Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/78db29-e46d-41f4-87c7-95c42e4a84c0/1/H8slONot6YKhxdaBqD-m_jOIP_8.roa
File: H8slONot6YKhxdaBqD-m_jOIP_8.roa (raw, json)
Hash identifier: 4+ubsdJLtYgjVTk738b/GGNfUWZTeFy4goZyOuyKkS4=
Subject key identifier: 1F:CB:25:38:DA:2D:E9:82:A1:C5:D6:81:A8:3F:A6:FE:33:88:3F:FF
Certificate issuer: /CN=e94978779e930e01fbfe7e0c5fcb41611129d4e8
Certificate serial: 0BFB9810
Authority key identifier: E9:49:78:77:9E:93:0E:01:FB:FE:7E:0C:5F:CB:41:61:11:29:D4:E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6Ul4d56TDgH7_n4MX8tBYREp1Og.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/78db29-e46d-41f4-87c7-95c42e4a84c0/1/H8slONot6YKhxdaBqD-m_jOIP_8.roa
Signing time: Sat 01 Jan 2022 12:58:31 +0000
ROA not before: Sat 01 Jan 2022 12:58:31 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 49801
IP address blocks: 87.247.173.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 201037840 (0xbfb9810)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e94978779e930e01fbfe7e0c5fcb41611129d4e8
Validity
Not Before: Jan 1 12:58:31 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=1fcb2538da2de982a1c5d681a83fa6fe33883fff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:15:80:e6:1b:15:a5:38:fb:3a:00:6d:2b:00:
2d:d2:a4:e1:33:ff:88:a6:58:af:b4:cc:5f:5a:fc:
04:18:b3:3b:ac:f3:c3:98:67:67:18:2f:4d:e3:ba:
15:25:65:35:43:4a:d2:8b:d3:7c:c1:55:60:f7:f2:
89:cd:5a:b9:4d:0c:02:a3:7d:21:ff:fd:44:71:d4:
c6:fe:4a:e4:bc:91:bd:88:57:0d:fc:ed:87:dd:fb:
ca:9b:9d:ff:4e:55:2c:1f:25:43:d6:bd:9a:8e:8c:
b6:e2:34:fc:18:53:05:8d:3f:5a:a2:23:f1:b1:48:
e8:37:ad:d0:cd:31:8e:20:d7:46:3e:55:bc:26:ca:
14:b2:84:47:54:ca:e9:f4:85:f8:5e:1c:29:4a:49:
52:f2:fc:53:ae:4a:d8:31:aa:34:82:58:33:64:6a:
b9:ee:57:e5:39:c5:40:18:12:32:05:32:98:8d:c3:
66:08:f4:a7:89:4e:30:9f:ef:ac:67:86:3a:57:65:
ed:b1:20:15:0d:da:b4:45:f1:32:8d:e3:28:2c:f3:
e9:3a:e8:e0:85:6c:76:45:02:f4:55:53:af:1c:4d:
ae:8d:da:58:7e:6d:5a:2e:9f:ae:17:1f:87:c5:a2:
66:5f:26:29:b4:eb:b2:64:e7:f8:53:2c:13:8f:66:
f3:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:CB:25:38:DA:2D:E9:82:A1:C5:D6:81:A8:3F:A6:FE:33:88:3F:FF
X509v3 Authority Key Identifier:
keyid:E9:49:78:77:9E:93:0E:01:FB:FE:7E:0C:5F:CB:41:61:11:29:D4:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6Ul4d56TDgH7_n4MX8tBYREp1Og.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/78db29-e46d-41f4-87c7-95c42e4a84c0/1/H8slONot6YKhxdaBqD-m_jOIP_8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/78db29-e46d-41f4-87c7-95c42e4a84c0/1/6Ul4d56TDgH7_n4MX8tBYREp1Og.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.247.173.0/24
Signature Algorithm: sha256WithRSAEncryption
01:ac:9f:f3:a9:09:8d:9d:a6:32:0d:54:bb:3b:27:7a:fd:9b:
51:c9:cc:54:b2:14:b5:da:d2:03:b9:22:9e:ed:81:a7:f8:d9:
05:7e:2f:f3:44:9a:76:12:09:46:24:ee:f2:47:11:24:ed:ee:
68:9a:b8:04:e9:65:7f:a5:55:d7:e3:cb:c5:2b:9c:87:44:0f:
a6:3e:79:0a:1e:95:11:9b:88:75:d0:bf:a5:c3:6d:aa:85:00:
8d:8a:66:1f:1c:c8:c9:f0:fb:39:66:00:08:f9:58:56:29:aa:
9e:71:3a:b4:65:af:07:41:80:fe:c7:23:3d:43:89:ae:51:87:
1b:01:70:dc:8e:aa:56:c8:31:a4:d7:4a:be:25:83:f7:77:12:
9b:af:c3:41:ff:d0:84:c7:ed:29:56:d5:b2:bb:dc:a4:0a:ca:
b2:47:c9:f1:53:0d:05:ed:8c:08:7f:da:a6:d1:60:6a:ec:ae:
59:70:30:d2:8d:65:df:bd:2c:c8:14:97:fc:a9:eb:e2:1d:2a:
ba:18:37:99:0c:75:7b:0e:d0:ec:9f:f2:53:2f:c7:1c:ca:f4:
0a:d7:ee:12:ac:52:ea:36:97:f6:5d:ef:f4:4b:6a:86:63:64:
d3:93:17:e6:78:d1:31:3b:37:0c:da:fa:2e:4d:52:7e:1f:e0:
72:8e:24:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 02:46:32 2025 by rpki-client