Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/f5593d-689c-4dfe-8d96-2dd7890dc689/1/HpWeHl1X1HbEBEYfttHmDVWXadU.roa
File: HpWeHl1X1HbEBEYfttHmDVWXadU.roa (raw, json)
Hash identifier: X1EqJShBgpWnfUwB6XM/3+jD6/fY/LOKcwQHDEL/zX0=
Subject key identifier: 1E:95:9E:1E:5D:57:D4:76:C4:04:46:1F:B6:D1:E6:0D:55:97:69:D5
Certificate issuer: /CN=8b82433ffe94bf3536fec327543d396158202072
Certificate serial: 0181FC66E26AE63E6F85399F12D5C5C5F933
Authority key identifier: 8B:82:43:3F:FE:94:BF:35:36:FE:C3:27:54:3D:39:61:58:20:20:72
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i4JDP_6UvzU2_sMnVD05YVggIHI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/f5593d-689c-4dfe-8d96-2dd7890dc689/1/HpWeHl1X1HbEBEYfttHmDVWXadU.roa
Signing time: Thu 14 Jul 2022 11:10:09 +0000
ROA not before: Thu 14 Jul 2022 11:10:09 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 33902
IP address blocks: 217.172.16.0/21 maxlen: 24
94.102.88.0/23 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:81:fc:66:e2:6a:e6:3e:6f:85:39:9f:12:d5:c5:c5:f9:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b82433ffe94bf3536fec327543d396158202072
Validity
Not Before: Jul 14 11:10:09 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=1e959e1e5d57d476c404461fb6d1e60d559769d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:63:52:3f:4c:4c:af:e4:48:6f:ba:cf:ba:99:
81:57:9f:48:eb:63:1f:b8:73:7b:a0:81:43:3e:5d:
79:14:9d:de:34:19:5e:6b:71:ea:c6:31:ef:ad:8a:
7c:cf:e9:9d:61:98:c5:7b:be:24:fb:38:a0:70:da:
44:9b:5d:ce:a8:a7:b3:15:e4:53:4a:12:4a:ce:cf:
c6:36:43:14:56:9d:a4:65:15:37:ff:24:db:5c:c4:
60:7b:ba:25:90:1c:56:12:64:56:3f:12:db:c9:e9:
1e:58:5c:98:67:f4:81:db:2e:36:57:b7:77:ee:7e:
c2:c2:33:ea:c2:f4:62:63:6d:04:3a:98:e3:ed:57:
db:b2:94:7b:46:2e:43:68:e5:f7:a3:58:49:f6:ed:
91:3c:29:1d:b7:65:2e:26:1d:76:74:8a:2f:5d:c9:
59:8c:f8:50:9a:bc:e9:73:70:9c:1b:bb:c4:31:b5:
c7:62:5e:5c:be:a1:c4:03:79:ce:54:92:50:3d:22:
ef:f0:74:0f:83:e3:7f:89:da:0f:aa:bd:f6:3a:f0:
68:1e:2f:e9:68:b2:55:99:8a:92:dc:b1:0e:15:22:
45:85:45:cb:50:50:d1:f8:c5:4a:21:a2:c9:d3:59:
ed:c9:15:ad:0c:88:c6:57:d0:58:e5:8d:dd:de:53:
db:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:95:9E:1E:5D:57:D4:76:C4:04:46:1F:B6:D1:E6:0D:55:97:69:D5
X509v3 Authority Key Identifier:
keyid:8B:82:43:3F:FE:94:BF:35:36:FE:C3:27:54:3D:39:61:58:20:20:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i4JDP_6UvzU2_sMnVD05YVggIHI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/f5593d-689c-4dfe-8d96-2dd7890dc689/1/HpWeHl1X1HbEBEYfttHmDVWXadU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/f5593d-689c-4dfe-8d96-2dd7890dc689/1/i4JDP_6UvzU2_sMnVD05YVggIHI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.102.88.0/23
217.172.16.0/21
Signature Algorithm: sha256WithRSAEncryption
a5:74:0f:11:92:f3:36:ad:24:71:c5:e8:30:8e:9b:bf:75:26:
51:e9:a7:7e:44:a0:fb:04:61:70:99:58:26:14:2a:87:a1:c8:
9a:7e:12:d0:57:59:89:3b:a2:8a:ed:90:3f:63:e6:a0:e0:79:
b7:a4:41:c8:cd:b4:d8:11:b9:d0:7e:42:45:69:84:e2:d6:1f:
25:4c:7d:ab:a0:e7:85:9d:38:47:ac:87:e7:0e:13:c4:6e:dd:
e7:ee:68:2b:07:69:2b:89:08:68:48:cf:7d:35:aa:91:34:28:
a3:8a:a7:2c:56:36:2e:37:c7:c8:1b:8f:f5:05:5a:52:e0:c3:
fc:62:57:27:d4:be:65:12:3a:3c:c0:1b:10:bc:28:09:28:98:
5a:e0:86:bd:00:3f:79:6f:d0:bb:62:a1:6e:5d:da:8b:3d:73:
53:45:4f:78:cb:15:a0:01:c6:d5:57:9a:e9:99:7b:1a:36:e8:
4c:33:39:30:98:87:89:c8:91:3a:99:aa:b0:81:1b:c0:0b:47:
36:4f:46:37:ec:c0:05:6d:51:3f:ed:e7:71:f8:47:97:d2:b9:
aa:75:9f:7e:92:54:74:8c:4a:7f:09:dc:1b:13:7b:3d:38:69:
a4:41:4b:49:e4:17:b0:7f:f3:b0:bb:a1:77:85:f1:62:5d:41:
54:18:96:cd
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYH8ZuJq5j5vhTmfEtXFxfkzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhiODI0MzNmZmU5NGJmMzUzNmZlYzMyNzU0M2QzOTYxNTgy
MDIwNzIwHhcNMjIwNzE0MTExMDA5WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxZTk1OWUxZTVkNTdkNDc2YzQwNDQ2MWZiNmQxZTYwZDU1OTc2OWQ1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkGNSP0xMr+RIb7rPupmBV59I62Mf
uHN7oIFDPl15FJ3eNBlea3HqxjHvrYp8z+mdYZjFe74k+zigcNpEm13OqKezFeRT
ShJKzs/GNkMUVp2kZRU3/yTbXMRge7olkBxWEmRWPxLbyekeWFyYZ/SB2y42V7d3
7n7CwjPqwvRiY20EOpjj7VfbspR7Ri5DaOX3o1hJ9u2RPCkdt2UuJh12dIovXclZ
jPhQmrzpc3CcG7vEMbXHYl5cvqHEA3nOVJJQPSLv8HQPg+N/idoPqr32OvBoHi/p
aLJVmYqS3LEOFSJFhUXLUFDR+MVKIaLJ01ntyRWtDIjGV9BY5Y3d3lPbMwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFB6Vnh5dV9R2xARGH7bR5g1Vl2nVMB8GA1UdIwQY
MBaAFIuCQz/+lL81Nv7DJ1Q9OWFYICByMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaTRKRFBfNlV2elUyX3NNblZEMDVZVmdnSUhJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yy9mNTU5M2QtNjg5Yy00ZGZlLThkOTYt
MmRkNzg5MGRjNjg5LzEvSHBXZUhsMVgxSGJFQkVZZnR0SG1EVldYYWRVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Yy9mNTU5M2QtNjg5Yy00ZGZlLThkOTYtMmRkNzg5MGRjNjg5
LzEvaTRKRFBfNlV2elUyX3NNblZEMDVZVmdnSUhJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQBXmZYAwQD
2awQMA0GCSqGSIb3DQEBCwUAA4IBAQCldA8RkvM2rSRxxegwjpu/dSZR6ad+RKD7
BGFwmVgmFCqHociafhLQV1mJO6KK7ZA/Y+ag4Hm3pEHIzbTYEbnQfkJFaYTi1h8l
TH2roOeFnThHrIfnDhPEbt3n7mgrB2kriQhoSM99NaqRNCijiqcsVjYuN8fIG4/1
BVpS4MP8Ylcn1L5lEjo8wBsQvCgJKJha4Ia9AD95b9C7YqFuXdqLPXNTRU94yxWg
AcbVV5rpmXsaNuhMMzkwmIeJyJE6maqwgRvAC0c2T0Y37MAFbVE/7edx+EeX0rmq
dZ9+klR0jEp/CdwbE3s9OGmkQUtJ5Bewf/Owu6F3hfFiXUFUGJbN
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:19:44 2024 by rpki-client on console-ams.rpki-client.org