Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/c89677-1d9a-418d-8593-c18e3ccc742b/1/HNQuDdm5z0TgTPTWX8mqaRyozqE.roa
File: HNQuDdm5z0TgTPTWX8mqaRyozqE.roa (raw, json)
Hash identifier: Gzz/cdndnNOVsXjRp/iAZvskurMRe5F34vCE+uCS0HU=
Subject key identifier: 1C:D4:2E:0D:D9:B9:CF:44:E0:4C:F4:D6:5F:C9:AA:69:1C:A8:CE:A1
Certificate issuer: /CN=5c6b0c001a99ab6296e242173bf7e7fdcf03c019
Certificate serial: 0183F49FB850CECEFAD1DE2266223D58093E
Authority key identifier: 5C:6B:0C:00:1A:99:AB:62:96:E2:42:17:3B:F7:E7:FD:CF:03:C0:19
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XGsMABqZq2KW4kIXO_fn_c8DwBk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/c89677-1d9a-418d-8593-c18e3ccc742b/1/HNQuDdm5z0TgTPTWX8mqaRyozqE.roa
Signing time: Thu 20 Oct 2022 09:00:51 +0000
ROA not before: Thu 20 Oct 2022 09:00:51 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 44600
IP address blocks: 185.46.148.0/22 maxlen: 22
185.128.232.0/22 maxlen: 22
185.128.235.0/24 maxlen: 24
91.202.72.0/22 maxlen: 22
94.131.254.0/24 maxlen: 24
194.42.200.0/22 maxlen: 24
185.41.248.0/22 maxlen: 22
46.182.80.0/22 maxlen: 22
46.182.84.0/22 maxlen: 22
94.131.245.0/24 maxlen: 24
94.131.244.0/24 maxlen: 24
94.131.248.0/24 maxlen: 24
94.131.250.0/23 maxlen: 23
94.131.250.0/24 maxlen: 24
94.131.249.0/24 maxlen: 24
94.131.252.0/24 maxlen: 24
94.131.253.0/24 maxlen: 24
2a03:a600::/29 maxlen: 29
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:f4:9f:b8:50:ce:ce:fa:d1:de:22:66:22:3d:58:09:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c6b0c001a99ab6296e242173bf7e7fdcf03c019
Validity
Not Before: Oct 20 09:00:51 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=1cd42e0dd9b9cf44e04cf4d65fc9aa691ca8cea1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:18:f6:0a:0f:f1:1f:56:2e:05:80:72:57:db:
0f:c3:6c:1b:58:79:50:15:37:34:f1:40:d0:56:90:
d9:89:a8:44:e4:3f:1d:b1:15:22:22:43:f4:6d:00:
c4:49:3f:60:13:ea:f6:7a:75:8a:8a:76:57:d6:91:
f4:d9:dc:87:2b:f1:a6:ef:26:59:af:d0:50:8d:43:
97:1d:27:d6:41:1b:08:02:4e:e2:b2:5b:f5:56:4d:
b2:d2:62:84:c9:6f:b9:e5:b1:d6:c2:a1:17:57:2e:
37:f8:51:6b:78:8d:bc:b1:fe:d5:e5:2f:9c:84:c3:
17:2c:b1:13:c3:29:26:8b:f5:d9:7d:e1:2d:7e:cb:
2f:47:47:a7:34:ae:a3:dd:d9:e2:f3:6a:11:3a:f3:
60:65:03:58:4f:81:37:96:e8:e7:99:10:63:33:72:
34:9f:2f:4e:f2:a6:ae:19:58:00:98:38:88:fa:79:
1b:bc:ff:a3:57:84:14:4a:8d:ac:01:a2:50:cf:11:
59:b8:d5:55:2b:1f:46:94:65:3c:33:af:4f:89:1f:
88:9d:4d:9d:46:77:e2:f4:34:30:9c:9e:4a:a1:be:
51:6c:c1:b1:13:0e:81:10:ff:04:10:41:d3:60:8f:
fd:a6:c4:45:d0:c1:29:03:11:1a:2f:52:eb:5a:50:
03:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:D4:2E:0D:D9:B9:CF:44:E0:4C:F4:D6:5F:C9:AA:69:1C:A8:CE:A1
X509v3 Authority Key Identifier:
keyid:5C:6B:0C:00:1A:99:AB:62:96:E2:42:17:3B:F7:E7:FD:CF:03:C0:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XGsMABqZq2KW4kIXO_fn_c8DwBk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/c89677-1d9a-418d-8593-c18e3ccc742b/1/HNQuDdm5z0TgTPTWX8mqaRyozqE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/c89677-1d9a-418d-8593-c18e3ccc742b/1/XGsMABqZq2KW4kIXO_fn_c8DwBk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.182.80.0/21
91.202.72.0/22
94.131.244.0/23
94.131.248.0-94.131.254.255
185.41.248.0/22
185.46.148.0/22
185.128.232.0/22
194.42.200.0/22
IPv6:
2a03:a600::/29
Signature Algorithm: sha256WithRSAEncryption
7c:26:be:89:ae:58:a4:51:b1:0a:c4:e6:61:dd:31:16:1e:a6:
28:9a:39:23:42:fd:89:0e:2f:19:4b:58:6d:be:82:9a:47:3b:
25:74:5a:16:6a:58:40:db:7c:a4:26:6f:fc:80:43:d6:64:67:
a4:03:be:ea:f2:59:b1:55:ed:0e:4d:33:8d:e5:49:bd:a9:ea:
e3:f2:f5:7d:ef:da:b7:5a:b6:c5:5e:5d:64:fb:19:4c:ec:0c:
d3:4d:df:92:65:0a:af:45:e0:58:26:2c:d8:04:2b:a0:b5:35:
6f:74:0e:93:5f:eb:71:cd:04:14:69:71:94:31:c8:30:b9:bd:
7f:2c:de:06:9f:02:f2:ea:74:0e:25:bb:6f:b2:11:1e:2a:5d:
1c:d7:ff:f2:de:dd:53:bd:d5:99:35:a9:50:33:a7:30:b0:db:
7a:0f:fd:b6:ec:2d:04:a8:77:13:87:c4:74:20:d1:a1:fc:71:
e3:90:0a:99:fa:fd:1c:da:42:01:67:3f:a4:5e:00:2d:89:f3:
33:2c:cf:91:d7:8b:84:b6:3b:f3:d3:48:b8:92:03:32:5c:bf:
3a:97:a4:1b:86:7a:c1:32:e2:66:b8:97:27:4c:72:6a:e2:13:
ac:cd:b2:06:25:62:9d:b8:61:5e:bf:34:03:94:0a:67:1f:78:
c7:75:e8:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 03:35:38 2025 by rpki-client