Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/92332f-03e0-4116-b6f3-c82f424b6d0d/1/1-vUITEdMli3Y7yygJ9ihWZ3iGjI.roa
File: 1-vUITEdMli3Y7yygJ9ihWZ3iGjI.roa (raw, json)
Hash identifier: hIIboXyn+rS7tr1ZjcEYCI9MfgCkMRCISYoDBtFeEX8=
Subject key identifier: FA:F5:08:4C:47:4C:96:2D:D8:EF:2C:A0:27:D8:A1:59:9D:E2:1A:32
Certificate issuer: /CN=0cda5c874354d83826e43c2535b76e20d5b61b05
Certificate serial: 0182976BD1DE4FF0D5BEBEC5A83CCF928D50
Authority key identifier: 0C:DA:5C:87:43:54:D8:38:26:E4:3C:25:35:B7:6E:20:D5:B6:1B:05
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DNpch0NU2Dgm5DwlNbduINW2GwU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/92332f-03e0-4116-b6f3-c82f424b6d0d/1/1-vUITEdMli3Y7yygJ9ihWZ3iGjI.roa
Signing time: Sat 13 Aug 2022 13:36:41 +0000
ROA not before: Sat 13 Aug 2022 13:36:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 51433
IP address blocks: 185.162.217.0/24 maxlen: 27
185.162.218.0/24 maxlen: 27
185.162.219.0/24 maxlen: 27
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:97:6b:d1:de:4f:f0:d5:be:be:c5:a8:3c:cf:92:8d:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0cda5c874354d83826e43c2535b76e20d5b61b05
Validity
Not Before: Aug 13 13:36:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=faf5084c474c962dd8ef2ca027d8a1599de21a32
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:6d:1b:00:68:3f:84:f1:50:a2:8a:39:df:7a:
10:35:ca:b1:3b:ef:8e:68:f1:dc:10:f7:8f:ef:e9:
0d:99:e2:6c:4e:ec:ad:ae:14:0b:3d:ee:82:e0:a7:
d6:b8:9f:83:c0:32:6a:5d:84:b4:e2:9a:0c:ca:ca:
90:15:b6:3a:fd:cd:cb:2c:55:26:89:93:72:37:7f:
55:56:51:d1:21:a6:a7:71:cf:f7:55:98:d5:a0:02:
ba:63:98:b0:4d:5c:a3:df:1b:10:44:62:73:95:14:
f6:57:9a:c7:5f:29:3e:29:c4:08:f5:08:06:01:09:
19:ea:22:f1:f0:e1:92:bb:88:8f:ac:91:db:39:b5:
27:37:0c:a7:41:8f:1f:99:1a:39:d2:08:b2:da:7c:
55:87:00:96:22:e6:23:c0:f3:79:4b:08:ec:d0:71:
f6:c3:df:c0:74:ed:a8:c0:00:38:27:99:2a:ce:81:
b2:aa:8e:6d:2e:1c:45:88:a8:47:09:c7:9c:c6:72:
5e:3e:ee:23:b8:cc:61:14:b7:73:0d:38:40:91:80:
18:8b:f7:a9:dc:4f:50:77:1f:68:ef:e7:4d:c0:13:
9c:38:a4:87:3e:de:92:0f:4c:c8:66:f4:2c:92:e5:
82:3f:6a:3c:5a:86:a9:61:8b:1c:42:8f:b2:03:d9:
c9:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:F5:08:4C:47:4C:96:2D:D8:EF:2C:A0:27:D8:A1:59:9D:E2:1A:32
X509v3 Authority Key Identifier:
keyid:0C:DA:5C:87:43:54:D8:38:26:E4:3C:25:35:B7:6E:20:D5:B6:1B:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DNpch0NU2Dgm5DwlNbduINW2GwU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/92332f-03e0-4116-b6f3-c82f424b6d0d/1/1-vUITEdMli3Y7yygJ9ihWZ3iGjI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/92332f-03e0-4116-b6f3-c82f424b6d0d/1/DNpch0NU2Dgm5DwlNbduINW2GwU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.162.217.0-185.162.219.255
Signature Algorithm: sha256WithRSAEncryption
1d:da:41:94:8f:d9:1f:4b:d9:2b:50:f7:b9:3e:52:c1:63:72:
8f:e6:9a:51:1c:69:69:a4:c1:e1:32:69:50:6a:1c:2c:85:2a:
4f:15:73:90:7d:03:ab:85:62:28:b8:65:a0:c2:e0:b9:01:c3:
76:a0:2e:e4:be:24:fc:da:eb:c0:29:5e:89:d4:e3:0e:73:31:
58:9e:e8:13:4b:b1:b2:87:a5:64:dd:37:0b:b8:65:89:c4:ed:
bf:89:f0:3b:c2:76:a1:0c:fa:4f:36:ca:03:a9:72:6b:37:e7:
3e:89:eb:fb:e5:2a:57:8c:1d:18:fa:52:eb:1e:5e:5c:64:1f:
a4:29:f3:9f:d9:ab:37:90:c0:1c:52:42:b5:42:a3:24:ba:2e:
27:3d:47:86:8e:0d:6f:1a:44:56:6d:7e:4f:c3:a0:27:bf:26:
87:d6:f6:fe:58:d6:d9:cd:26:06:a9:39:1a:61:3a:fc:12:1b:
84:2b:34:c3:f0:ca:9e:8f:d3:9a:8a:a0:4d:29:4f:3c:75:9b:
6f:b4:56:3b:a8:c0:7c:0d:9d:ef:1e:26:e0:f5:a2:7a:48:a8:
e7:3f:67:fc:d9:04:6a:87:bc:9a:1d:7c:6c:b6:65:ef:5b:96:
4d:a9:32:f5:cc:74:ff:6e:4a:2f:45:86:de:d3:37:55:ea:b1:
a1:14:52:f3
-----BEGIN CERTIFICATE-----
MIIFBjCCA+6gAwIBAgISAYKXa9HeT/DVvr7FqDzPko1QMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBjZGE1Yzg3NDM1NGQ4MzgyNmU0M2MyNTM1Yjc2ZTIwZDVi
NjFiMDUwHhcNMjIwODEzMTMzNjQxWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmYWY1MDg0YzQ3NGM5NjJkZDhlZjJjYTAyN2Q4YTE1OTlkZTIxYTMyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl20bAGg/hPFQooo533oQNcqxO++O
aPHcEPeP7+kNmeJsTuytrhQLPe6C4KfWuJ+DwDJqXYS04poMysqQFbY6/c3LLFUm
iZNyN39VVlHRIaancc/3VZjVoAK6Y5iwTVyj3xsQRGJzlRT2V5rHXyk+KcQI9QgG
AQkZ6iLx8OGSu4iPrJHbObUnNwynQY8fmRo50giy2nxVhwCWIuYjwPN5Swjs0HH2
w9/AdO2owAA4J5kqzoGyqo5tLhxFiKhHCcecxnJePu4juMxhFLdzDThAkYAYi/ep
3E9Qdx9o7+dNwBOcOKSHPt6SD0zIZvQskuWCP2o8WoapYYscQo+yA9nJHQIDAQAB
o4ICEjCCAg4wHQYDVR0OBBYEFPr1CExHTJYt2O8soCfYoVmd4hoyMB8GA1UdIwQY
MBaAFAzaXIdDVNg4JuQ8JTW3biDVthsFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRE5wY2gwTlUyRGdtNUR3bE5iZHVJTlcyR3dVLmNlcjCB
jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yi85MjMzMmYtMDNlMC00MTE2LWI2ZjMt
YzgyZjQyNGI2ZDBkLzEvMS12VUlURWRNbGkzWTd5eWdKOWloV1ozaUdqSS5yb2Ew
gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvNWIvOTIzMzJmLTAzZTAtNDExNi1iNmYzLWM4MmY0MjRiNmQw
ZC8xL0ROcGNoME5VMkRnbTVEd2xOYmR1SU5XMkd3VS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAnBggrBgEFBQcBBwEB/wQYMBYwFAQCAAEwDjAMAwQAuaLZ
AwQCuaLYMA0GCSqGSIb3DQEBCwUAA4IBAQAd2kGUj9kfS9krUPe5PlLBY3KP5ppR
HGlppMHhMmlQahwshSpPFXOQfQOrhWIouGWgwuC5AcN2oC7kviT82uvAKV6J1OMO
czFYnugTS7Gyh6Vk3TcLuGWJxO2/ifA7wnahDPpPNsoDqXJrN+c+iev75SpXjB0Y
+lLrHl5cZB+kKfOf2as3kMAcUkK1QqMkui4nPUeGjg1vGkRWbX5Pw6AnvyaH1vb+
WNbZzSYGqTkaYTr8EhuEKzTD8Mqej9OaiqBNKU88dZtvtFY7qMB8DZ3vHibg9aJ6
SKjnP2f82QRqh7yaHXxstmXvW5ZNqTL1zHT/bkovRYbe0zdV6rGhFFLz
-----END CERTIFICATE-----
Generated at Tue Apr 22 03:40:53 2025 by rpki-client