Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/dc2912-c7b0-4df4-9aa8-65332b47f5eb/1/hFBuq2q49AKB-46khGubbMXQivI.roa
File: hFBuq2q49AKB-46khGubbMXQivI.roa (raw, json)
Hash identifier: KNJVfJPviceMy7b3uNGtmmtmDEPMEyrTp5XD8i/NBCE=
Subject key identifier: 84:50:6E:AB:6A:B8:F4:02:81:FB:8E:A4:84:6B:9B:6C:C5:D0:8A:F2
Certificate issuer: /CN=c089423af1be03027196d1f81df22992978cda6e
Certificate serial: 07F55FBE
Authority key identifier: C0:89:42:3A:F1:BE:03:02:71:96:D1:F8:1D:F2:29:92:97:8C:DA:6E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wIlCOvG-AwJxltH4HfIpkpeM2m4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/dc2912-c7b0-4df4-9aa8-65332b47f5eb/1/hFBuq2q49AKB-46khGubbMXQivI.roa
Signing time: Sun 08 May 2022 00:28:37 +0000
ROA not before: Sun 08 May 2022 00:28:37 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 55933
IP address blocks: 80.245.104.0/23 maxlen: 23
80.245.104.0/22 maxlen: 24
80.245.106.0/23 maxlen: 23
185.245.40.0/22 maxlen: 24
93.90.72.0/22 maxlen: 24
93.90.74.0/23 maxlen: 24
109.206.244.0/22 maxlen: 24
185.249.63.0/24 maxlen: 24
193.178.58.0/23 maxlen: 23
193.178.56.0/22 maxlen: 24
193.178.56.0/23 maxlen: 23
185.243.240.0/22 maxlen: 24
84.252.102.0/23 maxlen: 24
85.8.180.0/23 maxlen: 24
185.242.232.0/22 maxlen: 24
185.242.232.0/23 maxlen: 23
185.242.234.0/23 maxlen: 23
185.247.182.0/23 maxlen: 23
185.247.180.0/23 maxlen: 23
185.247.180.0/22 maxlen: 24
185.239.84.0/23 maxlen: 23
185.239.84.0/22 maxlen: 24
185.239.86.0/23 maxlen: 23
91.132.48.0/22 maxlen: 24
93.177.76.0/22 maxlen: 24
2a0c:f480::/29 maxlen: 29
2a0d:2480::/29 maxlen: 29
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 133521342 (0x7f55fbe)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c089423af1be03027196d1f81df22992978cda6e
Validity
Not Before: May 8 00:28:37 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=84506eab6ab8f40281fb8ea4846b9b6cc5d08af2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:08:03:99:e3:d3:f2:f4:d6:43:53:aa:d0:73:
ce:e6:30:0b:84:48:56:f4:7f:40:d1:d9:5f:7e:b2:
41:1d:b8:c2:d2:49:02:54:30:8c:cf:37:49:b1:5a:
21:55:38:88:97:97:65:d1:5e:2d:1f:b9:0a:d7:9f:
8b:e4:59:33:90:29:5e:4d:39:ec:4f:ba:45:25:96:
ac:e9:43:b0:11:dd:ef:e1:9a:a9:19:38:99:39:a4:
2d:49:65:fa:03:31:31:c0:88:01:b5:02:1c:af:00:
e4:6e:d3:25:12:87:4d:ba:1c:08:ad:83:cb:22:e7:
ba:a0:c3:f3:4a:17:13:4c:cc:cd:7d:12:a8:c9:21:
00:fa:ca:2c:2e:28:c3:f2:e2:6f:9f:64:d5:9b:6c:
8d:48:c6:39:1a:23:4b:6a:47:da:ad:8b:52:e8:40:
e2:50:f4:f9:7e:5c:a2:ae:3c:19:1e:50:f5:16:6a:
5f:7f:b1:42:fe:ae:09:96:17:db:f9:ae:66:e9:cf:
b2:2f:72:25:f2:61:4a:5b:d5:c7:6b:73:7c:70:88:
c6:21:34:44:eb:c6:cf:7d:f0:c1:3b:75:5e:73:c0:
99:84:ee:83:65:08:03:41:0f:7e:ce:11:f2:07:f3:
9a:93:22:85:46:de:c0:5f:bb:36:50:77:8b:9a:21:
ae:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:50:6E:AB:6A:B8:F4:02:81:FB:8E:A4:84:6B:9B:6C:C5:D0:8A:F2
X509v3 Authority Key Identifier:
keyid:C0:89:42:3A:F1:BE:03:02:71:96:D1:F8:1D:F2:29:92:97:8C:DA:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wIlCOvG-AwJxltH4HfIpkpeM2m4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/dc2912-c7b0-4df4-9aa8-65332b47f5eb/1/hFBuq2q49AKB-46khGubbMXQivI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/dc2912-c7b0-4df4-9aa8-65332b47f5eb/1/wIlCOvG-AwJxltH4HfIpkpeM2m4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.245.104.0/22
84.252.102.0/23
85.8.180.0/23
91.132.48.0/22
93.90.72.0/22
93.177.76.0/22
109.206.244.0/22
185.239.84.0/22
185.242.232.0/22
185.243.240.0/22
185.245.40.0/22
185.247.180.0/22
185.249.63.0/24
193.178.56.0/22
IPv6:
2a0c:f480::/29
2a0d:2480::/29
Signature Algorithm: sha256WithRSAEncryption
82:81:4b:26:89:9e:54:4d:45:f5:60:0a:e4:45:03:a3:36:83:
09:02:d6:d7:46:55:c1:12:f9:9d:1f:ac:d7:f5:2c:37:b6:22:
a6:e4:b9:8a:65:7a:79:58:da:05:75:10:13:ed:21:c2:a7:fe:
c3:20:22:f5:b0:9e:cc:86:40:7e:c1:69:81:fd:01:e2:d5:76:
ac:c6:8c:6f:1c:72:92:e4:5a:9d:ff:40:6a:e6:9a:21:4c:35:
db:e9:1f:60:53:13:52:c8:32:20:d6:84:fe:20:54:5f:64:d9:
bc:85:45:a8:ba:07:47:82:bc:d0:d0:7b:cb:e8:a1:ca:3b:80:
f0:e0:08:9c:85:93:0e:11:0c:88:97:ad:07:1d:4a:01:0f:19:
ad:1d:99:26:bb:b0:53:74:60:5b:a3:bc:b0:94:4b:68:ce:4c:
57:85:8a:87:2d:18:2c:77:78:80:e7:1d:51:dc:0c:18:5b:04:
27:0b:5e:d6:70:68:48:fc:1e:b7:f6:0d:c9:74:20:c1:19:36:
d1:53:83:aa:b8:b5:f8:22:a8:3d:6c:fa:8c:c8:54:96:c2:b4:
a4:1f:bb:58:ce:a4:bb:fc:74:5a:14:04:bf:2e:15:87:7d:0c:
05:f4:ac:14:f4:55:71:87:c6:4c:d6:93:50:db:42:02:b3:2f:
5c:1b:b9:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:49:20 2023 by rpki-client on console-ams.rpki-client.org