Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/H-O7z3to5utr28v0IxEyM5-TQKM.roa
File: H-O7z3to5utr28v0IxEyM5-TQKM.roa (raw, json)
Hash identifier: z7hWUktmZcXaTUUL2KaXWPWK7HEkY/cGI8eDSdinOJs=
Subject key identifier: 1F:E3:BB:CF:7B:68:E6:EB:6B:DB:CB:F4:23:11:32:33:9F:93:40:A3
Certificate issuer: /CN=f8e62634e1bd5133a9de4512ae98cad1b2219b59
Certificate serial: 018655CEF9AFAFB2FBF5BAA157AED7363B61
Authority key identifier: F8:E6:26:34:E1:BD:51:33:A9:DE:45:12:AE:98:CA:D1:B2:21:9B:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/H-O7z3to5utr28v0IxEyM5-TQKM.roa
Signing time: Wed 15 Feb 2023 16:01:13 +0000
ROA not before: Wed 15 Feb 2023 16:01:13 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 61954
IP address blocks: 89.35.118.0/23 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:55:ce:f9:af:af:b2:fb:f5:ba:a1:57:ae:d7:36:3b:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8e62634e1bd5133a9de4512ae98cad1b2219b59
Validity
Not Before: Feb 15 16:01:13 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1fe3bbcf7b68e6eb6bdbcbf4231132339f9340a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:e5:79:8c:45:86:3e:f4:5f:98:42:1c:4f:85:
01:35:4f:16:8a:d8:ee:65:f0:2b:da:78:98:8d:8e:
eb:fb:b5:52:a9:09:c0:d7:ba:ac:f8:ef:de:ed:61:
33:4f:9f:11:47:e6:f6:8f:aa:7d:84:e6:8f:75:34:
02:16:46:47:68:64:1d:3d:02:4c:81:cf:14:4f:38:
fa:76:06:37:0a:cd:34:de:37:92:e2:10:b5:03:3d:
ca:ca:27:7a:fa:4d:e2:73:90:3c:4c:4d:fd:72:d9:
81:93:32:18:88:e9:e0:ef:f1:d6:05:f9:3a:56:01:
53:98:b4:8c:61:dd:55:46:74:dc:48:8a:22:fe:05:
2b:4d:d2:b7:b8:5b:74:cc:a8:1f:e9:f5:28:8e:42:
d2:fb:85:eb:86:01:13:d6:9e:ab:09:cf:b3:ee:a1:
80:52:bb:0d:c9:8f:b9:53:5a:c1:90:dc:ab:7e:d1:
92:d9:c1:cb:2c:3a:03:77:dc:1b:53:fb:59:06:40:
cb:97:79:68:c5:59:c6:56:77:28:29:71:c8:52:8a:
31:57:8d:8b:5e:6f:cc:c8:0c:2e:5e:ca:6b:ae:f4:
0b:bb:7f:11:32:bf:c2:c1:c4:01:76:0c:6a:3f:6e:
07:72:29:41:b3:2d:ba:a4:29:52:b3:bb:a5:32:71:
a4:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:E3:BB:CF:7B:68:E6:EB:6B:DB:CB:F4:23:11:32:33:9F:93:40:A3
X509v3 Authority Key Identifier:
keyid:F8:E6:26:34:E1:BD:51:33:A9:DE:45:12:AE:98:CA:D1:B2:21:9B:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/H-O7z3to5utr28v0IxEyM5-TQKM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.35.118.0/23
Signature Algorithm: sha256WithRSAEncryption
1d:55:85:b4:8b:6a:39:4b:e0:ba:f3:76:91:17:8f:04:95:7f:
8a:17:a2:01:55:05:15:5d:21:76:ae:7b:f9:fc:68:07:67:0f:
b0:56:07:8b:5d:36:6c:aa:0d:ac:0a:1c:5d:d6:89:54:20:5c:
0d:c0:52:be:27:f3:bd:61:d5:b9:ee:e1:9f:3c:fe:48:d2:d0:
97:2d:b4:6e:bf:53:55:27:8a:7e:c5:a7:7b:2c:1d:08:00:71:
30:75:a0:49:38:b6:ed:01:e4:2c:df:a6:1f:93:13:ef:ab:9a:
51:7d:7a:47:88:da:26:ff:aa:a0:fa:fd:f7:d9:d1:70:82:fc:
12:aa:78:b1:83:e1:6e:b3:17:a0:72:86:cd:5c:69:49:4c:e3:
56:a0:e6:d6:82:d4:1e:d2:de:98:af:0d:b4:2a:eb:1e:11:16:
99:43:bb:e4:b7:eb:b3:f8:f6:7f:91:d9:d4:b4:16:63:66:b6:
8f:8e:85:b3:7f:29:e1:26:be:ba:23:f0:40:1e:c5:d6:c1:4e:
e5:79:59:89:30:66:58:48:6f:f2:be:a5:0f:6b:1a:6f:e5:20:
e9:ff:0c:b7:a5:da:97:b3:7c:5e:f4:58:85:8a:37:45:12:e5:
b7:18:86:db:98:c9:87:74:8a:3e:3d:7f:e8:71:57:63:2a:9c:
cf:0d:03:81
-----BEGIN CERTIFICATE-----
MIIE/zCCA+egAwIBAgISAYZVzvmvr7L79bqhV67XNjthMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY4ZTYyNjM0ZTFiZDUxMzNhOWRlNDUxMmFlOThjYWQxYjIy
MTliNTkwHhcNMjMwMjE1MTYwMTEzWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxZmUzYmJjZjdiNjhlNmViNmJkYmNiZjQyMzExMzIzMzlmOTM0MGEzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAteV5jEWGPvRfmEIcT4UBNU8Witju
ZfAr2niYjY7r+7VSqQnA17qs+O/e7WEzT58RR+b2j6p9hOaPdTQCFkZHaGQdPQJM
gc8UTzj6dgY3Cs003jeS4hC1Az3Kyid6+k3ic5A8TE39ctmBkzIYiOng7/HWBfk6
VgFTmLSMYd1VRnTcSIoi/gUrTdK3uFt0zKgf6fUojkLS+4XrhgET1p6rCc+z7qGA
UrsNyY+5U1rBkNyrftGS2cHLLDoDd9wbU/tZBkDLl3loxVnGVncoKXHIUooxV42L
Xm/MyAwuXsprrvQLu38RMr/CwcQBdgxqP24HcilBsy26pClSs7ulMnGklwIDAQAB
o4ICCzCCAgcwHQYDVR0OBBYEFB/ju897aObra9vL9CMRMjOfk0CjMB8GA1UdIwQY
MBaAFPjmJjThvVEzqd5FEq6YytGyIZtZMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1PWW1OT0c5VVRPcDNrVVNycGpLMGJJaG0xay5jZXIw
gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNzgvZGEzMzk4LTY2OTgtNDVmMi1iYWFl
LTkyZTI1ZmUxNjMzMS8xL0gtTzd6M3RvNXV0cjI4djBJeEV5TTUtVFFLTS5yb2Ew
gYIGA1UdHwR7MHkwd6B1oHOGcXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvNzgvZGEzMzk4LTY2OTgtNDVmMi1iYWFlLTkyZTI1ZmUxNjMz
MS8xLzEtT1ltTk9HOVVUT3Aza1VTcnBqSzBiSWhtMWsuY3JsMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAFZI3Yw
DQYJKoZIhvcNAQELBQADggEBAB1VhbSLajlL4LrzdpEXjwSVf4oXogFVBRVdIXau
e/n8aAdnD7BWB4tdNmyqDawKHF3WiVQgXA3AUr4n871h1bnu4Z88/kjS0JcttG6/
U1Unin7Fp3ssHQgAcTB1oEk4tu0B5Czfph+TE++rmlF9ekeI2ib/qqD6/ffZ0XCC
/BKqeLGD4W6zF6Byhs1caUlM41ag5taC1B7S3pivDbQq6x4RFplDu+S367P49n+R
2dS0FmNmto+OhbN/KeEmvroj8EAexdbBTuV5WYkwZlhIb/K+pQ9rGm/lIOn/DLel
2pezfF70WIWKN0US5bcYhtuYyYd0ij49f+hxV2MqnM8NA4E=
-----END CERTIFICATE-----
Generated at Wed Feb 19 22:39:29 2025 by rpki-client