Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/e64398-9601-4b7c-b783-079ba0570f75/1/RCCQnrOC2jiq933OJwyTOCowayM.roa
File: RCCQnrOC2jiq933OJwyTOCowayM.roa (raw, json)
Hash identifier: vWoVCtJlw58a9DHZ45d9gtgiGH9QMHi9y9o3w31kIzY=
Subject key identifier: 44:20:90:9E:B3:82:DA:38:AA:F7:7D:CE:27:0C:93:38:2A:30:6B:23
Certificate issuer: /CN=a29d9751f3675f51332734da68ea960260045b12
Certificate serial: 0183210FBD56D4AE56770F5BF5EBB70F81C6
Authority key identifier: A2:9D:97:51:F3:67:5F:51:33:27:34:DA:68:EA:96:02:60:04:5B:12
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/op2XUfNnX1EzJzTaaOqWAmAEWxI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/e64398-9601-4b7c-b783-079ba0570f75/1/RCCQnrOC2jiq933OJwyTOCowayM.roa
Signing time: Fri 09 Sep 2022 07:03:43 +0000
ROA not before: Fri 09 Sep 2022 07:03:43 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 208911
IP address blocks: 92.118.72.0/24 maxlen: 32
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:21:0f:bd:56:d4:ae:56:77:0f:5b:f5:eb:b7:0f:81:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a29d9751f3675f51332734da68ea960260045b12
Validity
Not Before: Sep 9 07:03:43 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=4420909eb382da38aaf77dce270c93382a306b23
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:61:97:08:0a:ef:20:5e:7f:11:a5:0e:fb:b2:
5b:43:e7:81:07:10:ae:64:d7:a9:d8:61:ac:78:ab:
2d:37:3b:63:e4:cb:f0:26:d2:df:f5:80:0a:05:5e:
2b:d7:94:17:68:06:63:5f:53:cd:59:9c:5a:f1:2f:
98:66:4a:32:54:47:11:2e:77:aa:8f:7a:4b:46:24:
df:e7:aa:4f:0a:8b:f7:a9:14:96:ad:eb:3a:7e:c8:
5b:75:fc:6a:97:0b:4f:b5:bb:c1:eb:e8:aa:a5:bb:
de:71:cf:11:d3:e1:c8:e3:3e:86:5a:a6:d5:84:8c:
0c:a2:aa:12:ea:8b:f3:b4:6e:8f:2b:4f:12:c4:29:
32:d4:05:f2:b8:ad:f0:bd:ac:a0:8a:7b:f3:e6:67:
4e:8a:51:08:3c:8c:43:cb:9c:71:10:b4:50:72:0f:
55:18:34:13:a7:f0:ae:f1:40:6a:94:8e:af:2e:62:
b8:a7:fe:c8:ec:82:38:55:19:43:ef:db:95:08:72:
f0:3c:4e:76:c2:b5:1a:b5:fa:9e:a7:42:5c:0c:f1:
89:2c:06:78:d2:a9:42:35:4c:76:ea:31:be:8c:c3:
49:b7:5f:c3:7a:3f:6f:9e:7e:a8:f9:df:71:6e:e6:
33:05:93:ba:55:c5:34:d0:12:19:be:0c:87:8b:85:
7b:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:20:90:9E:B3:82:DA:38:AA:F7:7D:CE:27:0C:93:38:2A:30:6B:23
X509v3 Authority Key Identifier:
keyid:A2:9D:97:51:F3:67:5F:51:33:27:34:DA:68:EA:96:02:60:04:5B:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/op2XUfNnX1EzJzTaaOqWAmAEWxI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/e64398-9601-4b7c-b783-079ba0570f75/1/RCCQnrOC2jiq933OJwyTOCowayM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/e64398-9601-4b7c-b783-079ba0570f75/1/op2XUfNnX1EzJzTaaOqWAmAEWxI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.118.72.0/24
Signature Algorithm: sha256WithRSAEncryption
04:4c:4e:4a:71:47:b8:3d:7f:2f:d3:ac:db:9d:d9:e2:db:ea:
c2:d5:26:d2:92:e3:ba:9c:34:eb:15:aa:14:4b:82:70:30:32:
51:2e:9c:8f:80:3b:c2:a2:71:41:86:92:cb:66:94:c5:d6:42:
d7:bd:83:fd:78:81:d5:0f:27:8c:5a:da:83:ba:13:dd:15:cc:
d7:50:6f:48:dc:a7:8d:96:5c:88:31:e7:f7:f8:f2:55:f0:5f:
94:b8:58:a3:8e:63:bb:32:a8:c7:d2:40:71:4d:8e:af:27:d3:
8f:5e:12:51:aa:79:81:d0:f5:f7:9d:43:e5:8a:d4:80:bc:6e:
40:e5:b1:7e:be:4f:c5:24:e4:be:ea:ad:d3:14:56:ad:7d:9b:
b2:45:70:e2:3d:63:de:35:7b:18:50:02:c9:c3:4e:9f:b3:ea:
6b:b1:42:a5:cc:e0:81:66:a9:25:e3:78:e8:af:f3:d5:ab:ed:
95:9a:71:69:be:11:77:3d:21:b0:dd:4d:f8:4f:d3:79:ee:c8:
a0:ea:a0:b5:02:78:a8:5a:ea:b1:3d:b1:1b:89:fe:36:f9:32:
c3:de:ed:be:85:91:6a:e8:82:21:f6:b1:5c:9d:39:93:9c:12:
f1:f0:8a:50:b1:a6:f2:0c:3b:8b:7c:e6:88:9a:78:b1:2f:a6:
2f:5f:c9:5c
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYMhD71W1K5Wdw9b9eu3D4HGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEyOWQ5NzUxZjM2NzVmNTEzMzI3MzRkYTY4ZWE5NjAyNjAw
NDViMTIwHhcNMjIwOTA5MDcwMzQzWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0NDIwOTA5ZWIzODJkYTM4YWFmNzdkY2UyNzBjOTMzODJhMzA2YjIzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkWGXCArvIF5/EaUO+7JbQ+eBBxCu
ZNep2GGseKstNztj5MvwJtLf9YAKBV4r15QXaAZjX1PNWZxa8S+YZkoyVEcRLneq
j3pLRiTf56pPCov3qRSWres6fshbdfxqlwtPtbvB6+iqpbvecc8R0+HI4z6GWqbV
hIwMoqoS6ovztG6PK08SxCky1AXyuK3wvayginvz5mdOilEIPIxDy5xxELRQcg9V
GDQTp/Cu8UBqlI6vLmK4p/7I7II4VRlD79uVCHLwPE52wrUatfqep0JcDPGJLAZ4
0qlCNUx26jG+jMNJt1/Dej9vnn6o+d9xbuYzBZO6VcU00BIZvgyHi4V7UQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFEQgkJ6zgto4qvd9zicMkzgqMGsjMB8GA1UdIwQY
MBaAFKKdl1HzZ19RMyc02mjqlgJgBFsSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb3AyWFVmTm5YMUV6SnpUYWFPcVdBbUFFV3hJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Zi9lNjQzOTgtOTYwMS00YjdjLWI3ODMt
MDc5YmEwNTcwZjc1LzEvUkNDUW5yT0MyamlxOTMzT0p3eVRPQ293YXlNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Zi9lNjQzOTgtOTYwMS00YjdjLWI3ODMtMDc5YmEwNTcwZjc1
LzEvb3AyWFVmTm5YMUV6SnpUYWFPcVdBbUFFV3hJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAXHZIMA0G
CSqGSIb3DQEBCwUAA4IBAQAETE5KcUe4PX8v06zbndni2+rC1SbSkuO6nDTrFaoU
S4JwMDJRLpyPgDvConFBhpLLZpTF1kLXvYP9eIHVDyeMWtqDuhPdFczXUG9I3KeN
llyIMef3+PJV8F+UuFijjmO7MqjH0kBxTY6vJ9OPXhJRqnmB0PX3nUPlitSAvG5A
5bF+vk/FJOS+6q3TFFatfZuyRXDiPWPeNXsYUALJw06fs+prsUKlzOCBZqkl43jo
r/PVq+2VmnFpvhF3PSGw3U34T9N57sig6qC1AnioWuqxPbEbif42+TLD3u2+hZFq
6IIh9rFcnTmTnBLx8IpQsabyDDuLfOaImnixL6YvX8lc
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:05 2024 by rpki-client on console-fra.rpki-client.org