Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/4de598-6b03-4bef-ab14-33894913dcb7/1/HGveEoC1LZyT8QsYyiSyvBlGSH0.roa
File: HGveEoC1LZyT8QsYyiSyvBlGSH0.roa (raw, json)
Hash identifier: WyMtRGtiaRdnynUsgAYmY5mSKQfsv5DojgKP2t+8oac=
Subject key identifier: 1C:6B:DE:12:80:B5:2D:9C:93:F1:0B:18:CA:24:B2:BC:19:46:48:7D
Certificate issuer: /CN=fe779e56238b6f2ea068ede4e20aef00c904132b
Certificate serial: 0182817E78269E4F608FD8836FE23F638B2E
Authority key identifier: FE:77:9E:56:23:8B:6F:2E:A0:68:ED:E4:E2:0A:EF:00:C9:04:13:2B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_neeViOLby6gaO3k4grvAMkEEys.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/4de598-6b03-4bef-ab14-33894913dcb7/1/HGveEoC1LZyT8QsYyiSyvBlGSH0.roa
Signing time: Tue 09 Aug 2022 07:25:25 +0000
ROA not before: Tue 09 Aug 2022 07:25:25 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 0
IP address blocks: 176.52.128.0/22 maxlen: 24
176.52.140.0/22 maxlen: 22
176.52.148.0/22 maxlen: 22
92.53.160.0/22 maxlen: 24
92.53.164.0/22 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:81:7e:78:26:9e:4f:60:8f:d8:83:6f:e2:3f:63:8b:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fe779e56238b6f2ea068ede4e20aef00c904132b
Validity
Not Before: Aug 9 07:25:25 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=1c6bde1280b52d9c93f10b18ca24b2bc1946487d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:de:d3:72:02:7d:fc:44:aa:99:fe:c4:11:af:
3d:22:c8:fa:bf:5a:6f:6c:17:d7:b8:9a:c5:a0:30:
ee:83:e4:66:0b:ca:8a:01:8b:ff:b8:9b:2a:bb:e5:
bf:ff:bf:bf:f1:a5:61:29:4b:a2:18:fb:a7:6c:16:
e5:3c:70:1d:83:48:7d:0c:a9:df:4f:03:8f:79:e1:
05:58:16:e0:5a:46:de:25:ac:b9:01:8d:af:42:06:
19:e7:df:5a:85:34:ac:e4:63:68:d5:b2:ca:98:47:
12:86:e1:1e:11:04:91:95:7f:e6:2d:9f:2b:05:b0:
e9:eb:9b:9f:15:45:80:8e:ee:af:f8:76:a4:60:df:
09:be:60:12:dd:58:0c:66:75:5d:f4:46:5b:49:fb:
2a:43:a9:ad:ca:64:94:f4:4f:f3:a6:d8:b6:da:a7:
c0:99:83:8e:50:8c:77:93:48:d6:d1:54:a0:0e:f2:
ea:25:07:7c:0e:77:c9:ef:69:e5:1d:3d:7b:3a:46:
f6:21:d9:12:6d:3a:72:ac:c6:fd:30:a3:74:86:c1:
fe:f4:d2:e4:a7:41:8e:c3:ce:ad:a5:e3:43:e1:62:
81:dd:0d:22:28:ff:a4:95:99:c3:7b:cd:5f:c5:27:
4d:0a:f6:59:35:81:ec:21:0a:04:34:6c:d5:c2:89:
8e:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:6B:DE:12:80:B5:2D:9C:93:F1:0B:18:CA:24:B2:BC:19:46:48:7D
X509v3 Authority Key Identifier:
keyid:FE:77:9E:56:23:8B:6F:2E:A0:68:ED:E4:E2:0A:EF:00:C9:04:13:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_neeViOLby6gaO3k4grvAMkEEys.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/4de598-6b03-4bef-ab14-33894913dcb7/1/HGveEoC1LZyT8QsYyiSyvBlGSH0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/4de598-6b03-4bef-ab14-33894913dcb7/1/_neeViOLby6gaO3k4grvAMkEEys.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.53.160.0/21
176.52.128.0/22
176.52.140.0/22
176.52.148.0/22
Signature Algorithm: sha256WithRSAEncryption
4d:b2:de:34:5d:5f:2e:b4:60:7e:5e:a4:92:a2:3b:c4:15:e4:
7f:b1:b4:ae:42:8f:75:4f:56:2b:dc:42:01:26:34:6f:cf:cd:
c8:cb:59:d6:d9:72:64:bf:7e:e5:50:fc:d0:98:b1:64:07:34:
a3:dd:a5:55:63:a4:ea:e5:8e:ea:cc:93:4b:57:f5:17:be:df:
e3:d0:b5:17:b9:cb:31:4d:b2:6c:0b:71:3d:16:35:87:d1:2a:
49:79:ce:e7:4f:96:1b:99:4c:bf:61:83:93:ea:9c:ce:bb:06:
60:de:3e:e3:80:0d:b5:f2:ae:d8:24:26:e0:47:5d:6c:a0:a6:
27:01:54:03:32:78:0f:bd:32:d3:dd:f7:37:69:85:4c:83:0f:
09:0e:ee:2e:32:ca:9a:f2:70:cd:1b:d5:41:af:04:48:b1:3e:
6d:ee:3e:35:ce:de:8c:93:e8:75:14:5c:94:e0:f3:f6:4c:57:
ef:97:36:11:d4:2a:2f:15:c1:fa:1d:74:ce:12:8d:d6:c5:64:
15:c3:8e:b8:5a:eb:8d:19:59:ee:73:38:fc:69:63:ed:e3:5e:
1c:d9:ba:92:d9:a8:47:78:02:d8:c7:f1:44:be:ea:19:7a:bc:
5e:ee:5d:b5:fd:e2:75:70:01:b0:43:5d:c8:b3:7b:4d:eb:ea:
6c:94:b7:b1
-----BEGIN CERTIFICATE-----
MIIFDzCCA/egAwIBAgISAYKBfngmnk9gj9iDb+I/Y4suMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZlNzc5ZTU2MjM4YjZmMmVhMDY4ZWRlNGUyMGFlZjAwYzkw
NDEzMmIwHhcNMjIwODA5MDcyNTI1WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxYzZiZGUxMjgwYjUyZDljOTNmMTBiMThjYTI0YjJiYzE5NDY0ODdkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk97TcgJ9/ESqmf7EEa89Isj6v1pv
bBfXuJrFoDDug+RmC8qKAYv/uJsqu+W//7+/8aVhKUuiGPunbBblPHAdg0h9DKnf
TwOPeeEFWBbgWkbeJay5AY2vQgYZ599ahTSs5GNo1bLKmEcShuEeEQSRlX/mLZ8r
BbDp65ufFUWAju6v+HakYN8JvmAS3VgMZnVd9EZbSfsqQ6mtymSU9E/zpti22qfA
mYOOUIx3k0jW0VSgDvLqJQd8DnfJ72nlHT17Okb2IdkSbTpyrMb9MKN0hsH+9NLk
p0GOw86tpeND4WKB3Q0iKP+klZnDe81fxSdNCvZZNYHsIQoENGzVwomOnwIDAQAB
o4ICGzCCAhcwHQYDVR0OBBYEFBxr3hKAtS2ck/ELGMoksrwZRkh9MB8GA1UdIwQY
MBaAFP53nlYji28uoGjt5OIK7wDJBBMrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX25lZVZpT0xieTZnYU8zazRncnZBTWtFRXlzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMS80ZGU1OTgtNmIwMy00YmVmLWFiMTQt
MzM4OTQ5MTNkY2I3LzEvSEd2ZUVvQzFMWnlUOFFzWXlpU3l2QmxHU0gwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMS80ZGU1OTgtNmIwMy00YmVmLWFiMTQtMzM4OTQ5MTNkY2I3
LzEvX25lZVZpT0xieTZnYU8zazRncnZBTWtFRXlzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQDXDWgAwQC
sDSAAwQCsDSMAwQCsDSUMA0GCSqGSIb3DQEBCwUAA4IBAQBNst40XV8utGB+XqSS
ojvEFeR/sbSuQo91T1Yr3EIBJjRvz83Iy1nW2XJkv37lUPzQmLFkBzSj3aVVY6Tq
5Y7qzJNLV/UXvt/j0LUXucsxTbJsC3E9FjWH0SpJec7nT5YbmUy/YYOT6pzOuwZg
3j7jgA218q7YJCbgR11soKYnAVQDMngPvTLT3fc3aYVMgw8JDu4uMsqa8nDNG9VB
rwRIsT5t7j41zt6Mk+h1FFyU4PP2TFfvlzYR1CovFcH6HXTOEo3WxWQVw464WuuN
GVnuczj8aWPt414c2bqS2ahHeALYx/FEvuoZerxe7l21/eJ1cAGwQ13Is3tN6+ps
lLex
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:39:04 2024 by rpki-client on console-ams.rpki-client.org