Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/42041d-5931-4824-9254-161f342387d1/1/9j8MiSjnPfORjSruFN_viDvuyOU.roa
File: 9j8MiSjnPfORjSruFN_viDvuyOU.roa (raw, json)
Hash identifier: Z8RCDZASzf8XgiHEvr3BYGDEJFEC7KZLuLeGdKyHdBA=
Subject key identifier: F6:3F:0C:89:28:E7:3D:F3:91:8D:2A:EE:14:DF:EF:88:3B:EE:C8:E5
Certificate issuer: /CN=ba6ed0fb7b320832ac1580534c7b263f304e981b
Certificate serial: 01856F429D72137F91E17BA6FD800DD241FA
Authority key identifier: BA:6E:D0:FB:7B:32:08:32:AC:15:80:53:4C:7B:26:3F:30:4E:98:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/um7Q-3syCDKsFYBTTHsmPzBOmBs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/42041d-5931-4824-9254-161f342387d1/1/9j8MiSjnPfORjSruFN_viDvuyOU.roa
Signing time: Sun 01 Jan 2023 21:35:14 +0000
ROA not before: Sun 01 Jan 2023 21:35:14 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 39779
IP address blocks: 185.35.184.0/22 maxlen: 22
46.226.8.0/21 maxlen: 21
193.93.220.0/22 maxlen: 22
62.122.248.0/21 maxlen: 21
91.192.220.0/22 maxlen: 22
185.7.60.0/22 maxlen: 22
91.189.168.0/21 maxlen: 21
91.189.168.0/24 maxlen: 24
2a02:2690::/32 maxlen: 32
2a01:488:bb06::/48 maxlen: 48
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:42:9d:72:13:7f:91:e1:7b:a6:fd:80:0d:d2:41:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba6ed0fb7b320832ac1580534c7b263f304e981b
Validity
Not Before: Jan 1 21:35:14 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f63f0c8928e73df3918d2aee14dfef883beec8e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:1e:55:63:33:0c:b9:ea:75:17:96:d8:ea:f5:
21:d1:a7:08:78:2e:f9:46:d0:9f:c9:69:61:90:95:
88:d8:07:90:a7:27:e3:9c:3f:b4:7c:ea:52:69:c6:
f1:9d:03:e2:f5:ee:7c:8a:87:2a:89:d2:80:b8:0d:
c4:9d:a9:ed:fb:a5:66:0d:15:6a:35:f8:30:c8:17:
00:9b:c1:a9:c9:4c:dd:05:20:90:95:7a:f2:ec:6f:
3c:8b:65:f3:2f:9f:4c:61:9b:3e:a9:47:42:8b:8e:
5a:ce:9f:2d:a4:f9:90:87:26:54:d5:62:fd:f6:c1:
cd:82:98:ca:13:9c:35:52:ae:5b:20:6f:20:ef:4c:
ae:9a:9b:63:03:4e:f8:4d:9d:15:cb:6e:9d:0e:8f:
82:dd:54:6e:09:b0:c1:95:f8:51:9c:4a:19:9b:23:
cf:2e:43:64:b6:93:dd:50:38:22:7c:12:aa:2c:1c:
e9:d2:3c:c9:8d:aa:26:a6:73:21:99:5f:7c:bf:77:
3d:cd:fa:89:05:e9:6e:39:f3:72:44:28:61:4f:fd:
68:e0:cc:6f:85:d2:da:66:e1:8e:a5:fc:7a:b7:a7:
01:01:ec:74:98:14:7f:6b:ff:0a:80:06:6e:77:c7:
f1:04:d6:1b:fd:91:45:96:b6:62:25:b9:f5:a5:0f:
3d:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:3F:0C:89:28:E7:3D:F3:91:8D:2A:EE:14:DF:EF:88:3B:EE:C8:E5
X509v3 Authority Key Identifier:
keyid:BA:6E:D0:FB:7B:32:08:32:AC:15:80:53:4C:7B:26:3F:30:4E:98:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/um7Q-3syCDKsFYBTTHsmPzBOmBs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/42041d-5931-4824-9254-161f342387d1/1/9j8MiSjnPfORjSruFN_viDvuyOU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/42041d-5931-4824-9254-161f342387d1/1/um7Q-3syCDKsFYBTTHsmPzBOmBs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.226.8.0/21
62.122.248.0/21
91.189.168.0/21
91.192.220.0/22
185.7.60.0/22
185.35.184.0/22
193.93.220.0/22
IPv6:
2a01:488:bb06::/48
2a02:2690::/32
Signature Algorithm: sha256WithRSAEncryption
a5:eb:a0:01:43:2d:b2:c3:b4:2d:54:30:f4:50:af:5b:96:97:
6b:47:df:49:3e:ee:5e:56:e4:37:cc:27:a1:3e:f7:79:d4:68:
bc:a5:a6:9e:92:aa:93:a4:f7:c2:5b:60:dd:c5:c8:ea:0b:0a:
9e:90:1b:4f:e0:7c:c6:5a:9e:a8:e7:88:e9:8b:88:69:75:a2:
61:43:35:ca:77:a5:4b:fe:e8:3c:78:65:66:0f:d9:43:ef:81:
41:0d:21:90:01:fd:01:72:d7:51:e9:2e:ba:03:bb:0f:07:50:
57:21:ed:64:b1:5c:f1:7c:2f:d6:38:77:d0:1f:fc:73:85:f9:
c5:ad:42:63:b7:1c:65:6f:b3:11:e0:40:00:ef:20:87:ec:58:
ed:a4:15:af:f1:7c:35:83:ae:41:66:da:05:b7:18:93:df:c2:
bd:b3:eb:d2:90:15:b3:a3:7b:56:64:73:17:a9:34:e0:97:bc:
41:ec:9e:3c:e7:5a:ee:4d:0d:2d:e2:0c:74:f1:5e:57:53:4c:
36:60:c8:92:fa:26:1f:ff:85:40:a1:5e:d4:38:2b:e8:59:69:
0e:15:2d:09:c2:75:ce:46:30:41:59:1a:4b:2b:99:df:41:70:
bb:fb:23:ff:dc:16:79:82:c7:6c:ea:ee:1f:54:de:f2:71:5d:
c7:58:01:cd
-----BEGIN CERTIFICATE-----
MIIFOTCCBCGgAwIBAgISAYVvQp1yE3+R4Xum/YAN0kH6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJhNmVkMGZiN2IzMjA4MzJhYzE1ODA1MzRjN2IyNjNmMzA0
ZTk4MWIwHhcNMjMwMTAxMjEzNTE0WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmNjNmMGM4OTI4ZTczZGYzOTE4ZDJhZWUxNGRmZWY4ODNiZWVjOGU1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgR5VYzMMuep1F5bY6vUh0acIeC75
RtCfyWlhkJWI2AeQpyfjnD+0fOpSacbxnQPi9e58iocqidKAuA3Enant+6VmDRVq
NfgwyBcAm8GpyUzdBSCQlXry7G88i2XzL59MYZs+qUdCi45azp8tpPmQhyZU1WL9
9sHNgpjKE5w1Uq5bIG8g70yumptjA074TZ0Vy26dDo+C3VRuCbDBlfhRnEoZmyPP
LkNktpPdUDgifBKqLBzp0jzJjaompnMhmV98v3c9zfqJBeluOfNyRChhT/1o4Mxv
hdLaZuGOpfx6t6cBAex0mBR/a/8KgAZud8fxBNYb/ZFFlrZiJbn1pQ89GwIDAQAB
o4ICRTCCAkEwHQYDVR0OBBYEFPY/DIko5z3zkY0q7hTf74g77sjlMB8GA1UdIwQY
MBaAFLpu0Pt7MggyrBWAU0x7Jj8wTpgbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdW03US0zc3lDREtzRllCVFRIc21QekJPbUJzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMC80MjA0MWQtNTkzMS00ODI0LTkyNTQt
MTYxZjM0MjM4N2QxLzEvOWo4TWlTam5QZk9SalNydUZOX3ZpRHZ1eU9VLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMC80MjA0MWQtNTkzMS00ODI0LTkyNTQtMTYxZjM0MjM4N2Qx
LzEvdW03US0zc3lDREtzRllCVFRIc21QekJPbUJzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMFsGCCsGAQUFBwEHAQH/BEwwSjAwBAIAATAqAwQDLuIIAwQD
Pnr4AwQDW72oAwQCW8DcAwQCuQc8AwQCuSO4AwQCwV3cMBYEAgACMBADBwAqAQSI
uwYDBQAqAiaQMA0GCSqGSIb3DQEBCwUAA4IBAQCl66ABQy2yw7QtVDD0UK9blpdr
R99JPu5eVuQ3zCehPvd51Gi8paaekqqTpPfCW2DdxcjqCwqekBtP4HzGWp6o54jp
i4hpdaJhQzXKd6VL/ug8eGVmD9lD74FBDSGQAf0BctdR6S66A7sPB1BXIe1ksVzx
fC/WOHfQH/xzhfnFrUJjtxxlb7MR4EAA7yCH7FjtpBWv8Xw1g65BZtoFtxiT38K9
s+vSkBWzo3tWZHMXqTTgl7xB7J4851ruTQ0t4gx08V5XU0w2YMiS+iYf/4VAoV7U
OCvoWWkOFS0JwnXORjBBWRpLK5nfQXC7+yP/3BZ5gsds6u4fVN7ycV3HWAHN
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:22:03 2024 by rpki-client on console-fra.rpki-client.org