Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/b80384-f2fe-4456-9cae-fe4a02caef7f/1/pc4cb6Kk8f8KD2KB15ER8rCmBJg.roa
File: pc4cb6Kk8f8KD2KB15ER8rCmBJg.roa (raw, json)
Hash identifier: 2nmCwRa7or1IcgXogbbbObyhrjEegIc9d02jo6tZY6M=
Subject key identifier: A5:CE:1C:6F:A2:A4:F1:FF:0A:0F:62:81:D7:91:11:F2:B0:A6:04:98
Certificate issuer: /CN=1d01f4dffd6fba66cdf8c374c9b0f047552705dd
Certificate serial: 018DC6806840A060C71EA71BC1FE4CC6247E
Authority key identifier: 1D:01:F4:DF:FD:6F:BA:66:CD:F8:C3:74:C9:B0:F0:47:55:27:05:DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HQH03_1vumbN-MN0ybDwR1UnBd0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/b80384-f2fe-4456-9cae-fe4a02caef7f/1/pc4cb6Kk8f8KD2KB15ER8rCmBJg.roa
Signing time: Tue 20 Feb 2024 12:32:00 +0000
ROA not before: Tue 20 Feb 2024 12:32:00 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 206509
IP address blocks: 62.164.128.0/18 maxlen: 18
62.164.144.0/21 maxlen: 21
62.164.192.0/21 maxlen: 21
86.54.0.0/16 maxlen: 16
193.108.169.0/24 maxlen: 24
194.164.97.0/24 maxlen: 24
194.164.114.0/24 maxlen: 24
194.164.181.0/24 maxlen: 24
195.200.0.0/19 maxlen: 19
213.254.171.0/24 maxlen: 24
213.254.178.0/24 maxlen: 24
213.254.185.0/24 maxlen: 24
217.154.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:c6:80:68:40:a0:60:c7:1e:a7:1b:c1:fe:4c:c6:24:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1d01f4dffd6fba66cdf8c374c9b0f047552705dd
Validity
Not Before: Feb 20 12:32:00 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a5ce1c6fa2a4f1ff0a0f6281d79111f2b0a60498
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:97:4b:d3:77:81:09:93:c7:bd:4e:fc:c5:fe:
f2:91:df:d3:eb:8f:4c:ff:b7:4d:c2:e3:fe:32:91:
13:23:65:fc:da:c0:0d:e4:9b:e9:c2:79:d8:8f:e0:
4e:9a:4d:5f:4e:ef:8a:6b:b1:38:c9:3b:c3:4b:3f:
34:51:ea:39:a8:a5:aa:2a:35:ca:ca:c6:3d:d1:7d:
d5:e5:66:45:2e:82:b1:22:ce:69:27:79:d8:9f:99:
74:a6:69:65:4d:62:dc:58:92:fe:9f:11:28:8b:aa:
ee:36:ec:f4:20:7b:a2:33:f9:2a:50:d0:d4:b6:3a:
44:f3:0f:89:29:67:ea:d3:02:bd:fe:a2:7b:ab:d4:
08:b5:d4:3f:a4:80:46:96:94:87:bd:e0:8a:8e:0f:
c6:ac:53:a5:bc:62:b6:27:aa:7b:3c:bc:78:63:8e:
70:3a:80:15:6f:c9:91:27:7c:b6:fd:9b:be:b8:60:
b3:b8:30:a0:d1:a5:7f:43:9c:ee:55:04:3f:d5:26:
fa:9d:e9:27:39:aa:f2:b7:30:88:f2:64:39:09:e8:
cf:e0:26:f9:63:d8:ae:92:35:37:e6:99:d2:f4:5f:
96:4d:0b:be:b4:57:ba:36:2d:2d:76:af:e2:e1:30:
e0:da:3f:44:53:0c:31:1b:35:aa:dd:ee:94:a1:e9:
4e:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:CE:1C:6F:A2:A4:F1:FF:0A:0F:62:81:D7:91:11:F2:B0:A6:04:98
X509v3 Authority Key Identifier:
keyid:1D:01:F4:DF:FD:6F:BA:66:CD:F8:C3:74:C9:B0:F0:47:55:27:05:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HQH03_1vumbN-MN0ybDwR1UnBd0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/b80384-f2fe-4456-9cae-fe4a02caef7f/1/pc4cb6Kk8f8KD2KB15ER8rCmBJg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/b80384-f2fe-4456-9cae-fe4a02caef7f/1/HQH03_1vumbN-MN0ybDwR1UnBd0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.164.128.0-62.164.199.255
86.54.0.0/16
193.108.169.0/24
194.164.97.0/24
194.164.114.0/24
194.164.181.0/24
195.200.0.0/19
213.254.171.0/24
213.254.178.0/24
213.254.185.0/24
217.154.0.0/16
Signature Algorithm: sha256WithRSAEncryption
7d:c6:2b:45:0a:f3:57:fc:c7:9f:2c:da:4e:91:0c:39:e9:fe:
81:02:db:48:6f:d7:91:5b:fc:e9:2b:76:07:f0:be:2b:c9:0c:
55:86:d5:5f:af:f6:09:5d:a2:62:79:52:58:63:81:70:db:73:
0c:32:9b:47:10:46:4b:64:e6:55:4b:12:46:ea:47:f6:6b:2c:
6f:98:7f:df:46:6a:aa:b7:a6:ea:a4:6d:34:32:e8:98:35:15:
eb:f0:83:ea:75:df:bc:ba:89:35:35:47:47:d0:a0:e6:20:57:
b0:82:af:3a:c3:86:ec:69:19:6d:08:33:3b:ac:64:35:ef:72:
2a:2e:5d:85:6b:b8:55:de:ac:82:bb:ac:20:c1:27:dd:d3:e0:
60:d3:88:f4:63:eb:7d:b9:7e:61:4f:c9:95:20:ce:b1:83:50:
25:82:7d:66:eb:b9:12:53:e8:84:13:5f:1e:96:2b:9c:f3:76:
b3:41:24:cd:0c:f7:a8:87:9b:ba:77:a1:19:c1:01:e7:d6:da:
26:90:38:36:c2:15:90:4f:0e:55:29:40:8a:36:6c:49:a4:c7:
67:7b:6b:97:cb:65:18:8f:d0:8b:f0:da:f8:21:f4:0a:4b:04:
46:fb:4e:40:2d:a1:c6:43:d7:72:8f:3c:8f:9c:5b:81:3c:a7:
5a:51:d4:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 11:28:05 2025 by rpki-client