Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/ac0c06-8072-4e30-95d1-a3d5533f1757/1/hEghLek2wWI_biQCjAhqwzczvyc.roa
File: hEghLek2wWI_biQCjAhqwzczvyc.roa (raw, json)
Hash identifier: s7Eu9dQmHMfLHCqGIobKvhH4NWUeEjQepZONSmXjDNk=
Subject key identifier: 84:48:21:2D:E9:36:C1:62:3F:6E:24:02:8C:08:6A:C3:37:33:BF:27
Certificate issuer: /CN=48cb94a44349f98d409b7ddb9a053df4aef1addf
Certificate serial: 8CF12C
Authority key identifier: 48:CB:94:A4:43:49:F9:8D:40:9B:7D:DB:9A:05:3D:F4:AE:F1:AD:DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SMuUpENJ-Y1Am33bmgU99K7xrd8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/ac0c06-8072-4e30-95d1-a3d5533f1757/1/hEghLek2wWI_biQCjAhqwzczvyc.roa
Signing time: Sat 01 Jan 2022 02:58:17 +0000
ROA not before: Sat 01 Jan 2022 02:58:17 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 211612
IP address blocks: 87.249.128.0/21 maxlen: 24
185.24.8.0/22 maxlen: 24
178.249.208.0/21 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9236780 (0x8cf12c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=48cb94a44349f98d409b7ddb9a053df4aef1addf
Validity
Not Before: Jan 1 02:58:17 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=8448212de936c1623f6e24028c086ac33733bf27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:e7:1a:43:84:49:65:ea:c8:49:9e:c1:5f:11:
2b:7d:ca:e2:02:72:06:a0:5d:f5:3a:88:4e:ce:8a:
c7:33:17:e8:d8:ac:9b:3e:f5:39:d7:05:dd:32:66:
a9:72:ef:7a:62:69:c6:e5:a7:65:1d:4d:11:45:1e:
c5:c5:69:b7:3a:f9:3c:87:96:3e:60:9a:50:58:d5:
6b:4c:a0:56:f4:68:25:73:86:ed:af:c0:4c:84:64:
20:04:4f:c5:cf:fa:0e:51:76:d6:03:b6:8b:46:45:
e5:da:8a:09:ea:63:09:da:3b:58:3c:0f:01:ee:6b:
e7:34:f0:82:80:bd:bc:dc:7c:d7:e8:cc:e3:33:7d:
03:0d:b1:b8:4d:9a:f7:56:62:a2:8f:f0:ad:f3:0a:
57:1f:cd:fd:05:73:f5:99:ab:93:ab:d1:d7:5c:61:
07:e4:7a:08:ca:c6:07:3e:18:8c:10:fa:e3:49:25:
6d:3b:22:f1:ff:0e:3b:2c:2f:96:ca:28:1b:15:3d:
8d:72:b2:6a:b7:5f:06:b1:3d:1c:03:b5:ce:cb:72:
08:c7:17:de:7f:4b:7c:a1:cc:d2:45:a4:c4:9a:30:
6c:95:1c:4f:43:f2:fd:26:a8:3d:f8:2b:94:b9:2e:
3a:58:23:e2:60:dc:51:94:1c:96:76:2e:3a:ec:71:
0c:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:48:21:2D:E9:36:C1:62:3F:6E:24:02:8C:08:6A:C3:37:33:BF:27
X509v3 Authority Key Identifier:
keyid:48:CB:94:A4:43:49:F9:8D:40:9B:7D:DB:9A:05:3D:F4:AE:F1:AD:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SMuUpENJ-Y1Am33bmgU99K7xrd8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/ac0c06-8072-4e30-95d1-a3d5533f1757/1/hEghLek2wWI_biQCjAhqwzczvyc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/ac0c06-8072-4e30-95d1-a3d5533f1757/1/SMuUpENJ-Y1Am33bmgU99K7xrd8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.249.128.0/21
178.249.208.0/21
185.24.8.0/22
Signature Algorithm: sha256WithRSAEncryption
7f:90:86:5d:b9:16:9b:a7:36:4a:a0:d2:d2:1f:4c:4b:a9:6f:
7a:25:36:ff:84:26:78:f7:a5:1c:09:f2:1e:00:f8:44:d4:6e:
31:5f:62:57:47:ce:fb:d7:fa:3d:af:09:99:a3:98:23:13:20:
d6:2f:b8:78:3f:f8:92:be:3f:1e:64:ca:ca:53:34:77:18:54:
cf:9a:6d:13:d2:08:fc:37:d7:7a:b2:2a:e4:aa:c8:91:dc:6c:
b6:f3:c4:08:b4:9b:a8:97:c3:ab:55:6a:96:e7:6f:54:e3:91:
cb:b2:50:3b:e4:ba:0b:0c:bf:0f:c8:07:d9:5c:0b:ac:37:86:
45:6a:12:de:6c:e9:f0:91:84:e2:a2:e2:ba:5e:68:dc:61:ad:
9f:f6:f0:3c:6c:cc:9c:67:0b:2b:db:8a:87:70:12:ef:1f:d0:
27:7d:ed:5e:3d:c4:76:ec:e9:78:6a:0e:ca:af:24:00:2d:fd:
a3:81:da:c0:7e:d6:45:98:04:1f:ee:c5:54:b4:a5:30:bb:50:
1c:d7:93:e5:57:7f:6c:17:12:6c:e6:10:28:17:9b:e8:48:c4:
f2:6e:e9:f4:5a:9a:89:c0:bc:42:62:6e:73:da:b8:ee:d0:e4:
29:b4:99:db:59:f0:cf:4c:63:e8:b3:c3:ce:c0:35:f2:45:d0:
08:ca:33:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 15:48:58 2025 by rpki-client