Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/d582c4-36e3-4a57-8752-e641e713d1fa/1/XFHoeRNqW0vzdKDAdh8zsaX58q4.roa
File: XFHoeRNqW0vzdKDAdh8zsaX58q4.roa (raw, json)
Hash identifier: ktzH3uqRLvrfFd14JYgAiEtpGNXa45sR7n6w4dTjlO8=
Subject key identifier: 5C:51:E8:79:13:6A:5B:4B:F3:74:A0:C0:76:1F:33:B1:A5:F9:F2:AE
Certificate issuer: /CN=d0299cf12b38ff12d95ffc0d13ac12c69fe2c1ca
Certificate serial: 0187A3700AE08768C9752B63A27B73D6E411
Authority key identifier: D0:29:9C:F1:2B:38:FF:12:D9:5F:FC:0D:13:AC:12:C6:9F:E2:C1:CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0Cmc8Ss4_xLZX_wNE6wSxp_iwco.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/d582c4-36e3-4a57-8752-e641e713d1fa/1/XFHoeRNqW0vzdKDAdh8zsaX58q4.roa
Signing time: Fri 21 Apr 2023 10:50:41 +0000
ROA not before: Fri 21 Apr 2023 10:50:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 59956
IP address blocks: 176.117.80.0/22 maxlen: 22
176.117.84.0/22 maxlen: 22
176.117.64.0/22 maxlen: 22
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:a3:70:0a:e0:87:68:c9:75:2b:63:a2:7b:73:d6:e4:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d0299cf12b38ff12d95ffc0d13ac12c69fe2c1ca
Validity
Not Before: Apr 21 10:50:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5c51e879136a5b4bf374a0c0761f33b1a5f9f2ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:97:fc:55:6f:82:29:83:3a:e5:bf:6a:c1:ea:
6b:33:2c:18:cf:83:45:db:5d:97:63:e0:e9:ce:30:
1e:48:93:7d:58:fd:0c:70:ce:00:d1:2f:98:33:d3:
fc:c3:f6:71:6d:c8:3e:40:f1:7a:83:d1:17:d7:f8:
4e:ea:55:bb:79:3a:c6:b1:1d:98:70:d7:aa:71:57:
69:eb:f0:13:53:eb:90:db:74:f6:ff:f7:2b:94:82:
29:0d:b1:d9:88:f6:6c:09:ff:ef:15:93:6b:f9:c0:
33:bd:52:0d:1b:1f:c4:28:63:37:90:25:2a:68:e3:
87:35:84:1b:0c:eb:f3:a4:ed:41:23:9f:78:95:27:
c3:a7:b0:e4:af:91:5e:ad:74:2e:94:5e:67:eb:41:
15:4f:cb:6c:f6:6f:39:59:12:11:96:b9:15:a0:c2:
36:4f:66:f5:36:a2:01:ad:5e:3e:d0:06:38:07:53:
c9:8f:ba:6c:fa:6c:e1:30:d0:89:fe:18:db:e3:2a:
4c:fa:42:60:cb:67:97:2f:fa:0e:76:50:59:e7:66:
83:d8:68:4b:2e:f6:f4:4d:94:e3:60:b3:78:68:ba:
8a:83:fa:78:47:98:77:92:2c:a4:da:e3:8c:1a:62:
ad:5d:fc:b9:20:35:76:54:63:c3:83:9d:94:67:89:
2d:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:51:E8:79:13:6A:5B:4B:F3:74:A0:C0:76:1F:33:B1:A5:F9:F2:AE
X509v3 Authority Key Identifier:
keyid:D0:29:9C:F1:2B:38:FF:12:D9:5F:FC:0D:13:AC:12:C6:9F:E2:C1:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0Cmc8Ss4_xLZX_wNE6wSxp_iwco.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/d582c4-36e3-4a57-8752-e641e713d1fa/1/XFHoeRNqW0vzdKDAdh8zsaX58q4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/d582c4-36e3-4a57-8752-e641e713d1fa/1/0Cmc8Ss4_xLZX_wNE6wSxp_iwco.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.117.64.0/22
176.117.80.0/21
Signature Algorithm: sha256WithRSAEncryption
19:2c:e3:b1:fa:fa:e9:4a:67:5f:c3:09:c5:07:c7:29:14:7d:
ea:18:97:ab:e8:f3:5b:e2:73:15:4e:43:12:08:b0:45:1b:a6:
22:40:1c:ff:e4:74:1a:de:e3:97:d4:05:21:44:cb:aa:f7:8f:
d9:fc:e5:60:74:ca:70:28:6f:58:e9:64:8a:72:3d:19:2f:38:
f8:45:08:75:17:45:ab:57:54:93:11:b7:68:de:c8:b0:2b:81:
8a:c1:1c:4d:01:5e:a6:26:f3:f3:44:fe:98:6c:7d:5c:2b:1c:
ed:92:9e:00:41:a4:bc:e7:ae:58:63:c1:6a:60:27:38:f5:c5:
65:ef:e1:a8:5e:cb:52:37:cf:60:5a:78:4a:40:6a:86:71:a0:
e7:3f:a8:f1:5b:fd:9a:fa:89:07:93:fc:fa:c9:2a:44:a7:ae:
52:8e:c3:89:85:b9:11:90:dc:6f:95:eb:4c:10:8e:70:8b:69:
1f:66:53:97:66:ea:c3:0a:da:d8:bd:70:c4:f1:b9:cb:df:22:
c5:13:37:6c:21:6c:b6:f6:04:64:c9:25:78:26:65:21:cd:4c:
82:db:4d:4c:cd:73:d4:79:bd:e8:f7:c6:b8:b8:7e:26:86:30:
ce:7a:29:a6:16:55:7b:e2:ac:31:b8:2d:f8:db:8a:1a:68:39:
e0:70:63:f5
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYejcArgh2jJdStjontz1uQRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQwMjk5Y2YxMmIzOGZmMTJkOTVmZmMwZDEzYWMxMmM2OWZl
MmMxY2EwHhcNMjMwNDIxMTA1MDQxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1YzUxZTg3OTEzNmE1YjRiZjM3NGEwYzA3NjFmMzNiMWE1ZjlmMmFlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5Zf8VW+CKYM65b9qweprMywYz4NF
212XY+DpzjAeSJN9WP0McM4A0S+YM9P8w/Zxbcg+QPF6g9EX1/hO6lW7eTrGsR2Y
cNeqcVdp6/ATU+uQ23T2//crlIIpDbHZiPZsCf/vFZNr+cAzvVINGx/EKGM3kCUq
aOOHNYQbDOvzpO1BI594lSfDp7Dkr5FerXQulF5n60EVT8ts9m85WRIRlrkVoMI2
T2b1NqIBrV4+0AY4B1PJj7ps+mzhMNCJ/hjb4ypM+kJgy2eXL/oOdlBZ52aD2GhL
Lvb0TZTjYLN4aLqKg/p4R5h3kiyk2uOMGmKtXfy5IDV2VGPDg52UZ4ktJQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFFxR6HkTaltL83SgwHYfM7Gl+fKuMB8GA1UdIwQY
MBaAFNApnPErOP8S2V/8DROsEsaf4sHKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMENtYzhTczRfeExaWF93TkU2d1N4cF9pd2NvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZi9kNTgyYzQtMzZlMy00YTU3LTg3NTIt
ZTY0MWU3MTNkMWZhLzEvWEZIb2VSTnFXMHZ6ZEtEQWRoOHpzYVg1OHE0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZi9kNTgyYzQtMzZlMy00YTU3LTg3NTItZTY0MWU3MTNkMWZh
LzEvMENtYzhTczRfeExaWF93TkU2d1N4cF9pd2NvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCsHVAAwQD
sHVQMA0GCSqGSIb3DQEBCwUAA4IBAQAZLOOx+vrpSmdfwwnFB8cpFH3qGJer6PNb
4nMVTkMSCLBFG6YiQBz/5HQa3uOX1AUhRMuq94/Z/OVgdMpwKG9Y6WSKcj0ZLzj4
RQh1F0WrV1STEbdo3siwK4GKwRxNAV6mJvPzRP6YbH1cKxztkp4AQaS8565YY8Fq
YCc49cVl7+GoXstSN89gWnhKQGqGcaDnP6jxW/2a+okHk/z6ySpEp65SjsOJhbkR
kNxvletMEI5wi2kfZlOXZurDCtrYvXDE8bnL3yLFEzdsIWy29gRkySV4JmUhzUyC
201MzXPUeb3o98a4uH4mhjDOeimmFlV74qwxuC3424oaaDngcGP1
-----END CERTIFICATE-----
Generated at Sat Apr 19 03:15:48 2025 by rpki-client