Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/8fad67-bb6b-4773-b81e-c900a89f20f1/1/28Y1QWHBWepHp54MdyCL9CAr0XM.roa
File: 28Y1QWHBWepHp54MdyCL9CAr0XM.roa (raw, json)
Hash identifier: bhpt17lAMJ0suilauwc55DHNQ2sCCzCiLa1Xizaigo4=
Subject key identifier: DB:C6:35:41:61:C1:59:EA:47:A7:9E:0C:77:20:8B:F4:20:2B:D1:73
Certificate issuer: /CN=541fdc7a2f11a5766d3ad7bdf625ce5e119a8fdf
Certificate serial: 05E625FA
Authority key identifier: 54:1F:DC:7A:2F:11:A5:76:6D:3A:D7:BD:F6:25:CE:5E:11:9A:8F:DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VB_cei8RpXZtOte99iXOXhGaj98.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/8fad67-bb6b-4773-b81e-c900a89f20f1/1/28Y1QWHBWepHp54MdyCL9CAr0XM.roa
Signing time: Sun 19 Jun 2022 12:37:45 +0000
ROA not before: Sun 19 Jun 2022 12:37:45 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 61317
IP address blocks: 185.104.32.0/21 maxlen: 24
185.104.43.0/24 maxlen: 24
185.101.168.0/22 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 98969082 (0x5e625fa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=541fdc7a2f11a5766d3ad7bdf625ce5e119a8fdf
Validity
Not Before: Jun 19 12:37:45 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=dbc6354161c159ea47a79e0c77208bf4202bd173
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:34:a6:77:8b:4f:ef:f4:ec:b9:56:32:56:98:
ce:ae:1d:d9:24:4c:89:ee:8e:f1:93:f2:5e:d1:3b:
91:f1:93:4d:24:96:b2:02:b3:4b:a3:9b:38:c3:c8:
78:ba:57:bb:d0:f8:b6:c2:15:2f:0a:2b:40:18:d1:
ba:3a:6a:9c:ef:5a:1f:36:11:d2:20:f0:97:3f:0a:
d3:b8:4b:d7:25:8d:b4:79:06:7f:1a:60:62:e2:98:
54:22:9c:bc:a2:80:2e:19:52:c1:98:d9:89:c2:58:
5f:7b:e2:60:7f:0a:62:62:86:46:68:ae:65:e6:d1:
3b:ed:66:fa:8f:96:55:48:ee:cd:0a:5b:a5:91:1e:
51:3b:e2:2f:65:e6:a8:0d:74:3b:31:f8:15:7d:4b:
2f:73:92:07:57:df:3b:6c:69:8f:2a:5a:0b:8b:fe:
f2:02:5e:5d:91:7e:ee:90:af:77:f0:f7:c1:3d:64:
a2:77:11:09:94:e0:80:73:d7:e7:b2:28:3a:ab:b8:
ff:55:70:44:b1:39:c2:4e:aa:a9:66:30:4b:4b:3f:
34:18:6a:22:01:6a:43:55:66:b6:a7:68:c3:8c:69:
59:b6:f3:c6:d8:cb:35:50:50:df:2b:46:b7:e4:27:
0a:fb:6b:b5:db:88:23:5f:e3:a7:e1:64:ba:8b:10:
9e:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:C6:35:41:61:C1:59:EA:47:A7:9E:0C:77:20:8B:F4:20:2B:D1:73
X509v3 Authority Key Identifier:
keyid:54:1F:DC:7A:2F:11:A5:76:6D:3A:D7:BD:F6:25:CE:5E:11:9A:8F:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VB_cei8RpXZtOte99iXOXhGaj98.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/8fad67-bb6b-4773-b81e-c900a89f20f1/1/28Y1QWHBWepHp54MdyCL9CAr0XM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/8fad67-bb6b-4773-b81e-c900a89f20f1/1/VB_cei8RpXZtOte99iXOXhGaj98.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.101.168.0/22
185.104.32.0/21
185.104.43.0/24
Signature Algorithm: sha256WithRSAEncryption
22:fe:93:8d:ad:61:01:db:29:3f:99:28:e0:bd:e1:28:41:c8:
97:2d:4e:d5:f9:a3:23:00:11:cd:8c:ee:0b:8f:0f:d7:c1:4d:
9e:f1:51:09:39:9d:2f:88:41:9e:ac:de:92:aa:aa:6f:9f:3e:
30:2c:eb:bf:f2:bf:3e:0b:e5:b0:3a:e2:70:13:b2:88:79:1f:
13:56:7c:0c:0a:64:57:50:1c:94:a0:a4:56:47:39:bf:b9:4c:
22:28:eb:77:43:9c:83:24:c1:01:9c:2b:e7:14:e5:0e:57:b9:
b1:80:17:fe:ce:f8:0d:bf:66:43:f9:23:d4:67:27:83:47:43:
6c:83:97:18:1a:70:2f:d5:13:d1:96:1f:fa:80:08:8c:6d:f1:
8d:dd:98:ab:bb:58:8e:36:a8:a0:01:2f:f2:7a:c4:37:6c:a2:
fd:0d:99:f2:36:12:67:9a:2e:04:9a:e4:09:28:35:51:2b:19:
ea:56:6e:aa:92:6c:27:f5:ac:ad:39:85:99:07:45:04:c7:b0:
f5:56:10:25:ec:d6:b0:15:14:98:d8:80:9e:e6:b3:5b:2d:28:
5e:8f:1d:df:5c:96:71:f0:9a:89:f5:b6:24:96:8a:e4:f4:63:
22:48:92:cf:aa:e7:69:fc:22:9e:87:ec:e3:68:4b:49:8f:9a:
87:79:58:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:24:29 2025 by rpki-client