Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/9365e0-aec8-4384-9bd7-6c232ae7b5bd/1/39hNxaHOZ7FFVMaO5znWLYkhH2I.roa
File: 39hNxaHOZ7FFVMaO5znWLYkhH2I.roa (raw, json)
Hash identifier: aIN6gHhvvtIIm9BpFgm8D4MeWCQryVPgNTGBd5klCnk=
Subject key identifier: DF:D8:4D:C5:A1:CE:67:B1:45:54:C6:8E:E7:39:D6:2D:89:21:1F:62
Certificate issuer: /CN=7c178f4e4b0e2c20e6a888020c8e6d029a293496
Certificate serial: 05342F43
Authority key identifier: 7C:17:8F:4E:4B:0E:2C:20:E6:A8:88:02:0C:8E:6D:02:9A:29:34:96
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fBePTksOLCDmqIgCDI5tApopNJY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/9365e0-aec8-4384-9bd7-6c232ae7b5bd/1/39hNxaHOZ7FFVMaO5znWLYkhH2I.roa
Signing time: Sat 01 Jan 2022 14:56:55 +0000
ROA not before: Sat 01 Jan 2022 14:56:55 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 1299
IP address blocks: 193.104.197.0/24 maxlen: 24
193.104.198.0/24 maxlen: 24
193.104.211.0/24 maxlen: 24
193.104.222.0/24 maxlen: 24
2a0f:9340:10::/48 maxlen: 48
2a0f:9340::/48 maxlen: 48
2a0f:9340:33::/48 maxlen: 48
2a0f:9340:11::/48 maxlen: 48
2a0f:9340:34::/48 maxlen: 48
2a0f:9340:1a::/48 maxlen: 48
2a0f:9340:32::/48 maxlen: 48
2a0f:9340:3d::/48 maxlen: 48
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 87306051 (0x5342f43)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7c178f4e4b0e2c20e6a888020c8e6d029a293496
Validity
Not Before: Jan 1 14:56:55 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=dfd84dc5a1ce67b14554c68ee739d62d89211f62
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:47:4c:60:99:f6:6d:89:dc:bd:f6:0c:c9:e3:
8e:c5:c2:b4:74:51:53:59:68:2c:ae:c2:74:64:84:
3e:54:db:5f:e4:3b:d8:ff:b0:87:b3:a1:af:44:56:
71:2e:80:2c:e7:be:86:bd:a3:bd:da:a1:32:d1:cf:
12:8b:53:df:3f:bb:8a:00:1e:2d:9b:b5:a2:b9:f1:
49:33:98:a8:a3:c6:39:14:ea:bf:f2:a9:48:13:cc:
6c:c4:ec:e3:d5:bb:27:21:53:03:ae:ad:75:11:ac:
f8:71:6f:10:62:58:4c:48:1d:75:ab:e3:c5:2a:d7:
dc:98:ae:9a:b4:e2:35:79:45:af:25:6b:da:e9:d1:
cf:e3:41:6b:ed:8d:fa:dd:83:0c:2d:68:14:4e:2f:
1d:82:d4:68:1f:71:a8:ac:2d:b1:94:f0:3d:7b:32:
04:a0:ee:1c:a3:85:bb:14:16:c4:d0:3b:00:db:52:
95:6f:10:23:83:96:cf:6f:8e:44:f2:44:0a:cb:d7:
83:04:79:ca:d9:95:bf:be:cf:56:d9:a6:23:b5:2a:
9d:91:c5:0e:91:06:13:ed:b3:88:f4:bb:37:14:98:
a0:89:de:59:7d:5c:bf:7a:a8:ff:0e:44:41:12:b8:
c7:98:5c:90:e4:32:39:8e:41:1a:54:6b:9c:ba:4a:
a2:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:D8:4D:C5:A1:CE:67:B1:45:54:C6:8E:E7:39:D6:2D:89:21:1F:62
X509v3 Authority Key Identifier:
keyid:7C:17:8F:4E:4B:0E:2C:20:E6:A8:88:02:0C:8E:6D:02:9A:29:34:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fBePTksOLCDmqIgCDI5tApopNJY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/9365e0-aec8-4384-9bd7-6c232ae7b5bd/1/39hNxaHOZ7FFVMaO5znWLYkhH2I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/73/9365e0-aec8-4384-9bd7-6c232ae7b5bd/1/fBePTksOLCDmqIgCDI5tApopNJY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.104.197.0-193.104.198.255
193.104.211.0/24
193.104.222.0/24
IPv6:
2a0f:9340::/48
2a0f:9340:10::/47
2a0f:9340:1a::/48
2a0f:9340:32::-2a0f:9340:34:ffff:ffff:ffff:ffff:ffff
2a0f:9340:3d::/48
Signature Algorithm: sha256WithRSAEncryption
05:b9:ea:7c:41:fe:57:f7:a7:ee:49:49:30:a0:36:aa:b3:45:
b0:48:0f:c8:ef:fb:49:64:bf:1f:a7:5d:25:e6:3f:ca:09:30:
a4:1c:16:b3:ab:cd:f1:8a:14:2e:8c:6b:dc:7f:f0:41:04:47:
36:07:fb:9b:44:64:b4:81:a5:0d:50:bf:36:ce:72:36:61:15:
ec:45:d0:72:47:62:29:d6:02:c3:8a:ff:de:7f:13:5e:85:c3:
10:e0:ae:c0:a6:84:c3:0b:9c:e4:46:76:19:c5:15:64:ed:e7:
26:51:ff:01:3f:03:85:8c:64:62:4f:21:aa:09:83:16:99:39:
5b:56:09:94:17:89:cb:03:a7:c7:c0:95:dd:56:58:c5:61:ed:
27:f1:03:f0:8d:9a:ec:62:62:49:65:05:3b:94:19:08:ff:5f:
df:a7:52:94:3a:4e:a7:f0:64:0a:a3:ab:e6:d6:be:16:2e:71:
5a:1b:b9:15:53:53:e6:d0:48:33:56:b2:0c:ab:f2:be:c1:a1:
3d:9c:ad:f8:15:fb:7f:3d:53:6a:46:e7:dd:9b:57:bd:5d:29:
e7:42:3a:6b:06:a5:ad:9d:41:07:db:20:4d:0f:99:a7:f3:c4:
7f:09:86:39:f8:d9:b8:75:87:69:ac:d8:f1:33:44:14:d1:ac:
c4:65:23:74
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIEBTQvQzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg3
YzE3OGY0ZTRiMGUyYzIwZTZhODg4MDIwYzhlNmQwMjlhMjkzNDk2MB4XDTIyMDEw
MTE0NTY1NVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoZGZkODRkYzVhMWNl
NjdiMTQ1NTRjNjhlZTczOWQ2MmQ4OTIxMWY2MjCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAKtHTGCZ9m2J3L32DMnjjsXCtHRRU1loLK7CdGSEPlTbX+Q7
2P+wh7Ohr0RWcS6ALOe+hr2jvdqhMtHPEotT3z+7igAeLZu1ornxSTOYqKPGORTq
v/KpSBPMbMTs49W7JyFTA66tdRGs+HFvEGJYTEgddavjxSrX3JiumrTiNXlFryVr
2unRz+NBa+2N+t2DDC1oFE4vHYLUaB9xqKwtsZTwPXsyBKDuHKOFuxQWxNA7ANtS
lW8QI4OWz2+ORPJECsvXgwR5ytmVv77PVtmmI7UqnZHFDpEGE+2ziPS7NxSYoIne
WX1cv3qo/w5EQRK4x5hckOQyOY5BGlRrnLpKotMCAwEAAaOCAl0wggJZMB0GA1Ud
DgQWBBTf2E3Foc5nsUVUxo7nOdYtiSEfYjAfBgNVHSMEGDAWgBR8F49OSw4sIOao
iAIMjm0Cmik0ljAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L2ZCZVBUa3NPTENEbXFJZ0NESTV0QXBvcE5KWS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNzMvOTM2NWUwLWFlYzgtNDM4NC05YmQ3LTZjMjMyYWU3YjViZC8x
LzM5aE54YUhPWjdGRlZNYU81em5XTFlraEgySS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNzMv
OTM2NWUwLWFlYzgtNDM4NC05YmQ3LTZjMjMyYWU3YjViZC8xL2ZCZVBUa3NPTENE
bXFJZ0NESTV0QXBvcE5KWS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBz
BggrBgEFBQcBBwEB/wRkMGIwIAQCAAEwGjAMAwQAwWjFAwQAwWjGAwQAwWjTAwQA
wWjeMD4EAgACMDgDBwAqD5NAAAADBwEqD5NAABADBwAqD5NAABowEgMHASoPk0AA
MgMHACoPk0AANAMHACoPk0AAPTANBgkqhkiG9w0BAQsFAAOCAQEABbnqfEH+V/en
7klJMKA2qrNFsEgPyO/7SWS/H6ddJeY/ygkwpBwWs6vN8YoULoxr3H/wQQRHNgf7
m0RktIGlDVC/Ns5yNmEV7EXQckdiKdYCw4r/3n8TXoXDEOCuwKaEwwuc5EZ2GcUV
ZO3nJlH/AT8DhYxkYk8hqgmDFpk5W1YJlBeJywOnx8CV3VZYxWHtJ/ED8I2a7GJi
SWUFO5QZCP9f36dSlDpOp/BkCqOr5ta+Fi5xWhu5FVNT5tBIM1ayDKvyvsGhPZyt
+BX7fz1Takbn3ZtXvV0p50I6awalrZ1BB9sgTQ+Zp/PEfwmGOfjZuHWHaazY8TNE
FNGsxGUjdA==
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:17:56 2024 by rpki-client on console-ams.rpki-client.org