Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/dZSsu_QOB4Saxy1Uzx_epBtbiHU.roa
File: dZSsu_QOB4Saxy1Uzx_epBtbiHU.roa (raw, json)
Hash identifier: mYtULZHEnngHFFKasDvbNbssdosgErN745GY9NUaulg=
Subject key identifier: 75:94:AC:BB:F4:0E:07:84:9A:C7:2D:54:CF:1F:DE:A4:1B:5B:88:75
Certificate issuer: /CN=c2778de2a9be9802120382e750d159e95872c2ae
Certificate serial: 0193FDEDC7B03969F3BFB701C80E98DC2685
Authority key identifier: C2:77:8D:E2:A9:BE:98:02:12:03:82:E7:50:D1:59:E9:58:72:C2:AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wneN4qm-mAISA4LnUNFZ6Vhywq4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/dZSsu_QOB4Saxy1Uzx_epBtbiHU.roa
Signing time: Wed 25 Dec 2024 13:07:19 +0000
ROA not before: Wed 25 Dec 2024 13:07:19 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 216246
IP address blocks: 83.147.255.0/24 maxlen: 24
178.253.55.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:fd:ed:c7:b0:39:69:f3:bf:b7:01:c8:0e:98:dc:26:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2778de2a9be9802120382e750d159e95872c2ae
Validity
Not Before: Dec 25 13:07:19 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7594acbbf40e07849ac72d54cf1fdea41b5b8875
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:fb:b2:4c:32:14:7d:f1:45:7a:ba:a1:f8:8c:
63:61:5d:04:cb:aa:77:f7:9c:84:ed:e5:89:dd:ec:
3b:9d:39:cd:61:25:5e:c6:5a:03:c7:0d:d3:4d:b0:
75:ba:cc:33:b7:10:30:61:30:d6:e1:bf:fe:15:47:
a5:ed:34:38:7a:d2:cf:f9:44:a7:7c:db:22:6e:74:
9d:fe:e7:02:88:15:0a:30:4e:c9:7f:72:f5:75:8a:
1b:a5:99:ff:48:8e:6a:cf:26:e2:23:38:06:83:19:
fb:43:82:67:e6:02:0e:65:89:b4:66:64:40:de:0b:
46:d2:00:9c:88:9c:c0:03:7b:55:b4:bf:2b:aa:9d:
64:91:f2:6a:25:ea:a5:7b:4a:54:bb:24:17:51:c5:
c1:d8:5f:f0:d4:17:37:e2:14:6d:3c:5b:35:f6:bb:
98:ed:5a:8a:10:22:6a:f7:75:19:a6:88:f5:58:e3:
79:b8:b2:4b:75:5c:40:36:61:9b:f8:eb:32:c1:b9:
2a:31:c1:e2:f7:e8:da:dc:c6:fd:3d:fb:d1:14:c5:
a2:ec:8b:b9:a8:a5:de:f0:8c:2c:02:70:cd:1f:5b:
e9:8f:2d:24:6e:c4:8f:b4:8d:fd:06:27:76:bf:22:
d0:5b:c6:3f:17:9f:0c:d7:e5:00:e4:d7:e5:3b:fa:
27:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:94:AC:BB:F4:0E:07:84:9A:C7:2D:54:CF:1F:DE:A4:1B:5B:88:75
X509v3 Authority Key Identifier:
keyid:C2:77:8D:E2:A9:BE:98:02:12:03:82:E7:50:D1:59:E9:58:72:C2:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wneN4qm-mAISA4LnUNFZ6Vhywq4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/dZSsu_QOB4Saxy1Uzx_epBtbiHU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/wneN4qm-mAISA4LnUNFZ6Vhywq4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.147.255.0/24
178.253.55.0/24
Signature Algorithm: sha256WithRSAEncryption
51:eb:69:1b:06:7c:e0:94:31:ac:84:77:e6:85:31:61:9f:e3:
65:da:cf:6c:f2:b4:ad:1e:35:f3:6e:ca:b9:83:e9:ee:af:df:
6e:7e:92:e3:31:95:d2:7d:40:d2:6f:3a:80:a8:bb:23:cc:40:
5f:c7:98:06:8b:e7:60:e5:27:55:9e:1b:1b:2f:35:1f:b8:3f:
67:74:a3:33:1b:7d:55:56:5e:72:74:a5:e8:6f:12:68:9a:fa:
5e:03:56:38:27:b8:ed:50:b4:18:82:b3:22:3a:34:93:e2:bc:
e7:ca:2a:43:f6:c8:72:c5:4c:2c:00:26:c3:51:54:f0:06:82:
0e:31:56:66:1f:66:65:02:8e:97:16:fe:3c:4a:25:db:e9:f4:
d3:40:ce:de:50:2d:5c:ef:e9:44:7b:88:d9:f1:65:f5:4a:89:
11:33:66:96:42:b7:20:95:3f:98:b2:4a:4a:b3:fe:08:15:d1:
77:6f:4c:ec:b9:27:75:07:13:4f:22:bf:d1:f6:1b:4c:d0:96:
76:e8:90:43:fc:ea:be:da:a1:0d:fa:5f:e3:82:28:f0:c0:d4:
7b:3a:56:a2:87:35:6b:40:e4:d5:e2:cc:f7:31:34:a9:04:57:
74:1a:20:0c:79:a8:3a:e0:99:de:08:b9:48:af:54:85:9c:7a:
43:4d:5e:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 05:40:31 2025 by rpki-client