Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/bc5034-600a-49b3-84b9-ac1edbb477c0/1/LyL2x3vCpM3XoL2kEI_TrGvQjlc.roa
File: LyL2x3vCpM3XoL2kEI_TrGvQjlc.roa (raw, json)
Hash identifier: ELdlbeA/fOgomJ1WFeSPzbM/RsZNLY9VloXCpUCWXQM=
Subject key identifier: 2F:22:F6:C7:7B:C2:A4:CD:D7:A0:BD:A4:10:8F:D3:AC:6B:D0:8E:57
Certificate issuer: /CN=68c21560b12219cf8eab55f74d98f2e9aed51746
Certificate serial: 075619C4
Authority key identifier: 68:C2:15:60:B1:22:19:CF:8E:AB:55:F7:4D:98:F2:E9:AE:D5:17:46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aMIVYLEiGc-Oq1X3TZjy6a7VF0Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/bc5034-600a-49b3-84b9-ac1edbb477c0/1/LyL2x3vCpM3XoL2kEI_TrGvQjlc.roa
Signing time: Sat 01 Jan 2022 15:03:30 +0000
ROA not before: Sat 01 Jan 2022 15:03:30 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 15967
IP address blocks: 185.248.212.0/22 maxlen: 22
185.248.215.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 123083204 (0x75619c4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68c21560b12219cf8eab55f74d98f2e9aed51746
Validity
Not Before: Jan 1 15:03:30 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=2f22f6c77bc2a4cdd7a0bda4108fd3ac6bd08e57
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:b9:01:03:50:70:a2:eb:77:d9:fc:19:f9:a8:
13:46:22:23:96:13:0a:98:52:a4:2f:d1:a0:fe:e4:
6e:e7:36:ea:d3:a9:c7:02:b4:28:58:93:02:db:a4:
ac:ef:e7:38:e6:5c:7f:a8:54:c3:a8:73:a0:9a:cb:
2e:02:5a:6d:ce:61:57:3a:a3:ed:5b:7f:e5:f2:38:
26:a2:94:6e:fc:73:da:4c:2b:54:fe:5b:fd:6e:23:
42:67:cb:50:32:a2:28:5b:5b:03:fa:39:a7:7a:bc:
86:d3:ac:cf:98:e9:70:f7:d9:c0:2f:b9:fc:e5:7a:
70:53:40:16:6d:a4:6a:bd:1a:f1:6b:fc:40:5b:1d:
54:43:45:0b:6a:6d:59:b4:84:47:74:af:f5:42:89:
a0:0b:cc:27:c8:50:a2:a8:f1:7d:e0:35:da:86:e8:
8c:43:16:63:d6:28:73:f0:2c:0b:54:c6:ac:51:2d:
dc:93:66:be:67:86:71:2d:07:4a:26:35:6a:fd:0b:
95:b6:47:8b:3c:07:52:f7:e4:f7:30:38:8c:9c:90:
ad:1a:7c:85:c9:c0:37:ff:d7:38:67:10:4a:33:d5:
c8:81:9e:3d:6d:b1:dc:e3:1a:14:02:16:b0:19:c4:
09:23:cb:e3:73:b1:a3:71:ba:95:1e:82:79:16:94:
9f:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:22:F6:C7:7B:C2:A4:CD:D7:A0:BD:A4:10:8F:D3:AC:6B:D0:8E:57
X509v3 Authority Key Identifier:
keyid:68:C2:15:60:B1:22:19:CF:8E:AB:55:F7:4D:98:F2:E9:AE:D5:17:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aMIVYLEiGc-Oq1X3TZjy6a7VF0Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/bc5034-600a-49b3-84b9-ac1edbb477c0/1/LyL2x3vCpM3XoL2kEI_TrGvQjlc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/bc5034-600a-49b3-84b9-ac1edbb477c0/1/aMIVYLEiGc-Oq1X3TZjy6a7VF0Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.248.212.0/22
Signature Algorithm: sha256WithRSAEncryption
76:be:e5:83:8d:82:ac:86:a7:8e:8b:0b:a8:51:d8:85:0b:3b:
67:3b:0e:77:33:f5:f7:5c:9d:65:dd:14:da:b7:b0:78:5a:50:
72:0c:66:87:fc:e7:ab:96:cb:bf:f6:82:33:86:29:c3:ff:63:
b6:01:6c:87:5e:fc:6a:49:3e:84:f9:6d:cd:53:0e:3f:87:94:
12:07:45:7e:1e:3e:51:ef:65:e9:03:a2:6e:6a:7e:a7:7d:fd:
72:13:50:ef:a0:e8:2b:8d:ec:bb:d8:7f:84:88:5a:95:30:50:
98:05:c9:b2:8a:46:84:a3:ec:90:89:8b:18:31:fb:63:04:29:
4a:48:95:1f:b4:d3:0e:63:9a:20:9b:59:3e:af:06:90:0f:5c:
06:a7:f9:4e:df:7c:33:09:d5:33:07:3a:28:e6:6b:b8:7d:7e:
58:b4:8d:1a:e9:4e:80:88:9c:0a:6a:f9:88:5b:d7:ce:8e:f1:
fa:51:7c:52:4c:93:28:9d:c3:eb:99:bb:73:7a:4f:9b:7e:b9:
cc:27:aa:b6:1d:ee:f4:46:9f:ad:5c:e3:4e:af:c4:60:30:3c:
8a:e1:bd:cf:f9:ac:63:ad:16:3e:6e:25:3d:be:25:78:79:3e:
86:34:56:5d:95:bf:f7:e0:b3:80:bc:51:b7:0b:8f:f3:e7:96:
6e:71:b6:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:19:18 2025 by rpki-client