Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/42041d-5931-4824-9254-161f342387d1/1/R7pZ0_oR7kcjUrfAEEPcd_CJmh4.roa
File: R7pZ0_oR7kcjUrfAEEPcd_CJmh4.roa (raw, json)
Hash identifier: 1/++SYQxPJ2OqI6jUWK2d4/A1HbnuS59ZJCJGh8s/U8=
Subject key identifier: 47:BA:59:D3:FA:11:EE:47:23:52:B7:C0:10:43:DC:77:F0:89:9A:1E
Certificate issuer: /CN=ba6ed0fb7b320832ac1580534c7b263f304e981b
Certificate serial: 3D53D438
Authority key identifier: BA:6E:D0:FB:7B:32:08:32:AC:15:80:53:4C:7B:26:3F:30:4E:98:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/um7Q-3syCDKsFYBTTHsmPzBOmBs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/42041d-5931-4824-9254-161f342387d1/1/R7pZ0_oR7kcjUrfAEEPcd_CJmh4.roa
Signing time: Sat 01 Jan 2022 06:55:15 +0000
ROA not before: Sat 01 Jan 2022 06:55:15 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 39783
IP address blocks: 185.35.184.0/22 maxlen: 24
46.226.8.0/21 maxlen: 24
193.93.220.0/22 maxlen: 24
62.122.248.0/21 maxlen: 24
91.192.220.0/22 maxlen: 24
185.7.60.0/22 maxlen: 24
91.189.168.0/21 maxlen: 24
2a02:2690::/32 maxlen: 32
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1028903992 (0x3d53d438)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba6ed0fb7b320832ac1580534c7b263f304e981b
Validity
Not Before: Jan 1 06:55:15 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=47ba59d3fa11ee472352b7c01043dc77f0899a1e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:1d:6a:bc:7f:42:73:58:ba:31:66:3c:32:39:
d4:73:0e:ca:1c:df:14:f3:02:59:8d:38:51:ae:3b:
3d:0d:6a:ab:3a:ef:1a:44:4f:5a:ba:8b:0a:0f:5b:
d0:92:1f:7b:fd:b7:57:43:0a:c6:3c:f1:3b:ff:d2:
54:c1:ca:25:e9:15:c9:25:55:56:11:af:ca:d5:a2:
5d:6a:39:b4:22:f8:fa:6d:8a:8e:5e:42:d2:7f:87:
a8:bf:9a:24:ed:9e:6e:f3:5c:01:f8:ef:57:d3:68:
23:a2:88:70:92:ea:5c:7d:be:01:74:01:69:41:46:
4b:a8:7d:4e:77:59:9c:d5:31:75:77:b0:af:54:39:
4c:b3:af:c9:33:03:85:bd:64:56:8a:b3:56:18:05:
a8:dd:ce:de:6e:ca:6b:56:a1:92:b1:b2:d7:5c:d4:
62:d3:5b:b3:c3:8c:a0:f0:83:aa:a2:d8:f5:68:d5:
27:3f:69:1d:6f:4f:2f:aa:7e:f2:9e:dd:3e:a1:4c:
d4:cb:04:51:e7:f1:42:a5:a5:63:7e:2a:38:e2:6a:
19:f4:d0:11:d3:80:74:ba:cc:b2:81:7b:11:b3:43:
30:67:25:0a:23:63:1a:30:c2:d4:9d:d2:fa:6a:4d:
17:d4:da:ee:ce:e9:fe:f3:cb:2b:a9:55:52:0a:aa:
a5:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:BA:59:D3:FA:11:EE:47:23:52:B7:C0:10:43:DC:77:F0:89:9A:1E
X509v3 Authority Key Identifier:
keyid:BA:6E:D0:FB:7B:32:08:32:AC:15:80:53:4C:7B:26:3F:30:4E:98:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/um7Q-3syCDKsFYBTTHsmPzBOmBs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/42041d-5931-4824-9254-161f342387d1/1/R7pZ0_oR7kcjUrfAEEPcd_CJmh4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/42041d-5931-4824-9254-161f342387d1/1/um7Q-3syCDKsFYBTTHsmPzBOmBs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.226.8.0/21
62.122.248.0/21
91.189.168.0/21
91.192.220.0/22
185.7.60.0/22
185.35.184.0/22
193.93.220.0/22
IPv6:
2a02:2690::/32
Signature Algorithm: sha256WithRSAEncryption
ac:2d:aa:c7:e7:d6:70:35:51:0c:a1:44:13:54:21:ec:1b:31:
f0:96:6b:31:ac:5b:47:32:3f:a2:f0:6b:39:dc:23:ff:69:74:
f0:4e:11:23:8d:34:24:00:2e:25:b6:30:37:b0:5f:8d:ef:14:
16:88:42:60:ed:89:71:22:35:66:4e:f1:1b:6b:36:8d:0f:f4:
06:3f:cf:d9:05:46:17:0f:f5:c8:01:d7:03:51:24:ee:b6:cd:
6b:cf:02:03:9c:46:28:34:22:8a:fb:72:86:58:bf:7e:0d:a1:
a6:a2:38:32:dc:23:83:7f:aa:a6:68:06:ac:ae:23:d5:a4:bd:
9e:b2:ab:26:52:d3:fb:77:79:e0:36:10:3d:64:2e:31:ab:da:
26:76:f9:58:3a:fb:1b:12:ca:2f:84:67:3f:3c:a4:d3:12:cc:
bb:4c:d4:8f:6b:6f:57:d0:46:be:32:7f:ec:a9:89:19:c8:5e:
e7:8d:56:fd:79:e1:b4:0b:23:48:88:2c:44:45:94:d6:0d:9e:
db:b9:9c:80:4f:0a:05:80:29:0b:6d:d2:d2:2f:85:a6:a5:28:
63:7b:cc:59:ca:55:0b:97:c8:da:e9:82:92:d8:f8:1b:6a:15:
ec:e5:3c:7c:00:c0:52:9b:54:fb:b3:a4:c7:65:8a:b6:4d:f7:
0a:af:27:e4
-----BEGIN CERTIFICATE-----
MIIFIjCCBAqgAwIBAgIEPVPUODANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhi
YTZlZDBmYjdiMzIwODMyYWMxNTgwNTM0YzdiMjYzZjMwNGU5ODFiMB4XDTIyMDEw
MTA2NTUxNVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoNDdiYTU5ZDNmYTEx
ZWU0NzIzNTJiN2MwMTA0M2RjNzdmMDg5OWExZTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAPMdarx/QnNYujFmPDI51HMOyhzfFPMCWY04Ua47PQ1qqzrv
GkRPWrqLCg9b0JIfe/23V0MKxjzxO//SVMHKJekVySVVVhGvytWiXWo5tCL4+m2K
jl5C0n+HqL+aJO2ebvNcAfjvV9NoI6KIcJLqXH2+AXQBaUFGS6h9TndZnNUxdXew
r1Q5TLOvyTMDhb1kVoqzVhgFqN3O3m7Ka1ahkrGy11zUYtNbs8OMoPCDqqLY9WjV
Jz9pHW9PL6p+8p7dPqFM1MsEUefxQqWlY34qOOJqGfTQEdOAdLrMsoF7EbNDMGcl
CiNjGjDC1J3S+mpNF9Ta7s7p/vPLK6lVUgqqpUsCAwEAAaOCAjwwggI4MB0GA1Ud
DgQWBBRHulnT+hHuRyNSt8AQQ9x38ImaHjAfBgNVHSMEGDAWgBS6btD7ezIIMqwV
gFNMeyY/ME6YGzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L3VtN1EtM3N5Q0RLc0ZZQlRUSHNtUHpCT21Ccy5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvMjAvNDIwNDFkLTU5MzEtNDgyNC05MjU0LTE2MWYzNDIzODdkMS8x
L1I3cFowX29SN2tjalVyZkFFRVBjZF9DSm1oNC5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMjAv
NDIwNDFkLTU5MzEtNDgyNC05MjU0LTE2MWYzNDIzODdkMS8xL3VtN1EtM3N5Q0RL
c0ZZQlRUSHNtUHpCT21Ccy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBS
BggrBgEFBQcBBwEB/wRDMEEwMAQCAAEwKgMEAy7iCAMEAz56+AMEA1u9qAMEAlvA
3AMEArkHPAMEArkjuAMEAsFd3DANBAIAAjAHAwUAKgImkDANBgkqhkiG9w0BAQsF
AAOCAQEArC2qx+fWcDVRDKFEE1Qh7Bsx8JZrMaxbRzI/ovBrOdwj/2l08E4RI400
JAAuJbYwN7Bfje8UFohCYO2JcSI1Zk7xG2s2jQ/0Bj/P2QVGFw/1yAHXA1Ek7rbN
a88CA5xGKDQiivtyhli/fg2hpqI4Mtwjg3+qpmgGrK4j1aS9nrKrJlLT+3d54DYQ
PWQuMavaJnb5WDr7GxLKL4RnPzyk0xLMu0zUj2tvV9BGvjJ/7KmJGche541W/Xnh
tAsjSIgsREWU1g2e27mcgE8KBYApC23S0i+FpqUoY3vMWcpVC5fI2umCktj4G2oV
7OU8fADAUptU+7Okx2WKtk33Cq8n5A==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:22:03 2024 by rpki-client on console-fra.rpki-client.org