Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/59d808-154f-42ae-af8f-790244508df4/1/uHwTqGf6FX-m01CcQ6Aqfgi0WcA.roa
File: uHwTqGf6FX-m01CcQ6Aqfgi0WcA.roa (raw, json)
Hash identifier: 866ipZfpZBIwPttsfZkvb+g7cobE33YvwLE8HABIqSU=
Subject key identifier: B8:7C:13:A8:67:FA:15:7F:A6:D3:50:9C:43:A0:2A:7E:08:B4:59:C0
Certificate issuer: /CN=27516d20ebefd12f072d413c4d2606bdb258691a
Certificate serial: 0184422A28B83D3AEB9C0885FCE17BC3DBEA
Authority key identifier: 27:51:6D:20:EB:EF:D1:2F:07:2D:41:3C:4D:26:06:BD:B2:58:69:1A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J1FtIOvv0S8HLUE8TSYGvbJYaRo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/59d808-154f-42ae-af8f-790244508df4/1/uHwTqGf6FX-m01CcQ6Aqfgi0WcA.roa
Signing time: Fri 04 Nov 2022 10:22:49 +0000
ROA not before: Fri 04 Nov 2022 10:22:49 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 35575
IP address blocks: 185.190.44.0/23 maxlen: 23
185.190.46.0/24 maxlen: 24
185.190.47.0/24 maxlen: 24
193.238.68.0/22 maxlen: 22
195.66.24.0/24 maxlen: 24
195.66.31.0/24 maxlen: 24
195.66.27.0/24 maxlen: 24
195.66.26.0/24 maxlen: 24
195.66.29.0/24 maxlen: 24
195.66.25.0/24 maxlen: 24
195.66.28.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:42:2a:28:b8:3d:3a:eb:9c:08:85:fc:e1:7b:c3:db:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27516d20ebefd12f072d413c4d2606bdb258691a
Validity
Not Before: Nov 4 10:22:49 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b87c13a867fa157fa6d3509c43a02a7e08b459c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:87:13:64:1c:59:7e:a6:1c:43:de:fd:c0:14:
06:d7:26:c3:05:ff:6c:25:a9:0a:57:6a:46:b5:4f:
22:d3:7a:12:e9:e3:bd:45:26:9a:eb:d8:31:9f:fa:
43:90:16:89:52:f6:dd:ee:f0:4c:dd:a6:ad:98:ef:
0e:17:00:8e:05:bd:b3:d6:ca:c7:04:a9:4e:a6:40:
51:44:21:e0:01:0b:2c:9d:d6:ad:32:4b:92:1a:2c:
78:18:f3:07:5e:f2:58:13:a2:20:9e:f0:96:9a:ec:
33:f2:c2:62:ff:43:2e:2a:41:b9:78:d9:fc:ce:90:
3e:f8:6b:6a:99:bb:8e:0c:f2:2c:fe:de:7b:6d:e6:
b7:e4:cd:7b:38:73:9b:f8:59:4c:6c:e0:c4:2b:f0:
05:21:d4:ec:1a:6e:44:ad:c8:41:9a:e6:36:75:2e:
ac:51:64:11:3d:3b:88:be:15:16:d6:44:4e:38:11:
af:4f:e4:16:56:a9:52:92:44:d4:c6:97:b3:7b:f1:
14:61:32:58:33:c9:55:64:24:7e:89:af:b5:1c:e9:
2c:39:6e:ad:f6:aa:35:64:d9:12:f5:45:fc:10:58:
24:2c:08:51:34:ed:8d:2e:1d:76:59:c6:2a:53:48:
3c:ee:c1:e6:dc:b8:30:bb:1d:65:9f:3c:fd:9c:07:
9d:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:7C:13:A8:67:FA:15:7F:A6:D3:50:9C:43:A0:2A:7E:08:B4:59:C0
X509v3 Authority Key Identifier:
keyid:27:51:6D:20:EB:EF:D1:2F:07:2D:41:3C:4D:26:06:BD:B2:58:69:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J1FtIOvv0S8HLUE8TSYGvbJYaRo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/59d808-154f-42ae-af8f-790244508df4/1/uHwTqGf6FX-m01CcQ6Aqfgi0WcA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/59d808-154f-42ae-af8f-790244508df4/1/J1FtIOvv0S8HLUE8TSYGvbJYaRo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.190.44.0/22
193.238.68.0/22
195.66.24.0-195.66.29.255
195.66.31.0/24
Signature Algorithm: sha256WithRSAEncryption
2e:42:81:09:93:c2:a7:22:82:0f:5d:74:b6:c8:f4:b1:e8:00:
9e:3e:d3:d9:b2:f4:63:c6:fc:33:7b:96:9c:b1:6b:8b:0a:5d:
a3:dc:4e:2f:2a:20:3d:3e:71:ab:26:02:d0:ad:05:f6:c6:0b:
13:44:11:8f:a3:02:2f:0a:73:2d:f7:12:60:89:6b:cf:69:bc:
70:24:22:c2:11:13:2a:70:f8:41:42:0c:82:8a:0a:15:4f:ea:
5f:81:b7:ab:49:62:0b:db:0a:f9:22:f9:ab:39:24:a1:ad:73:
4f:2a:25:ab:96:e2:90:bc:6f:e6:f8:e1:a5:e8:c0:f2:b6:c8:
51:27:05:c4:e4:49:65:df:b7:1e:8a:b3:16:ee:2b:56:c6:39:
ca:cd:a5:3b:12:a3:15:66:14:99:a9:08:e5:b3:21:59:01:73:
c7:f6:25:3b:5e:1b:4a:c8:d9:e2:ae:53:97:b8:35:a8:4b:93:
12:5c:72:66:bd:ea:bc:44:6c:92:5a:a0:c1:8b:ab:54:c0:60:
36:54:d6:5c:57:51:c0:bf:8c:a1:80:0f:28:96:90:61:d2:24:
1c:5c:cb:ff:9f:dc:42:ee:d8:e9:ca:77:f0:e2:f1:dc:55:0d:
58:75:d8:c0:de:f6:d6:c5:42:0b:d2:c4:ee:c9:82:8e:ed:7c:
26:dd:6d:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:35:40 2025 by rpki-client