Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/1a5a96-d36e-4f3a-9b34-0548d3895a55/1/1-H1NlqcJdYvdixCePHOr-EwpYCo.roa
File: 1-H1NlqcJdYvdixCePHOr-EwpYCo.roa (raw, json)
Hash identifier: CBSTxKQ/c5GhOhAcZmXzT+/UAIa3vZZBjTZXIHBnL3E=
Subject key identifier: F8:7D:4D:96:A7:09:75:8B:DD:8B:10:9E:3C:73:AB:F8:4C:29:60:2A
Certificate issuer: /CN=0b1e72f3d0957f5a6e3bd1b844a12a6147449027
Certificate serial: 018F7B0265D29B42249FEC462C57EDBB826B
Authority key identifier: 0B:1E:72:F3:D0:95:7F:5A:6E:3B:D1:B8:44:A1:2A:61:47:44:90:27
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Cx5y89CVf1puO9G4RKEqYUdEkCc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/1a5a96-d36e-4f3a-9b34-0548d3895a55/1/1-H1NlqcJdYvdixCePHOr-EwpYCo.roa
Signing time: Wed 15 May 2024 06:48:25 +0000
ROA not before: Wed 15 May 2024 06:48:25 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 29119
IP address blocks: 92.246.82.0/24 maxlen: 24
103.226.192.0/24 maxlen: 24
103.229.170.0/24 maxlen: 24
185.145.68.0/22 maxlen: 22
185.145.68.0/24 maxlen: 24
185.145.69.0/24 maxlen: 24
185.237.212.0/22 maxlen: 24
185.237.215.0/24 maxlen: 24
2a07:4640::/29 maxlen: 29
2a0d:c240::/29 maxlen: 29
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:7b:02:65:d2:9b:42:24:9f:ec:46:2c:57:ed:bb:82:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b1e72f3d0957f5a6e3bd1b844a12a6147449027
Validity
Not Before: May 15 06:48:25 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f87d4d96a709758bdd8b109e3c73abf84c29602a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:28:75:b5:69:29:0a:e8:b1:df:37:80:ff:b4:
83:05:a2:6e:d2:8a:33:1f:30:47:b7:8f:64:57:ad:
cf:bb:cc:c2:b9:45:62:e7:88:e7:35:13:5e:1a:66:
65:c8:1c:d5:a9:a5:9e:60:12:8a:5f:9c:db:07:ed:
c7:1c:e9:8c:0f:b3:e6:73:80:97:47:dd:c3:da:28:
b4:a7:29:93:cb:f5:21:df:61:c5:58:db:83:63:fe:
db:84:20:26:13:c1:1f:9b:a9:10:7e:1d:2f:b0:4d:
f6:e5:18:40:1e:4f:0a:33:b8:d5:12:09:30:bb:af:
ae:c6:56:95:b9:69:2e:1c:b9:53:f1:41:9b:71:ee:
5e:06:17:81:76:08:30:0e:02:86:26:24:fa:6c:c5:
cc:4e:b2:c2:98:5c:41:c6:6d:28:d6:61:1d:ee:61:
1a:12:89:91:d0:02:1e:25:c7:09:e2:08:8b:7f:38:
4b:3c:6c:fa:ef:a5:f5:be:af:f1:14:2e:54:b4:77:
51:47:c8:4f:f9:04:70:c4:19:64:89:14:98:22:7f:
4e:8d:02:84:68:55:0f:71:88:07:b9:6e:6d:d0:78:
ea:30:49:2d:34:82:8a:29:ed:cc:18:0d:c3:46:70:
2b:38:5a:f1:a8:c6:c7:87:c7:20:c5:30:0c:3b:3f:
69:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:7D:4D:96:A7:09:75:8B:DD:8B:10:9E:3C:73:AB:F8:4C:29:60:2A
X509v3 Authority Key Identifier:
keyid:0B:1E:72:F3:D0:95:7F:5A:6E:3B:D1:B8:44:A1:2A:61:47:44:90:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Cx5y89CVf1puO9G4RKEqYUdEkCc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/1a5a96-d36e-4f3a-9b34-0548d3895a55/1/1-H1NlqcJdYvdixCePHOr-EwpYCo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/1a5a96-d36e-4f3a-9b34-0548d3895a55/1/Cx5y89CVf1puO9G4RKEqYUdEkCc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.246.82.0/24
103.226.192.0/24
103.229.170.0/24
185.145.68.0/22
185.237.212.0/22
IPv6:
2a07:4640::/29
2a0d:c240::/29
Signature Algorithm: sha256WithRSAEncryption
63:24:7e:4c:4b:fc:03:f6:ba:24:23:b8:82:10:ee:ca:47:72:
90:f2:29:ab:1c:7b:46:25:94:78:55:5e:40:4e:46:c3:c2:d0:
f2:8b:31:6e:e4:d6:e0:e3:4a:94:73:4b:46:40:8e:16:91:5d:
ac:41:22:c6:73:ef:f4:81:57:31:f4:42:4b:98:88:29:c5:bb:
84:2b:ed:ba:14:80:38:f3:fa:2a:1e:67:f4:57:16:ab:22:af:
c5:f0:b2:fa:3d:a9:90:2b:c3:32:6f:10:5e:40:c7:b1:85:2f:
d6:b1:af:51:70:57:55:cf:5e:46:9b:08:79:47:98:ad:26:98:
fb:72:66:2a:bf:bf:89:a2:f1:f7:d3:e7:1c:07:12:1a:1b:b2:
f4:98:cd:b2:20:21:ce:70:51:81:82:83:77:a2:4e:28:99:a4:
3b:e8:c7:e1:cf:9e:19:b6:1d:e0:c7:f2:1e:62:c2:6f:a5:58:
37:03:80:57:0f:98:a7:bd:16:09:f2:c8:09:d9:f4:6b:4d:59:
53:89:39:55:16:38:ce:44:c4:21:54:94:20:35:8b:6f:6d:11:
9a:4d:ad:ee:64:a6:9d:3e:23:a4:0d:0e:e6:4c:19:93:9a:f3:
a2:d9:6c:01:b2:ee:5d:85:d1:a1:a3:3c:4a:1b:41:b0:a4:e8:
14:a6:18:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:47:34 2025 by rpki-client