Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/be1db1-4dc4-463c-baf8-2441e10f6f8f/1/HyqhxV86GPDWpgVJYfPCo1t6M_4.roa
File: HyqhxV86GPDWpgVJYfPCo1t6M_4.roa (raw, json)
Hash identifier: npkRPHd0DyBOrv0Ik/iCE0zehel5FkP/fRy6Vc3fsgk=
Subject key identifier: 1F:2A:A1:C5:5F:3A:18:F0:D6:A6:05:49:61:F3:C2:A3:5B:7A:33:FE
Certificate issuer: /CN=3921b7f1eee90d99e294218a938753c1ea2dc267
Certificate serial: 019634DF1F638031767B3A9160FAD143A56D
Authority key identifier: 39:21:B7:F1:EE:E9:0D:99:E2:94:21:8A:93:87:53:C1:EA:2D:C2:67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OSG38e7pDZnilCGKk4dTweotwmc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/be1db1-4dc4-463c-baf8-2441e10f6f8f/1/HyqhxV86GPDWpgVJYfPCo1t6M_4.roa
Signing time: Mon 14 Apr 2025 15:15:59 +0000
ROA not before: Mon 14 Apr 2025 15:15:59 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 201675
IP address blocks: 45.151.220.0/22 maxlen: 22
89.21.80.0/22 maxlen: 22
149.232.242.0/23 maxlen: 23
151.216.0.0/20 maxlen: 20
151.216.32.0/22 maxlen: 22
151.216.72.0/21 maxlen: 21
185.67.144.0/22 maxlen: 22
2a05:1000::/29 maxlen: 29
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:34:df:1f:63:80:31:76:7b:3a:91:60:fa:d1:43:a5:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3921b7f1eee90d99e294218a938753c1ea2dc267
Validity
Not Before: Apr 14 15:15:59 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1f2aa1c55f3a18f0d6a6054961f3c2a35b7a33fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:3c:62:e4:fb:6c:93:2f:62:95:0f:5c:98:90:
92:3b:07:3b:77:8f:dc:44:ec:00:c8:40:08:d4:3b:
a8:f8:46:1d:2f:2e:b4:d3:ba:e6:fc:80:d2:93:40:
59:6c:07:10:c2:c5:d5:bc:af:57:53:8f:dc:8d:7f:
72:03:12:64:03:80:e7:2a:21:3f:04:a5:ae:78:fb:
33:78:18:9a:71:a1:ac:5d:f2:55:a6:ea:0a:be:92:
f0:cf:25:63:c5:2d:51:d2:bd:8b:39:3a:10:8d:01:
57:a3:3b:94:c3:d3:c1:8a:dc:2f:22:db:56:43:5b:
9d:cb:58:00:c8:20:ef:b5:a3:4a:8f:8c:ee:3f:a7:
82:9c:5d:28:d9:a9:fc:70:03:07:f5:4b:6f:9b:e0:
48:c6:6b:09:91:d1:8c:2e:50:26:83:22:42:47:7f:
7c:b3:5d:3a:7d:24:6b:47:34:98:5c:95:0a:55:43:
63:0c:76:25:03:ab:e6:72:23:b3:e6:1b:dc:b4:fc:
68:d9:2f:c2:5c:c8:cd:49:25:a4:f9:bf:42:b9:13:
74:53:3a:45:11:64:20:d8:a4:3a:d4:42:ce:8c:6c:
1d:9c:63:f5:37:39:94:f2:d7:c5:9c:4a:f6:02:ac:
4e:16:86:f5:f4:1a:22:77:b5:51:f9:42:f9:16:02:
f3:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:2A:A1:C5:5F:3A:18:F0:D6:A6:05:49:61:F3:C2:A3:5B:7A:33:FE
X509v3 Authority Key Identifier:
keyid:39:21:B7:F1:EE:E9:0D:99:E2:94:21:8A:93:87:53:C1:EA:2D:C2:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OSG38e7pDZnilCGKk4dTweotwmc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/be1db1-4dc4-463c-baf8-2441e10f6f8f/1/HyqhxV86GPDWpgVJYfPCo1t6M_4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/be1db1-4dc4-463c-baf8-2441e10f6f8f/1/OSG38e7pDZnilCGKk4dTweotwmc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.151.220.0/22
89.21.80.0/22
149.232.242.0/23
151.216.0.0/20
151.216.32.0/22
151.216.72.0/21
185.67.144.0/22
IPv6:
2a05:1000::/29
Signature Algorithm: sha256WithRSAEncryption
71:fa:8a:e9:1e:1f:84:2f:4c:b0:2c:9d:d2:52:e4:cc:bf:85:
da:27:20:0e:d9:58:50:6f:68:c0:92:83:73:be:bb:ef:ff:c7:
06:81:31:f1:6a:d6:8d:a0:a9:14:6f:24:76:1e:3d:c4:5e:bb:
90:6e:ef:19:2e:a7:08:9f:ed:cb:ad:31:75:76:19:77:de:a7:
50:60:2b:6b:8e:68:82:3f:60:7e:91:ea:cf:6d:fa:6c:b5:39:
ed:29:7a:b3:9f:51:1f:d9:4d:59:11:b4:98:60:1b:5f:cb:6a:
d4:0a:82:29:5f:ab:c1:39:28:f7:98:8c:62:ee:d0:83:f5:f9:
86:74:3b:da:f3:52:55:22:e8:77:17:c7:cf:07:5f:80:cc:44:
44:7b:05:e3:ff:1f:3d:7f:6a:0e:79:ee:55:48:7c:bc:24:b9:
31:16:40:b6:84:ed:56:c5:d1:26:86:b9:6b:c1:d7:d8:a2:42:
21:73:a7:9c:6f:5d:16:a0:ce:e1:e3:00:0f:90:60:1f:da:3a:
e8:a9:48:eb:1e:9c:4d:16:e9:fc:4b:f4:cd:78:77:60:46:97:
5a:91:45:b4:22:36:e3:de:8f:34:19:b1:ef:81:66:d8:c6:5b:
0f:8d:b1:12:31:1f:29:62:c1:dc:0d:e9:2d:60:76:37:2f:42:
ca:24:4c:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 22:38:15 2025 by rpki-client