Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/41f6f5-cef0-4a57-8e47-0a85986208a9/1/HvDSunlG_-NH1SHeCFti0j7mB6Y.roa
File: HvDSunlG_-NH1SHeCFti0j7mB6Y.roa (raw, json)
Hash identifier: L3eyUJnm/KvWApRtD00pJ7hr94h3UmSSvAauFpu8yQY=
Subject key identifier: 1E:F0:D2:BA:79:46:FF:E3:47:D5:21:DE:08:5B:62:D2:3E:E6:07:A6
Certificate issuer: /CN=5f51bcd89eb7f5b3ab08806ef51a7c2f6eb98efc
Certificate serial: 0188712A38130E0E83DD52732A7CF5146206
Authority key identifier: 5F:51:BC:D8:9E:B7:F5:B3:AB:08:80:6E:F5:1A:7C:2F:6E:B9:8E:FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X1G82J639bOrCIBu9Rp8L265jvw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/41f6f5-cef0-4a57-8e47-0a85986208a9/1/HvDSunlG_-NH1SHeCFti0j7mB6Y.roa
Signing time: Wed 31 May 2023 09:36:12 +0000
ROA not before: Wed 31 May 2023 09:36:12 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 48359
IP address blocks: 109.95.62.0/24 maxlen: 24
109.95.63.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:71:2a:38:13:0e:0e:83:dd:52:73:2a:7c:f5:14:62:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5f51bcd89eb7f5b3ab08806ef51a7c2f6eb98efc
Validity
Not Before: May 31 09:36:12 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1ef0d2ba7946ffe347d521de085b62d23ee607a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:70:af:9f:de:7a:54:f5:5e:9f:44:06:c5:86:
c3:0d:ad:a0:a0:65:00:90:7c:65:80:b5:77:79:18:
0c:cc:de:97:51:29:35:44:33:a0:e0:92:84:49:1c:
36:c2:d7:2c:e6:6d:e0:9a:a7:0e:66:30:e0:15:9b:
61:b4:91:cc:69:eb:2d:c1:36:12:aa:93:7e:00:b0:
e7:af:56:bd:ea:31:74:9a:84:34:93:ad:06:3a:0a:
a7:91:b3:af:b9:a4:03:0d:cc:57:7c:70:09:cd:0b:
d0:6e:3b:fb:c1:f7:bb:8c:1a:ba:49:c4:a7:c7:20:
0c:8d:62:a4:36:26:ec:cf:12:69:0f:bc:4e:f5:53:
e1:31:81:25:39:1c:2d:b1:1f:1c:58:22:9a:81:80:
d6:0c:a6:fd:5c:17:fa:59:a0:78:b9:e4:06:cc:5c:
7e:c1:0f:93:cc:71:58:7c:8a:d6:e9:6d:8e:94:fa:
f1:98:d1:c6:d4:e9:a1:00:1b:e5:b4:76:c1:21:63:
4c:9e:d5:7b:48:52:57:a2:d8:56:7a:ef:8e:c7:8c:
8c:62:ce:54:cb:f1:e1:a6:7c:53:47:c4:af:79:ef:
c9:32:9c:da:f1:18:14:6a:49:6c:06:23:c9:f4:80:
dd:9d:1f:8d:85:c1:1f:9b:89:ca:2c:02:24:1b:2e:
6b:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:F0:D2:BA:79:46:FF:E3:47:D5:21:DE:08:5B:62:D2:3E:E6:07:A6
X509v3 Authority Key Identifier:
keyid:5F:51:BC:D8:9E:B7:F5:B3:AB:08:80:6E:F5:1A:7C:2F:6E:B9:8E:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X1G82J639bOrCIBu9Rp8L265jvw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/41f6f5-cef0-4a57-8e47-0a85986208a9/1/HvDSunlG_-NH1SHeCFti0j7mB6Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/41f6f5-cef0-4a57-8e47-0a85986208a9/1/X1G82J639bOrCIBu9Rp8L265jvw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.95.62.0/23
Signature Algorithm: sha256WithRSAEncryption
7d:76:bb:53:21:27:62:46:7a:8c:f0:fe:6f:f1:0e:69:84:27:
1b:00:dd:df:11:c5:a9:d8:c7:74:30:e6:fb:db:66:ae:9a:0d:
cf:6d:00:79:46:9d:99:b7:7b:2e:56:16:f4:a0:f5:53:41:60:
cb:c7:98:b4:6f:ae:65:9e:f3:58:31:74:ea:6b:8f:d3:f9:4d:
e8:8e:20:8a:2a:25:86:88:6e:68:9e:52:6e:d8:de:4c:53:a2:
ab:be:86:88:12:46:66:19:e9:f6:59:fb:d4:03:cb:b2:9a:94:
90:a1:17:80:5f:52:3d:e2:c4:b4:08:07:5a:d9:e9:c9:9e:4b:
ee:54:01:08:38:27:bf:b8:02:5e:ef:02:8c:4b:e4:36:5d:3b:
b2:75:f1:da:e9:6a:5c:81:85:a5:69:c2:ad:b4:46:6f:77:95:
62:fd:6d:85:7e:63:5c:3e:99:5f:c8:53:54:0c:ed:9d:e0:ae:
82:9c:a2:03:9b:2d:b1:26:76:57:7a:ab:9c:94:4d:06:a2:a7:
db:6f:cd:c2:25:1e:c4:85:c8:10:9c:35:d4:55:a4:f3:b0:0d:
b4:2c:2b:26:07:68:a5:92:2c:15:46:3e:02:2a:dc:d0:56:bb:
ba:ae:7d:bc:fb:dc:5e:96:ab:34:f0:65:15:6f:68:a7:2f:6e:
33:3f:47:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:54:35 2025 by rpki-client