Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/OHY_98-rJGF2yDDf6JAo8F7P9MQ.roa
File: OHY_98-rJGF2yDDf6JAo8F7P9MQ.roa (raw, json)
Hash identifier: 8QBR/y+SjiQ6dZoqQ7ngBdDPrTvac/XQs6Tn3KLSSyA=
Subject key identifier: 38:76:3F:F7:CF:AB:24:61:76:C8:30:DF:E8:90:28:F0:5E:CF:F4:C4
Certificate issuer: /CN=6f75e4e94b5cb74517b7b01568015da9e6eecdb6
Certificate serial: 018BF6884DFFD75ECEED4D86B404F58EABF3
Authority key identifier: 6F:75:E4:E9:4B:5C:B7:45:17:B7:B0:15:68:01:5D:A9:E6:EE:CD:B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b3Xk6Utct0UXt7AVaAFdqebuzbY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/OHY_98-rJGF2yDDf6JAo8F7P9MQ.roa
Signing time: Wed 22 Nov 2023 10:16:49 +0000
ROA not before: Wed 22 Nov 2023 10:16:49 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 95.82.0.0/21 maxlen: 24
95.82.8.0/21 maxlen: 24
185.65.62.0/24 maxlen: 24
109.111.32.0/20 maxlen: 24
176.221.16.0/21 maxlen: 21
95.82.32.0/21 maxlen: 24
176.221.24.0/21 maxlen: 21
176.221.30.0/23 maxlen: 24
176.221.28.0/22 maxlen: 24
37.128.248.0/22 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:f6:88:4d:ff:d7:5e:ce:ed:4d:86:b4:04:f5:8e:ab:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f75e4e94b5cb74517b7b01568015da9e6eecdb6
Validity
Not Before: Nov 22 10:16:49 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=38763ff7cfab246176c830dfe89028f05ecff4c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:89:49:4f:51:2e:4a:23:7a:b5:08:16:0b:69:
80:e1:13:79:eb:79:40:82:be:64:21:e2:5a:a4:96:
68:8e:44:b5:03:08:e7:d5:19:b3:5e:b5:88:33:56:
f1:33:e4:7e:ed:1f:f6:c5:da:99:92:73:23:01:9f:
e7:4b:e4:f5:e2:01:74:d7:52:2c:51:c0:af:17:70:
ad:6d:17:5d:25:e5:d1:a8:e4:6b:4e:45:67:f9:cc:
bf:73:cb:97:ad:42:48:8f:8f:b7:a2:09:18:c7:63:
f1:a9:e6:e9:5c:67:9a:8d:e2:29:6e:cd:fd:f4:70:
60:ea:ba:da:b5:21:79:60:1a:8b:cb:b0:dd:f2:1c:
73:b7:cc:6d:a4:bc:56:67:26:aa:8f:f4:80:d9:57:
c5:ce:e4:ec:a6:e6:be:eb:52:e8:ae:74:dd:23:d3:
83:65:ea:d1:a3:ba:fd:66:ca:f0:da:b9:b6:69:ec:
75:1c:86:3a:28:00:fb:16:9d:d9:d9:4a:ae:17:57:
c5:74:a4:61:3a:1c:73:8f:e1:b6:b2:56:e5:d3:7f:
58:05:16:35:11:4c:f4:a8:63:33:78:1a:32:1a:fe:
7b:57:eb:38:4e:bf:ce:2b:d9:58:40:11:f2:69:9e:
bb:2e:57:7c:08:90:9d:25:11:61:f9:47:24:4c:ca:
10:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:76:3F:F7:CF:AB:24:61:76:C8:30:DF:E8:90:28:F0:5E:CF:F4:C4
X509v3 Authority Key Identifier:
keyid:6F:75:E4:E9:4B:5C:B7:45:17:B7:B0:15:68:01:5D:A9:E6:EE:CD:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3Xk6Utct0UXt7AVaAFdqebuzbY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/OHY_98-rJGF2yDDf6JAo8F7P9MQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/b3Xk6Utct0UXt7AVaAFdqebuzbY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.128.248.0/22
95.82.0.0/20
95.82.32.0/21
109.111.32.0/20
176.221.16.0/20
185.65.62.0/24
Signature Algorithm: sha256WithRSAEncryption
17:02:03:93:7f:18:9b:a2:fa:d9:fb:e3:0d:68:bd:81:08:b0:
f0:40:eb:ff:66:3f:ce:48:9a:16:43:6a:e5:47:04:9a:5e:f3:
c6:1b:e5:d5:a4:ad:9d:cb:7d:0b:f5:ce:60:d5:1c:c9:bc:34:
3f:c0:f7:67:f8:63:35:c4:bf:cd:dc:f6:0a:a1:58:aa:b4:30:
01:2e:48:47:b6:62:f5:c3:a9:c5:9e:c7:4f:f1:34:d4:4a:63:
53:ef:ad:c5:82:1f:fc:f5:e0:e0:d0:ef:ab:6d:3e:d2:4f:83:
18:92:a0:2a:85:f9:44:7e:5a:2c:44:5d:88:2b:a7:5b:75:a7:
71:87:2c:57:ed:7c:b3:5f:57:8d:75:95:d3:28:90:39:39:41:
ab:04:8a:e1:0e:32:55:c0:d4:76:4e:d9:9c:4e:d8:7f:7f:6f:
77:33:f4:0d:d1:71:45:63:00:f2:1e:1b:dc:c8:5e:47:e5:d6:
77:94:d0:e8:5c:b6:db:ab:68:4a:8d:ac:4f:13:2a:72:79:79:
22:9f:1a:c4:d0:21:45:f8:7b:9a:37:2f:a2:84:13:9d:3a:a0:
b3:9a:1e:b7:ae:28:d0:c7:70:d5:24:4a:10:d3:1b:c4:bd:a0:
ca:ce:f7:dd:92:c5:87:61:93:9b:de:30:41:91:42:c7:45:38:
15:ca:7d:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:26:27 2025 by rpki-client