Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/8f2093-0318-476c-9e9c-53fc4905629b/1/H0GRudl5pdm0gUqTsFfd0BkNyFM.roa
File: H0GRudl5pdm0gUqTsFfd0BkNyFM.roa (raw, json)
Hash identifier: BHK8eFg9BWuOcWRmokgQl+pR/i93m9gaiZPwvAxOHYk=
Subject key identifier: 1F:41:91:B9:D9:79:A5:D9:B4:81:4A:93:B0:57:DD:D0:19:0D:C8:53
Certificate issuer: /CN=bde75079618691bae1f47bcbed52314496963891
Certificate serial: 036753F9
Authority key identifier: BD:E7:50:79:61:86:91:BA:E1:F4:7B:CB:ED:52:31:44:96:96:38:91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vedQeWGGkbrh9HvL7VIxRJaWOJE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/8f2093-0318-476c-9e9c-53fc4905629b/1/H0GRudl5pdm0gUqTsFfd0BkNyFM.roa
Signing time: Tue 01 Mar 2022 15:43:48 +0000
ROA not before: Tue 01 Mar 2022 15:43:48 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 3257
IP address blocks: 88.218.172.0/22 maxlen: 22
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 57103353 (0x36753f9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bde75079618691bae1f47bcbed52314496963891
Validity
Not Before: Mar 1 15:43:48 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=1f4191b9d979a5d9b4814a93b057ddd0190dc853
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:75:34:77:31:b4:15:53:25:04:30:67:d7:60:
e9:60:25:2d:d4:1a:23:f9:c9:46:e9:3b:f5:6c:92:
af:e0:53:e9:78:31:7f:b6:1a:4f:90:4f:da:5d:43:
34:a1:2c:f5:35:a3:4c:0c:87:9c:00:77:21:b6:1f:
3d:cf:60:e6:28:e3:6e:fa:ee:9e:a5:37:91:d1:26:
05:f0:8a:27:aa:60:ac:0c:10:1d:07:96:5d:4f:5a:
3d:27:ce:65:d4:9c:15:6f:ed:06:59:5f:3d:9c:7f:
4f:59:14:5c:d1:1a:5d:f1:d7:29:cb:4a:01:2b:38:
0d:63:18:7d:5f:47:f1:5a:b9:bd:e8:6d:4d:9e:60:
bd:ba:62:77:31:68:17:41:5f:2b:0f:d4:c9:f3:06:
9b:11:b4:d4:e3:4d:e3:2c:3e:d5:b8:01:8d:43:32:
66:df:23:b1:c8:6d:6e:2b:ab:bc:7c:87:ae:e2:d9:
41:5c:47:cd:b0:a7:4f:a0:63:d6:db:16:6e:5d:86:
a5:be:48:a0:ff:d9:72:52:a1:17:3b:03:7f:44:00:
a5:34:28:56:1d:b1:aa:e8:55:b0:ec:b6:20:53:c9:
b8:60:6f:c0:16:dc:4c:ff:b2:64:4c:2b:c5:40:4f:
ba:b1:e5:57:d5:27:7a:d4:40:46:bc:1a:66:2e:f9:
47:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:41:91:B9:D9:79:A5:D9:B4:81:4A:93:B0:57:DD:D0:19:0D:C8:53
X509v3 Authority Key Identifier:
keyid:BD:E7:50:79:61:86:91:BA:E1:F4:7B:CB:ED:52:31:44:96:96:38:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vedQeWGGkbrh9HvL7VIxRJaWOJE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/8f2093-0318-476c-9e9c-53fc4905629b/1/H0GRudl5pdm0gUqTsFfd0BkNyFM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/8f2093-0318-476c-9e9c-53fc4905629b/1/vedQeWGGkbrh9HvL7VIxRJaWOJE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.218.172.0/22
Signature Algorithm: sha256WithRSAEncryption
80:ae:a7:a2:7c:c1:bc:4a:dd:f0:aa:29:41:6e:c9:1b:0c:02:
92:ad:5e:ce:e5:4f:04:e6:98:fe:20:2c:91:f3:b2:79:37:12:
8f:e5:3c:39:32:56:e2:08:f8:ec:26:e2:69:0e:20:72:72:95:
28:e6:ed:99:31:70:b0:01:33:68:56:01:bc:89:0c:4c:0d:3c:
35:a7:e7:d3:9d:bb:9b:56:ee:33:9e:bf:61:2d:f8:34:8c:f4:
d2:5d:90:35:05:e3:c8:21:07:34:6b:81:a5:3a:a3:e0:04:99:
0f:bd:eb:3b:d1:4a:40:52:2b:be:91:d9:7b:39:5c:01:63:3a:
6e:10:32:a7:50:51:d1:41:8b:5f:fe:42:36:ef:f1:e3:b7:a2:
37:b7:ba:50:8b:72:6e:3a:a3:5a:ed:e8:a0:98:c4:c2:b4:1e:
72:13:21:5a:02:01:f6:38:eb:a2:35:53:ee:ee:51:8f:d3:7a:
34:07:a7:c4:51:c4:d6:a1:2a:ac:fe:05:65:ac:9b:d7:ff:1a:
1d:85:fa:b6:55:1d:5a:bc:75:61:60:26:23:56:98:49:fe:15:
33:17:69:af:84:67:fd:21:d4:04:90:95:79:a0:18:72:7d:bc:
cb:0e:30:47:03:9f:63:ae:be:43:68:90:9c:9d:47:a0:49:c9:
ea:b0:7f:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:14:41 2025 by rpki-client