Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/b80384-f2fe-4456-9cae-fe4a02caef7f/1/Pgdc2icZKBtmXOOK40h8da5W05o.roa
File: Pgdc2icZKBtmXOOK40h8da5W05o.roa (raw, json)
Hash identifier: 7f6P/NX/NVXH8fHeNR8K2XuKOqxaagVxo2xgCrCiAoc=
Subject key identifier: 3E:07:5C:DA:27:19:28:1B:66:5C:E3:8A:E3:48:7C:75:AE:56:D3:9A
Certificate issuer: /CN=1d01f4dffd6fba66cdf8c374c9b0f047552705dd
Certificate serial: 018DD56564F5FDE2BDAA5CD5E3EF13D145D2
Authority key identifier: 1D:01:F4:DF:FD:6F:BA:66:CD:F8:C3:74:C9:B0:F0:47:55:27:05:DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HQH03_1vumbN-MN0ybDwR1UnBd0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/b80384-f2fe-4456-9cae-fe4a02caef7f/1/Pgdc2icZKBtmXOOK40h8da5W05o.roa
Signing time: Fri 23 Feb 2024 09:56:48 +0000
ROA not before: Fri 23 Feb 2024 09:56:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 206509
IP address blocks: 62.164.128.0/18 maxlen: 18
62.164.192.0/21 maxlen: 21
193.108.169.0/24 maxlen: 24
194.164.97.0/24 maxlen: 24
194.164.114.0/24 maxlen: 24
194.164.181.0/24 maxlen: 24
195.200.0.0/19 maxlen: 19
213.254.171.0/24 maxlen: 24
213.254.178.0/24 maxlen: 24
213.254.185.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:d5:65:64:f5:fd:e2:bd:aa:5c:d5:e3:ef:13:d1:45:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1d01f4dffd6fba66cdf8c374c9b0f047552705dd
Validity
Not Before: Feb 23 09:56:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3e075cda2719281b665ce38ae3487c75ae56d39a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:82:96:05:ce:58:9c:81:d2:c9:7c:bc:23:0d:
67:c6:87:c7:fc:57:95:b4:88:70:e6:b2:06:c8:60:
b3:ee:44:2b:d2:0f:89:40:02:7d:36:fb:ae:f1:6c:
a1:b9:a2:30:60:cc:a1:60:b5:1a:a2:76:d9:5c:53:
09:37:ab:08:5e:ba:2a:7a:9d:69:22:80:9d:06:4d:
64:3c:13:3e:7c:a2:92:41:94:68:ce:62:00:64:5a:
22:18:48:ac:ad:e8:71:3b:6d:ff:d1:f1:ce:5e:ef:
85:d7:64:e2:f0:97:a1:04:81:13:23:d2:58:3d:9e:
94:4a:8e:a6:28:8d:5c:b6:98:62:be:5e:75:df:1b:
7f:aa:cb:ff:6a:eb:f3:5e:fd:e8:e1:f8:58:a0:3b:
d6:c9:c4:28:c6:0e:27:78:16:e7:43:67:eb:12:e0:
5f:43:1e:6b:8d:90:88:d7:48:c5:ae:d0:d5:be:a3:
df:a2:f3:f7:1d:41:26:13:3e:2a:78:59:a8:d1:71:
d9:c5:0e:1d:79:f0:65:8c:16:5f:1d:1a:a0:0c:84:
57:04:83:38:bb:56:94:2e:aa:80:26:d9:fc:21:bb:
a4:e0:92:3b:51:ae:93:9b:8c:c6:91:7e:04:4d:1e:
c9:97:86:09:c7:57:90:ef:c9:4d:91:18:16:4b:c1:
45:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:07:5C:DA:27:19:28:1B:66:5C:E3:8A:E3:48:7C:75:AE:56:D3:9A
X509v3 Authority Key Identifier:
keyid:1D:01:F4:DF:FD:6F:BA:66:CD:F8:C3:74:C9:B0:F0:47:55:27:05:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HQH03_1vumbN-MN0ybDwR1UnBd0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/b80384-f2fe-4456-9cae-fe4a02caef7f/1/Pgdc2icZKBtmXOOK40h8da5W05o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/b80384-f2fe-4456-9cae-fe4a02caef7f/1/HQH03_1vumbN-MN0ybDwR1UnBd0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.164.128.0-62.164.199.255
193.108.169.0/24
194.164.97.0/24
194.164.114.0/24
194.164.181.0/24
195.200.0.0/19
213.254.171.0/24
213.254.178.0/24
213.254.185.0/24
Signature Algorithm: sha256WithRSAEncryption
28:95:d6:21:7e:d0:b2:93:4b:4e:0a:13:5d:29:74:eb:b5:11:
35:00:6f:b7:76:6d:98:3a:34:23:9f:48:10:c8:74:e0:79:87:
8d:63:e5:5c:ce:38:0a:a5:5b:49:45:3f:7d:60:b1:85:67:df:
ff:75:00:16:0a:41:12:63:f7:c8:fc:67:19:e2:07:f2:ca:81:
3b:91:5d:a0:76:64:c0:bd:ec:f5:b4:43:4f:48:be:c8:24:b7:
fb:73:97:d9:ee:f1:11:48:ed:a6:ed:20:7c:47:71:99:c2:22:
e1:6a:62:f2:03:b4:18:ba:e7:18:1c:ac:19:a6:4c:46:b6:65:
66:ce:5c:d7:bf:92:70:94:55:96:1a:cd:85:4b:28:23:b0:9d:
ba:ea:3c:a4:65:c1:27:48:99:ee:20:f0:d6:bb:78:66:5a:03:
75:f7:a7:d1:33:41:d0:1a:79:c6:e4:d4:f1:3a:fd:c5:76:e9:
41:30:eb:dc:8f:91:48:3a:59:21:4b:1e:43:6e:9e:7f:4c:6f:
a0:0d:40:08:d8:11:b1:74:61:b8:3a:9d:88:a9:8d:42:36:32:
57:a0:80:ec:0b:d4:da:c9:6d:68:fb:29:1c:b9:0c:b8:91:f8:
92:1c:08:31:48:fe:e1:77:08:15:61:29:84:d2:31:97:72:3e:
39:22:e0:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:54:51 2024 by rpki-client on console-ams.rpki-client.org