Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/64fe7d-862d-4e1a-9fd0-06b41ef1398d/1/hEU8Qqs2osTGuKr_1nD_yxAUnN8.roa
File: hEU8Qqs2osTGuKr_1nD_yxAUnN8.roa (raw, json)
Hash identifier: fKgxjHHczy/GzY61EJvwFuCYedjVtWsn0m+e+Vt0Qv0=
Subject key identifier: 84:45:3C:42:AB:36:A2:C4:C6:B8:AA:FF:D6:70:FF:CB:10:14:9C:DF
Certificate issuer: /CN=2956584b70ce847c1a9b400548b14db031bedff2
Certificate serial: 018D8A722F1DD73D2D07DBB130824D572E52
Authority key identifier: 29:56:58:4B:70:CE:84:7C:1A:9B:40:05:48:B1:4D:B0:31:BE:DF:F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KVZYS3DOhHwam0AFSLFNsDG-3_I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/64fe7d-862d-4e1a-9fd0-06b41ef1398d/1/hEU8Qqs2osTGuKr_1nD_yxAUnN8.roa
Signing time: Thu 08 Feb 2024 20:39:15 +0000
ROA not before: Thu 08 Feb 2024 20:39:15 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 50225
IP address blocks: 188.93.141.0/24 maxlen: 24
195.24.232.0/24 maxlen: 24
2a0f:9fc0::/29 maxlen: 29
2a0f:a140::/29 maxlen: 29
2a12:2500::/29 maxlen: 29
2a12:2700::/29 maxlen: 29
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:8a:72:2f:1d:d7:3d:2d:07:db:b1:30:82:4d:57:2e:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2956584b70ce847c1a9b400548b14db031bedff2
Validity
Not Before: Feb 8 20:39:15 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=84453c42ab36a2c4c6b8aaffd670ffcb10149cdf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:88:c2:4b:2a:bf:9d:2a:59:aa:ab:cd:96:78:
39:74:42:d0:5f:07:fa:f2:fc:a1:56:dd:ae:d4:ca:
b0:54:9e:60:14:35:82:2d:26:c0:71:61:83:7c:04:
d3:68:49:f0:d8:ea:b6:a6:ae:10:a4:5f:4a:89:0d:
dd:49:df:c2:ae:11:8f:27:1f:00:c9:a6:60:ff:0a:
a7:9b:71:f3:58:8c:e3:16:b9:7a:f1:39:4a:05:b5:
c5:13:0a:51:37:87:21:ba:13:5e:fa:63:0b:d9:49:
79:6b:9b:a1:1a:1a:98:4a:fe:33:19:9e:92:69:12:
4b:5e:d5:e6:2e:3e:36:1d:a2:84:c2:a0:58:c8:a4:
1a:c8:02:48:b2:eb:41:aa:26:e9:f8:da:0a:98:01:
b5:16:18:69:97:83:89:98:9d:83:7b:16:c8:3c:19:
fe:2d:29:db:28:1d:a2:1e:35:ed:97:da:ec:71:68:
3b:2f:a5:35:35:c9:92:36:58:9a:c7:a4:27:41:c3:
8a:14:42:69:8c:0b:10:84:83:05:d9:f0:a4:c3:5c:
f1:80:5e:10:32:80:03:e6:5a:1c:72:c9:d4:3c:96:
8f:94:b1:23:8e:2c:1c:d8:5d:07:67:c2:d0:6a:62:
79:38:83:f7:af:82:04:94:ad:14:e3:86:27:2f:a2:
d4:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:45:3C:42:AB:36:A2:C4:C6:B8:AA:FF:D6:70:FF:CB:10:14:9C:DF
X509v3 Authority Key Identifier:
keyid:29:56:58:4B:70:CE:84:7C:1A:9B:40:05:48:B1:4D:B0:31:BE:DF:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KVZYS3DOhHwam0AFSLFNsDG-3_I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/64fe7d-862d-4e1a-9fd0-06b41ef1398d/1/hEU8Qqs2osTGuKr_1nD_yxAUnN8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/64fe7d-862d-4e1a-9fd0-06b41ef1398d/1/KVZYS3DOhHwam0AFSLFNsDG-3_I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.93.141.0/24
195.24.232.0/24
IPv6:
2a0f:9fc0::/29
2a0f:a140::/29
2a12:2500::/29
2a12:2700::/29
Signature Algorithm: sha256WithRSAEncryption
58:e5:8e:57:cc:a8:c9:d6:e4:7a:eb:74:80:de:04:5b:7c:b9:
d8:d7:1d:16:7f:68:e5:01:87:27:ff:7b:6c:6f:95:0a:6d:dc:
35:52:9e:d4:82:63:dc:0f:a0:e7:5c:8c:2c:4d:ad:85:0a:87:
fe:bf:0b:fa:97:08:3c:5f:52:c8:c1:5e:ba:9d:aa:ea:17:32:
7a:27:78:fd:02:97:f6:67:2e:31:a3:31:74:8b:fd:8b:34:7f:
54:9c:b8:46:9a:7f:71:85:8d:7b:d1:e7:9d:49:1b:34:4b:e8:
ea:89:8b:7a:db:c3:fc:f3:4a:92:d1:2b:90:26:b4:d1:73:63:
e8:d6:dc:85:44:70:28:bf:c4:77:89:a3:95:9a:c2:47:5a:58:
eb:53:c3:5e:6d:b3:8c:48:55:0c:4f:0d:11:ee:aa:74:a3:40:
e2:f0:1a:37:3f:20:eb:39:2e:c0:c2:71:01:e3:50:19:7d:86:
4a:2b:74:51:37:83:1d:29:77:84:0c:41:0f:f6:10:84:26:d7:
b7:39:92:98:ef:b5:3c:02:d2:3c:5e:f8:8a:14:13:6c:24:23:
65:f8:ed:39:f8:42:3a:4e:9c:09:34:ec:97:23:98:1d:a8:c9:
d7:a3:41:38:8f:00:14:e0:f7:54:1b:d4:03:3e:5d:90:96:b7:
af:b1:59:21
-----BEGIN CERTIFICATE-----
MIIFJzCCBA+gAwIBAgISAY2Kci8d1z0tB9uxMIJNVy5SMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI5NTY1ODRiNzBjZTg0N2MxYTliNDAwNTQ4YjE0ZGIwMzFi
ZWRmZjIwHhcNMjQwMjA4MjAzOTE1WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4NDQ1M2M0MmFiMzZhMmM0YzZiOGFhZmZkNjcwZmZjYjEwMTQ5Y2RmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm4jCSyq/nSpZqqvNlng5dELQXwf6
8vyhVt2u1MqwVJ5gFDWCLSbAcWGDfATTaEnw2Oq2pq4QpF9KiQ3dSd/CrhGPJx8A
yaZg/wqnm3HzWIzjFrl68TlKBbXFEwpRN4chuhNe+mML2Ul5a5uhGhqYSv4zGZ6S
aRJLXtXmLj42HaKEwqBYyKQayAJIsutBqibp+NoKmAG1Fhhpl4OJmJ2DexbIPBn+
LSnbKB2iHjXtl9rscWg7L6U1NcmSNliax6QnQcOKFEJpjAsQhIMF2fCkw1zxgF4Q
MoAD5loccsnUPJaPlLEjjiwc2F0HZ8LQamJ5OIP3r4IElK0U44YnL6LUhQIDAQAB
o4ICMzCCAi8wHQYDVR0OBBYEFIRFPEKrNqLExriq/9Zw/8sQFJzfMB8GA1UdIwQY
MBaAFClWWEtwzoR8GptABUixTbAxvt/yMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS1ZaWVMzRE9oSHdhbTBBRlNMRk5zREctM19JLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Zi82NGZlN2QtODYyZC00ZTFhLTlmZDAt
MDZiNDFlZjEzOThkLzEvaEVVOFFxczJvc1RHdUtyXzFuRF95eEFVbk44LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Zi82NGZlN2QtODYyZC00ZTFhLTlmZDAtMDZiNDFlZjEzOThk
LzEvS1ZaWVMzRE9oSHdhbTBBRlNMRk5zREctM19JLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEkGCCsGAQUFBwEHAQH/BDowODASBAIAATAMAwQAvF2NAwQA
wxjoMCIEAgACMBwDBQMqD5/AAwUDKg+hQAMFAyoSJQADBQMqEicAMA0GCSqGSIb3
DQEBCwUAA4IBAQBY5Y5XzKjJ1uR663SA3gRbfLnY1x0Wf2jlAYcn/3tsb5UKbdw1
Up7UgmPcD6DnXIwsTa2FCof+vwv6lwg8X1LIwV66narqFzJ6J3j9Apf2Zy4xozF0
i/2LNH9UnLhGmn9xhY170eedSRs0S+jqiYt628P880qS0SuQJrTRc2Po1tyFRHAo
v8R3iaOVmsJHWljrU8NebbOMSFUMTw0R7qp0o0Di8Bo3PyDrOS7AwnEB41AZfYZK
K3RRN4MdKXeEDEEP9hCEJte3OZKY77U8AtI8XviKFBNsJCNl+O05+EI6TpwJNOyX
I5gdqMnXo0E4jwAU4PdUG9QDPl2QlrevsVkh
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:23:31 2024 by rpki-client on console-ams.rpki-client.org