Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/8f2093-0318-476c-9e9c-53fc4905629b/1/hdvsrFElw9kymKF8dSjG0R11wsg.roa
File: hdvsrFElw9kymKF8dSjG0R11wsg.roa (raw, json)
Hash identifier: 5qPdHPGgtb7P06UBhf36BKm+meO4vawhvxa+ZgcIuGk=
Subject key identifier: 85:DB:EC:AC:51:25:C3:D9:32:98:A1:7C:75:28:C6:D1:1D:75:C2:C8
Certificate issuer: /CN=bde75079618691bae1f47bcbed52314496963891
Certificate serial: 02E45B7A
Authority key identifier: BD:E7:50:79:61:86:91:BA:E1:F4:7B:CB:ED:52:31:44:96:96:38:91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vedQeWGGkbrh9HvL7VIxRJaWOJE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/8f2093-0318-476c-9e9c-53fc4905629b/1/hdvsrFElw9kymKF8dSjG0R11wsg.roa
Signing time: Sat 01 Jan 2022 10:01:49 +0000
ROA not before: Sat 01 Jan 2022 10:01:49 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 394814
IP address blocks: 88.218.172.0/22 maxlen: 22
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 48520058 (0x2e45b7a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bde75079618691bae1f47bcbed52314496963891
Validity
Not Before: Jan 1 10:01:49 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=85dbecac5125c3d93298a17c7528c6d11d75c2c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:96:f5:19:21:6b:13:fb:df:73:c8:fe:09:74:
19:76:ac:a8:fb:f2:c3:60:56:8f:eb:b1:fa:4c:2e:
94:b0:82:bd:ca:6f:75:3f:e5:c9:33:ce:16:ad:b4:
f4:27:d9:ef:86:5a:6a:36:96:27:73:42:26:73:dd:
fc:94:66:65:d7:6f:3f:f3:28:78:6b:7a:6e:f0:98:
fb:22:47:78:f5:01:15:f6:41:e0:1c:f2:cd:7a:7f:
c9:f7:cc:43:dd:a9:a1:bb:ba:f1:a6:b7:fb:24:c6:
5e:d7:fd:06:9d:d7:01:51:48:0b:1e:9e:a0:7e:72:
8b:65:f5:81:49:6f:d4:38:81:9b:54:27:38:3e:84:
d5:44:fe:c0:9b:ff:45:6a:fc:e2:ec:73:0d:ee:64:
e0:4c:40:5f:0f:8a:2f:6d:00:d8:1f:cb:9c:f5:69:
6c:61:7e:73:cc:10:c6:2d:83:ef:c8:a7:28:18:38:
63:b8:a0:9b:1c:90:cd:b6:22:35:54:4b:bc:ec:d3:
5a:44:96:36:5c:8e:6a:a0:f4:7d:31:94:36:95:ef:
a0:8f:1d:a6:a7:0e:b8:e8:a8:72:77:37:ac:d3:7f:
b3:fd:41:63:86:e3:dc:01:9e:8e:88:f5:2b:4c:f2:
b6:7e:13:e1:9b:83:44:e1:c4:8d:a7:46:8f:51:a5:
ce:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:DB:EC:AC:51:25:C3:D9:32:98:A1:7C:75:28:C6:D1:1D:75:C2:C8
X509v3 Authority Key Identifier:
keyid:BD:E7:50:79:61:86:91:BA:E1:F4:7B:CB:ED:52:31:44:96:96:38:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vedQeWGGkbrh9HvL7VIxRJaWOJE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/8f2093-0318-476c-9e9c-53fc4905629b/1/hdvsrFElw9kymKF8dSjG0R11wsg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/8f2093-0318-476c-9e9c-53fc4905629b/1/vedQeWGGkbrh9HvL7VIxRJaWOJE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.218.172.0/22
Signature Algorithm: sha256WithRSAEncryption
37:35:4f:5b:d5:bc:26:c7:e1:cf:67:38:51:ee:29:e2:a8:97:
28:d6:9a:72:05:c5:7b:c3:92:eb:70:ab:74:34:cf:ae:ca:6f:
17:16:f5:bf:78:89:d1:40:5f:45:fc:a7:b3:3b:50:14:f2:25:
c2:d9:e5:f6:ce:a3:20:a5:d4:d1:02:48:9b:2e:bf:a9:74:6c:
f8:f5:27:6c:44:73:90:99:cf:32:e1:28:81:63:38:b0:06:ec:
a1:de:46:02:3f:cb:35:f3:6e:66:08:0f:f8:82:83:a0:bd:61:
9a:10:fe:d7:31:09:d4:3f:82:2f:65:9a:b9:79:f4:9e:32:b6:
7e:59:17:a9:07:ba:87:41:f0:9c:0d:5c:a8:84:6d:df:a1:c2:
60:1d:d3:6a:49:fd:19:74:80:b9:1f:17:9e:8f:85:89:c8:2a:
72:0b:66:69:b9:26:6e:f3:50:0d:c7:80:89:ed:70:65:d3:4a:
63:b2:ef:7e:0e:92:a2:77:02:15:00:69:86:d1:c8:a3:78:af:
f2:cf:1d:ab:a6:3e:67:66:ef:9a:fb:fa:6e:c0:ac:36:bb:2a:
a9:67:03:32:84:9b:b2:71:ca:06:e9:c5:56:d4:90:7b:c1:26:
4d:9f:89:68:fd:c1:98:2a:c0:bd:3d:b8:c3:a5:a7:bf:5e:8d:
92:a5:7f:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:28 2024 by rpki-client on console-fra.rpki-client.org