Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/f57ca3-4ff1-4064-9df7-3da05388e9ae/1/sygHvcg0zyyCPAViB81x_nOpLZo.roa
File: sygHvcg0zyyCPAViB81x_nOpLZo.roa (raw, json)
Hash identifier: 7Hk0Mpq75DAZnY6OhGb2ItSp48N7alup/VZCgjCUfzA=
Subject key identifier: B3:28:07:BD:C8:34:CF:2C:82:3C:05:62:07:CD:71:FE:73:A9:2D:9A
Certificate issuer: /CN=07266adfb18b189f3dc4d3be6dc596254be5c9b1
Certificate serial: 01883253355DE069AADFF54467EBB3CFECBE
Authority key identifier: 07:26:6A:DF:B1:8B:18:9F:3D:C4:D3:BE:6D:C5:96:25:4B:E5:C9:B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ByZq37GLGJ89xNO-bcWWJUvlybE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/f57ca3-4ff1-4064-9df7-3da05388e9ae/1/sygHvcg0zyyCPAViB81x_nOpLZo.roa
Signing time: Fri 19 May 2023 04:44:53 +0000
ROA not before: Fri 19 May 2023 04:44:53 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 204106
IP address blocks: 109.74.72.0/24 maxlen: 24
77.247.198.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:32:53:35:5d:e0:69:aa:df:f5:44:67:eb:b3:cf:ec:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07266adfb18b189f3dc4d3be6dc596254be5c9b1
Validity
Not Before: May 19 04:44:53 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b32807bdc834cf2c823c056207cd71fe73a92d9a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:65:d1:e1:e1:6a:57:fc:1d:f1:5a:7c:0c:0c:
7b:14:73:18:c3:34:42:f9:2b:03:05:c9:50:b7:b4:
4f:f3:c7:ea:fb:e5:d1:e2:08:90:0c:ff:17:b4:0f:
dc:41:07:0e:98:71:50:76:03:c8:af:4d:5d:99:08:
41:c0:95:83:16:00:f3:f9:d3:06:89:ab:e8:d6:ce:
98:5a:4b:10:6f:e5:36:42:83:49:fb:d2:91:2c:de:
cf:4e:f9:00:22:79:f4:7c:a7:c0:49:88:f8:31:d1:
2e:cf:26:38:dd:87:b0:cb:a1:77:32:38:2d:f5:18:
63:9b:89:dd:29:fc:66:4c:e3:2c:15:dc:9e:57:ac:
1a:36:53:2b:35:1d:8e:a9:3f:66:05:48:ec:12:af:
24:6d:02:df:c5:44:0d:f8:4c:5f:90:23:c9:b2:85:
68:56:27:a2:04:fd:ed:ee:79:88:ee:5f:b4:4d:05:
68:30:06:87:81:d2:31:b4:d8:4b:ad:5b:eb:de:c0:
2d:87:eb:43:79:5a:48:4b:d2:f1:5a:40:9a:a6:e8:
e9:7d:8d:00:6f:99:c1:2b:07:38:c4:a6:81:4b:7f:
67:b3:b8:19:b5:bb:6e:71:7a:5a:f3:aa:8c:ef:43:
c6:52:e0:b5:d8:6e:ce:14:99:26:e1:fb:3a:9b:9e:
a7:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:28:07:BD:C8:34:CF:2C:82:3C:05:62:07:CD:71:FE:73:A9:2D:9A
X509v3 Authority Key Identifier:
keyid:07:26:6A:DF:B1:8B:18:9F:3D:C4:D3:BE:6D:C5:96:25:4B:E5:C9:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ByZq37GLGJ89xNO-bcWWJUvlybE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/f57ca3-4ff1-4064-9df7-3da05388e9ae/1/sygHvcg0zyyCPAViB81x_nOpLZo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/f57ca3-4ff1-4064-9df7-3da05388e9ae/1/ByZq37GLGJ89xNO-bcWWJUvlybE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.247.198.0/24
109.74.72.0/24
Signature Algorithm: sha256WithRSAEncryption
92:a9:8b:40:87:17:60:2a:f2:3a:47:e7:ed:8a:93:cb:1d:18:
59:2c:ec:82:f8:35:46:db:30:66:a5:ef:25:9a:47:b6:fd:eb:
b7:68:07:73:aa:20:da:9f:6b:c5:84:bb:be:ce:9d:8f:98:1d:
9e:56:bc:ad:b1:2e:e9:59:b1:d9:dd:52:3d:ab:4b:51:c3:c7:
1c:37:25:44:83:19:d9:36:23:54:30:ec:b9:ac:cf:c4:b5:c4:
0f:50:e6:4c:e4:1b:d6:1c:01:04:e5:87:6e:d8:74:27:b7:62:
6e:08:f1:76:d0:97:54:7e:18:d4:b1:01:94:56:b5:0c:59:77:
46:e5:69:fc:1f:cd:21:18:70:2a:eb:72:2c:f7:09:ac:1c:7d:
6a:24:fc:42:91:20:fb:cd:c0:86:a2:c7:72:c1:1d:3c:c3:30:
8d:30:dd:e7:c0:fd:a8:53:e9:98:f7:b9:0c:e0:b1:71:1a:7f:
bc:fc:f8:e5:69:90:1a:f8:1f:b2:f1:c3:ad:05:96:44:13:38:
a0:3e:f1:3a:7a:ea:25:cb:e2:18:e6:e9:45:d0:98:22:57:1b:
3f:e3:0b:6c:34:27:ce:e4:b6:8c:e2:51:32:68:95:05:b8:c8:
4f:0a:4a:f3:4d:d9:0e:e1:97:67:f3:6f:ba:f9:de:ad:ca:4d:
be:2b:e9:2c
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYgyUzVd4Gmq3/VEZ+uzz+y+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA3MjY2YWRmYjE4YjE4OWYzZGM0ZDNiZTZkYzU5NjI1NGJl
NWM5YjEwHhcNMjMwNTE5MDQ0NDUzWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiMzI4MDdiZGM4MzRjZjJjODIzYzA1NjIwN2NkNzFmZTczYTkyZDlhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyWXR4eFqV/wd8Vp8DAx7FHMYwzRC
+SsDBclQt7RP88fq++XR4giQDP8XtA/cQQcOmHFQdgPIr01dmQhBwJWDFgDz+dMG
iavo1s6YWksQb+U2QoNJ+9KRLN7PTvkAInn0fKfASYj4MdEuzyY43Yewy6F3Mjgt
9Rhjm4ndKfxmTOMsFdyeV6waNlMrNR2OqT9mBUjsEq8kbQLfxUQN+ExfkCPJsoVo
VieiBP3t7nmI7l+0TQVoMAaHgdIxtNhLrVvr3sAth+tDeVpIS9LxWkCapujpfY0A
b5nBKwc4xKaBS39ns7gZtbtucXpa86qM70PGUuC12G7OFJkm4fs6m56nOQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFLMoB73INM8sgjwFYgfNcf5zqS2aMB8GA1UdIwQY
MBaAFAcmat+xixifPcTTvm3FliVL5cmxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQnlacTM3R0xHSjg5eE5PLWJjV1dKVXZseWJFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZi9mNTdjYTMtNGZmMS00MDY0LTlkZjct
M2RhMDUzODhlOWFlLzEvc3lnSHZjZzB6eXlDUEFWaUI4MXhfbk9wTFpvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zZi9mNTdjYTMtNGZmMS00MDY0LTlkZjctM2RhMDUzODhlOWFl
LzEvQnlacTM3R0xHSjg5eE5PLWJjV1dKVXZseWJFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQATffGAwQA
bUpIMA0GCSqGSIb3DQEBCwUAA4IBAQCSqYtAhxdgKvI6R+ftipPLHRhZLOyC+DVG
2zBmpe8lmke2/eu3aAdzqiDan2vFhLu+zp2PmB2eVrytsS7pWbHZ3VI9q0tRw8cc
NyVEgxnZNiNUMOy5rM/EtcQPUOZM5BvWHAEE5Ydu2HQnt2JuCPF20JdUfhjUsQGU
VrUMWXdG5Wn8H80hGHAq63Is9wmsHH1qJPxCkSD7zcCGosdywR08wzCNMN3nwP2o
U+mY97kM4LFxGn+8/PjlaZAa+B+y8cOtBZZEEzigPvE6euoly+IY5ulF0JgiVxs/
4wtsNCfO5LaM4lEyaJUFuMhPCkrzTdkO4Zdn82+6+d6tyk2+K+ks
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:04:43 2024 by rpki-client on console-ams.rpki-client.org