Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/b80384-f2fe-4456-9cae-fe4a02caef7f/1/hHf9faipJWRx2hc44qwp35MYlvc.roa
File: hHf9faipJWRx2hc44qwp35MYlvc.roa (raw, json)
Hash identifier: ZrRNBk7+Od4QY/jZik6GvCLmXI7ecfAPLs/A8OzuHAk=
Subject key identifier: 84:77:FD:7D:A8:A9:25:64:71:DA:17:38:E2:AC:29:DF:93:18:96:F7
Certificate issuer: /CN=1d01f4dffd6fba66cdf8c374c9b0f047552705dd
Certificate serial: 018C62F758023F33CACC651C6787E979CDE1
Authority key identifier: 1D:01:F4:DF:FD:6F:BA:66:CD:F8:C3:74:C9:B0:F0:47:55:27:05:DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HQH03_1vumbN-MN0ybDwR1UnBd0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/b80384-f2fe-4456-9cae-fe4a02caef7f/1/hHf9faipJWRx2hc44qwp35MYlvc.roa
Signing time: Wed 13 Dec 2023 11:37:06 +0000
ROA not before: Wed 13 Dec 2023 11:37:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 8851
IP address blocks: 194.164.114.0/24 maxlen: 24
217.29.192.0/22 maxlen: 22
62.164.128.0/17 maxlen: 17
62.164.144.0/21 maxlen: 21
194.164.144.0/24 maxlen: 24
194.164.140.0/22 maxlen: 22
194.164.80.0/22 maxlen: 22
194.164.85.0/24 maxlen: 24
194.164.86.0/24 maxlen: 24
194.164.97.0/24 maxlen: 24
194.164.223.0/24 maxlen: 24
194.164.232.0/24 maxlen: 24
194.164.231.0/24 maxlen: 24
194.164.238.0/24 maxlen: 24
194.164.241.0/24 maxlen: 24
194.164.242.0/23 maxlen: 23
194.164.247.0/24 maxlen: 24
195.26.224.0/19 maxlen: 19
195.184.228.0/23 maxlen: 23
194.164.181.0/24 maxlen: 24
195.184.236.0/24 maxlen: 24
195.184.245.0/24 maxlen: 24
212.32.56.0/21 maxlen: 21
212.32.54.0/23 maxlen: 23
212.32.64.0/18 maxlen: 18
213.254.160.0/19 maxlen: 19
212.32.0.0/17 maxlen: 17
212.32.0.0/20 maxlen: 20
212.32.16.0/21 maxlen: 21
212.32.24.0/22 maxlen: 22
212.32.28.0/23 maxlen: 23
212.32.32.0/21 maxlen: 21
212.32.42.0/23 maxlen: 23
212.32.44.0/23 maxlen: 23
212.32.48.0/22 maxlen: 22
212.56.57.0/24 maxlen: 24
194.164.2.0/24 maxlen: 24
212.56.56.0/23 maxlen: 23
212.56.60.0/22 maxlen: 22
194.164.12.0/24 maxlen: 24
194.164.38.0/24 maxlen: 24
217.154.0.0/16 maxlen: 16
212.56.48.0/21 maxlen: 21
62.169.128.0/20 maxlen: 20
62.169.144.0/22 maxlen: 22
62.169.148.0/23 maxlen: 23
62.169.150.0/24 maxlen: 24
62.169.152.0/22 maxlen: 22
62.169.156.0/24 maxlen: 24
62.169.158.0/23 maxlen: 23
193.108.168.0/23 maxlen: 23
194.62.44.0/22 maxlen: 22
195.200.0.0/19 maxlen: 19
86.54.0.0/16 maxlen: 16
212.47.80.0/23 maxlen: 23
212.47.84.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:62:f7:58:02:3f:33:ca:cc:65:1c:67:87:e9:79:cd:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1d01f4dffd6fba66cdf8c374c9b0f047552705dd
Validity
Not Before: Dec 13 11:37:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8477fd7da8a9256471da1738e2ac29df931896f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:6d:1a:8b:9f:0c:28:2e:e4:f4:98:07:1a:04:
9c:8d:54:07:71:da:dc:01:4f:64:bc:bd:54:55:69:
35:7c:ed:92:36:2a:f4:0b:55:e9:fd:0d:dc:63:8e:
95:43:4d:b4:9c:46:25:0b:f8:a7:f3:b7:dc:cf:78:
ab:2c:ca:ca:e9:d5:ce:36:ee:2c:ae:05:84:83:69:
9d:f4:ff:08:33:3d:ee:a7:1d:89:18:6d:c6:bd:6b:
d9:20:20:45:c7:51:71:0e:12:05:19:7b:61:83:a9:
4e:e3:48:9e:79:bb:d1:7d:b2:39:46:6b:0f:65:f9:
12:32:ca:59:42:03:79:3e:4b:dc:8d:f6:80:fe:15:
1d:4d:10:57:d5:de:fd:cc:d4:66:ab:1f:35:d1:c8:
e3:d9:d8:24:f4:23:62:53:0d:ad:f3:87:47:db:a3:
05:38:d2:00:13:39:f4:2c:57:a1:e5:d2:24:4f:58:
e4:b8:5a:f8:0f:14:fe:49:8f:48:76:d6:ed:36:71:
ac:82:39:d8:67:a3:61:b7:d9:68:34:25:2b:1a:ce:
33:e8:6f:03:bd:f4:60:2a:f2:17:55:5a:dd:22:d8:
14:79:63:48:27:16:93:ef:bf:6c:dc:14:f8:dd:b3:
2c:f0:d8:28:c0:77:d2:ee:cf:41:0e:5b:18:03:23:
b1:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:77:FD:7D:A8:A9:25:64:71:DA:17:38:E2:AC:29:DF:93:18:96:F7
X509v3 Authority Key Identifier:
keyid:1D:01:F4:DF:FD:6F:BA:66:CD:F8:C3:74:C9:B0:F0:47:55:27:05:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HQH03_1vumbN-MN0ybDwR1UnBd0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/b80384-f2fe-4456-9cae-fe4a02caef7f/1/hHf9faipJWRx2hc44qwp35MYlvc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/b80384-f2fe-4456-9cae-fe4a02caef7f/1/HQH03_1vumbN-MN0ybDwR1UnBd0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.164.128.0/17
62.169.128.0-62.169.150.255
62.169.152.0-62.169.156.255
62.169.158.0/23
86.54.0.0/16
193.108.168.0/23
194.62.44.0/22
194.164.2.0/24
194.164.12.0/24
194.164.38.0/24
194.164.80.0/22
194.164.85.0-194.164.86.255
194.164.97.0/24
194.164.114.0/24
194.164.140.0-194.164.144.255
194.164.181.0/24
194.164.223.0/24
194.164.231.0-194.164.232.255
194.164.238.0/24
194.164.241.0-194.164.243.255
194.164.247.0/24
195.26.224.0/19
195.184.228.0/23
195.184.236.0/24
195.184.245.0/24
195.200.0.0/19
212.32.0.0/17
212.47.80.0/23
212.47.84.0/24
212.56.48.0-212.56.57.255
212.56.60.0/22
213.254.160.0/19
217.29.192.0/22
217.154.0.0/16
Signature Algorithm: sha256WithRSAEncryption
16:30:4e:e0:d7:aa:01:21:25:9c:28:dc:3d:a7:28:2b:31:48:
f4:09:20:70:7b:a9:1c:d0:d2:c3:32:45:c3:9f:04:a8:3e:0d:
21:c9:41:58:dc:6b:dd:c1:3c:a6:3e:f9:d2:82:2c:0f:fe:75:
11:83:55:c0:b5:10:b9:d3:de:f3:86:a4:ab:30:cf:1d:c0:be:
ce:0e:f4:0c:33:81:9b:fa:f1:d9:3a:cd:4c:67:47:0e:de:f4:
71:40:66:92:fb:cf:d6:a5:31:64:c6:81:f7:4a:29:32:8f:b0:
cb:01:88:5b:ff:b1:52:53:fb:5c:23:fe:88:9f:8d:fe:8c:54:
90:ec:7b:83:95:de:ae:12:bf:af:f3:77:bc:63:61:94:3a:37:
2e:72:68:56:69:b6:8d:c7:cf:22:9a:d2:c4:63:5b:1a:4e:3f:
47:ee:89:04:a8:d2:6e:66:2c:b8:bd:ad:40:16:2a:48:c1:73:
d5:1c:7d:bf:d5:d1:eb:93:a7:19:05:dc:4b:30:d9:a1:34:19:
08:32:87:e8:ef:03:23:5f:82:00:5f:01:88:6b:ee:ab:01:85:
b5:1b:f2:62:72:db:0b:7a:18:bc:8e:09:6a:48:b1:a4:54:f8:
40:0e:b8:b9:66:1b:4f:b9:eb:6c:83:c2:14:d3:d9:01:07:cf:
a0:be:ee:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 17:34:01 2025 by rpki-client