Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/H3FIu5Y8watLB-a_06t_-6uFTl0.roa
File: H3FIu5Y8watLB-a_06t_-6uFTl0.roa (raw, json)
Hash identifier: I0YHYz1Cm07mJ2bgJ5xqhugOykvpSRp0pGBBrqczelk=
Subject key identifier: 1F:71:48:BB:96:3C:C1:AB:4B:07:E6:BF:D3:AB:7F:FB:AB:85:4E:5D
Certificate issuer: /CN=f8e62634e1bd5133a9de4512ae98cad1b2219b59
Certificate serial: 01829D5446D4D21E05855C7DD2C423E89533
Authority key identifier: F8:E6:26:34:E1:BD:51:33:A9:DE:45:12:AE:98:CA:D1:B2:21:9B:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/H3FIu5Y8watLB-a_06t_-6uFTl0.roa
Signing time: Sun 14 Aug 2022 17:08:42 +0000
ROA not before: Sun 14 Aug 2022 17:08:42 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 48456
IP address blocks: 188.208.197.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:9d:54:46:d4:d2:1e:05:85:5c:7d:d2:c4:23:e8:95:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8e62634e1bd5133a9de4512ae98cad1b2219b59
Validity
Not Before: Aug 14 17:08:42 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=1f7148bb963cc1ab4b07e6bfd3ab7ffbab854e5d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:e1:c7:1d:58:b7:f5:a9:7b:8e:7c:d0:72:9f:
51:54:af:26:cc:26:a0:bd:64:4e:97:47:62:37:db:
f0:8c:bc:67:d2:e8:be:24:f6:2b:98:ba:34:da:99:
6f:41:5a:ce:0a:8d:84:04:7a:4e:d1:3f:54:d5:3b:
50:a6:a7:15:1b:57:13:45:6f:71:6e:14:02:58:6b:
24:68:f9:97:f8:e4:d7:47:2a:58:27:80:b7:b1:6c:
d8:a2:6d:19:51:34:ee:1e:fc:8a:4f:dd:07:5f:f1:
f5:f9:13:a5:76:24:cc:74:9f:01:c5:68:e3:c3:97:
19:0c:22:4a:83:d0:f1:ab:0d:6d:aa:24:31:24:56:
25:0e:8e:5a:30:5e:eb:2f:4a:f5:dd:4c:19:14:84:
8d:75:b2:08:82:2e:51:a0:fc:2a:ca:8b:08:88:ef:
aa:35:6d:f1:b5:30:cc:bf:db:2a:65:65:c3:09:17:
cf:fc:29:56:36:9c:e9:43:83:d1:87:a5:ab:db:f6:
ec:13:a1:a6:8d:b4:5d:a5:99:0b:70:0a:4d:9b:d7:
6d:37:ba:9f:eb:1e:c1:a3:b1:70:a9:10:b9:55:99:
48:0b:c0:59:4d:63:3a:2c:f7:a7:28:f1:88:29:33:
64:14:5e:e4:d3:11:4d:58:3b:9f:ab:aa:0a:4a:41:
a5:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:71:48:BB:96:3C:C1:AB:4B:07:E6:BF:D3:AB:7F:FB:AB:85:4E:5D
X509v3 Authority Key Identifier:
keyid:F8:E6:26:34:E1:BD:51:33:A9:DE:45:12:AE:98:CA:D1:B2:21:9B:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/H3FIu5Y8watLB-a_06t_-6uFTl0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.208.197.0/24
Signature Algorithm: sha256WithRSAEncryption
71:8b:84:82:4f:ba:a7:e8:78:e6:da:45:47:c7:68:ce:ec:94:
4d:39:f1:90:5d:11:5b:49:ff:04:bb:0a:53:3b:4f:c5:ff:45:
7a:95:b3:1b:a1:3f:08:08:69:17:9b:5e:c8:6c:8b:23:1a:c3:
9a:89:88:87:53:ce:2f:98:b5:ac:98:21:4a:f3:5a:5b:8a:5a:
06:47:27:89:3f:1d:8c:3e:b9:10:be:f8:3d:0a:6f:01:2d:79:
ef:95:25:fe:79:bc:a1:1f:77:3e:1d:73:e3:b0:94:76:c9:e1:
fa:24:8f:51:7f:46:5e:8c:93:4c:3a:32:70:47:f8:8a:56:08:
cb:18:4e:c2:2c:1a:d3:68:95:cc:33:4e:58:17:78:6c:2d:fe:
d8:f8:25:8e:7c:21:82:64:40:6b:dd:7b:f8:0e:f3:35:df:5a:
8e:df:8f:0a:8b:bc:99:cd:08:3f:46:db:88:f5:7e:ca:7c:11:
e8:cc:38:c9:b9:b5:1e:2f:3b:f1:f3:b0:68:97:24:3b:62:a5:
89:36:94:ff:cb:23:33:7f:21:ef:81:0d:0f:d9:4a:47:fb:65:
08:55:3f:a2:08:90:56:7f:bd:7b:3e:6e:57:ef:22:b9:69:b7:
97:05:57:d2:4b:09:67:0c:3e:63:27:fe:e3:6e:0f:f2:4c:21:
cd:7f:db:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:45:47 2025 by rpki-client