Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/514aa5-c51d-48b1-ae06-19808bf44471/1/H8SyORQCSxxte-vMB6iNYvDX0kQ.roa
File: H8SyORQCSxxte-vMB6iNYvDX0kQ.roa (raw, json)
Hash identifier: JsWd/D6tKUeGv6U5z0BdgihlIyHY0DClq3/hFXGw2U0=
Subject key identifier: 1F:C4:B2:39:14:02:4B:1C:6D:7B:EB:CC:07:A8:8D:62:F0:D7:D2:44
Certificate issuer: /CN=cb6f2040d94c995b0461dc5114a4c087351e99f2
Certificate serial: 168311E8
Authority key identifier: CB:6F:20:40:D9:4C:99:5B:04:61:DC:51:14:A4:C0:87:35:1E:99:F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y28gQNlMmVsEYdxRFKTAhzUemfI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/514aa5-c51d-48b1-ae06-19808bf44471/1/H8SyORQCSxxte-vMB6iNYvDX0kQ.roa
Signing time: Sat 01 Jan 2022 06:52:59 +0000
ROA not before: Sat 01 Jan 2022 06:52:59 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 201237
IP address blocks: 185.81.23.0/24 maxlen: 24
185.81.22.0/24 maxlen: 24
185.81.21.0/24 maxlen: 24
185.81.20.0/24 maxlen: 24
89.147.102.0/24 maxlen: 24
89.147.101.0/24 maxlen: 24
89.147.100.0/22 maxlen: 22
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 377688552 (0x168311e8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb6f2040d94c995b0461dc5114a4c087351e99f2
Validity
Not Before: Jan 1 06:52:59 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=1fc4b23914024b1c6d7bebcc07a88d62f0d7d244
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:fd:22:64:62:fb:68:52:7a:0e:2d:36:27:b5:
d3:2b:1f:0d:28:e1:20:5f:8e:53:b0:73:0a:5a:38:
cc:a0:fc:a4:c0:0b:25:7f:2c:a6:ee:ad:b4:87:80:
99:d2:ee:ef:01:c4:1f:75:cd:a2:58:ae:e2:4b:99:
56:e3:b1:c6:d1:80:3f:e4:3f:b2:e2:8d:2d:94:20:
89:75:88:58:d4:81:1c:93:ad:1c:50:1c:b0:5f:ba:
b6:58:cb:86:0e:3b:4d:f2:93:aa:5d:de:f2:41:48:
67:e0:e1:8a:5a:ee:d4:5d:5a:ca:0b:7d:d1:01:84:
24:dd:a8:14:22:66:f9:58:9f:48:5b:13:d4:fe:3f:
ac:4f:24:6f:c8:79:f8:8c:86:37:22:f1:e5:1d:5f:
69:3c:a4:7e:f2:09:e1:58:51:91:56:7e:7f:06:43:
9e:f9:06:aa:4f:d7:8e:4b:90:50:95:e9:cf:49:9b:
6f:bb:a7:21:cf:23:c2:7d:40:12:5c:26:e5:39:7b:
d8:af:2c:48:8b:eb:b9:7d:63:c2:4e:f5:2c:fc:72:
c4:da:8d:68:53:64:3c:61:53:36:b9:78:0c:79:eb:
81:42:20:bb:3a:d9:4f:8b:82:0e:07:40:f0:13:85:
f3:e3:da:a1:c6:84:42:5a:59:a2:79:90:46:e4:b4:
b7:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:C4:B2:39:14:02:4B:1C:6D:7B:EB:CC:07:A8:8D:62:F0:D7:D2:44
X509v3 Authority Key Identifier:
keyid:CB:6F:20:40:D9:4C:99:5B:04:61:DC:51:14:A4:C0:87:35:1E:99:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y28gQNlMmVsEYdxRFKTAhzUemfI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/514aa5-c51d-48b1-ae06-19808bf44471/1/H8SyORQCSxxte-vMB6iNYvDX0kQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/514aa5-c51d-48b1-ae06-19808bf44471/1/y28gQNlMmVsEYdxRFKTAhzUemfI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.147.100.0/22
185.81.20.0/22
Signature Algorithm: sha256WithRSAEncryption
47:92:16:4a:b8:84:fc:76:09:2f:dd:06:57:d2:ec:43:17:60:
58:d9:d3:53:7d:92:8b:1a:fe:9f:c0:34:12:46:f2:cc:c4:d6:
a7:03:cf:f6:3e:f7:33:3c:26:f1:52:ae:fe:4a:f3:0f:21:47:
2a:91:35:c8:d9:58:c3:d2:ee:e0:32:65:24:86:7a:49:13:ec:
53:29:eb:d3:85:a1:67:c0:be:3f:44:e9:27:83:35:68:ac:6d:
47:3e:f4:22:4b:35:89:02:b7:6d:0c:8c:53:08:79:b6:b5:8f:
6f:5c:9f:d0:c2:58:6c:05:c0:d5:dc:27:7b:1d:8d:f2:4f:b5:
42:d8:da:96:3c:c4:0c:1d:06:6b:e0:a9:49:4f:81:ca:a4:66:
35:7d:c3:15:5f:e4:ff:71:39:4e:b8:a4:c1:9d:ae:a4:d7:f7:
50:51:7d:3a:c8:7c:aa:d3:f5:7b:b6:c8:61:c1:8e:96:c0:b4:
c5:62:b6:39:b4:9c:7f:68:60:0b:f5:10:e4:ab:ed:30:09:c6:
81:bc:05:21:cf:3c:a4:78:a1:27:2c:eb:71:c3:e5:5f:55:e2:
04:7c:d3:bc:75:cf:db:3b:15:d1:06:84:8c:65:93:ad:26:8c:
90:f4:ba:9f:7e:28:7e:54:b7:d7:9b:50:74:dd:e6:98:0c:b8:
bc:92:56:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:59:58 2025 by rpki-client