Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/hvWPD8A80cCK6c4N-VclS4fi3q0.roa
File: hvWPD8A80cCK6c4N-VclS4fi3q0.roa (raw, json)
Hash identifier: nhYkopgq0Kex65/TfluA0r+ZyHnQ5A/k3WgK1CkdK7g=
Subject key identifier: 86:F5:8F:0F:C0:3C:D1:C0:8A:E9:CE:0D:F9:57:25:4B:87:E2:DE:AD
Certificate issuer: /CN=f8e62634e1bd5133a9de4512ae98cad1b2219b59
Certificate serial: 0183DFFCE71BAE75A2B06300E1B6EAC3134F
Authority key identifier: F8:E6:26:34:E1:BD:51:33:A9:DE:45:12:AE:98:CA:D1:B2:21:9B:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/hvWPD8A80cCK6c4N-VclS4fi3q0.roa
Signing time: Sun 16 Oct 2022 08:50:36 +0000
ROA not before: Sun 16 Oct 2022 08:50:36 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 3223
IP address blocks: 89.40.104.0/23 maxlen: 23
188.213.22.0/24 maxlen: 24
188.213.19.0/24 maxlen: 24
89.40.233.0/24 maxlen: 24
188.214.107.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:df:fc:e7:1b:ae:75:a2:b0:63:00:e1:b6:ea:c3:13:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8e62634e1bd5133a9de4512ae98cad1b2219b59
Validity
Not Before: Oct 16 08:50:36 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=86f58f0fc03cd1c08ae9ce0df957254b87e2dead
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:c2:9e:13:e8:21:99:22:d2:23:af:d8:58:89:
5f:43:4d:0a:a4:84:e3:e5:7d:47:db:a6:27:97:75:
00:ec:ed:a6:99:cd:8c:43:19:0a:40:3d:ce:11:71:
bc:e1:a8:a4:33:5c:1b:40:41:40:f5:6f:1f:25:ed:
03:3a:f5:06:1d:57:e2:4a:c4:41:d7:a3:3e:c9:0f:
ad:f7:05:77:0d:73:13:e7:be:25:87:c8:a1:e0:6e:
76:e9:33:21:da:61:2e:71:52:8c:de:de:6e:72:48:
5c:76:8d:f5:78:95:01:1f:2f:db:38:a2:fc:e6:7b:
33:b2:82:5d:cd:ac:96:b0:01:40:ce:5e:c4:df:ca:
bf:8e:3e:77:fe:54:5a:f6:16:de:3f:aa:83:47:60:
ce:68:66:f8:4a:a2:aa:9e:f3:42:5c:7e:07:a8:ca:
64:c0:45:31:23:ff:e5:40:c5:c0:44:aa:3f:52:b9:
b5:70:cb:4c:ff:65:38:78:c6:50:90:8d:88:24:d4:
23:cd:00:23:6f:54:12:da:e3:84:1d:ea:59:0d:f2:
4a:d6:02:ab:4d:1b:e3:44:12:e3:86:28:e0:64:0a:
d6:b8:55:ea:5d:3e:c4:40:3f:3d:da:42:46:f3:e6:
e2:f1:d8:cb:93:31:15:27:4a:44:19:11:1f:bd:43:
49:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:F5:8F:0F:C0:3C:D1:C0:8A:E9:CE:0D:F9:57:25:4B:87:E2:DE:AD
X509v3 Authority Key Identifier:
keyid:F8:E6:26:34:E1:BD:51:33:A9:DE:45:12:AE:98:CA:D1:B2:21:9B:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/hvWPD8A80cCK6c4N-VclS4fi3q0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.40.104.0/23
89.40.233.0/24
188.213.19.0/24
188.213.22.0/24
188.214.107.0/24
Signature Algorithm: sha256WithRSAEncryption
2b:7b:e7:3e:a9:b7:d5:03:e6:6f:ff:28:ee:2e:86:31:9d:35:
ba:f1:2d:51:1c:38:e1:a8:08:9d:c0:93:f9:44:39:5b:1e:41:
8f:26:13:bc:16:79:f9:ac:47:ae:ae:ec:0d:9e:55:75:3a:cd:
2b:55:e2:71:b8:1a:cd:6c:20:b1:c8:2a:2e:e2:98:0b:76:35:
90:7b:9b:46:f6:d0:42:ca:7e:7d:2f:55:1b:c8:67:da:20:ef:
6b:39:c1:91:51:08:61:bd:3e:6a:31:6f:e6:bd:8d:1e:ee:f3:
36:5d:68:47:57:6a:07:16:5c:40:4a:a4:d9:a3:99:49:71:00:
30:1e:06:ff:a1:8a:7b:d2:29:05:fd:08:4e:be:b1:24:d3:af:
c0:38:e1:fd:f5:37:3a:01:fa:60:9d:80:cc:25:63:59:39:df:
2c:9e:f5:45:e0:a0:78:3e:2a:a7:cc:14:ac:32:b9:fc:14:47:
f9:e4:86:5d:ca:76:10:c6:01:d8:72:17:6e:19:d5:c9:c4:8b:
9e:10:9c:7a:2b:28:a6:ab:cb:68:c1:af:63:f5:1c:7f:72:dd:
41:f1:8e:60:1d:ee:28:ab:c9:c4:c5:07:b0:78:c8:42:cd:4d:
cc:29:89:be:e1:a1:32:4a:1c:0a:ad:0e:be:0c:61:33:49:fa:
03:c4:ec:e5
-----BEGIN CERTIFICATE-----
MIIFFzCCA/+gAwIBAgISAYPf/OcbrnWisGMA4bbqwxNPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY4ZTYyNjM0ZTFiZDUxMzNhOWRlNDUxMmFlOThjYWQxYjIy
MTliNTkwHhcNMjIxMDE2MDg1MDM2WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4NmY1OGYwZmMwM2NkMWMwOGFlOWNlMGRmOTU3MjU0Yjg3ZTJkZWFkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwcKeE+ghmSLSI6/YWIlfQ00KpITj
5X1H26Ynl3UA7O2mmc2MQxkKQD3OEXG84aikM1wbQEFA9W8fJe0DOvUGHVfiSsRB
16M+yQ+t9wV3DXMT574lh8ih4G526TMh2mEucVKM3t5uckhcdo31eJUBHy/bOKL8
5nszsoJdzayWsAFAzl7E38q/jj53/lRa9hbeP6qDR2DOaGb4SqKqnvNCXH4HqMpk
wEUxI//lQMXARKo/Urm1cMtM/2U4eMZQkI2IJNQjzQAjb1QS2uOEHepZDfJK1gKr
TRvjRBLjhijgZArWuFXqXT7EQD892kJG8+bi8djLkzEVJ0pEGREfvUNJyQIDAQAB
o4ICIzCCAh8wHQYDVR0OBBYEFIb1jw/APNHAiunODflXJUuH4t6tMB8GA1UdIwQY
MBaAFPjmJjThvVEzqd5FEq6YytGyIZtZMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1PWW1OT0c5VVRPcDNrVVNycGpLMGJJaG0xay5jZXIw
gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNzgvZGEzMzk4LTY2OTgtNDVmMi1iYWFl
LTkyZTI1ZmUxNjMzMS8xL2h2V1BEOEE4MGNDSzZjNE4tVmNsUzRmaTNxMC5yb2Ew
gYIGA1UdHwR7MHkwd6B1oHOGcXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvNzgvZGEzMzk4LTY2OTgtNDVmMi1iYWFlLTkyZTI1ZmUxNjMz
MS8xLzEtT1ltTk9HOVVUT3Aza1VTcnBqSzBiSWhtMWsuY3JsMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwNwYIKwYBBQUHAQcBAf8EKDAmMCQEAgABMB4DBAFZKGgD
BABZKOkDBAC81RMDBAC81RYDBAC81mswDQYJKoZIhvcNAQELBQADggEBACt75z6p
t9UD5m//KO4uhjGdNbrxLVEcOOGoCJ3Ak/lEOVseQY8mE7wWefmsR66u7A2eVXU6
zStV4nG4Gs1sILHIKi7imAt2NZB7m0b20ELKfn0vVRvIZ9og72s5wZFRCGG9Pmox
b+a9jR7u8zZdaEdXagcWXEBKpNmjmUlxADAeBv+hinvSKQX9CE6+sSTTr8A44f31
NzoB+mCdgMwlY1k53yye9UXgoHg+KqfMFKwyufwUR/nkhl3KdhDGAdhyF24Z1cnE
i54QnHorKKary2jBr2P1HH9y3UHxjmAd7iirycTFB7B4yELNTcwpib7hoTJKHAqt
Dr4MYTNJ+gPE7OU=
-----END CERTIFICATE-----
Generated at Wed Feb 19 22:45:11 2025 by rpki-client