Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/5c97a8-0a72-4646-bbef-4a58f6f4a520/1/hy_UEhZJR5JlCqfjQFR2-OcY0XE.roa
File: hy_UEhZJR5JlCqfjQFR2-OcY0XE.roa (raw, json)
Hash identifier: irUiuTuzI39Ppqbg+dkRrH1xSJqJOV1Q+GU2kOIdN1I=
Subject key identifier: 87:2F:D4:12:16:49:47:92:65:0A:A7:E3:40:54:76:F8:E7:18:D1:71
Certificate issuer: /CN=893cfa5278774a711e44be1d6b0c2797f22f2b77
Certificate serial: 01856F824A6EAA39FFEEDC1AC12E29ECB5D6
Authority key identifier: 89:3C:FA:52:78:77:4A:71:1E:44:BE:1D:6B:0C:27:97:F2:2F:2B:77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iTz6Unh3SnEeRL4dawwnl_IvK3c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/5c97a8-0a72-4646-bbef-4a58f6f4a520/1/hy_UEhZJR5JlCqfjQFR2-OcY0XE.roa
Signing time: Sun 01 Jan 2023 22:44:47 +0000
ROA not before: Sun 01 Jan 2023 22:44:47 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 6735
IP address blocks: 194.88.160.0/19 maxlen: 19
185.218.168.0/22 maxlen: 22
2a05:e140::/29 maxlen: 29
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:82:4a:6e:aa:39:ff:ee:dc:1a:c1:2e:29:ec:b5:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=893cfa5278774a711e44be1d6b0c2797f22f2b77
Validity
Not Before: Jan 1 22:44:47 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=872fd41216494792650aa7e3405476f8e718d171
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:39:65:df:07:94:1f:bb:0b:19:40:f8:8f:c3:
c6:42:33:a4:5e:4a:39:ba:d2:0a:6a:fc:d3:ec:b5:
5c:0b:42:4a:48:00:17:98:c8:fc:17:09:fb:31:e0:
c3:b6:a6:f2:8b:59:72:4e:b7:c5:8b:cc:f5:45:60:
fe:95:58:ed:ad:51:85:8f:7b:91:df:22:49:3d:f0:
29:04:b8:64:ee:fa:14:f6:0c:62:98:e7:a2:9e:1b:
28:56:37:2c:89:ba:d4:95:dc:e1:4e:75:e5:e0:5a:
aa:c8:48:ea:7d:08:a3:f5:be:b1:8e:c1:a2:ac:46:
39:f8:1a:c2:e3:42:44:a7:4e:e7:7d:b4:49:77:b8:
d5:de:85:59:28:91:a4:ad:a8:f0:7a:22:ee:00:e9:
32:23:8e:fd:c9:81:a1:ff:fa:88:a3:46:cd:9f:6b:
23:51:97:5b:18:da:f3:34:3a:de:26:14:e8:f5:a8:
69:3c:af:3f:62:11:0e:ac:50:0d:01:fc:a2:0a:32:
28:7d:d3:4e:5f:8c:16:cb:bc:29:f2:aa:db:0d:e5:
77:81:a9:8a:11:76:7b:76:f2:a0:63:05:2d:5b:5d:
71:92:87:11:6f:36:dd:8e:4c:44:80:00:26:ef:a9:
ba:09:c9:d0:80:54:68:68:d6:ae:40:3b:aa:06:72:
63:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:2F:D4:12:16:49:47:92:65:0A:A7:E3:40:54:76:F8:E7:18:D1:71
X509v3 Authority Key Identifier:
keyid:89:3C:FA:52:78:77:4A:71:1E:44:BE:1D:6B:0C:27:97:F2:2F:2B:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iTz6Unh3SnEeRL4dawwnl_IvK3c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/5c97a8-0a72-4646-bbef-4a58f6f4a520/1/hy_UEhZJR5JlCqfjQFR2-OcY0XE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/5c97a8-0a72-4646-bbef-4a58f6f4a520/1/iTz6Unh3SnEeRL4dawwnl_IvK3c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.218.168.0/22
194.88.160.0/19
IPv6:
2a05:e140::/29
Signature Algorithm: sha256WithRSAEncryption
78:a8:5f:a4:28:c9:73:c9:25:c2:68:ba:7a:ad:57:c4:cf:c1:
f0:b0:52:86:21:b4:d4:63:24:4d:62:f3:5e:d6:3c:15:c8:62:
bc:bc:93:da:70:66:de:37:94:a9:ad:d9:09:bb:dd:c6:56:cf:
c2:39:23:1b:65:58:28:1b:53:fd:91:61:b0:fc:48:0e:71:97:
59:63:bc:eb:67:4e:4b:f3:54:e9:01:27:31:ae:f3:41:18:81:
b4:7d:c3:08:77:d8:c3:b7:d3:ff:a3:a0:b8:d5:a5:7f:b4:1d:
d1:89:e8:01:c7:d8:97:5d:9f:8d:73:e3:97:bd:e4:3f:53:0e:
5f:86:da:44:68:b8:02:bb:1e:0e:14:fc:c2:2e:b0:4e:af:84:
e3:19:cf:c1:9f:c2:b6:9e:71:47:b9:e1:f7:d4:89:cd:f6:62:
38:ec:56:9a:52:ab:76:4f:09:2c:4c:9a:24:2e:1e:aa:98:11:
5f:45:e8:a3:74:1b:94:dc:43:bb:f7:4e:8b:c3:c5:9f:b7:78:
d5:0d:0d:32:4e:c2:94:28:f7:c5:43:72:fc:97:af:d2:cd:c9:
ba:6e:03:21:b7:fd:bc:76:99:dd:0e:ea:46:19:7d:7e:0e:70:
97:bb:f3:77:98:1d:c3:fd:e7:a4:03:05:24:bd:8b:32:d4:1d:
b4:6c:48:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:00:04 2023 by rpki-client on console-fra.rpki-client.org