Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/2f3c19-56d5-4924-8bcb-bac472ab7b6a/1/HasoCUq2AF96KIB5I_43GmblDns.roa
File: HasoCUq2AF96KIB5I_43GmblDns.roa (raw, json)
Hash identifier: JH79YrwWG8Nfus+mZ/zqrCRAsuAh/XMw48tCWqC25a0=
Subject key identifier: 1D:AB:28:09:4A:B6:00:5F:7A:28:80:79:23:FE:37:1A:66:E5:0E:7B
Certificate issuer: /CN=61b195d13050ff3c468a149778710b53582251d9
Certificate serial: 0926E07F
Authority key identifier: 61:B1:95:D1:30:50:FF:3C:46:8A:14:97:78:71:0B:53:58:22:51:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YbGV0TBQ_zxGihSXeHELU1giUdk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/2f3c19-56d5-4924-8bcb-bac472ab7b6a/1/HasoCUq2AF96KIB5I_43GmblDns.roa
Signing time: Sat 01 Jan 2022 04:02:02 +0000
ROA not before: Sat 01 Jan 2022 04:02:02 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 15925
IP address blocks: 185.108.8.0/22 maxlen: 22
46.21.0.0/20 maxlen: 20
87.253.240.0/20 maxlen: 20
213.135.192.0/21 maxlen: 21
2a01:7f8::/29 maxlen: 32
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 153542783 (0x926e07f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61b195d13050ff3c468a149778710b53582251d9
Validity
Not Before: Jan 1 04:02:02 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=1dab28094ab6005f7a28807923fe371a66e50e7b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:9a:b1:a1:23:d0:78:2b:69:4d:d7:81:cb:53:
17:a8:73:31:3a:52:98:80:14:4a:d1:3f:ed:fe:4c:
d3:84:cc:48:22:eb:7b:72:33:66:75:e7:7c:4d:da:
c9:cb:aa:98:0d:83:5c:cd:1f:b3:b3:54:5c:1d:76:
bc:0a:16:ed:16:63:d2:6a:b4:e9:d0:b4:76:29:3c:
a9:05:06:dd:62:bf:9e:ac:74:af:fe:ec:1b:e0:46:
fa:a6:98:d5:7c:61:0f:a6:0d:02:0f:65:80:c8:91:
d2:57:07:9a:14:d5:fc:61:ce:11:5f:a3:45:d0:11:
6f:4d:5b:01:ad:01:2c:85:22:53:48:8c:14:cc:de:
a4:9d:9f:79:e6:89:44:7b:42:90:23:82:dd:a7:e1:
69:44:bd:8a:9b:01:df:60:3b:00:9d:bf:e5:a5:2c:
86:d1:3f:e4:ed:7f:59:0f:fa:b4:0e:97:0e:e3:93:
22:f0:d0:6c:15:4b:f4:8a:1a:6a:a4:81:d8:09:f9:
ea:4f:f1:97:8a:9c:23:87:50:1f:cc:db:45:a8:0a:
b0:79:16:ae:3f:a0:dc:a0:96:e6:91:dc:82:18:44:
7a:de:80:17:6f:02:c7:24:b8:42:60:87:c3:36:db:
7c:b4:08:d9:c8:3a:b1:bb:30:0a:e5:9a:6c:28:ac:
30:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:AB:28:09:4A:B6:00:5F:7A:28:80:79:23:FE:37:1A:66:E5:0E:7B
X509v3 Authority Key Identifier:
keyid:61:B1:95:D1:30:50:FF:3C:46:8A:14:97:78:71:0B:53:58:22:51:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YbGV0TBQ_zxGihSXeHELU1giUdk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/2f3c19-56d5-4924-8bcb-bac472ab7b6a/1/HasoCUq2AF96KIB5I_43GmblDns.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/2f3c19-56d5-4924-8bcb-bac472ab7b6a/1/YbGV0TBQ_zxGihSXeHELU1giUdk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.21.0.0/20
87.253.240.0/20
185.108.8.0/22
213.135.192.0/21
IPv6:
2a01:7f8::/29
Signature Algorithm: sha256WithRSAEncryption
93:53:92:c9:12:bf:42:d1:37:2c:e3:91:21:35:27:b3:25:fb:
9e:19:5e:74:8b:b8:d9:17:44:d1:1a:39:98:90:d2:48:bd:0b:
87:ab:58:a8:8d:65:0b:4e:ee:52:0d:57:14:5a:80:ea:91:f8:
46:13:c2:58:0e:37:72:e9:58:1f:a5:06:7a:69:e5:b0:40:b3:
a2:ee:ed:a2:94:0d:83:6f:c2:b8:be:99:79:45:7b:86:dc:85:
6c:ae:32:8b:92:12:cc:f1:3a:b7:a7:38:3b:76:49:ca:95:eb:
29:0a:a5:4e:da:fe:50:f4:24:e9:73:a8:1b:20:f1:90:eb:e8:
ff:95:e6:5e:b8:47:da:c3:51:63:57:d0:f4:a6:e3:4b:69:c9:
f5:83:45:94:d4:02:67:8a:76:9b:2e:96:8d:db:7e:7d:f8:7b:
1d:68:c9:bd:c9:fd:8f:e8:53:7a:75:27:07:ca:99:f6:b5:93:
ca:ec:23:f2:b7:39:0b:4a:36:25:7f:0e:d9:34:9f:ca:34:57:
13:e6:26:4a:b2:8c:4f:0b:87:81:72:3a:96:b3:ad:0e:19:b9:
ae:ba:2c:0e:30:cf:a2:1c:55:e5:d3:aa:e9:b2:9b:3e:5f:0a:
1c:a4:03:9a:86:45:37:27:61:a8:fc:43:18:2a:20:e3:74:5f:
94:7f:1e:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:56:31 2025 by rpki-client