Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/a96024-6555-4e8d-af37-62bb6d63e59d/1/Vuy4PPRdCC26DOsuH5X8ElNy2Do.roa
File: Vuy4PPRdCC26DOsuH5X8ElNy2Do.roa (raw, json)
Hash identifier: PL8SyFod+SKAK4B6o4W7G+aJiI14Jns/xYYHVhGCg98=
Subject key identifier: 56:EC:B8:3C:F4:5D:08:2D:BA:0C:EB:2E:1F:95:FC:12:53:72:D8:3A
Certificate issuer: /CN=dff24726df3e77f6f4c8e0436613b35110eeaf38
Certificate serial: 01890C125E33AB9BDEB41826981C27C698B4
Authority key identifier: DF:F2:47:26:DF:3E:77:F6:F4:C8:E0:43:66:13:B3:51:10:EE:AF:38
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3_JHJt8-d_b0yOBDZhOzURDurzg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/a96024-6555-4e8d-af37-62bb6d63e59d/1/Vuy4PPRdCC26DOsuH5X8ElNy2Do.roa
Signing time: Fri 30 Jun 2023 11:31:17 +0000
ROA not before: Fri 30 Jun 2023 11:31:17 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 61317
IP address blocks: 195.34.78.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:0c:12:5e:33:ab:9b:de:b4:18:26:98:1c:27:c6:98:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dff24726df3e77f6f4c8e0436613b35110eeaf38
Validity
Not Before: Jun 30 11:31:17 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=56ecb83cf45d082dba0ceb2e1f95fc125372d83a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:b5:23:b0:c0:1a:cd:73:7d:c9:26:87:10:5b:
d5:f9:ec:08:b3:7f:b8:07:75:45:0c:95:80:ba:97:
b6:14:a5:a9:49:2f:c1:a4:f1:1d:bb:22:f0:f1:dd:
47:be:8d:bf:6a:0c:37:f3:46:c0:a0:66:a5:cf:72:
2e:47:25:f3:1f:8d:48:14:bd:8a:95:7c:6d:d1:a9:
10:36:ec:68:78:b5:e7:3b:3c:17:57:8a:a1:09:ae:
f5:0a:bd:2a:31:09:cd:4d:dd:ec:d8:c8:9e:e2:c7:
c9:f6:1f:02:4e:2c:e5:75:f7:0b:0d:7a:11:df:81:
85:de:18:03:61:7f:85:6d:89:2b:d9:99:37:6b:03:
a6:cb:6a:8a:a4:4e:73:3a:74:44:eb:34:8f:e1:c2:
b8:f5:9d:9a:a3:e6:6a:d2:0b:a5:9d:73:0d:ce:ef:
e1:42:7b:90:39:be:94:f7:80:a2:7b:67:23:87:38:
3c:c4:e9:52:a9:3b:76:22:53:4b:44:f0:32:c2:8d:
a2:f2:a8:02:54:3d:6e:5a:80:3e:3c:6c:f1:90:81:
4d:0c:28:f6:5b:54:fa:2a:1f:b0:81:2a:8a:ee:ad:
0d:20:5e:8d:34:f7:11:4b:9c:6b:f6:5c:fa:94:c8:
23:70:02:d2:ab:00:2e:a3:4f:97:ca:8f:6f:b3:36:
5a:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:EC:B8:3C:F4:5D:08:2D:BA:0C:EB:2E:1F:95:FC:12:53:72:D8:3A
X509v3 Authority Key Identifier:
keyid:DF:F2:47:26:DF:3E:77:F6:F4:C8:E0:43:66:13:B3:51:10:EE:AF:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3_JHJt8-d_b0yOBDZhOzURDurzg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a96024-6555-4e8d-af37-62bb6d63e59d/1/Vuy4PPRdCC26DOsuH5X8ElNy2Do.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a96024-6555-4e8d-af37-62bb6d63e59d/1/3_JHJt8-d_b0yOBDZhOzURDurzg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.34.78.0/24
Signature Algorithm: sha256WithRSAEncryption
86:d4:4b:7e:f1:c3:65:42:98:70:62:75:fc:9c:f1:eb:67:69:
f7:70:f1:a9:24:d9:d9:dc:4e:43:f8:86:4f:9a:dd:c4:26:d3:
5b:b3:c6:ba:0f:b7:39:32:c7:d1:0e:ca:41:e6:60:c2:ae:d4:
6f:58:5b:03:b0:e2:bb:b0:07:c5:fd:a6:25:d9:47:3b:47:45:
9c:02:8f:26:5e:bd:36:ac:b2:d7:60:b6:8f:e1:6e:b9:db:7f:
9f:e2:94:74:e6:bd:c1:53:7f:38:27:7a:dd:41:fb:16:c9:3f:
36:0e:90:a4:f0:ce:f0:17:68:23:83:42:fc:13:a1:09:e4:4e:
81:b5:19:57:8d:b4:0d:87:85:0f:5d:1b:b9:9e:41:51:8c:8c:
15:fb:52:f1:c9:65:3b:91:f1:2d:a3:6c:6b:30:51:c2:bd:8e:
e1:3f:bc:62:1a:ea:b2:2e:10:2f:bf:f5:08:f7:f9:3e:6e:09:
cb:11:e8:c2:c5:57:7a:4a:63:a0:b7:97:86:ab:56:81:7b:66:
77:52:a1:6c:fe:bb:23:59:92:bb:e7:b0:6a:9b:09:32:b6:2f:
6a:f9:53:db:1e:83:1c:c0:78:90:54:c2:91:73:36:86:07:fe:
43:09:9b:95:13:10:ff:b6:46:cf:6f:2a:d4:5f:08:65:5d:33:
a6:7e:2e:9f
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYkMEl4zq5vetBgmmBwnxpi0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRmZjI0NzI2ZGYzZTc3ZjZmNGM4ZTA0MzY2MTNiMzUxMTBl
ZWFmMzgwHhcNMjMwNjMwMTEzMTE3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1NmVjYjgzY2Y0NWQwODJkYmEwY2ViMmUxZjk1ZmMxMjUzNzJkODNhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj7UjsMAazXN9ySaHEFvV+ewIs3+4
B3VFDJWAupe2FKWpSS/BpPEduyLw8d1Hvo2/agw380bAoGalz3IuRyXzH41IFL2K
lXxt0akQNuxoeLXnOzwXV4qhCa71Cr0qMQnNTd3s2Mie4sfJ9h8CTizldfcLDXoR
34GF3hgDYX+FbYkr2Zk3awOmy2qKpE5zOnRE6zSP4cK49Z2ao+Zq0gulnXMNzu/h
QnuQOb6U94Cie2cjhzg8xOlSqTt2IlNLRPAywo2i8qgCVD1uWoA+PGzxkIFNDCj2
W1T6Kh+wgSqK7q0NIF6NNPcRS5xr9lz6lMgjcALSqwAuo0+Xyo9vszZagwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFFbsuDz0XQgtugzrLh+V/BJTctg6MB8GA1UdIwQY
MBaAFN/yRybfPnf29MjgQ2YTs1EQ7q84MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM19KSEp0OC1kX2IweU9CRFpoT3pVUkR1cnpnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9hOTYwMjQtNjU1NS00ZThkLWFmMzct
NjJiYjZkNjNlNTlkLzEvVnV5NFBQUmRDQzI2RE9zdUg1WDhFbE55MkRvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOC9hOTYwMjQtNjU1NS00ZThkLWFmMzctNjJiYjZkNjNlNTlk
LzEvM19KSEp0OC1kX2IweU9CRFpoT3pVUkR1cnpnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwyJOMA0G
CSqGSIb3DQEBCwUAA4IBAQCG1Et+8cNlQphwYnX8nPHrZ2n3cPGpJNnZ3E5D+IZP
mt3EJtNbs8a6D7c5MsfRDspB5mDCrtRvWFsDsOK7sAfF/aYl2Uc7R0WcAo8mXr02
rLLXYLaP4W6523+f4pR05r3BU384J3rdQfsWyT82DpCk8M7wF2gjg0L8E6EJ5E6B
tRlXjbQNh4UPXRu5nkFRjIwV+1LxyWU7kfEto2xrMFHCvY7hP7xiGuqyLhAvv/UI
9/k+bgnLEejCxVd6SmOgt5eGq1aBe2Z3UqFs/rsjWZK757Bqmwkyti9q+VPbHoMc
wHiQVMKRczaGB/5DCZuVExD/tkbPbyrUXwhlXTOmfi6f
-----END CERTIFICATE-----
Generated at Mon Jun 9 00:00:47 2025 by rpki-client