Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/699e85-1027-4c7e-8ae7-df4a2e760ccb/1/HEHoPsjlrhNxGy7o0MF6pTM-21E.roa
File: HEHoPsjlrhNxGy7o0MF6pTM-21E.roa (raw, json)
Hash identifier: JbJUifOpyBs/01X3bJTaCWJzkjPOEosVVvhARbvY+Xw=
Subject key identifier: 1C:41:E8:3E:C8:E5:AE:13:71:1B:2E:E8:D0:C1:7A:A5:33:3E:DB:51
Certificate issuer: /CN=e4a2b8e90d157ea022f8e700024a93dc356a514d
Certificate serial: 0C2FA417
Authority key identifier: E4:A2:B8:E9:0D:15:7E:A0:22:F8:E7:00:02:4A:93:DC:35:6A:51:4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5KK46Q0VfqAi-OcAAkqT3DVqUU0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/699e85-1027-4c7e-8ae7-df4a2e760ccb/1/HEHoPsjlrhNxGy7o0MF6pTM-21E.roa
Signing time: Sat 01 Jan 2022 06:54:03 +0000
ROA not before: Sat 01 Jan 2022 06:54:03 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 42216
IP address blocks: 77.92.142.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 204448791 (0xc2fa417)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e4a2b8e90d157ea022f8e700024a93dc356a514d
Validity
Not Before: Jan 1 06:54:03 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=1c41e83ec8e5ae13711b2ee8d0c17aa5333edb51
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:54:80:d5:f5:0e:18:7e:50:5f:4b:28:3f:27:
6d:20:d2:07:ed:64:31:8d:ac:9e:f0:a4:65:db:b9:
2f:40:0b:ff:b3:c9:07:1c:bf:b9:3c:d1:06:a8:5e:
8f:ab:3c:02:04:04:a1:80:22:cc:f6:a0:96:43:ba:
97:ac:3d:91:f9:88:80:01:55:13:97:60:27:c3:75:
88:d5:73:64:34:ae:95:9f:ee:ea:17:c9:1a:c2:ff:
71:07:97:61:ba:a2:8d:b0:92:0d:4e:8f:e6:e9:f5:
64:b0:95:59:94:7e:51:2e:1d:73:a0:cb:7b:02:09:
36:0f:7e:b0:fb:e4:0f:04:dc:32:e4:1d:f4:df:aa:
d8:93:b5:44:6f:0a:cb:b4:f8:9c:9c:b7:18:01:d3:
e4:0b:ce:0a:1d:3c:14:e4:93:60:4e:d4:7b:5f:bd:
2a:6c:54:77:3c:77:39:a1:57:b8:a2:08:71:1c:cf:
4c:16:f2:c0:63:25:92:ba:51:35:a7:6d:db:30:4b:
5b:25:09:fe:c5:f6:68:84:de:2c:5e:ab:1a:3e:e7:
26:6d:71:03:3b:f7:ac:53:91:f2:1d:55:c9:40:38:
c4:a2:dc:ca:be:b2:7a:a5:ae:a6:48:95:03:b8:61:
fe:3f:2a:71:fc:fc:f0:22:f9:0d:15:6b:83:8f:aa:
a4:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:41:E8:3E:C8:E5:AE:13:71:1B:2E:E8:D0:C1:7A:A5:33:3E:DB:51
X509v3 Authority Key Identifier:
keyid:E4:A2:B8:E9:0D:15:7E:A0:22:F8:E7:00:02:4A:93:DC:35:6A:51:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5KK46Q0VfqAi-OcAAkqT3DVqUU0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/699e85-1027-4c7e-8ae7-df4a2e760ccb/1/HEHoPsjlrhNxGy7o0MF6pTM-21E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/699e85-1027-4c7e-8ae7-df4a2e760ccb/1/5KK46Q0VfqAi-OcAAkqT3DVqUU0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.92.142.0/24
Signature Algorithm: sha256WithRSAEncryption
ba:68:cc:fd:e4:2d:dc:d9:2d:f8:25:b3:29:ea:16:0e:80:cb:
2d:d6:5f:e7:e5:a5:29:78:f6:a4:c1:4c:3a:10:63:ab:1d:a4:
f1:87:21:3f:07:3f:ba:83:9f:13:a2:80:6c:ac:5d:f7:da:42:
4b:a2:40:c3:a9:14:ff:18:07:5a:03:4c:bd:73:de:c6:a9:53:
69:ed:fe:ef:b0:4b:fb:5e:3d:69:21:50:9b:6c:ca:49:b6:83:
84:fb:45:a1:ff:ed:ca:4b:62:8c:12:c8:89:7f:26:0b:85:3a:
b8:b1:c2:1a:03:b7:cb:d8:dd:a3:b9:f8:69:7c:d4:2d:00:0d:
51:85:d5:a0:b1:57:8d:ab:17:a0:04:c5:86:a4:73:39:2b:99:
32:8d:71:2a:d9:e4:d9:bd:a7:7d:62:88:59:cc:f0:52:f2:46:
90:5f:11:62:4a:27:0a:73:ef:80:90:32:7f:c7:f8:42:47:fb:
12:f1:ed:82:00:50:0e:60:9b:1a:2c:00:bf:83:ba:fc:1f:37:
05:1c:92:f9:ce:45:19:3f:6c:3b:db:fe:f1:21:22:5b:59:77:
12:35:09:e2:ed:03:b3:31:4e:ae:91:ef:a7:39:f9:9d:0e:08:
43:cb:dd:49:fe:2f:b2:f4:03:68:97:af:20:2e:6a:c0:7f:85:
90:cc:ec:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:01:03 2025 by rpki-client