Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/b9adf4-f910-4355-bfc8-608564839fd0/1/EjT2v7x0cXUPXM2VnQyDL9JJbYw.roa
File: EjT2v7x0cXUPXM2VnQyDL9JJbYw.roa (raw, json)
Hash identifier: 4jxhCdftMBK+XRUMAciZZkGI43bbUZOaDY7XJhB8F2E=
Subject key identifier: 12:34:F6:BF:BC:74:71:75:0F:5C:CD:95:9D:0C:83:2F:D2:49:6D:8C
Certificate issuer: /CN=1f68138d4ec2ea51cacef09ff1058a370a5be190
Certificate serial: 3DC21974
Authority key identifier: 1F:68:13:8D:4E:C2:EA:51:CA:CE:F0:9F:F1:05:8A:37:0A:5B:E1:90
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H2gTjU7C6lHKzvCf8QWKNwpb4ZA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/b9adf4-f910-4355-bfc8-608564839fd0/1/EjT2v7x0cXUPXM2VnQyDL9JJbYw.roa
Signing time: Sat 01 Jan 2022 08:56:51 +0000
ROA not before: Sat 01 Jan 2022 08:56:51 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 1299
IP address blocks: 217.212.224.0/19 maxlen: 19
193.45.0.0/22 maxlen: 22
2.255.248.0/21 maxlen: 21
193.45.6.0/24 maxlen: 24
193.45.10.0/23 maxlen: 23
193.45.14.0/23 maxlen: 23
193.45.142.0/24 maxlen: 24
193.45.142.0/23 maxlen: 23
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1036130676 (0x3dc21974)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f68138d4ec2ea51cacef09ff1058a370a5be190
Validity
Not Before: Jan 1 08:56:51 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=1234f6bfbc7471750f5ccd959d0c832fd2496d8c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:0d:e7:71:2c:78:a2:14:a2:74:2b:23:30:bf:
1f:b5:4d:fa:40:c7:ea:d6:8e:54:46:bf:80:11:77:
d7:be:37:ed:37:69:2a:93:70:1f:e4:3b:b2:2c:3b:
5a:ce:39:63:6f:db:ae:65:2c:24:96:4b:85:34:b0:
67:81:e4:8a:12:bf:c5:18:7f:3b:97:20:bf:98:ac:
53:c6:16:7e:13:9f:cb:b8:74:08:62:48:fc:5d:86:
1c:36:19:74:e9:5b:57:84:18:16:9c:fe:b8:ca:68:
79:ba:c2:11:a6:be:cf:f7:75:c0:dd:1d:e4:68:27:
1c:08:e5:f8:21:b0:0c:94:48:43:9b:df:40:c0:59:
d5:b7:6f:4b:a1:c7:1c:f7:83:6f:cd:a4:db:2b:14:
59:f9:1e:de:46:e6:79:18:9a:31:f8:6d:2c:ff:5f:
77:ba:2e:af:cc:28:8e:85:fa:9a:15:79:0a:fa:0f:
70:2b:b6:5e:1f:67:37:68:f4:70:a7:f4:dc:59:3d:
f0:ec:c7:ab:09:c1:e5:59:80:a3:82:b0:8a:4e:af:
1d:ec:83:1a:4a:f8:2f:52:4a:cf:25:9e:aa:2a:bf:
b2:78:8b:12:d3:2c:b4:c5:b4:e2:dd:51:af:36:c9:
67:08:1d:f6:01:fa:15:43:11:42:63:da:e4:61:93:
2c:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:34:F6:BF:BC:74:71:75:0F:5C:CD:95:9D:0C:83:2F:D2:49:6D:8C
X509v3 Authority Key Identifier:
keyid:1F:68:13:8D:4E:C2:EA:51:CA:CE:F0:9F:F1:05:8A:37:0A:5B:E1:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H2gTjU7C6lHKzvCf8QWKNwpb4ZA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/b9adf4-f910-4355-bfc8-608564839fd0/1/EjT2v7x0cXUPXM2VnQyDL9JJbYw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/b9adf4-f910-4355-bfc8-608564839fd0/1/H2gTjU7C6lHKzvCf8QWKNwpb4ZA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.255.248.0/21
193.45.0.0/22
193.45.6.0/24
193.45.10.0/23
193.45.14.0/23
193.45.142.0/23
217.212.224.0/19
Signature Algorithm: sha256WithRSAEncryption
e3:ae:2c:57:6b:43:2d:83:35:55:f2:42:ca:ec:b1:b9:3b:67:
48:f8:01:4b:5d:a8:fd:81:b1:f4:eb:33:c2:ef:2a:5b:a3:86:
63:24:3c:d4:ad:1f:a6:6d:9e:72:ca:13:46:da:5e:5e:23:72:
d3:61:fc:82:bb:d1:cf:1f:df:76:d9:7b:b2:12:bf:c5:d7:82:
ab:08:02:f8:bf:5e:82:7c:05:d4:21:6d:89:98:fc:9d:3c:4f:
80:3a:bc:96:fc:e4:25:15:86:9c:fc:f4:ee:4a:cf:20:fe:85:
46:ae:62:86:e3:66:47:da:b4:c7:6f:98:71:09:e5:09:67:89:
6f:09:42:fb:2c:7b:55:79:c4:a5:1b:19:94:3a:b3:56:a8:45:
b2:2f:78:be:8b:a1:30:ce:fc:f1:7b:de:83:20:c2:2c:6e:17:
42:e2:f4:bf:71:08:6a:fc:2b:70:4d:77:8d:5d:bb:9d:b5:8a:
63:6a:aa:0a:56:66:e6:5b:49:d6:00:1c:47:2a:e2:86:42:02:
34:5a:d3:c6:e8:e2:84:c7:18:35:7c:9f:4e:ea:fb:bd:38:38:
0f:d3:03:73:4f:30:66:c3:cb:fd:09:0a:d0:91:e4:de:af:63:
c1:26:a9:8d:37:75:10:34:17:d1:10:c6:4c:c1:b6:62:a3:52:
e0:ab:33:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:07:28 2025 by rpki-client