Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/52b634-6148-4e2e-b8f3-0c98c570a6e0/1/j-pYhMW1LYdhh1hWzc12o0ru-ec.roa
File: j-pYhMW1LYdhh1hWzc12o0ru-ec.roa (raw, json)
Hash identifier: 68vnrcNjfoojgevFwlUL/IHjgt/ZrmAIRAXEB3sxN1c=
Subject key identifier: 8F:EA:58:84:C5:B5:2D:87:61:87:58:56:CD:CD:76:A3:4A:EE:F9:E7
Certificate issuer: /CN=607548c37abebc58b928ed285433d69e95df9c3b
Certificate serial: 0185F3F044887B63DB62EAA8935B0490CDD4
Authority key identifier: 60:75:48:C3:7A:BE:BC:58:B9:28:ED:28:54:33:D6:9E:95:DF:9C:3B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YHVIw3q-vFi5KO0oVDPWnpXfnDs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/52b634-6148-4e2e-b8f3-0c98c570a6e0/1/j-pYhMW1LYdhh1hWzc12o0ru-ec.roa
Signing time: Fri 27 Jan 2023 15:54:47 +0000
ROA not before: Fri 27 Jan 2023 15:54:47 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 31294
IP address blocks: 83.220.160.0/22 maxlen: 22
83.220.164.0/23 maxlen: 23
2a01:b8a0::/32 maxlen: 32
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:f3:f0:44:88:7b:63:db:62:ea:a8:93:5b:04:90:cd:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=607548c37abebc58b928ed285433d69e95df9c3b
Validity
Not Before: Jan 27 15:54:47 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8fea5884c5b52d8761875856cdcd76a34aeef9e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:c3:29:0c:8c:b2:22:22:37:62:17:82:8e:35:
34:9e:9c:3a:a0:73:6c:88:24:10:18:56:23:91:f8:
07:80:a4:ab:fc:63:c1:1b:e0:b6:d5:65:b9:d0:65:
06:04:40:f3:27:1e:2f:c7:b6:ff:d8:9c:fb:e6:55:
c6:88:e5:8a:07:52:38:74:da:03:1f:99:5a:c9:84:
96:3d:2e:c4:8f:58:91:13:1f:5c:75:06:ff:72:a4:
44:5f:81:0f:19:90:48:95:e2:87:a5:4f:00:05:c1:
1d:de:e0:cb:83:b4:96:ca:67:09:6c:64:a9:45:57:
5f:6c:ea:6f:a5:06:7f:db:43:cd:a3:dc:a0:4c:9d:
4b:12:5f:76:af:04:0a:e9:d8:7d:d9:d4:a4:12:c9:
2b:7b:88:06:80:03:1e:33:22:18:4c:ac:d3:98:7c:
e0:4c:1b:c6:8b:4e:34:64:53:95:41:a3:7f:f7:25:
5b:c1:e1:33:60:14:ba:9d:81:bf:eb:36:14:a1:77:
8f:bd:fd:fb:cd:c7:03:e8:f7:9c:3d:22:3b:e7:40:
67:6c:6f:5c:18:9c:ed:93:44:50:c3:cc:2c:21:41:
31:de:89:1a:14:f7:27:66:54:20:58:37:10:93:d0:
04:3e:b5:a1:47:45:51:52:11:33:ed:b2:f2:a6:34:
c1:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:EA:58:84:C5:B5:2D:87:61:87:58:56:CD:CD:76:A3:4A:EE:F9:E7
X509v3 Authority Key Identifier:
keyid:60:75:48:C3:7A:BE:BC:58:B9:28:ED:28:54:33:D6:9E:95:DF:9C:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YHVIw3q-vFi5KO0oVDPWnpXfnDs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/52b634-6148-4e2e-b8f3-0c98c570a6e0/1/j-pYhMW1LYdhh1hWzc12o0ru-ec.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/52b634-6148-4e2e-b8f3-0c98c570a6e0/1/YHVIw3q-vFi5KO0oVDPWnpXfnDs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.220.160.0-83.220.165.255
IPv6:
2a01:b8a0::/32
Signature Algorithm: sha256WithRSAEncryption
d5:9a:06:74:0b:de:4b:b5:f1:8f:b3:59:83:27:00:9e:fb:e9:
31:87:62:1c:2e:62:ff:03:6c:9d:ea:42:29:2f:77:c8:17:3a:
d4:b1:d1:5c:71:60:c0:c0:b2:95:72:81:41:56:a5:48:75:ff:
95:d7:77:85:79:d1:16:4d:e8:8e:ec:60:44:3c:70:1b:9d:21:
d4:c6:87:90:91:22:b5:4e:3c:03:13:81:84:df:91:c8:46:9b:
bc:df:5d:fa:27:0d:5e:cf:c8:44:87:98:36:37:73:69:6e:bf:
d0:92:84:75:0c:82:dc:aa:63:49:e6:3d:43:f2:a7:d0:10:11:
d5:b6:d4:24:90:03:b4:b0:19:d3:86:53:64:1b:14:36:f5:16:
9d:f1:21:c6:06:32:08:6e:47:5e:a1:69:e0:92:42:97:bf:4f:
74:68:50:53:99:88:78:71:2c:22:0f:31:93:1b:e1:71:07:91:
4f:b1:69:fd:c9:d3:1f:72:e9:e1:2b:9b:21:6c:34:1a:e0:92:
99:1b:72:f2:49:57:52:7f:e5:e1:67:45:27:16:65:8b:c5:0b:
20:12:c7:29:8b:f0:09:80:6c:a9:b1:cc:09:94:17:6f:30:92:
fe:4f:f8:f4:97:d1:b3:10:bb:f4:cf:50:db:dd:88:cc:84:0d:
d2:bb:05:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:49:56 2025 by rpki-client