Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/b80384-f2fe-4456-9cae-fe4a02caef7f/1/U8-9SDM76Phc85f-Y2cdqqr9VZ8.roa
File: U8-9SDM76Phc85f-Y2cdqqr9VZ8.roa (raw, json)
Hash identifier: h1JxOum3YPMFx2b2a1TvM57fsYCsUTCJVNFQeA6byi4=
Subject key identifier: 53:CF:BD:48:33:3B:E8:F8:5C:F3:97:FE:63:67:1D:AA:AA:FD:55:9F
Certificate issuer: /CN=1d01f4dffd6fba66cdf8c374c9b0f047552705dd
Certificate serial: 01874C154F8FC7556D135D6428397338D89D
Authority key identifier: 1D:01:F4:DF:FD:6F:BA:66:CD:F8:C3:74:C9:B0:F0:47:55:27:05:DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HQH03_1vumbN-MN0ybDwR1UnBd0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/b80384-f2fe-4456-9cae-fe4a02caef7f/1/U8-9SDM76Phc85f-Y2cdqqr9VZ8.roa
Signing time: Tue 04 Apr 2023 11:44:37 +0000
ROA not before: Tue 04 Apr 2023 11:44:37 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 8851
IP address blocks: 62.169.128.0/19 maxlen: 19
217.29.192.0/22 maxlen: 22
62.164.128.0/17 maxlen: 17
213.254.160.0/19 maxlen: 19
62.164.144.0/21 maxlen: 21
212.32.0.0/17 maxlen: 17
194.154.32.0/19 maxlen: 19
193.108.168.0/23 maxlen: 23
212.47.64.0/19 maxlen: 19
86.54.0.0/16 maxlen: 16
194.164.0.0/16 maxlen: 16
194.62.44.0/22 maxlen: 22
217.154.0.0/16 maxlen: 16
195.26.224.0/19 maxlen: 19
195.200.0.0/19 maxlen: 19
195.184.224.0/19 maxlen: 19
212.56.48.0/20 maxlen: 20
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:4c:15:4f:8f:c7:55:6d:13:5d:64:28:39:73:38:d8:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1d01f4dffd6fba66cdf8c374c9b0f047552705dd
Validity
Not Before: Apr 4 11:44:37 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=53cfbd48333be8f85cf397fe63671daaaafd559f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:81:d2:70:0a:3f:0e:3b:64:80:ff:25:f3:11:
98:5c:76:cd:a5:dd:2b:6e:22:46:76:7e:c6:16:d1:
c2:c4:4e:29:83:14:5f:b0:4e:65:73:39:4c:33:7b:
01:38:7e:f5:e4:0b:81:aa:3c:cf:f0:47:63:01:be:
5e:28:c3:9c:1b:98:93:c1:00:5c:ba:07:b6:9f:94:
65:5f:71:e2:05:d8:1c:c4:ff:a0:03:5c:d6:a0:43:
c7:65:06:2a:70:53:d5:bc:d8:ab:17:80:ec:87:6b:
7b:d0:31:49:4a:b9:c3:31:eb:38:ee:d3:7c:01:f7:
ca:33:5b:88:01:11:88:b0:4b:f1:33:e0:d7:24:d4:
f8:d4:e1:21:87:38:bc:0b:f5:aa:22:2d:c1:02:f4:
8d:1f:68:1f:e8:4d:f7:e1:72:ba:46:1d:3e:65:43:
d4:f8:12:c3:89:a4:b2:1f:ee:db:d0:3f:52:1c:97:
af:83:36:92:72:dd:04:32:5b:44:78:1f:be:61:9f:
d6:16:7c:a4:a5:36:16:78:91:fc:29:cf:04:84:55:
db:1f:6e:dd:84:36:e6:a4:08:fd:a5:3c:f7:3f:95:
32:f8:8d:21:4b:22:b3:77:44:07:c0:ec:9d:a8:77:
81:cf:6d:70:0c:c2:c4:df:cf:a6:10:55:3d:ac:4e:
11:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:CF:BD:48:33:3B:E8:F8:5C:F3:97:FE:63:67:1D:AA:AA:FD:55:9F
X509v3 Authority Key Identifier:
keyid:1D:01:F4:DF:FD:6F:BA:66:CD:F8:C3:74:C9:B0:F0:47:55:27:05:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HQH03_1vumbN-MN0ybDwR1UnBd0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/b80384-f2fe-4456-9cae-fe4a02caef7f/1/U8-9SDM76Phc85f-Y2cdqqr9VZ8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/b80384-f2fe-4456-9cae-fe4a02caef7f/1/HQH03_1vumbN-MN0ybDwR1UnBd0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.164.128.0/17
62.169.128.0/19
86.54.0.0/16
193.108.168.0/23
194.62.44.0/22
194.154.32.0/19
194.164.0.0/16
195.26.224.0/19
195.184.224.0/19
195.200.0.0/19
212.32.0.0/17
212.47.64.0/19
212.56.48.0/20
213.254.160.0/19
217.29.192.0/22
217.154.0.0/16
Signature Algorithm: sha256WithRSAEncryption
aa:f6:71:7e:d1:f2:a3:ad:9c:bd:a2:2b:70:c1:19:57:0a:2c:
52:91:e6:06:91:d6:56:d4:26:8d:45:01:04:41:03:e9:46:e5:
57:a3:ba:49:7c:60:86:49:27:ff:69:b5:08:db:12:04:36:ef:
b6:8c:da:be:f6:ca:3c:fd:9c:e3:f7:82:e9:11:a9:3e:7a:27:
c2:ae:72:a5:2b:ea:e4:d7:15:51:ca:7b:74:7c:c4:26:84:71:
cb:52:4a:a3:61:11:34:c4:c2:24:07:3e:d0:22:07:ed:a1:7b:
87:11:6a:4c:5b:95:c9:a7:43:14:a4:48:d9:77:41:fb:fa:6f:
54:cd:aa:86:89:dd:25:d1:5c:f5:e0:b5:96:8d:e4:b9:51:68:
f3:3f:bc:46:00:ed:43:5f:d8:3a:bb:19:af:01:2c:7e:61:95:
11:d8:41:5d:76:a6:77:26:31:8d:eb:2f:06:7b:45:2b:73:10:
e5:e1:f4:3f:d0:24:75:6f:cd:e0:8d:9a:85:c6:cc:b0:92:0e:
80:69:ab:f3:47:47:4c:34:b8:1d:6d:9b:5a:58:63:98:0c:88:
6c:03:f8:af:aa:f3:25:f9:59:1f:6d:86:e1:05:1b:d3:57:01:
eb:05:ba:fe:74:8c:f6:90:fb:cf:ca:51:09:ab:d7:3a:88:e8:
28:e9:e2:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:25:30 2025 by rpki-client