Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/8ea9b9-3b6e-4fdf-b5d1-f04fdcc09e51/1/fhB-1xG3dwnVD85V0ix-nESzFNw.roa
File: fhB-1xG3dwnVD85V0ix-nESzFNw.roa (raw, json)
Hash identifier: kvn0xjyOIvw1exMiWfPAMrGKdz9Y7zpDCoWQ0umg8gY=
Subject key identifier: 7E:10:7E:D7:11:B7:77:09:D5:0F:CE:55:D2:2C:7E:9C:44:B3:14:DC
Certificate issuer: /CN=992b86095ce558d2e9618728a44228a27be9098f
Certificate serial: 0183EF435AF392B74FE410AC7F779BDB03F3
Authority key identifier: 99:2B:86:09:5C:E5:58:D2:E9:61:87:28:A4:42:28:A2:7B:E9:09:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mSuGCVzlWNLpYYcopEIoonvpCY8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/8ea9b9-3b6e-4fdf-b5d1-f04fdcc09e51/1/fhB-1xG3dwnVD85V0ix-nESzFNw.roa
Signing time: Wed 19 Oct 2022 08:01:52 +0000
ROA not before: Wed 19 Oct 2022 08:01:52 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 209737
IP address blocks: 166.108.164.0/22 maxlen: 24
166.108.192.0/22 maxlen: 24
166.108.208.0/22 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:ef:43:5a:f3:92:b7:4f:e4:10:ac:7f:77:9b:db:03:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=992b86095ce558d2e9618728a44228a27be9098f
Validity
Not Before: Oct 19 08:01:52 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=7e107ed711b77709d50fce55d22c7e9c44b314dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:28:ff:10:96:ab:a1:85:eb:98:a8:55:ab:e3:
28:d2:b9:e5:f1:4d:1c:2b:3b:c7:fc:94:5c:19:6a:
a9:02:2c:9a:0c:c1:97:1b:21:79:2a:93:36:40:9c:
e0:97:fb:1e:e1:cd:b8:32:19:ad:29:61:4e:f2:9e:
8e:5c:82:58:e9:c9:dc:96:93:66:f9:b9:65:29:dc:
38:7d:74:55:36:47:12:98:5a:f3:d5:b7:76:22:fc:
c6:8a:c5:1f:34:ce:8b:9f:86:d9:68:b3:f2:01:0d:
39:4d:41:5f:61:a6:db:4c:d7:f3:bf:bf:05:24:48:
fd:ac:c6:21:60:fe:a7:ae:ea:2d:7c:5e:d1:05:7b:
48:01:54:ef:8a:b4:5c:af:b1:2e:95:68:1e:a7:a1:
31:01:01:b9:8b:2f:04:94:b8:66:ee:2b:1d:42:d2:
6a:fb:61:dd:2e:82:fc:01:53:99:b9:91:9b:3f:3c:
e5:ea:6e:99:98:59:ff:62:40:8c:46:31:8a:56:0d:
52:82:ef:8e:83:f0:dd:bb:2e:49:43:ee:a2:be:c9:
1a:ab:33:0d:5b:c4:b5:a3:4f:e7:36:6d:bb:9d:bf:
bf:40:63:20:55:d9:11:f6:aa:c5:c3:38:40:b1:1e:
65:87:45:4c:40:ec:ed:7a:92:cc:56:07:b9:09:13:
31:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:10:7E:D7:11:B7:77:09:D5:0F:CE:55:D2:2C:7E:9C:44:B3:14:DC
X509v3 Authority Key Identifier:
keyid:99:2B:86:09:5C:E5:58:D2:E9:61:87:28:A4:42:28:A2:7B:E9:09:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mSuGCVzlWNLpYYcopEIoonvpCY8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/8ea9b9-3b6e-4fdf-b5d1-f04fdcc09e51/1/fhB-1xG3dwnVD85V0ix-nESzFNw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/8ea9b9-3b6e-4fdf-b5d1-f04fdcc09e51/1/mSuGCVzlWNLpYYcopEIoonvpCY8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
166.108.164.0/22
166.108.192.0/22
166.108.208.0/22
Signature Algorithm: sha256WithRSAEncryption
21:be:b5:65:09:73:80:34:f8:cd:1d:bb:48:5e:b4:ab:e4:78:
cd:12:72:33:48:52:0a:d9:48:e8:77:54:63:ee:4c:8d:09:7b:
d3:9b:d0:69:8c:7b:63:3f:9b:78:da:55:02:91:d0:58:7c:48:
f3:88:88:fd:5f:8b:dd:a6:17:c6:42:67:4c:ea:b3:0d:eb:75:
e9:94:65:2c:f4:81:ce:30:b6:ee:ab:f7:aa:cc:4f:37:1c:00:
89:45:82:7f:89:ef:95:36:d1:68:7e:5a:82:87:c3:be:c2:50:
10:f4:91:32:1e:ab:b1:04:e3:81:51:87:94:7f:24:44:c7:96:
86:50:6e:84:56:f2:ec:35:cc:f3:f2:29:cc:ab:d8:20:52:75:
8e:10:ea:63:5e:3c:05:40:dc:fa:64:de:8c:18:38:7b:15:dc:
0b:4f:5a:76:cf:d0:75:a8:5f:9b:86:ae:41:3f:17:24:90:a1:
62:c6:34:59:57:30:a7:2d:3a:c3:53:68:1a:7a:44:74:b8:01:
78:b9:8d:32:9a:ab:60:1c:63:5b:f1:d1:ef:d0:72:26:55:99:
a9:ff:08:f2:01:4d:7b:1f:f7:48:c7:51:03:84:f9:a8:cb:3f:
d9:a1:e8:c2:12:77:f0:ed:19:25:8a:b4:8f:8f:c8:dd:d3:4c:
9d:4a:b8:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:40:46 2023 by rpki-client on console.sobornost.net