Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/c12a7b-5caf-4e7c-970d-5c476e3325f5/1/NVVRF-fhcLf1G7F6U7nNAVOeGYo.roa
File: NVVRF-fhcLf1G7F6U7nNAVOeGYo.roa (raw, json)
Hash identifier: 9DJPD8Ms7bemwoucGfn3W/9O5hEy9fZar5480OChbH8=
Subject key identifier: 35:55:51:17:E7:E1:70:B7:F5:1B:B1:7A:53:B9:CD:01:53:9E:19:8A
Certificate issuer: /CN=465eba5c1a80f86a4589278edd9304b3f5169f83
Certificate serial: 01867806CF26ADC8411F7E721EDEAC157179
Authority key identifier: 46:5E:BA:5C:1A:80:F8:6A:45:89:27:8E:DD:93:04:B3:F5:16:9F:83
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Rl66XBqA-GpFiSeO3ZMEs_UWn4M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/c12a7b-5caf-4e7c-970d-5c476e3325f5/1/NVVRF-fhcLf1G7F6U7nNAVOeGYo.roa
Signing time: Wed 22 Feb 2023 07:29:17 +0000
ROA not before: Wed 22 Feb 2023 07:29:17 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 26636
IP address blocks: 185.244.50.0/24 maxlen: 24
193.39.170.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:78:06:cf:26:ad:c8:41:1f:7e:72:1e:de:ac:15:71:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=465eba5c1a80f86a4589278edd9304b3f5169f83
Validity
Not Before: Feb 22 07:29:17 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=35555117e7e170b7f51bb17a53b9cd01539e198a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:7f:0e:87:41:98:8e:08:70:47:47:97:b2:b5:
a1:2a:ca:11:df:3b:77:6e:ea:26:a8:ae:72:59:78:
04:69:31:ba:11:be:6f:1f:5e:74:6d:93:8b:68:ae:
81:ed:b5:b6:3e:7b:0c:d3:d4:b5:05:80:45:97:de:
34:78:7f:60:00:32:95:5e:e6:06:a3:82:51:7b:05:
69:20:3a:2d:96:71:90:4a:58:b7:25:39:dd:4b:3e:
c9:c8:45:e4:92:1e:fb:41:e2:98:9b:fe:d0:cc:7d:
88:30:b8:f9:f1:b4:9f:eb:f6:c1:56:c4:41:f9:04:
bb:f7:0c:d3:91:a2:d9:63:2d:eb:a1:a6:c9:92:14:
2d:d9:d1:da:3e:57:9e:9c:af:2c:9c:7b:44:72:39:
b6:e5:74:f0:fb:fe:4f:74:6c:4f:10:48:e6:05:a5:
66:2e:35:30:cf:7d:22:b5:7d:a1:84:08:60:67:cd:
be:3d:a9:27:24:e3:1d:77:09:2e:98:29:ad:71:8c:
57:6b:78:b8:e6:66:04:99:b2:1f:9d:52:28:1b:a6:
0b:19:62:a2:6d:d5:4c:4d:8b:53:87:d3:25:56:bc:
06:65:5d:79:71:e1:e3:ed:49:9c:fa:72:a7:ed:69:
da:ea:ee:8d:12:c7:02:3e:f3:67:0f:16:34:da:e4:
e0:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:55:51:17:E7:E1:70:B7:F5:1B:B1:7A:53:B9:CD:01:53:9E:19:8A
X509v3 Authority Key Identifier:
keyid:46:5E:BA:5C:1A:80:F8:6A:45:89:27:8E:DD:93:04:B3:F5:16:9F:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Rl66XBqA-GpFiSeO3ZMEs_UWn4M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/c12a7b-5caf-4e7c-970d-5c476e3325f5/1/NVVRF-fhcLf1G7F6U7nNAVOeGYo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/c12a7b-5caf-4e7c-970d-5c476e3325f5/1/Rl66XBqA-GpFiSeO3ZMEs_UWn4M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.244.50.0/24
193.39.170.0/24
Signature Algorithm: sha256WithRSAEncryption
49:7c:d9:2a:81:45:c8:af:1e:44:88:4f:ca:a9:18:ff:27:e8:
2e:88:af:02:ce:65:d3:96:7f:ef:c6:8e:27:e3:40:20:4f:2d:
ea:04:4d:21:2b:77:09:1e:d8:78:fb:0d:7c:b4:72:a8:37:0d:
d7:a7:86:4b:52:e7:44:38:d9:fb:71:81:15:69:74:1b:16:bd:
a4:a9:07:db:40:60:34:89:d6:06:d4:6c:33:1c:8f:a2:e9:dc:
81:9d:e8:72:75:1d:e4:c8:c2:56:07:bd:a9:e0:98:84:33:0d:
4a:02:4b:a4:f6:47:89:3c:2a:99:84:b2:f3:87:c4:67:b1:13:
74:5a:28:af:ad:83:ce:6a:33:b1:7d:48:31:49:17:30:72:71:
7a:50:b9:d0:3d:62:e9:33:a7:9b:12:b9:ac:fe:df:af:38:58:
cd:e9:14:5d:e9:00:0a:56:71:d4:7e:f7:7e:c8:0d:b7:a9:84:
c4:99:6d:ee:65:58:06:95:50:1e:8a:c0:a4:39:f1:91:7b:6e:
a2:47:6d:da:5c:b8:85:15:c2:c0:b3:61:33:11:ab:3e:56:13:
35:87:a1:14:b0:46:9e:2e:22:46:44:3e:d8:b4:de:8c:ee:d4:
6d:2f:c0:ca:ef:c8:89:fb:35:23:c5:d6:e4:ce:aa:2b:42:40:
7b:52:f4:9c
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYZ4Bs8mrchBH35yHt6sFXF5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ2NWViYTVjMWE4MGY4NmE0NTg5Mjc4ZWRkOTMwNGIzZjUx
NjlmODMwHhcNMjMwMjIyMDcyOTE3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzNTU1NTExN2U3ZTE3MGI3ZjUxYmIxN2E1M2I5Y2QwMTUzOWUxOThhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgX8Oh0GYjghwR0eXsrWhKsoR3zt3
buomqK5yWXgEaTG6Eb5vH150bZOLaK6B7bW2PnsM09S1BYBFl940eH9gADKVXuYG
o4JRewVpIDotlnGQSli3JTndSz7JyEXkkh77QeKYm/7QzH2IMLj58bSf6/bBVsRB
+QS79wzTkaLZYy3roabJkhQt2dHaPleenK8snHtEcjm25XTw+/5PdGxPEEjmBaVm
LjUwz30itX2hhAhgZ82+PaknJOMddwkumCmtcYxXa3i45mYEmbIfnVIoG6YLGWKi
bdVMTYtTh9MlVrwGZV15ceHj7Umc+nKn7Wna6u6NEscCPvNnDxY02uTg3QIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFDVVURfn4XC39RuxelO5zQFTnhmKMB8GA1UdIwQY
MBaAFEZeulwagPhqRYknjt2TBLP1Fp+DMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUmw2NlhCcUEtR3BGaVNlTzNaTUVzX1VXbjRNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi9jMTJhN2ItNWNhZi00ZTdjLTk3MGQt
NWM0NzZlMzMyNWY1LzEvTlZWUkYtZmhjTGYxRzdGNlU3bk5BVk9lR1lvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Mi9jMTJhN2ItNWNhZi00ZTdjLTk3MGQtNWM0NzZlMzMyNWY1
LzEvUmw2NlhCcUEtR3BGaVNlTzNaTUVzX1VXbjRNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAufQyAwQA
wSeqMA0GCSqGSIb3DQEBCwUAA4IBAQBJfNkqgUXIrx5EiE/KqRj/J+guiK8CzmXT
ln/vxo4n40AgTy3qBE0hK3cJHth4+w18tHKoNw3Xp4ZLUudEONn7cYEVaXQbFr2k
qQfbQGA0idYG1GwzHI+i6dyBnehydR3kyMJWB72p4JiEMw1KAkuk9keJPCqZhLLz
h8RnsRN0WiivrYPOajOxfUgxSRcwcnF6ULnQPWLpM6ebErms/t+vOFjN6RRd6QAK
VnHUfvd+yA23qYTEmW3uZVgGlVAeisCkOfGRe26iR23aXLiFFcLAs2EzEas+VhM1
h6EUsEaeLiJGRD7YtN6M7tRtL8DK78iJ+zUjxdbkzqorQkB7UvSc
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:59:33 2023 by rpki-client on console-fra.rpki-client.org