Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/c6f0a8-98f2-49fb-8506-42ad3b4c8d0c/1/hoMd1ao-5xioD5afFuHzLAiilNA.roa
File: hoMd1ao-5xioD5afFuHzLAiilNA.roa (raw, json)
Hash identifier: kY6VnQlc5WhhXkLsiLgtzGrptWyehzdgfUCRLl0B768=
Subject key identifier: 86:83:1D:D5:AA:3E:E7:18:A8:0F:96:9F:16:E1:F3:2C:08:A2:94:D0
Certificate issuer: /CN=198204d1c25a011236bea0741e4c60139d349b10
Certificate serial: 01942444A0B3FAD8FF9587CEABFCC3DB0127
Authority key identifier: 19:82:04:D1:C2:5A:01:12:36:BE:A0:74:1E:4C:60:13:9D:34:9B:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GYIE0cJaARI2vqB0HkxgE500mxA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/c6f0a8-98f2-49fb-8506-42ad3b4c8d0c/1/hoMd1ao-5xioD5afFuHzLAiilNA.roa
Signing time: Wed 01 Jan 2025 23:47:44 +0000
ROA not before: Wed 01 Jan 2025 23:47:44 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 34790
IP address blocks: 80.74.16.0/20 maxlen: 20
85.234.64.0/19 maxlen: 19
185.188.172.0/22 maxlen: 22
195.162.20.0/23 maxlen: 23
217.72.112.0/20 maxlen: 20
2a00:d000::/29 maxlen: 29
2a00:df00::/29 maxlen: 29
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:44:a0:b3:fa:d8:ff:95:87:ce:ab:fc:c3:db:01:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=198204d1c25a011236bea0741e4c60139d349b10
Validity
Not Before: Jan 1 23:47:44 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=86831dd5aa3ee718a80f969f16e1f32c08a294d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:59:33:c2:d5:bd:48:d9:f7:35:df:0c:f9:6e:
e8:85:47:5a:fc:b2:b7:bc:bf:b7:2d:41:4a:1e:e0:
52:d2:6b:43:81:45:18:96:df:84:c8:c5:cc:82:06:
1e:f2:7f:45:c1:bd:56:aa:26:94:5d:6c:73:3d:34:
5f:3e:14:f3:8d:97:08:ab:0d:4c:37:17:8e:52:5a:
d2:45:5e:68:19:10:22:73:6a:0e:f2:99:25:3b:89:
29:6e:02:26:d4:2c:b4:4a:44:5f:df:6d:60:88:b7:
a9:1d:f5:54:65:b5:df:15:a6:92:c2:12:55:6f:98:
c0:a7:e8:4b:a6:67:bb:3a:7e:ee:1c:f3:0d:bf:1e:
ec:12:b6:77:a9:2c:70:74:c4:17:a9:e3:1a:fb:57:
8e:2d:df:16:5e:22:d6:07:c5:e3:69:4d:6a:05:20:
8d:86:0f:2b:ea:cf:c1:e1:70:62:10:c8:3a:b1:ea:
39:1c:dc:b7:c1:0f:42:3c:c3:e5:fa:fe:82:fc:42:
3c:6d:4d:79:a3:fc:38:53:33:c8:5c:b3:df:6c:a6:
ea:4b:7b:a7:e0:21:99:00:db:b4:66:fa:b8:b7:b9:
b3:e0:65:e0:36:89:33:db:3a:99:29:8c:bb:32:f5:
38:f8:48:41:e1:cd:a0:55:5a:f3:a1:97:bc:b7:57:
98:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:83:1D:D5:AA:3E:E7:18:A8:0F:96:9F:16:E1:F3:2C:08:A2:94:D0
X509v3 Authority Key Identifier:
keyid:19:82:04:D1:C2:5A:01:12:36:BE:A0:74:1E:4C:60:13:9D:34:9B:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GYIE0cJaARI2vqB0HkxgE500mxA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/c6f0a8-98f2-49fb-8506-42ad3b4c8d0c/1/hoMd1ao-5xioD5afFuHzLAiilNA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/c6f0a8-98f2-49fb-8506-42ad3b4c8d0c/1/GYIE0cJaARI2vqB0HkxgE500mxA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.74.16.0/20
85.234.64.0/19
185.188.172.0/22
195.162.20.0/23
217.72.112.0/20
IPv6:
2a00:d000::/29
2a00:df00::/29
Signature Algorithm: sha256WithRSAEncryption
ad:6d:31:58:6a:08:7f:c8:aa:6d:3a:79:c4:b1:74:69:6a:0d:
7a:77:a2:4d:79:ee:dc:30:84:53:91:58:3c:4d:b3:0b:27:ae:
b0:16:c1:62:ac:a7:8c:08:f2:51:81:7d:ac:5a:71:cc:84:d3:
09:86:d1:a2:be:97:ca:5e:35:e2:0d:35:30:d7:6d:d3:82:5e:
05:a8:c6:4c:97:78:15:1f:4e:ca:f9:70:e2:84:92:46:c6:9d:
c3:1a:f4:29:cf:0f:15:74:6b:66:b8:d6:71:01:a0:7c:7f:db:
12:55:8e:2d:93:46:8f:a9:37:9b:83:66:8e:c7:3a:f6:a7:96:
56:b5:c2:f5:57:b0:ca:01:8a:27:c7:ed:06:51:95:6b:6f:74:
08:d2:5f:72:e6:58:fa:2a:c7:b0:f3:a8:1e:bb:47:2b:ab:1e:
92:57:f5:9b:e6:49:b8:b5:50:8a:6c:af:01:8f:b2:56:7a:9b:
48:29:8c:96:f8:eb:93:e1:c3:60:8e:5c:0b:ef:78:42:b6:67:
48:36:8c:37:c7:b9:98:eb:a7:51:a3:2e:62:d6:da:b6:e4:01:
81:c8:7d:23:1e:ed:2f:d7:e0:6b:c3:4d:fe:3c:e8:59:ce:02:
47:2c:ce:ff:ef:de:e2:17:a1:66:8c:21:d4:93:dd:a2:73:65:
2f:03:86:0c
-----BEGIN CERTIFICATE-----
MIIFKzCCBBOgAwIBAgISAZQkRKCz+tj/lYfOq/zD2wEnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE5ODIwNGQxYzI1YTAxMTIzNmJlYTA3NDFlNGM2MDEzOWQz
NDliMTAwHhcNMjUwMTAxMjM0NzQ0WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4NjgzMWRkNWFhM2VlNzE4YTgwZjk2OWYxNmUxZjMyYzA4YTI5NGQwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt1kzwtW9SNn3Nd8M+W7ohUda/LK3
vL+3LUFKHuBS0mtDgUUYlt+EyMXMggYe8n9Fwb1WqiaUXWxzPTRfPhTzjZcIqw1M
NxeOUlrSRV5oGRAic2oO8pklO4kpbgIm1Cy0SkRf321giLepHfVUZbXfFaaSwhJV
b5jAp+hLpme7On7uHPMNvx7sErZ3qSxwdMQXqeMa+1eOLd8WXiLWB8XjaU1qBSCN
hg8r6s/B4XBiEMg6seo5HNy3wQ9CPMPl+v6C/EI8bU15o/w4UzPIXLPfbKbqS3un
4CGZANu0Zvq4t7mz4GXgNokz2zqZKYy7MvU4+EhB4c2gVVrzoZe8t1eYYQIDAQAB
o4ICNzCCAjMwHQYDVR0OBBYEFIaDHdWqPucYqA+Wnxbh8ywIopTQMB8GA1UdIwQY
MBaAFBmCBNHCWgESNr6gdB5MYBOdNJsQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR1lJRTBjSmFBUkkydnFCMEhreGdFNTAwbXhBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZS9jNmYwYTgtOThmMi00OWZiLTg1MDYt
NDJhZDNiNGM4ZDBjLzEvaG9NZDFhby01eGlvRDVhZkZ1SHpMQWlpbE5BLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZS9jNmYwYTgtOThmMi00OWZiLTg1MDYtNDJhZDNiNGM4ZDBj
LzEvR1lJRTBjSmFBUkkydnFCMEhreGdFNTAwbXhBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CME0GCCsGAQUFBwEHAQH/BD4wPDAkBAIAATAeAwQEUEoQAwQF
VepAAwQCubysAwQBw6IUAwQE2UhwMBQEAgACMA4DBQMqANAAAwUDKgDfADANBgkq
hkiG9w0BAQsFAAOCAQEArW0xWGoIf8iqbTp5xLF0aWoNeneiTXnu3DCEU5FYPE2z
CyeusBbBYqynjAjyUYF9rFpxzITTCYbRor6Xyl414g01MNdt04JeBajGTJd4FR9O
yvlw4oSSRsadwxr0Kc8PFXRrZrjWcQGgfH/bElWOLZNGj6k3m4Nmjsc69qeWVrXC
9VewygGKJ8ftBlGVa290CNJfcuZY+irHsPOoHrtHK6seklf1m+ZJuLVQimyvAY+y
VnqbSCmMlvjrk+HDYI5cC+94QrZnSDaMN8e5mOunUaMuYtbatuQBgch9Ix7tL9fg
a8NN/jzoWc4CRyzO/+/e4hehZowh1JPdonNlLwOGDA==
-----END CERTIFICATE-----
Generated at Sun Apr 20 13:12:27 2025 by rpki-client