Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/iFZRfJaoLJgMylnrZqfiLs_nhW4.roa
File: iFZRfJaoLJgMylnrZqfiLs_nhW4.roa (raw, json)
Hash identifier: NMO1ajrt0HXFfYAZStprQPWaI/CaGmfiZaA9HAW/R0E=
Subject key identifier: 88:56:51:7C:96:A8:2C:98:0C:CA:59:EB:66:A7:E2:2E:CF:E7:85:6E
Certificate issuer: /CN=f8e62634e1bd5133a9de4512ae98cad1b2219b59
Certificate serial: 01866EF3AFB8752770F713F855B51EB3C9B5
Authority key identifier: F8:E6:26:34:E1:BD:51:33:A9:DE:45:12:AE:98:CA:D1:B2:21:9B:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/iFZRfJaoLJgMylnrZqfiLs_nhW4.roa
Signing time: Mon 20 Feb 2023 13:11:49 +0000
ROA not before: Mon 20 Feb 2023 13:11:49 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 50886
IP address blocks: 188.214.32.0/21 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:6e:f3:af:b8:75:27:70:f7:13:f8:55:b5:1e:b3:c9:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8e62634e1bd5133a9de4512ae98cad1b2219b59
Validity
Not Before: Feb 20 13:11:49 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8856517c96a82c980cca59eb66a7e22ecfe7856e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:c4:ef:39:c2:5e:f2:2f:44:ee:ed:68:ca:3b:
27:77:cb:06:ce:8a:d4:8e:4b:fc:69:99:78:0f:a4:
67:6f:35:42:bb:cd:a8:fd:45:68:53:4c:9f:83:00:
76:ee:cb:c1:52:bb:62:5d:13:49:13:5b:83:10:cb:
38:1b:98:75:56:59:dc:a2:27:61:e4:ec:2b:f2:29:
8d:ea:3c:f0:d1:75:4c:77:f8:cc:5f:ec:48:a1:86:
53:54:50:d2:0f:8e:33:55:d4:6a:6a:f1:81:65:bf:
8c:07:5e:37:ca:e5:32:13:70:ca:39:ed:23:e6:c3:
81:ca:f4:bf:8a:6a:3b:b4:e8:f4:0d:ea:2b:63:11:
5f:70:97:78:52:f7:af:b6:d6:5a:80:f7:6d:02:46:
ae:79:66:27:ee:d6:a2:0b:25:4f:85:01:dd:b9:ea:
c2:07:b1:6f:bc:7a:c2:c4:f4:a4:83:1e:3f:d0:ed:
d8:c3:12:34:e1:e5:0d:fb:b2:eb:48:41:cd:e3:fd:
f8:44:7a:25:d6:cf:7e:6a:a9:0d:9c:4b:23:de:85:
92:09:bd:13:74:5f:40:14:6c:04:02:90:08:4b:3f:
db:17:e1:25:11:18:97:bf:ce:93:83:6f:4c:a5:46:
b0:0d:3a:d3:68:66:82:4f:31:0e:a0:0c:3f:fa:b9:
f1:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:56:51:7C:96:A8:2C:98:0C:CA:59:EB:66:A7:E2:2E:CF:E7:85:6E
X509v3 Authority Key Identifier:
keyid:F8:E6:26:34:E1:BD:51:33:A9:DE:45:12:AE:98:CA:D1:B2:21:9B:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/iFZRfJaoLJgMylnrZqfiLs_nhW4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.214.32.0/21
Signature Algorithm: sha256WithRSAEncryption
02:34:57:00:1f:0b:a3:32:8b:70:8c:26:11:fc:e8:66:3f:e6:
14:cc:96:c8:b6:63:75:da:d4:b0:e7:59:7f:83:45:e0:56:f2:
34:13:58:e4:d1:1a:cd:f7:ed:1b:fc:2b:a0:24:ca:a6:1f:c9:
22:8c:61:af:d5:33:30:91:c6:36:0f:f5:3f:28:b3:ac:65:b1:
57:cf:ee:3f:2d:e9:8f:4a:66:6e:26:cf:51:32:8a:c5:a7:b4:
c3:ff:55:6b:45:5a:85:ae:ee:4a:ab:f2:96:d5:bc:e3:8b:95:
a5:46:d3:6e:2e:6d:dd:85:67:c6:fc:31:24:20:61:7b:e1:1e:
94:c9:a5:ef:ea:0a:29:6b:41:46:18:7d:ba:a5:65:bb:a3:19:
b4:e6:02:19:c1:e8:ec:0e:c1:e2:40:a9:a1:1c:5f:ce:22:27:
34:67:e8:bc:e4:75:70:b6:70:3c:9f:97:7d:50:21:e5:b2:52:
8f:02:fb:b5:c8:30:00:d3:7c:b6:c4:a3:1b:d1:ef:d5:98:eb:
0c:a2:f6:8f:1b:d4:71:fe:33:7d:56:b8:f5:d5:9e:ab:13:88:
7d:cc:ae:f5:be:a0:bc:77:4e:fd:a3:e6:70:56:e1:c3:71:cf:
d9:ec:69:31:b5:fd:bf:3b:98:4a:da:3b:60:73:c9:a7:d2:ac:
fd:e3:fc:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:36:17 2025 by rpki-client