Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/c37497-6376-461e-93c6-9778674edc97/1/8zL5Sioud3V37nPRXGFLY9KSazs.roa
File: 8zL5Sioud3V37nPRXGFLY9KSazs.roa (raw, json)
Hash identifier: JNF8IFlXsyaFZZxVhX/UyPWQfCDCpzkkge+GPRu654o=
Subject key identifier: F3:32:F9:4A:2A:2E:77:75:77:EE:73:D1:5C:61:4B:63:D2:92:6B:3B
Certificate issuer: /CN=7df132df13e4be53d8250c8c48420264eef6c14c
Certificate serial: 018CC802CDA7B35C815D650AD3E23B248B68
Authority key identifier: 7D:F1:32:DF:13:E4:BE:53:D8:25:0C:8C:48:42:02:64:EE:F6:C1:4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ffEy3xPkvlPYJQyMSEICZO72wUw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/c37497-6376-461e-93c6-9778674edc97/1/8zL5Sioud3V37nPRXGFLY9KSazs.roa
Signing time: Tue 02 Jan 2024 02:31:16 +0000
ROA not before: Tue 02 Jan 2024 02:31:16 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 59856
IP address blocks: 89.40.75.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:02:cd:a7:b3:5c:81:5d:65:0a:d3:e2:3b:24:8b:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7df132df13e4be53d8250c8c48420264eef6c14c
Validity
Not Before: Jan 2 02:31:16 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f332f94a2a2e777577ee73d15c614b63d2926b3b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:9e:60:9d:2e:36:a1:81:04:1f:cc:60:2f:90:
71:11:00:85:ae:f0:1e:f9:0d:b8:13:69:8a:e1:a3:
a8:77:27:1d:58:5a:fb:11:27:66:e2:b2:27:a8:65:
55:73:2b:20:a5:c5:09:24:e7:6e:b4:42:7e:64:c1:
70:14:3b:aa:62:84:a7:29:03:29:e2:94:18:69:7a:
e0:31:56:b0:df:20:7c:33:6e:b0:96:70:c7:88:77:
9f:63:b6:b4:e9:65:2c:fe:ae:01:c7:db:ff:98:0b:
35:11:34:57:b4:0d:9a:d4:e3:d2:d8:1b:18:8a:69:
28:01:2a:6e:17:35:9e:48:fd:74:e1:8c:22:01:67:
2d:2c:66:16:2e:e1:78:e3:8b:42:33:66:23:5f:13:
34:4a:ed:2f:94:0b:1d:b6:be:86:50:89:7d:f4:35:
de:6d:83:af:6b:2e:61:db:e5:10:91:9c:91:89:1c:
98:98:02:59:77:9a:db:da:43:eb:b0:68:91:7e:24:
d3:3b:5c:e8:98:0a:10:30:8c:a6:99:44:46:80:68:
36:db:c3:49:09:1c:38:0d:99:93:65:a3:28:12:2e:
36:fd:d5:b4:4f:0d:bd:bc:a8:3e:f1:2e:d5:24:9f:
5e:2f:bf:d6:b5:d6:89:56:87:32:cb:3a:0a:90:66:
df:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:32:F9:4A:2A:2E:77:75:77:EE:73:D1:5C:61:4B:63:D2:92:6B:3B
X509v3 Authority Key Identifier:
keyid:7D:F1:32:DF:13:E4:BE:53:D8:25:0C:8C:48:42:02:64:EE:F6:C1:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ffEy3xPkvlPYJQyMSEICZO72wUw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/c37497-6376-461e-93c6-9778674edc97/1/8zL5Sioud3V37nPRXGFLY9KSazs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/c37497-6376-461e-93c6-9778674edc97/1/ffEy3xPkvlPYJQyMSEICZO72wUw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.40.75.0/24
Signature Algorithm: sha256WithRSAEncryption
7d:73:2c:32:1c:94:5f:a7:fa:ec:4d:fc:c7:fe:d2:be:69:9b:
25:93:b5:10:10:3c:43:4d:2f:6e:70:51:af:62:6b:76:70:19:
98:c5:25:3c:42:92:e1:c3:b0:dc:f0:0f:77:61:25:79:f0:ec:
8b:44:fb:89:20:66:62:f6:ad:0f:82:2d:04:9f:77:66:16:44:
7f:d5:1e:1e:df:77:25:6c:55:7f:75:cf:be:72:7f:00:de:dc:
99:b8:bf:c1:32:2e:63:11:44:05:cb:e9:d0:e8:b1:ba:39:7d:
28:08:4c:f2:a7:a5:dc:c5:5e:c0:b9:a2:45:29:c5:af:9d:a0:
c2:c9:d2:1e:52:82:4c:72:aa:e8:5e:f5:6f:10:cd:14:ba:58:
11:9f:95:58:e3:97:29:af:ba:61:11:66:00:b3:31:1e:8a:01:
03:6a:d5:e7:11:74:ee:9c:0b:6f:ff:e3:cd:08:cd:f8:07:11:
4b:2f:fd:db:91:79:73:ff:7e:5d:fe:95:20:5f:1b:3a:99:6f:
6e:80:15:a4:b6:7f:04:1a:7f:38:0b:17:25:0d:84:79:5b:e0:
8b:c3:0b:c0:27:ee:f0:aa:33:52:14:40:8f:ab:49:f5:b9:73:
b9:fa:3d:0b:77:f1:bd:67:b6:1d:29:37:a1:fb:09:68:49:7b:
d8:7c:ac:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 14:51:52 2025 by rpki-client