Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/cc8bfa-2b13-4674-a984-a5fdb570fe9a/1/HzQmxpSPgVFip7a6QVGebwJGslo.roa
File: HzQmxpSPgVFip7a6QVGebwJGslo.roa (raw, json)
Hash identifier: 5VzT361cXpjrg63ojG9wAsh/ENHakS9gs/8EXegMnWg=
Subject key identifier: 1F:34:26:C6:94:8F:81:51:62:A7:B6:BA:41:51:9E:6F:02:46:B2:5A
Certificate issuer: /CN=0620eadb2e1562b4e2e4f480772c36887a777f24
Certificate serial: 01856E5D5A7874BEF2AB4D014480A4213AD1
Authority key identifier: 06:20:EA:DB:2E:15:62:B4:E2:E4:F4:80:77:2C:36:88:7A:77:7F:24
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BiDq2y4VYrTi5PSAdyw2iHp3fyQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/cc8bfa-2b13-4674-a984-a5fdb570fe9a/1/HzQmxpSPgVFip7a6QVGebwJGslo.roa
Signing time: Sun 01 Jan 2023 17:24:49 +0000
ROA not before: Sun 01 Jan 2023 17:24:49 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 43260
IP address blocks: 217.195.197.0/24 maxlen: 24
217.195.195.0/24 maxlen: 24
80.93.220.0/24 maxlen: 24
217.195.202.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:5d:5a:78:74:be:f2:ab:4d:01:44:80:a4:21:3a:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0620eadb2e1562b4e2e4f480772c36887a777f24
Validity
Not Before: Jan 1 17:24:49 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1f3426c6948f815162a7b6ba41519e6f0246b25a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:81:60:f6:3b:a4:1f:c9:17:68:b8:41:bc:d3:
35:17:90:bb:16:b4:5f:58:e4:07:95:50:5d:b6:d2:
ac:96:c4:9a:d5:e2:7c:1e:3d:b4:4b:19:35:fc:5c:
f4:cc:a0:54:a9:9c:a8:6c:8f:e2:85:00:c1:8a:ca:
e1:a0:ac:68:68:5c:3e:5d:f5:92:4b:ae:05:dd:d8:
9a:a6:51:b0:8a:b2:93:ca:95:de:9f:6b:6d:f2:db:
29:c4:21:e6:4f:ff:a1:b3:c1:6b:ea:92:22:74:b6:
0a:2d:54:23:c7:6b:07:f1:58:88:3d:80:12:60:80:
b1:e4:6a:3c:2b:64:2c:b1:72:3f:49:9a:ce:16:89:
91:4b:7f:81:33:ea:49:6d:93:00:15:9e:34:2b:74:
93:3d:d3:ca:38:56:8d:7b:eb:10:95:2f:e2:91:dd:
73:da:2e:07:f1:c8:01:79:a4:cd:88:16:a6:e2:bd:
f4:d0:ac:ac:86:48:63:01:f7:df:cd:f3:e4:a5:fb:
42:53:07:d3:69:f3:5b:63:4d:cf:8e:9e:3b:3b:20:
1a:21:76:08:1c:82:cb:b7:c9:2c:45:46:c4:40:59:
bb:e6:41:86:22:eb:a3:03:55:d5:47:b1:bd:c3:6a:
2e:dc:4f:10:7b:23:61:82:05:ff:f9:14:73:a3:7f:
38:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:34:26:C6:94:8F:81:51:62:A7:B6:BA:41:51:9E:6F:02:46:B2:5A
X509v3 Authority Key Identifier:
keyid:06:20:EA:DB:2E:15:62:B4:E2:E4:F4:80:77:2C:36:88:7A:77:7F:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BiDq2y4VYrTi5PSAdyw2iHp3fyQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/cc8bfa-2b13-4674-a984-a5fdb570fe9a/1/HzQmxpSPgVFip7a6QVGebwJGslo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/cc8bfa-2b13-4674-a984-a5fdb570fe9a/1/BiDq2y4VYrTi5PSAdyw2iHp3fyQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.93.220.0/24
217.195.195.0/24
217.195.197.0/24
217.195.202.0/24
Signature Algorithm: sha256WithRSAEncryption
2a:9d:4e:76:a3:68:f7:c1:1a:f6:a9:9f:71:94:b0:02:cd:14:
30:ce:a3:fb:9e:ca:f6:d6:ee:6c:a1:50:fc:17:09:6c:db:c7:
d7:d4:4f:0b:43:a4:fb:fe:cb:3b:eb:aa:63:9a:7d:48:ec:7c:
c5:88:e9:c0:f8:04:40:34:97:ce:62:a4:d1:04:5f:1a:09:ab:
26:58:d3:64:1c:ac:8c:7e:cd:e4:bf:c7:3b:af:f0:68:3a:10:
08:6a:aa:b5:7e:7c:4c:c1:79:55:c8:85:00:ea:82:a5:39:8f:
db:e0:b2:16:1f:90:a8:b0:3c:fa:25:00:07:09:35:c9:66:91:
8c:ad:de:57:73:d8:a2:4f:ed:74:38:31:87:7f:0b:32:bc:00:
31:93:fe:70:6d:05:0b:7e:fc:22:ca:94:7a:c1:50:65:2e:1e:
61:f4:35:e3:f7:72:e5:15:0c:eb:82:30:b0:7d:0a:dd:3d:20:
a3:37:b3:22:e5:b9:96:f6:ff:54:bb:88:95:0e:08:e8:fa:cc:
c7:27:54:f6:c3:e0:d0:5d:68:57:75:27:08:fc:9b:f7:e7:f5:
d0:39:6c:37:f4:ec:7a:ba:a8:81:0d:2a:ee:e3:8d:49:cf:02:
4e:19:c4:16:2d:5e:fe:04:65:99:ba:09:67:a3:c8:ee:f7:d8:
9d:63:02:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:55:29 2024 by rpki-client on console-fra.rpki-client.org