Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/4de598-6b03-4bef-ab14-33894913dcb7/1/HCIpBnB4LfjLGpoESwyvrSXt29k.roa
File: HCIpBnB4LfjLGpoESwyvrSXt29k.roa (raw, json)
Hash identifier: zk+dzsA6QG9mP2+crNgLcK2AUlw5d1do6o09o/9YM5E=
Subject key identifier: 1C:22:29:06:70:78:2D:F8:CB:1A:9A:04:4B:0C:AF:AD:25:ED:DB:D9
Certificate issuer: /CN=fe779e56238b6f2ea068ede4e20aef00c904132b
Certificate serial: 01823F65A92526F3A7B86E6FEC9AE5EF14C7
Authority key identifier: FE:77:9E:56:23:8B:6F:2E:A0:68:ED:E4:E2:0A:EF:00:C9:04:13:2B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_neeViOLby6gaO3k4grvAMkEEys.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/4de598-6b03-4bef-ab14-33894913dcb7/1/HCIpBnB4LfjLGpoESwyvrSXt29k.roa
Signing time: Wed 27 Jul 2022 11:23:23 +0000
ROA not before: Wed 27 Jul 2022 11:23:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 0
IP address blocks: 176.52.128.0/22 maxlen: 24
176.52.148.0/22 maxlen: 22
92.53.160.0/22 maxlen: 24
92.53.164.0/22 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:3f:65:a9:25:26:f3:a7:b8:6e:6f:ec:9a:e5:ef:14:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fe779e56238b6f2ea068ede4e20aef00c904132b
Validity
Not Before: Jul 27 11:23:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=1c22290670782df8cb1a9a044b0cafad25eddbd9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:cd:a8:33:7e:40:60:4b:3b:71:a8:d1:95:d1:
e1:76:2c:dd:7c:c6:84:cb:7e:8a:ff:88:a4:95:f8:
7f:4c:b1:9b:54:7b:5d:59:b2:f1:46:9c:58:d7:0b:
23:1a:98:0c:57:bc:65:7a:43:92:00:50:bc:ca:df:
86:e6:1b:5d:55:18:93:c0:d7:9d:9e:5a:28:8b:bd:
46:2d:f1:c7:8e:b9:48:14:ed:6e:10:f0:fd:e4:5a:
04:ba:c8:73:04:25:d9:41:cb:58:35:fc:d5:60:0e:
cf:7e:3b:99:b3:95:7b:d4:95:40:84:32:f4:1e:13:
9b:75:e1:80:fd:eb:ac:b0:5d:a6:d5:20:f4:ad:8e:
6b:54:aa:c0:80:9a:2a:ca:af:ae:2c:c7:ae:c4:d0:
86:cb:3d:68:52:ab:89:c7:e7:1e:5a:89:90:45:24:
ab:62:5d:03:24:08:2c:9e:8d:74:e3:98:b5:38:8b:
2b:a9:e1:00:38:94:ef:c2:fb:c8:fe:84:53:a5:bd:
51:43:bc:ec:c1:32:d4:75:63:f3:b9:b7:c1:f5:e4:
4e:1e:8d:ad:c0:cb:13:bc:55:ad:90:bf:6d:96:df:
18:da:ca:54:c0:90:97:ef:ce:02:e0:2b:1a:f8:6f:
b8:5e:48:87:73:9e:d7:6d:98:6f:e5:7a:2a:8a:c8:
0d:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:22:29:06:70:78:2D:F8:CB:1A:9A:04:4B:0C:AF:AD:25:ED:DB:D9
X509v3 Authority Key Identifier:
keyid:FE:77:9E:56:23:8B:6F:2E:A0:68:ED:E4:E2:0A:EF:00:C9:04:13:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_neeViOLby6gaO3k4grvAMkEEys.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/4de598-6b03-4bef-ab14-33894913dcb7/1/HCIpBnB4LfjLGpoESwyvrSXt29k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/4de598-6b03-4bef-ab14-33894913dcb7/1/_neeViOLby6gaO3k4grvAMkEEys.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.53.160.0/21
176.52.128.0/22
176.52.148.0/22
Signature Algorithm: sha256WithRSAEncryption
2f:97:11:42:bb:90:35:44:4a:b0:cc:22:0b:fc:b7:3f:a5:a6:
f5:ed:20:84:59:4c:fd:5c:00:00:ab:e9:21:41:7f:e6:4b:fa:
96:29:be:63:99:07:49:52:3e:e7:e7:b0:d5:02:18:49:ad:df:
06:ea:2f:c9:28:ec:cb:46:12:3d:a1:98:f0:44:0c:f7:6f:62:
9e:b6:aa:6a:7a:7a:7d:f0:5e:cc:10:5a:fc:77:24:74:66:9c:
06:c6:d4:33:cb:a8:b2:30:1e:40:72:c7:27:57:37:33:b7:f4:
8c:fa:ca:84:e1:f3:bd:f3:9b:d5:fb:c9:6e:29:bb:21:ba:02:
1c:23:0f:0e:4a:42:5b:34:16:1c:9f:c4:bd:e0:ad:6f:05:4c:
db:c3:a5:04:ee:64:8a:07:3f:9c:60:9d:ea:74:bc:90:a0:a6:
b4:17:7d:98:7e:43:2b:c6:a0:07:b4:3e:e2:64:31:39:89:f7:
e9:22:93:12:ff:a3:bc:7e:f9:62:0e:8c:24:c6:15:d9:72:f0:
24:7e:20:22:b3:8d:37:06:4e:f3:79:ff:b2:01:d3:f0:cc:f8:
a8:bd:65:e2:a7:4f:8e:68:4b:a2:ed:08:42:ae:44:d1:b3:2d:
19:d7:d7:91:aa:a4:de:e7:4c:a2:fc:4b:47:22:7a:78:4c:47:
35:78:cc:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:50:13 2024 by rpki-client on console-fra.rpki-client.org