Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/8ea9b9-3b6e-4fdf-b5d1-f04fdcc09e51/1/BkIW3Yjq7HG8AzYCUU-gcYRB-h0.roa
File: BkIW3Yjq7HG8AzYCUU-gcYRB-h0.roa (raw, json)
Hash identifier: 8iBpwI04LA/T0HeWZSArRixlULRyjEIkGQ1949UAjss=
Subject key identifier: 06:42:16:DD:88:EA:EC:71:BC:03:36:02:51:4F:A0:71:84:41:FA:1D
Certificate issuer: /CN=992b86095ce558d2e9618728a44228a27be9098f
Certificate serial: 0183EF435B8A31E00985D4BF21C9991AF5E9
Authority key identifier: 99:2B:86:09:5C:E5:58:D2:E9:61:87:28:A4:42:28:A2:7B:E9:09:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mSuGCVzlWNLpYYcopEIoonvpCY8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/8ea9b9-3b6e-4fdf-b5d1-f04fdcc09e51/1/BkIW3Yjq7HG8AzYCUU-gcYRB-h0.roa
Signing time: Wed 19 Oct 2022 08:01:52 +0000
ROA not before: Wed 19 Oct 2022 08:01:52 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 211585
IP address blocks: 166.108.160.0/22 maxlen: 24
166.108.172.0/22 maxlen: 24
166.108.168.0/22 maxlen: 24
166.108.196.0/22 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:ef:43:5b:8a:31:e0:09:85:d4:bf:21:c9:99:1a:f5:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=992b86095ce558d2e9618728a44228a27be9098f
Validity
Not Before: Oct 19 08:01:52 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=064216dd88eaec71bc033602514fa0718441fa1d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:95:d8:f2:ed:72:10:9a:c3:b8:4a:31:fb:77:
75:ef:52:20:35:f3:36:2d:6a:01:62:0a:48:1f:19:
25:4b:9b:f7:97:a6:4f:ab:f7:0e:9c:43:b2:bb:04:
d4:3d:da:6d:f0:a0:c6:57:8d:1e:93:95:6e:ea:77:
89:88:bb:0a:cb:37:8b:dc:9f:ca:98:0e:21:bb:c6:
03:6b:61:a5:a3:23:87:34:81:c4:9d:fa:c6:dd:20:
0d:89:35:9f:74:dc:b0:3a:a6:b2:b5:71:4d:ae:48:
5f:86:b0:3a:6b:44:85:14:4a:2d:bc:3b:81:d0:bb:
3c:55:ae:49:69:cc:65:ae:7d:84:5c:20:79:c3:72:
1f:e8:60:97:52:9c:4b:e0:01:d6:43:f1:2a:0b:1b:
03:34:a0:bf:73:2f:c1:28:73:b0:8f:26:69:ae:6c:
e0:af:32:f3:93:ba:19:45:e7:c7:d8:ba:08:be:2d:
04:17:7c:f8:92:e2:0d:43:9b:42:41:5b:4d:fe:11:
cc:e7:cf:4f:93:43:b5:ec:29:15:87:59:ac:4e:33:
06:2f:31:4d:52:b0:90:6a:9e:d1:2d:c9:69:94:4c:
a1:56:0c:5e:bb:ae:bd:80:dc:35:d2:92:92:0f:8f:
f4:16:6a:80:4e:90:38:37:f0:90:32:fd:49:ab:90:
4c:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:42:16:DD:88:EA:EC:71:BC:03:36:02:51:4F:A0:71:84:41:FA:1D
X509v3 Authority Key Identifier:
keyid:99:2B:86:09:5C:E5:58:D2:E9:61:87:28:A4:42:28:A2:7B:E9:09:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mSuGCVzlWNLpYYcopEIoonvpCY8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/8ea9b9-3b6e-4fdf-b5d1-f04fdcc09e51/1/BkIW3Yjq7HG8AzYCUU-gcYRB-h0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/8ea9b9-3b6e-4fdf-b5d1-f04fdcc09e51/1/mSuGCVzlWNLpYYcopEIoonvpCY8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
166.108.160.0/22
166.108.168.0/21
166.108.196.0/22
Signature Algorithm: sha256WithRSAEncryption
44:c2:38:85:7f:2f:d6:99:6c:ea:3c:5f:eb:12:d8:96:f9:0d:
72:cd:29:42:52:b7:53:de:dc:c0:17:6c:47:a0:e3:66:f3:26:
ae:bf:7a:f0:3c:91:39:50:e1:68:a7:27:48:3a:92:b6:55:1f:
80:bb:23:c4:32:48:52:77:d2:aa:d2:15:89:08:de:bf:0e:0e:
dd:74:d1:0e:f1:09:1c:d3:ce:02:53:9d:69:b8:64:ef:0d:2b:
7a:3b:40:0b:18:1d:08:9a:17:d4:2f:84:4c:e3:02:a9:9e:06:
e3:f8:8b:0f:e1:82:c7:1f:e0:82:69:1a:51:58:0a:4b:98:f8:
38:13:a8:4b:3b:60:83:e8:24:f1:00:9d:38:a0:08:b5:28:82:
60:7a:c4:6e:05:0d:a4:a2:fd:09:d4:6d:5e:aa:39:c7:3f:06:
36:ad:28:d2:e3:10:8f:5b:f9:40:ce:38:74:aa:9e:81:0c:b3:
49:e7:77:29:1e:2c:02:c8:31:5e:49:72:1f:15:16:6b:8a:f5:
d1:de:62:48:3e:9d:5f:6e:7c:6e:02:b6:2c:3b:fd:c4:94:10:
de:da:92:3d:ab:2b:f4:4f:19:5c:48:20:73:5d:6d:06:31:34:
95:61:16:e7:14:ba:37:ba:96:4b:88:50:b3:c7:3e:e6:64:5e:
f8:6d:7d:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:11:48 2025 by rpki-client