Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/f4ca1c-35dd-4cb1-84fa-8115cafd38ce/1/YyznHEd8Kc_gVkX4JW83QwXbw0s.roa
File: YyznHEd8Kc_gVkX4JW83QwXbw0s.roa (raw, json)
Hash identifier: 7H2M7x88hC0Rn7HAr0Wp9N6InBENMOQhxKv7FUYQa8k=
Subject key identifier: 63:2C:E7:1C:47:7C:29:CF:E0:56:45:F8:25:6F:37:43:05:DB:C3:4B
Certificate issuer: /CN=b0bd68e370e7ec25bec8e01497b2138d95dc6ebc
Certificate serial: 018CC50101BCFF01F6571DF17FA17B81F56C
Authority key identifier: B0:BD:68:E3:70:E7:EC:25:BE:C8:E0:14:97:B2:13:8D:95:DC:6E:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sL1o43Dn7CW-yOAUl7ITjZXcbrw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/f4ca1c-35dd-4cb1-84fa-8115cafd38ce/1/YyznHEd8Kc_gVkX4JW83QwXbw0s.roa
Signing time: Mon 01 Jan 2024 12:30:26 +0000
ROA not before: Mon 01 Jan 2024 12:30:26 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 57459
IP address blocks: 193.222.57.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:01:01:bc:ff:01:f6:57:1d:f1:7f:a1:7b:81:f5:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b0bd68e370e7ec25bec8e01497b2138d95dc6ebc
Validity
Not Before: Jan 1 12:30:26 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=632ce71c477c29cfe05645f8256f374305dbc34b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:fd:fb:65:28:4a:ea:a6:3a:7f:b2:c2:57:6e:
e1:3a:fd:0d:50:46:80:36:96:c1:6c:1e:a4:8d:e1:
20:51:76:10:37:99:a6:6b:2b:fb:6b:05:72:d1:d6:
f8:be:a9:c8:2c:8e:b1:75:76:1f:c6:73:c2:f8:20:
8c:87:a0:b6:1e:13:bc:f1:3b:00:43:ef:43:d1:25:
f7:ba:48:9a:15:d4:93:76:eb:60:4e:a9:3c:82:a3:
67:aa:b0:cc:3b:c0:f7:f2:36:08:42:eb:9d:11:5f:
24:96:c7:97:77:e4:49:93:60:40:27:c0:3a:05:e2:
8f:ba:49:d2:c0:4a:89:1e:1e:1a:02:9d:37:ce:47:
38:6c:32:43:6e:78:d7:be:59:cb:c9:98:d6:5d:ed:
01:52:fd:eb:7b:71:fb:e0:e9:ef:83:36:f7:b8:63:
96:47:a7:ec:bf:b2:ea:e0:13:ad:e6:5b:0f:c1:49:
32:7b:4c:f9:96:db:ef:27:ab:e0:03:f6:61:d2:c8:
f1:37:55:53:52:ef:63:a6:48:53:92:4d:f8:7c:8e:
24:d0:da:e5:72:0e:42:b3:83:cd:ad:0f:dd:a2:de:
43:1d:7c:aa:2e:75:ac:8a:51:05:a6:5f:9f:07:95:
36:81:52:a4:a8:2c:0c:83:03:be:5c:57:7b:3a:9f:
af:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:2C:E7:1C:47:7C:29:CF:E0:56:45:F8:25:6F:37:43:05:DB:C3:4B
X509v3 Authority Key Identifier:
keyid:B0:BD:68:E3:70:E7:EC:25:BE:C8:E0:14:97:B2:13:8D:95:DC:6E:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sL1o43Dn7CW-yOAUl7ITjZXcbrw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/f4ca1c-35dd-4cb1-84fa-8115cafd38ce/1/YyznHEd8Kc_gVkX4JW83QwXbw0s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/f4ca1c-35dd-4cb1-84fa-8115cafd38ce/1/sL1o43Dn7CW-yOAUl7ITjZXcbrw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.222.57.0/24
Signature Algorithm: sha256WithRSAEncryption
a0:8e:e5:1c:19:5b:58:2d:aa:0f:f7:13:d1:37:76:d5:f7:aa:
3b:15:cd:8e:22:20:aa:20:a4:9c:ba:29:18:d8:ca:56:1d:f2:
95:16:fe:cf:cd:0c:04:e1:f1:a7:e0:26:86:90:1c:bd:d7:a9:
7f:21:21:52:1a:42:cd:53:75:5e:c0:13:03:fe:25:b2:23:9d:
ba:3f:99:a4:aa:e8:cb:76:1f:ed:a6:ac:15:a6:62:b9:95:18:
b4:84:67:c3:0a:c8:6d:e5:d1:a2:e2:eb:4b:35:f5:3d:52:a2:
a9:2e:92:35:0d:ff:49:58:cd:71:34:b4:ac:67:ea:e2:6f:f6:
98:3f:69:b7:13:1a:d9:6e:7e:1f:c5:cb:63:6b:42:c3:02:58:
b5:ae:0f:06:27:68:ff:09:00:a5:2e:07:47:1b:12:b5:8e:8b:
25:da:a7:bd:c4:e3:ec:a6:05:9d:47:f0:e8:d7:44:e5:a5:5d:
48:23:48:a9:4c:c7:ce:1b:03:20:f0:20:f3:a5:01:dc:cf:fb:
a9:99:c8:65:bd:56:20:b3:00:cf:85:d3:d6:09:65:09:2e:a7:
e7:bf:10:04:8e:15:1a:42:4a:78:be:80:fd:75:ea:72:b0:74:
4d:d3:9c:4b:bd:a9:b6:12:1d:00:2f:1b:ef:73:76:3a:68:23:
87:b8:1a:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 22:21:36 2025 by rpki-client