1:9c:fb:5d:48:3d:d4:4d:
d6:94:43:c1:ab:72:0d:bb:2b:a5:d1:b6:36:2c:1e:41:1b:5a:
6d:6c:49:26:ed:c0:7f:1d:fc:c3:49:f1:5d:9b:ef:00:a8:d7:
57:5c:39:25:fe:95:a2:b0:91:5a:5f:e6:de:91:80:76:37:ba:
19:f3:96:25:8f:c0:9d:f3:fb:0e:0c:f9:33:38:4a:b9:1d:37:
0d:15:66:6f:24:dc:d0:4d:c9:bf:e2:3c:81:d6:ba:48:11:89:
e5:71:25:1e:25:d4:c0:67:e5:15:31:13:44:b5:ce:cb:60:47:
5e:f2:8a:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:44:00 2025 by rpki-client