Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/c1d9b7-393d-4625-afe7-f3c887281eba/1/HQkysdf-VuoOuX0S0Rpeq1LhrWc.roa
File: HQkysdf-VuoOuX0S0Rpeq1LhrWc.roa (raw, json)
Hash identifier: MVWM1+52E/FpuxsU+e25Ms7wCFmZnO6lkEzsnn2IEzA=
Subject key identifier: 1D:09:32:B1:D7:FE:56:EA:0E:B9:7D:12:D1:1A:5E:AB:52:E1:AD:67
Certificate issuer: /CN=b59be6ee549f335c728497a79f1441034e852c35
Certificate serial: 04F7A04B
Authority key identifier: B5:9B:E6:EE:54:9F:33:5C:72:84:97:A7:9F:14:41:03:4E:85:2C:35
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tZvm7lSfM1xyhJennxRBA06FLDU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/c1d9b7-393d-4625-afe7-f3c887281eba/1/HQkysdf-VuoOuX0S0Rpeq1LhrWc.roa
Signing time: Sat 01 Jan 2022 00:54:03 +0000
ROA not before: Sat 01 Jan 2022 00:54:03 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 15576
IP address blocks: 195.137.172.0/24 maxlen: 24
185.109.164.0/22 maxlen: 22
2a06:5100::/29 maxlen: 29
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 83337291 (0x4f7a04b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b59be6ee549f335c728497a79f1441034e852c35
Validity
Not Before: Jan 1 00:54:03 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=1d0932b1d7fe56ea0eb97d12d11a5eab52e1ad67
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:5b:1f:d2:ea:3a:e5:a4:53:b2:e1:80:7b:e2:
51:fb:dd:05:c1:06:ad:18:9b:a4:ec:43:c0:02:5a:
eb:7e:ce:15:90:a3:28:ee:fd:b9:b4:81:bb:44:e3:
f8:38:cc:10:f5:e5:d7:e5:d4:49:b3:9c:04:a7:23:
cc:4a:ca:a2:cb:fb:47:33:3b:68:15:d7:b3:cf:5e:
05:81:94:30:e0:d7:d4:b9:18:35:15:da:38:8a:b3:
0a:97:8a:9d:de:45:52:fe:09:3d:72:ac:ec:05:a5:
c4:99:d6:1d:3c:d6:31:75:a1:78:96:9c:db:16:13:
9a:5e:3b:66:15:c0:d0:7d:41:24:53:f5:78:33:d8:
9e:e8:2c:d0:54:47:6f:fe:70:57:71:4a:99:35:71:
a4:a6:ac:0b:ca:77:5b:ac:6f:d2:27:ff:8c:65:44:
6d:8b:a6:2f:8e:21:a3:41:f3:12:99:b6:79:ab:ac:
b3:9d:e8:5e:28:de:ca:25:98:b0:d5:40:fd:e1:f1:
b8:81:ce:13:4f:1d:23:e7:a2:b8:93:23:25:14:3b:
f9:9e:56:bd:32:ba:30:9f:38:af:ba:b9:0f:15:e3:
16:ec:6d:6d:e5:e0:89:cf:47:80:06:0d:4c:6a:d7:
cf:78:fe:d6:04:46:94:b2:6c:5c:47:2d:fe:30:24:
86:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:09:32:B1:D7:FE:56:EA:0E:B9:7D:12:D1:1A:5E:AB:52:E1:AD:67
X509v3 Authority Key Identifier:
keyid:B5:9B:E6:EE:54:9F:33:5C:72:84:97:A7:9F:14:41:03:4E:85:2C:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tZvm7lSfM1xyhJennxRBA06FLDU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/c1d9b7-393d-4625-afe7-f3c887281eba/1/HQkysdf-VuoOuX0S0Rpeq1LhrWc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/c1d9b7-393d-4625-afe7-f3c887281eba/1/tZvm7lSfM1xyhJennxRBA06FLDU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.109.164.0/22
195.137.172.0/24
IPv6:
2a06:5100::/29
Signature Algorithm: sha256WithRSAEncryption
ea:4b:92:47:c7:3f:7d:a0:b1:76:48:9d:fb:67:0b:e0:5c:15:
2d:7a:68:5b:40:66:7c:52:0d:02:8a:87:21:49:7c:6c:75:0b:
0c:60:19:c5:12:14:ac:42:88:55:10:29:5e:f6:46:9c:d9:4a:
d6:94:c5:dc:f0:7e:ff:86:ac:2a:1b:54:7e:38:03:1b:5b:b9:
01:5e:05:28:dc:7e:ff:3c:2a:af:a1:1b:ae:a8:b4:46:2e:5b:
e8:c3:1c:ea:45:d4:18:53:77:dd:2f:c6:14:ea:71:57:eb:c5:
a2:7d:60:25:de:38:b7:d8:c8:21:26:28:a9:84:ac:48:a7:04:
1f:e6:5b:c6:86:18:77:a7:23:02:21:5e:fd:47:0b:6b:ea:c5:
e0:73:ea:35:0a:4b:f7:1c:64:20:a9:7e:a2:da:80:f3:e7:a0:
2e:3e:7e:46:ff:33:f2:f7:0f:b2:57:0b:f2:8e:7d:05:69:0c:
b0:f2:35:06:ab:91:39:2c:0e:19:a6:7b:c0:89:f3:82:55:8f:
3a:fb:ed:44:6e:4c:39:d1:b9:5c:74:3f:38:c4:a8:bb:5d:8c:
25:4c:5d:2d:f4:38:15:05:d8:74:d2:ad:0a:29:af:36:9c:43:
1a:ca:4d:f0:50:93:4b:b1:cb:8d:28:4d:80:95:30:d0:35:92:
28:d6:6c:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:04 2024 by rpki-client on console-fra.rpki-client.org