Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/c072ae-15d7-42a8-bfc2-bc93ca679e1f/1/ho7yqmlVWH4pq6WOkjkaGkbZvbE.roa
File: ho7yqmlVWH4pq6WOkjkaGkbZvbE.roa (raw, json)
Hash identifier: +QW+Sg+sX6Ucm1MfzarNW4Z1SrQDqSVBpe6QydkVwys=
Subject key identifier: 86:8E:F2:AA:69:55:58:7E:29:AB:A5:8E:92:39:1A:1A:46:D9:BD:B1
Certificate issuer: /CN=215266435617fa0f1fd2837ec80c6d83b0b9d608
Certificate serial: 018572C385EE4B436D3B862270E50322C86F
Authority key identifier: 21:52:66:43:56:17:FA:0F:1F:D2:83:7E:C8:0C:6D:83:B0:B9:D6:08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IVJmQ1YX-g8f0oN-yAxtg7C51gg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/c072ae-15d7-42a8-bfc2-bc93ca679e1f/1/ho7yqmlVWH4pq6WOkjkaGkbZvbE.roa
Signing time: Mon 02 Jan 2023 13:54:54 +0000
ROA not before: Mon 02 Jan 2023 13:54:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 204650
IP address blocks: 185.201.51.0/24 maxlen: 24
185.201.48.0/24 maxlen: 24
185.82.136.0/22 maxlen: 22
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:c3:85:ee:4b:43:6d:3b:86:22:70:e5:03:22:c8:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=215266435617fa0f1fd2837ec80c6d83b0b9d608
Validity
Not Before: Jan 2 13:54:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=868ef2aa6955587e29aba58e92391a1a46d9bdb1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:e1:cf:ad:f0:2b:3a:31:14:bf:28:53:b7:66:
14:1b:bf:70:43:71:05:a9:c0:8f:01:23:24:17:e7:
44:62:ff:0f:c9:f5:e0:4b:6e:9a:e6:44:d0:3f:d0:
dc:12:c8:cd:80:4b:e8:2d:f0:88:8a:12:e2:9a:11:
76:d6:05:dd:45:de:68:40:8b:ba:f6:ca:87:79:2d:
a1:e7:0e:96:ff:a3:95:01:ab:e8:8d:3d:7e:31:f5:
f9:6e:b9:23:da:56:80:59:4a:83:78:b6:55:27:aa:
ba:01:fb:8c:de:5c:f0:78:87:17:26:74:04:7d:46:
13:56:8f:0c:ec:f0:7f:a2:66:42:2b:61:b6:40:79:
69:1b:b5:e1:48:75:96:97:41:f7:e8:5c:3e:f3:07:
7f:01:da:e3:e9:72:08:f8:f2:2b:54:58:28:7c:71:
ef:e2:dd:d8:89:7f:08:98:a9:48:e9:4a:1d:a0:de:
23:c8:af:8a:2c:2a:01:15:a5:84:42:c9:94:fb:18:
1f:de:04:02:79:96:e5:10:ad:46:cf:9b:5c:30:f6:
48:3c:1c:e9:a9:36:bf:cf:44:28:a7:59:59:49:96:
43:16:d2:6b:c5:04:33:2c:e3:c2:96:51:1b:b6:17:
fb:40:24:ef:42:26:90:26:a7:e6:e7:8e:a7:e8:1b:
08:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:8E:F2:AA:69:55:58:7E:29:AB:A5:8E:92:39:1A:1A:46:D9:BD:B1
X509v3 Authority Key Identifier:
keyid:21:52:66:43:56:17:FA:0F:1F:D2:83:7E:C8:0C:6D:83:B0:B9:D6:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IVJmQ1YX-g8f0oN-yAxtg7C51gg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/c072ae-15d7-42a8-bfc2-bc93ca679e1f/1/ho7yqmlVWH4pq6WOkjkaGkbZvbE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/c072ae-15d7-42a8-bfc2-bc93ca679e1f/1/IVJmQ1YX-g8f0oN-yAxtg7C51gg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.82.136.0/22
185.201.48.0/24
185.201.51.0/24
Signature Algorithm: sha256WithRSAEncryption
a9:59:67:1a:cc:89:72:eb:1d:e2:e8:c0:ab:87:0c:23:dd:69:
f0:5e:7c:57:b4:30:4e:b2:70:1f:8e:69:77:94:f9:0e:e4:3e:
03:95:15:bc:1e:34:9c:4b:0c:05:00:7f:44:3c:66:32:df:89:
b1:63:01:0a:ff:90:64:c0:a2:90:dc:ae:e8:4d:f2:a4:e4:87:
9c:a7:09:1e:21:a6:81:62:ca:bc:cb:97:a8:e6:5b:32:28:de:
e7:7d:9a:15:04:98:9b:83:ef:f4:f8:9e:4e:ee:91:7a:fb:41:
12:b2:a9:10:73:65:f9:1d:fc:79:df:e1:9e:3b:ed:93:97:c1:
c6:02:1d:d2:f5:7c:6c:50:04:3a:67:c3:1d:18:2c:cc:f9:06:
2d:80:97:9f:c2:81:2b:cb:23:a6:6c:45:4b:b7:af:0f:85:af:
18:e4:b8:5f:23:25:b7:16:da:bd:68:fb:48:6d:78:e3:c0:63:
e2:2c:e5:40:fb:c9:ce:0b:3a:da:43:3f:d9:6a:3c:3a:ce:69:
1c:1e:86:46:09:a3:46:10:8a:27:26:21:04:0d:da:b3:b8:a2:
5b:12:54:7d:d7:9b:a4:74:f7:3c:f0:eb:cc:93:05:4c:8c:7c:
3a:09:e4:64:aa:e0:86:4b:30:de:2d:8b:19:b4:7f:46:0b:42:
24:00:e6:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:24:56 2025 by rpki-client