Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/c61092-734a-4eef-9d67-4905243bc828/1/HRexkV3mN48sscenVJE35dHXGDs.roa
File: HRexkV3mN48sscenVJE35dHXGDs.roa (raw, json)
Hash identifier: oz0Drm6BfhWofRgcxwTDjE7DnJNzwbT8D3VUbBsqa1M=
Subject key identifier: 1D:17:B1:91:5D:E6:37:8F:2C:B1:C7:A7:54:91:37:E5:D1:D7:18:3B
Certificate issuer: /CN=05b1d13c2e26e12786246a5ec4c5bea69864b20f
Certificate serial: 01856E2FBA4F5D366FC5151076D6AB2590DC
Authority key identifier: 05:B1:D1:3C:2E:26:E1:27:86:24:6A:5E:C4:C5:BE:A6:98:64:B2:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BbHRPC4m4SeGJGpexMW-pphksg8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/c61092-734a-4eef-9d67-4905243bc828/1/HRexkV3mN48sscenVJE35dHXGDs.roa
Signing time: Sun 01 Jan 2023 16:34:59 +0000
ROA not before: Sun 01 Jan 2023 16:34:59 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 1239
IP address blocks: 212.60.23.0/24 maxlen: 24
45.66.117.0/24 maxlen: 24
45.129.187.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:2f:ba:4f:5d:36:6f:c5:15:10:76:d6:ab:25:90:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05b1d13c2e26e12786246a5ec4c5bea69864b20f
Validity
Not Before: Jan 1 16:34:59 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1d17b1915de6378f2cb1c7a7549137e5d1d7183b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:66:6e:34:7a:04:21:3f:1a:82:34:22:09:cc:
d2:3a:4c:25:d1:d4:96:bf:5a:92:a6:77:55:1f:6e:
25:de:b6:80:6c:44:7e:78:d2:4e:a7:a1:8f:c1:42:
03:19:85:a6:48:ef:fb:6a:53:a0:45:7b:65:bd:ea:
83:6f:cd:21:60:62:a6:98:b9:83:d9:fa:03:d4:19:
bc:a1:67:c9:ca:e6:6f:cf:e9:84:c4:bf:ce:0e:3d:
a9:56:4a:fa:f5:e6:84:08:f2:a2:1f:19:dd:bf:6b:
7c:a9:99:6d:19:ae:bf:6b:5e:a4:82:2f:b5:73:2e:
4a:bd:19:bf:78:b7:f3:55:0a:86:8f:fd:b2:b3:5f:
33:da:74:6b:99:2a:b2:1f:67:22:02:f5:f3:88:59:
fa:e5:b6:72:00:73:15:98:2f:ec:7b:fd:e6:2f:4a:
dd:b1:a9:5e:19:e8:35:14:ef:2e:14:4f:fe:b6:66:
7a:bd:17:c9:7c:c0:d5:c0:28:04:7b:1c:3b:f0:85:
ec:51:71:c1:6a:6d:5f:e3:25:d0:0f:d2:04:f2:70:
a3:00:ba:f5:63:fa:db:0c:b0:64:be:ad:f9:40:54:
8e:8f:dd:65:db:7d:8a:b5:e4:7b:4b:73:5f:41:cf:
a3:5f:0d:54:31:0a:69:b3:6e:24:b5:ab:a1:84:cb:
26:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:17:B1:91:5D:E6:37:8F:2C:B1:C7:A7:54:91:37:E5:D1:D7:18:3B
X509v3 Authority Key Identifier:
keyid:05:B1:D1:3C:2E:26:E1:27:86:24:6A:5E:C4:C5:BE:A6:98:64:B2:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BbHRPC4m4SeGJGpexMW-pphksg8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/c61092-734a-4eef-9d67-4905243bc828/1/HRexkV3mN48sscenVJE35dHXGDs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/c61092-734a-4eef-9d67-4905243bc828/1/BbHRPC4m4SeGJGpexMW-pphksg8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.66.117.0/24
45.129.187.0/24
212.60.23.0/24
Signature Algorithm: sha256WithRSAEncryption
38:ea:ed:98:21:bc:a0:bd:d4:99:22:41:41:b6:ae:0a:3a:19:
27:02:72:47:4f:1c:76:23:45:54:84:b4:e1:5d:e8:0c:eb:40:
c1:5b:a1:b3:fa:3c:37:de:14:fb:b3:da:b2:48:44:1f:80:6b:
3e:49:6b:db:f1:6d:b6:e2:90:0d:89:6a:9d:ae:64:76:4b:10:
85:cb:8f:5e:46:10:de:14:c9:1e:86:22:f7:62:d7:19:b1:2b:
77:74:b7:9b:71:b5:1a:34:00:85:a8:4d:08:7e:82:cc:07:b9:
1b:16:5b:2c:f6:4b:43:c6:92:0b:1c:64:b3:4b:2e:98:82:8a:
8c:6a:71:21:91:82:fb:e4:b3:88:0c:5e:f6:d6:06:2a:08:18:
e9:5b:8a:c1:63:25:13:e8:c6:bc:7a:e9:8a:8c:f7:f5:4d:81:
0a:70:66:fe:a6:d1:65:ac:03:c6:4a:b4:fb:ef:c6:d2:af:e8:
4f:25:fd:44:d2:d4:13:96:89:d8:83:ee:c0:61:6c:e2:63:3d:
fd:0f:dd:58:2c:d2:dd:94:cd:6c:de:70:b3:6a:d3:01:e6:33:
82:5f:28:f7:bb:8f:a3:34:dc:57:5e:7e:d5:bb:9e:94:fa:e3:
a8:30:f6:5f:44:58:d5:1f:ab:9b:f4:ae:32:a8:ba:d5:7b:8b:
61:a2:71:79
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAYVuL7pPXTZvxRUQdtarJZDcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA1YjFkMTNjMmUyNmUxMjc4NjI0NmE1ZWM0YzViZWE2OTg2
NGIyMGYwHhcNMjMwMTAxMTYzNDU5WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxZDE3YjE5MTVkZTYzNzhmMmNiMWM3YTc1NDkxMzdlNWQxZDcxODNiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiWZuNHoEIT8agjQiCczSOkwl0dSW
v1qSpndVH24l3raAbER+eNJOp6GPwUIDGYWmSO/7alOgRXtlveqDb80hYGKmmLmD
2foD1Bm8oWfJyuZvz+mExL/ODj2pVkr69eaECPKiHxndv2t8qZltGa6/a16kgi+1
cy5KvRm/eLfzVQqGj/2ys18z2nRrmSqyH2ciAvXziFn65bZyAHMVmC/se/3mL0rd
saleGeg1FO8uFE/+tmZ6vRfJfMDVwCgEexw78IXsUXHBam1f4yXQD9IE8nCjALr1
Y/rbDLBkvq35QFSOj91l232KteR7S3NfQc+jXw1UMQpps24ktauhhMsmAwIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFB0XsZFd5jePLLHHp1SRN+XR1xg7MB8GA1UdIwQY
MBaAFAWx0TwuJuEnhiRqXsTFvqaYZLIPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQmJIUlBDNG00U2VHSkdwZXhNVy1wcGhrc2c4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOC9jNjEwOTItNzM0YS00ZWVmLTlkNjct
NDkwNTI0M2JjODI4LzEvSFJleGtWM21ONDhzc2NlblZKRTM1ZEhYR0RzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hOC9jNjEwOTItNzM0YS00ZWVmLTlkNjctNDkwNTI0M2JjODI4
LzEvQmJIUlBDNG00U2VHSkdwZXhNVy1wcGhrc2c4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQALUJ1AwQA
LYG7AwQA1DwXMA0GCSqGSIb3DQEBCwUAA4IBAQA46u2YIbygvdSZIkFBtq4KOhkn
AnJHTxx2I0VUhLThXegM60DBW6Gz+jw33hT7s9qySEQfgGs+SWvb8W224pANiWqd
rmR2SxCFy49eRhDeFMkehiL3YtcZsSt3dLebcbUaNACFqE0IfoLMB7kbFlss9ktD
xpILHGSzSy6YgoqManEhkYL75LOIDF721gYqCBjpW4rBYyUT6Ma8eumKjPf1TYEK
cGb+ptFlrAPGSrT778bSr+hPJf1E0tQTlonYg+7AYWziYz39D91YLNLdlM1s3nCz
atMB5jOCXyj3u4+jNNxXXn7Vu56U+uOoMPZfRFjVH6ub9K4yqLrVe4thonF5
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:05:47 2023 by rpki-client on console-ams.rpki-client.org