Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/HysbTD9vo_x4smFUQl46GbX-nYE.roa
File: HysbTD9vo_x4smFUQl46GbX-nYE.roa (raw, json)
Hash identifier: ZJcI6eELYsLC74P7MEeEojpUUWErL90vuCjWnan7DKY=
Subject key identifier: 1F:2B:1B:4C:3F:6F:A3:FC:78:B2:61:54:42:5E:3A:19:B5:FE:9D:81
Certificate issuer: /CN=6f75e4e94b5cb74517b7b01568015da9e6eecdb6
Certificate serial: 018AB135886F7F06517C5F4EE4D24BFD4102
Authority key identifier: 6F:75:E4:E9:4B:5C:B7:45:17:B7:B0:15:68:01:5D:A9:E6:EE:CD:B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b3Xk6Utct0UXt7AVaAFdqebuzbY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/HysbTD9vo_x4smFUQl46GbX-nYE.roa
Signing time: Wed 20 Sep 2023 06:09:50 +0000
ROA not before: Wed 20 Sep 2023 06:09:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 95.82.0.0/21 maxlen: 24
109.111.56.0/22 maxlen: 24
37.128.248.0/22 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:b1:35:88:6f:7f:06:51:7c:5f:4e:e4:d2:4b:fd:41:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f75e4e94b5cb74517b7b01568015da9e6eecdb6
Validity
Not Before: Sep 20 06:09:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1f2b1b4c3f6fa3fc78b26154425e3a19b5fe9d81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:a6:86:f2:36:bb:b9:2c:c4:bf:16:c5:d4:91:
c0:66:ab:f3:57:f8:91:30:bd:37:bc:63:3d:b2:f6:
91:06:be:41:a0:c7:9d:d2:7d:49:2e:47:ef:d2:39:
83:ee:52:85:b8:e7:ac:3e:42:44:67:95:53:c8:25:
e1:e3:d2:47:7a:23:57:c4:08:25:5c:ad:43:26:2f:
e1:7a:62:50:b4:7d:5a:40:74:3f:0f:96:d1:fd:2c:
0c:01:fa:9e:f8:7b:f7:82:ba:4b:01:a9:e5:b5:32:
08:9b:f0:ed:da:79:35:11:93:5f:57:7f:dc:75:d9:
5f:a9:b8:e3:74:61:4f:92:c6:10:1e:6a:5e:45:a0:
71:bd:52:ac:92:f5:34:5f:d6:94:4f:28:3f:15:f4:
a7:d9:50:bb:bb:50:17:be:1a:eb:57:6a:62:36:9c:
48:c5:30:3e:da:59:3a:5d:a6:4f:cd:2c:33:57:57:
83:a5:ff:b9:fc:5d:b1:71:4e:48:08:df:12:8a:e0:
4e:a2:31:fb:b4:b8:84:0b:29:e2:d9:ac:ba:95:52:
b3:93:b7:9b:55:6f:1d:7f:61:a4:35:28:24:e2:f2:
c9:31:e0:85:21:c5:e0:8f:c2:67:6a:86:8a:93:28:
c9:89:c0:20:89:98:71:22:1f:7c:15:62:7d:93:5e:
90:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:2B:1B:4C:3F:6F:A3:FC:78:B2:61:54:42:5E:3A:19:B5:FE:9D:81
X509v3 Authority Key Identifier:
keyid:6F:75:E4:E9:4B:5C:B7:45:17:B7:B0:15:68:01:5D:A9:E6:EE:CD:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3Xk6Utct0UXt7AVaAFdqebuzbY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/HysbTD9vo_x4smFUQl46GbX-nYE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/b3Xk6Utct0UXt7AVaAFdqebuzbY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.128.248.0/22
95.82.0.0/21
109.111.56.0/22
Signature Algorithm: sha256WithRSAEncryption
90:dd:e4:30:64:54:0e:4b:f9:23:d9:17:98:2b:41:76:71:f1:
af:e2:03:32:ba:0e:07:17:c1:e9:9a:07:83:5b:25:7e:35:34:
ac:81:d0:3f:b5:7a:e9:61:2a:6e:4d:86:66:14:e6:40:79:61:
0a:d7:29:e7:a9:cf:ad:c5:71:e2:77:30:f8:de:9a:cf:88:5c:
56:c9:0d:59:b1:31:2c:9a:5a:67:52:15:35:88:7e:43:ee:76:
85:c2:3e:b5:39:20:38:29:b2:ea:9f:be:e6:4c:2b:43:61:36:
e1:d4:fd:c0:d5:48:07:1e:2b:16:7c:a5:8a:3c:b8:66:fd:b2:
ed:d6:70:c0:05:3c:30:2a:3b:c0:01:de:ba:1e:cf:9b:2e:e2:
88:20:58:fd:f2:ae:7f:8c:b1:bd:1b:d3:1e:1f:fa:98:1a:0e:
21:55:3a:50:8d:2e:5e:ee:3f:6a:35:3a:f2:42:fb:42:d7:71:
4b:5d:97:88:35:ba:1e:ea:bc:4c:02:92:28:eb:94:08:f5:34:
85:82:bc:18:cd:5c:07:d8:e3:3d:e9:60:1c:7b:ae:67:79:ae:
af:f6:07:aa:7e:bf:c1:63:6e:1c:21:3a:c6:c1:e6:81:f5:b2:
c4:20:bf:4f:7d:33:00:79:c0:51:c3:db:94:57:62:9d:96:f4:
f7:f2:fd:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:20:52 2025 by rpki-client