Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/6703ca-ced4-4207-ab05-4a6f55771bd1/1/mHUEBPgl9WrzYFndfHdB0qBogsE.roa
File: mHUEBPgl9WrzYFndfHdB0qBogsE.roa (raw, json)
Hash identifier: WYH9jYy9CSScwFUCd5CWPPfe296WFtExxe1mvGa+YCs=
Subject key identifier: 98:75:04:04:F8:25:F5:6A:F3:60:59:DD:7C:77:41:D2:A0:68:82:C1
Certificate issuer: /CN=bab453d97ba2f4a045843e6b4a953b3e5106eaf2
Certificate serial: 01917890851F7827C24F2D2F13E19CB92193
Authority key identifier: BA:B4:53:D9:7B:A2:F4:A0:45:84:3E:6B:4A:95:3B:3E:51:06:EA:F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/urRT2Xui9KBFhD5rSpU7PlEG6vI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/6703ca-ced4-4207-ab05-4a6f55771bd1/1/mHUEBPgl9WrzYFndfHdB0qBogsE.roa
Signing time: Thu 22 Aug 2024 05:30:22 +0000
ROA not before: Thu 22 Aug 2024 05:30:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 29385
IP address blocks: 94.230.224.0/24 maxlen: 24
94.230.227.0/24 maxlen: 24
213.206.32.0/24 maxlen: 24
213.206.33.0/24 maxlen: 24
213.206.34.0/24 maxlen: 24
213.206.35.0/24 maxlen: 24
213.206.36.0/24 maxlen: 24
213.206.37.0/24 maxlen: 24
213.206.38.0/24 maxlen: 24
213.206.39.0/24 maxlen: 24
213.206.40.0/24 maxlen: 24
213.206.41.0/24 maxlen: 24
213.206.42.0/24 maxlen: 24
213.206.43.0/24 maxlen: 24
213.206.44.0/24 maxlen: 24
213.206.45.0/24 maxlen: 24
213.206.46.0/24 maxlen: 24
213.206.47.0/24 maxlen: 24
213.206.48.0/24 maxlen: 24
213.206.49.0/24 maxlen: 24
213.206.50.0/24 maxlen: 24
213.206.51.0/24 maxlen: 24
213.206.52.0/24 maxlen: 24
213.206.53.0/24 maxlen: 24
213.206.54.0/24 maxlen: 24
213.206.55.0/24 maxlen: 24
213.206.56.0/24 maxlen: 24
213.206.57.0/24 maxlen: 24
213.206.58.0/24 maxlen: 24
213.206.59.0/24 maxlen: 24
213.206.60.0/24 maxlen: 24
213.206.61.0/24 maxlen: 24
213.206.62.0/24 maxlen: 24
213.206.63.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:78:90:85:1f:78:27:c2:4f:2d:2f:13:e1:9c:b9:21:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bab453d97ba2f4a045843e6b4a953b3e5106eaf2
Validity
Not Before: Aug 22 05:30:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=98750404f825f56af36059dd7c7741d2a06882c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:1d:4a:74:ca:99:26:22:c7:44:99:21:28:ea:
1c:33:1d:9c:1a:b2:0d:0b:90:83:d5:41:6c:97:0a:
55:c6:dd:96:9b:7e:cc:21:48:86:32:0a:43:29:6e:
8c:41:90:57:05:31:2e:f2:aa:8f:de:ad:3d:fe:3f:
35:1d:8e:57:de:85:84:a9:c3:5a:8d:19:eb:f9:56:
01:9b:8a:de:ca:d7:62:ff:08:10:7b:43:a2:f4:f2:
5b:b9:6b:27:8b:8e:d2:44:10:62:87:1b:12:57:b9:
78:cb:0a:33:1b:e8:92:65:98:39:e6:c6:69:de:a2:
1f:58:1d:96:b0:46:23:40:5a:94:0f:28:fd:db:ca:
43:2e:e4:f7:56:c4:29:b6:6a:79:d6:ae:54:8d:40:
05:a4:b4:84:2a:7c:53:a8:05:54:6e:06:68:ae:96:
92:37:a3:bb:ab:7b:9b:55:2c:9b:c8:96:6a:0d:1d:
42:f1:37:a0:9a:d0:08:bb:a6:17:a8:4f:14:48:4d:
9e:65:5d:99:12:93:36:56:74:91:69:e6:58:7d:13:
38:af:d8:5f:8c:f7:96:0f:a4:48:12:fe:e6:7f:e7:
e7:f0:8f:26:5e:15:2c:3d:29:43:46:3f:c0:88:95:
d9:65:46:0d:db:eb:d6:f9:84:ae:0a:1b:f3:b7:59:
97:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:75:04:04:F8:25:F5:6A:F3:60:59:DD:7C:77:41:D2:A0:68:82:C1
X509v3 Authority Key Identifier:
keyid:BA:B4:53:D9:7B:A2:F4:A0:45:84:3E:6B:4A:95:3B:3E:51:06:EA:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/urRT2Xui9KBFhD5rSpU7PlEG6vI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/6703ca-ced4-4207-ab05-4a6f55771bd1/1/mHUEBPgl9WrzYFndfHdB0qBogsE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/6703ca-ced4-4207-ab05-4a6f55771bd1/1/urRT2Xui9KBFhD5rSpU7PlEG6vI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.230.224.0/24
94.230.227.0/24
213.206.32.0/19
Signature Algorithm: sha256WithRSAEncryption
24:c8:69:54:00:46:bc:ff:1e:aa:47:d1:ed:2e:fb:d2:f7:4f:
04:8c:c2:d8:44:e5:60:94:e0:7a:f9:89:60:23:94:37:74:49:
8e:3f:88:35:25:99:cb:6e:08:75:fa:4f:24:92:c4:8f:24:10:
96:f9:76:1f:26:8d:a1:ea:e1:69:8f:6f:b8:70:76:b0:ac:6d:
19:88:eb:77:60:11:a5:dd:0f:54:f5:52:56:cb:e8:ae:b0:79:
56:19:01:ef:52:c0:31:cb:77:72:8a:39:3d:8d:15:6a:d0:4d:
6b:d7:32:2c:9f:f1:7b:ef:4e:de:60:a9:01:cb:ba:a1:6e:b9:
fd:18:43:c9:b6:17:44:46:8a:bd:2f:3e:67:bf:8e:65:2b:5f:
c5:22:10:4f:06:85:13:3a:c5:65:43:80:e9:f8:84:96:82:4f:
67:84:08:c2:36:d6:2d:74:b3:6f:44:d5:bd:0b:18:ec:65:30:
f5:64:10:29:c9:d2:33:8e:e6:be:d7:a2:66:74:81:cc:fa:f6:
38:da:f9:5e:63:98:fd:6f:8a:97:fd:40:31:45:4b:ba:7c:79:
84:3b:56:72:fd:4b:25:cf:b2:68:ea:3c:01:3b:d9:89:23:98:
bf:66:9f:63:08:35:6b:e6:b2:bf:27:94:e2:5f:e9:2e:91:19:
3c:77:58:bf
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAZF4kIUfeCfCTy0vE+GcuSGTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJhYjQ1M2Q5N2JhMmY0YTA0NTg0M2U2YjRhOTUzYjNlNTEw
NmVhZjIwHhcNMjQwODIyMDUzMDIyWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5ODc1MDQwNGY4MjVmNTZhZjM2MDU5ZGQ3Yzc3NDFkMmEwNjg4MmMxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAux1KdMqZJiLHRJkhKOocMx2cGrIN
C5CD1UFslwpVxt2Wm37MIUiGMgpDKW6MQZBXBTEu8qqP3q09/j81HY5X3oWEqcNa
jRnr+VYBm4reytdi/wgQe0Oi9PJbuWsni47SRBBihxsSV7l4ywozG+iSZZg55sZp
3qIfWB2WsEYjQFqUDyj928pDLuT3VsQptmp51q5UjUAFpLSEKnxTqAVUbgZorpaS
N6O7q3ubVSybyJZqDR1C8TegmtAIu6YXqE8USE2eZV2ZEpM2VnSRaeZYfRM4r9hf
jPeWD6RIEv7mf+fn8I8mXhUsPSlDRj/AiJXZZUYN2+vW+YSuChvzt1mXzQIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFJh1BAT4JfVq82BZ3Xx3QdKgaILBMB8GA1UdIwQY
MBaAFLq0U9l7ovSgRYQ+a0qVOz5RBuryMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdXJSVDJYdWk5S0JGaEQ1clNwVTdQbEVHNnZJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYS82NzAzY2EtY2VkNC00MjA3LWFiMDUt
NGE2ZjU1NzcxYmQxLzEvbUhVRUJQZ2w5V3J6WUZuZGZIZEIwcUJvZ3NFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYS82NzAzY2EtY2VkNC00MjA3LWFiMDUtNGE2ZjU1NzcxYmQx
LzEvdXJSVDJYdWk5S0JGaEQ1clNwVTdQbEVHNnZJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAXubgAwQA
XubjAwQF1c4gMA0GCSqGSIb3DQEBCwUAA4IBAQAkyGlUAEa8/x6qR9HtLvvS908E
jMLYROVglOB6+YlgI5Q3dEmOP4g1JZnLbgh1+k8kksSPJBCW+XYfJo2h6uFpj2+4
cHawrG0ZiOt3YBGl3Q9U9VJWy+iusHlWGQHvUsAxy3dyijk9jRVq0E1r1zIsn/F7
707eYKkBy7qhbrn9GEPJthdERoq9Lz5nv45lK1/FIhBPBoUTOsVlQ4Dp+ISWgk9n
hAjCNtYtdLNvRNW9CxjsZTD1ZBApydIzjua+16JmdIHM+vY42vleY5j9b4qX/UAx
RUu6fHmEO1Zy/Uslz7Jo6jwBO9mJI5i/Zp9jCDVr5rK/J5TiX+kukRk8d1i/
-----END CERTIFICATE-----
Generated at Mon Feb 17 08:18:12 2025 by rpki-client