Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/a188bc-deee-42ec-8289-ed84a0058a9f/1/Hysab8qqSwZpR5xWLK8MxzrSTAQ.roa
File: Hysab8qqSwZpR5xWLK8MxzrSTAQ.roa (raw, json)
Hash identifier: 7+7atzcin1uMGb0u7KHb/ubYGFSGyw+ZB1ThYHWknlI=
Subject key identifier: 1F:2B:1A:6F:CA:AA:4B:06:69:47:9C:56:2C:AF:0C:C7:3A:D2:4C:04
Certificate issuer: /CN=b328fe258a1b9bf6148a6ce0e8a712f18840904c
Certificate serial: 018E8082944715C13FE215307293621DCF69
Authority key identifier: B3:28:FE:25:8A:1B:9B:F6:14:8A:6C:E0:E8:A7:12:F1:88:40:90:4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/syj-JYobm_YUimzg6KcS8YhAkEw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/a188bc-deee-42ec-8289-ed84a0058a9f/1/Hysab8qqSwZpR5xWLK8MxzrSTAQ.roa
Signing time: Wed 27 Mar 2024 15:23:45 +0000
ROA not before: Wed 27 Mar 2024 15:23:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 25459
IP address blocks: 83.172.128.0/21 maxlen: 21
83.172.136.0/24 maxlen: 24
83.172.138.0/23 maxlen: 23
83.172.140.0/22 maxlen: 22
83.172.140.0/23 maxlen: 23
83.172.144.0/21 maxlen: 21
83.172.144.0/22 maxlen: 22
83.172.148.0/24 maxlen: 24
83.172.150.0/23 maxlen: 23
83.172.152.0/23 maxlen: 23
83.172.153.0/24 maxlen: 24
83.172.158.0/23 maxlen: 23
83.172.159.0/24 maxlen: 24
83.172.160.0/22 maxlen: 22
83.172.164.0/23 maxlen: 23
83.172.168.0/23 maxlen: 23
83.172.169.0/24 maxlen: 24
83.172.180.0/22 maxlen: 22
83.172.186.0/24 maxlen: 24
83.172.188.0/23 maxlen: 23
83.172.190.0/24 maxlen: 24
2a02:cec0::/30 maxlen: 30
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:80:82:94:47:15:c1:3f:e2:15:30:72:93:62:1d:cf:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b328fe258a1b9bf6148a6ce0e8a712f18840904c
Validity
Not Before: Mar 27 15:23:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1f2b1a6fcaaa4b0669479c562caf0cc73ad24c04
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:e6:49:c6:4f:c6:ea:03:5f:b1:b5:32:da:85:
4d:56:f2:c8:1b:a8:03:b7:33:48:98:19:70:22:e6:
d3:17:fd:ac:09:be:55:25:ad:4e:46:0a:d6:bb:79:
df:f2:89:c3:2d:55:55:60:48:1e:93:22:0d:4d:55:
98:b2:4a:17:ac:ac:48:78:c7:58:83:c5:33:05:71:
11:00:53:f4:e7:87:53:e1:97:91:b4:b1:8f:aa:ea:
41:79:69:04:67:ec:d3:c4:b8:01:de:f4:e2:52:ef:
65:8e:bf:d8:2e:6c:86:5e:1f:22:c3:6d:28:41:7d:
5d:b8:dd:fb:80:cf:7d:de:fe:cb:d0:f3:91:a3:95:
a0:4f:d6:0a:b4:1f:6a:06:1b:ec:09:d4:21:db:89:
ff:1d:9a:b7:63:1c:54:d8:5c:23:06:89:26:1a:8a:
eb:cf:68:7c:ae:f0:31:80:97:f4:06:c2:9e:3a:3d:
fd:a2:52:78:9c:d0:7d:86:88:d7:b1:d6:bc:64:51:
b6:7a:9e:b0:af:18:09:bd:7b:1a:4c:1d:71:a8:4e:
57:69:ce:90:95:63:b3:56:de:37:cc:46:a9:25:fd:
c5:a0:ea:db:4e:50:05:3d:22:00:c0:d5:24:10:df:
20:5a:f0:b1:88:c8:ff:fd:85:24:28:5a:d3:c6:66:
d2:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:2B:1A:6F:CA:AA:4B:06:69:47:9C:56:2C:AF:0C:C7:3A:D2:4C:04
X509v3 Authority Key Identifier:
keyid:B3:28:FE:25:8A:1B:9B:F6:14:8A:6C:E0:E8:A7:12:F1:88:40:90:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/syj-JYobm_YUimzg6KcS8YhAkEw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/a188bc-deee-42ec-8289-ed84a0058a9f/1/Hysab8qqSwZpR5xWLK8MxzrSTAQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/a188bc-deee-42ec-8289-ed84a0058a9f/1/syj-JYobm_YUimzg6KcS8YhAkEw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.172.128.0-83.172.136.255
83.172.138.0-83.172.153.255
83.172.158.0-83.172.165.255
83.172.168.0/23
83.172.180.0/22
83.172.186.0/24
83.172.188.0-83.172.190.255
IPv6:
2a02:cec0::/30
Signature Algorithm: sha256WithRSAEncryption
6a:99:8a:19:be:79:96:11:e6:02:b6:6f:95:bc:81:17:85:f2:
8a:cf:d7:92:d2:14:77:ae:4f:8d:49:d0:74:3c:80:2c:dd:0b:
57:d9:b0:03:d6:16:26:da:21:e6:bb:d6:81:07:9f:8a:7e:16:
27:da:c6:4c:8a:60:95:b1:46:6e:6b:df:a5:7f:b5:e3:20:ee:
d8:96:d9:a4:8a:42:fd:b2:84:19:60:76:74:8b:16:aa:c7:c2:
28:42:8f:45:f7:c0:85:c5:61:87:46:f3:dd:da:78:d0:b2:13:
7e:a1:e9:53:8a:34:61:f0:77:b2:2e:3a:85:49:3d:87:a2:d6:
7d:3b:9d:4a:28:70:ef:22:1a:d2:55:bf:3a:76:d1:ad:c2:36:
2e:0a:98:6c:75:8c:b1:6b:9e:34:ae:c0:9c:3a:77:e8:ff:96:
9d:ec:8b:1e:0f:42:1a:7d:3c:7e:87:82:3c:ea:d8:31:9c:db:
2b:2a:26:99:ab:ca:a9:44:6f:42:dc:f5:b5:c2:79:f4:6a:9f:
1b:15:76:be:c2:24:12:fd:14:51:20:c0:31:cb:98:e5:40:18:
cf:58:1f:8d:be:27:c2:cf:10:46:c9:ab:d3:f6:19:25:ee:08:
0d:11:f1:e5:f9:04:cf:0f:87:97:be:49:74:04:23:26:ba:a3:
96:15:83:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:19:51 2024 by rpki-client on console-ams.rpki-client.org