Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/sHNBkUNhkKrcGsJFHFGn_5-SDYI.roa
File: sHNBkUNhkKrcGsJFHFGn_5-SDYI.roa (raw, json)
Hash identifier: Tfa17JSVAOqO4yHApa9W1rWdi21kt9ZdlP0xFnjkRd4=
Subject key identifier: B0:73:41:91:43:61:90:AA:DC:1A:C2:45:1C:51:A7:FF:9F:92:0D:82
Certificate issuer: /CN=c2778de2a9be9802120382e750d159e95872c2ae
Certificate serial: 019427B58A554671BCD61335677A90488759
Authority key identifier: C2:77:8D:E2:A9:BE:98:02:12:03:82:E7:50:D1:59:E9:58:72:C2:AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wneN4qm-mAISA4LnUNFZ6Vhywq4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/sHNBkUNhkKrcGsJFHFGn_5-SDYI.roa
Signing time: Thu 02 Jan 2025 15:49:56 +0000
ROA not before: Thu 02 Jan 2025 15:49:56 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 210644
IP address blocks: 83.147.216.0/24 maxlen: 24
83.147.252.0/24 maxlen: 24
83.147.253.0/24 maxlen: 24
83.147.254.0/24 maxlen: 24
91.186.216.0/24 maxlen: 24
91.186.217.0/24 maxlen: 24
91.186.218.0/24 maxlen: 24
91.186.219.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b5:8a:55:46:71:bc:d6:13:35:67:7a:90:48:87:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2778de2a9be9802120382e750d159e95872c2ae
Validity
Not Before: Jan 2 15:49:56 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b0734191436190aadc1ac2451c51a7ff9f920d82
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:aa:06:1e:07:c9:47:e5:2a:6d:e7:74:be:97:
17:8b:ad:6f:2c:f9:76:ea:57:55:99:51:78:ac:0d:
8f:38:5e:86:ff:ce:5d:40:69:25:92:d3:87:2c:13:
b6:ca:cd:26:5e:a4:0a:ea:d3:99:21:92:d2:0a:48:
e1:a7:3a:c7:91:6a:ac:1a:9e:9a:1c:d3:8a:a2:94:
d3:b7:50:2f:a4:6a:59:30:1a:3f:0a:db:c1:be:fa:
4d:cc:1b:7d:d4:68:10:8f:08:07:fb:4a:77:c7:5d:
6b:d7:db:59:88:3e:3a:99:d6:e3:a1:d1:49:0d:6f:
1a:54:6d:b8:8f:cf:15:06:ae:0e:b1:7a:8d:79:91:
12:df:9c:cd:6f:e0:31:a0:f2:fa:bc:09:e3:e0:3f:
c6:5d:b8:ca:c1:92:37:52:87:3f:e7:b0:37:63:2c:
18:27:ac:3c:4e:74:01:53:7d:1b:27:a3:68:76:77:
7f:d1:7a:14:39:cf:d3:95:fb:41:9c:2a:36:cf:d6:
01:f9:87:ff:43:f7:22:97:0a:39:91:fc:c1:dc:0b:
87:8a:cc:db:07:b2:8e:fb:ae:0b:53:ab:b1:e3:0a:
3e:94:b9:be:9a:65:dc:95:4a:77:52:01:62:1a:60:
08:18:4f:bc:74:e4:c5:3e:e7:43:d0:dd:1f:78:7b:
be:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:73:41:91:43:61:90:AA:DC:1A:C2:45:1C:51:A7:FF:9F:92:0D:82
X509v3 Authority Key Identifier:
keyid:C2:77:8D:E2:A9:BE:98:02:12:03:82:E7:50:D1:59:E9:58:72:C2:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wneN4qm-mAISA4LnUNFZ6Vhywq4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/sHNBkUNhkKrcGsJFHFGn_5-SDYI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/wneN4qm-mAISA4LnUNFZ6Vhywq4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.147.216.0/24
83.147.252.0-83.147.254.255
91.186.216.0/22
Signature Algorithm: sha256WithRSAEncryption
02:a7:ed:58:b6:bd:51:39:28:8c:3f:ff:f1:eb:6f:0e:85:8c:
a5:fa:9c:a2:87:a5:9c:3e:86:4d:52:68:c3:b9:03:e6:db:db:
ff:83:98:4c:0b:70:c0:72:e1:2f:cf:31:68:9e:5f:4f:70:53:
4e:ba:29:f5:7c:75:50:3b:c7:01:24:ce:10:39:dd:03:32:ce:
71:19:a0:10:2b:84:03:dc:33:d3:f2:1d:44:cc:79:21:dd:a2:
c3:d8:52:d4:fc:82:20:8b:fd:f1:53:53:8c:5a:c9:ad:6f:e6:
3f:a3:39:42:44:40:fd:94:eb:ef:99:1f:6d:57:36:b8:24:f0:
e2:80:1e:c8:a9:ae:d5:5d:dd:54:bf:55:2d:26:ef:78:66:f9:
4e:26:16:00:2d:c7:48:e0:cd:70:f9:23:60:63:74:49:dc:7a:
d6:e9:63:a3:4e:10:eb:f0:a7:36:c5:e0:88:3b:c8:6a:ad:8a:
0f:fc:81:44:b1:1d:b8:9b:65:1f:71:6a:8c:70:ba:27:e1:4a:
2c:41:15:d5:eb:47:71:09:b8:4f:74:83:68:9f:88:df:bf:f0:
ba:bf:50:f1:0d:3d:2b:c3:87:73:3a:15:74:65:61:f1:b5:a7:
1d:fb:22:9e:fe:b5:85:93:d9:a0:15:c8:ab:4e:65:a2:cd:cf:
ab:26:e1:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 10:49:47 2025 by rpki-client