Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/f3539d-38cd-465e-a57d-dee2f650dd86/1/HMQlPfR-cOai2SYn_3uEQzGHBnA.roa
File: HMQlPfR-cOai2SYn_3uEQzGHBnA.roa (raw, json)
Hash identifier: QT3UzI3V2tul2ilPcOeuJyLoWCMiZjjL11alTh6MZO4=
Subject key identifier: 1C:C4:25:3D:F4:7E:70:E6:A2:D9:26:27:FF:7B:84:43:31:87:06:70
Certificate issuer: /CN=ceb86983547113359bade1f3f38104091e3a6439
Certificate serial: 077F4DD1
Authority key identifier: CE:B8:69:83:54:71:13:35:9B:AD:E1:F3:F3:81:04:09:1E:3A:64:39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zrhpg1RxEzWbreHz84EECR46ZDk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/f3539d-38cd-465e-a57d-dee2f650dd86/1/HMQlPfR-cOai2SYn_3uEQzGHBnA.roa
Signing time: Sat 01 Jan 2022 01:03:16 +0000
ROA not before: Sat 01 Jan 2022 01:03:16 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 3269
IP address blocks: 193.207.208.0/20 maxlen: 20
193.207.224.0/21 maxlen: 21
193.207.232.0/21 maxlen: 21
193.207.240.0/22 maxlen: 22
193.207.244.0/22 maxlen: 22
188.135.143.254/32 maxlen: 32
193.207.192.0/20 maxlen: 20
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 125783505 (0x77f4dd1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ceb86983547113359bade1f3f38104091e3a6439
Validity
Not Before: Jan 1 01:03:16 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=1cc4253df47e70e6a2d92627ff7b844331870670
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:44:03:0f:41:82:af:bc:60:fa:44:73:24:92:
f9:ac:12:59:24:68:81:83:c9:a9:45:72:4c:59:ef:
e8:34:bb:36:a9:39:6d:f1:83:69:5f:be:d6:72:fc:
c5:11:a9:c2:a8:85:ab:8d:5e:08:ce:90:ac:30:ca:
f1:59:d5:35:15:2e:34:1b:c9:ce:c8:2d:7c:78:38:
dc:5b:fe:ac:e0:65:fd:38:b6:e9:c0:64:fe:5f:c3:
36:ff:d9:eb:73:80:29:b6:d5:c3:af:25:e2:23:77:
66:9b:4c:e1:32:ae:f1:df:0b:33:e0:c8:b7:e2:1f:
e1:d9:a0:e5:38:7b:8f:5a:51:67:d8:00:ac:15:e9:
91:b9:cc:78:57:c5:3f:cd:de:5b:b1:53:0d:a8:14:
3b:71:da:6f:3a:2c:1c:c3:a0:9a:e2:ae:c1:73:64:
24:bf:8c:fe:18:09:8f:59:17:84:37:94:e8:23:62:
d5:d1:d2:77:77:d0:42:d9:33:40:b4:ea:46:78:48:
35:47:8e:e5:e1:18:ed:d5:9a:7d:48:91:89:8c:b3:
09:4b:17:b0:7a:42:4b:51:89:b5:d1:f6:48:87:bb:
b2:c8:7e:cd:4c:79:85:48:14:86:cd:24:3a:7a:8c:
60:01:8d:60:56:a2:8a:54:d6:fd:6a:18:09:e6:1b:
a2:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:C4:25:3D:F4:7E:70:E6:A2:D9:26:27:FF:7B:84:43:31:87:06:70
X509v3 Authority Key Identifier:
keyid:CE:B8:69:83:54:71:13:35:9B:AD:E1:F3:F3:81:04:09:1E:3A:64:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zrhpg1RxEzWbreHz84EECR46ZDk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/f3539d-38cd-465e-a57d-dee2f650dd86/1/HMQlPfR-cOai2SYn_3uEQzGHBnA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/f3539d-38cd-465e-a57d-dee2f650dd86/1/zrhpg1RxEzWbreHz84EECR46ZDk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.135.143.254/32
193.207.192.0-193.207.247.255
Signature Algorithm: sha256WithRSAEncryption
32:7a:b9:3d:4f:c2:af:22:80:92:12:55:b4:7b:30:11:df:14:
26:40:f5:81:63:16:94:dd:91:d1:8e:90:4d:fc:0a:ef:09:65:
77:85:1b:37:f5:8b:4c:95:a5:7d:0f:d7:11:16:56:2d:b9:42:
93:04:21:1f:b3:04:25:0c:e2:db:36:59:da:b5:ab:db:bb:64:
37:4b:49:46:7e:e3:5f:9b:13:0c:04:bf:f2:64:b8:4a:e8:ef:
23:2c:ef:08:d6:1d:80:ae:a7:f9:58:6e:cc:5e:52:91:f0:3f:
fe:42:1a:e0:3b:42:d7:d7:bd:b0:a1:e7:cd:65:ea:2e:54:54:
26:18:1f:f7:3e:68:f2:23:b8:b0:07:8c:c7:0a:9c:07:6f:60:
22:7e:92:08:79:67:5e:78:fe:7f:fe:b8:8e:80:66:cc:d6:c2:
95:ef:64:71:53:d3:f0:61:60:80:c7:41:92:0e:11:9a:ec:8b:
48:47:b4:74:a7:f7:26:b3:5a:43:90:9d:e3:71:ac:14:66:18:
46:cb:2f:6c:0f:d7:b2:99:2e:47:8f:66:4c:b6:82:73:f0:3a:
3c:b0:ae:9b:84:34:d0:cf:9d:0d:34:02:8f:78:54:00:f9:67:
39:88:96:db:c9:e1:7f:eb:e1:71:6d:fc:c7:69:a1:9d:17:8c:
8e:8f:cd:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:23 2023 by rpki-client on console-fra.rpki-client.org