Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/c12a7b-5caf-4e7c-970d-5c476e3325f5/1/yyrOvHzh2dP32S12TedPiDTH3O8.roa
File: yyrOvHzh2dP32S12TedPiDTH3O8.roa (raw, json)
Hash identifier: 7ISAH6K15Avgty9EK6Lr5WdcoZf0wppiYrF+x4AtDec=
Subject key identifier: CB:2A:CE:BC:7C:E1:D9:D3:F7:D9:2D:76:4D:E7:4F:88:34:C7:DC:EF
Certificate issuer: /CN=465eba5c1a80f86a4589278edd9304b3f5169f83
Certificate serial: 018514EE813BBBF865E21EF4C6B1D408537B
Authority key identifier: 46:5E:BA:5C:1A:80:F8:6A:45:89:27:8E:DD:93:04:B3:F5:16:9F:83
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Rl66XBqA-GpFiSeO3ZMEs_UWn4M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/c12a7b-5caf-4e7c-970d-5c476e3325f5/1/yyrOvHzh2dP32S12TedPiDTH3O8.roa
Signing time: Thu 15 Dec 2022 08:37:32 +0000
ROA not before: Thu 15 Dec 2022 08:37:32 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 212238
IP address blocks: 185.239.48.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:14:ee:81:3b:bb:f8:65:e2:1e:f4:c6:b1:d4:08:53:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=465eba5c1a80f86a4589278edd9304b3f5169f83
Validity
Not Before: Dec 15 08:37:32 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=cb2acebc7ce1d9d3f7d92d764de74f8834c7dcef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:b1:03:7c:3d:75:90:69:67:e6:ba:7b:b4:df:
69:ba:1c:0d:1c:64:7c:60:0f:00:f5:a5:da:b2:40:
98:ba:50:e0:ad:ac:d7:b1:bc:00:84:a6:70:d0:08:
a2:5c:41:23:8c:84:10:41:ef:9b:96:34:f0:3c:67:
35:7c:e1:a0:36:49:4f:bf:ad:ee:df:72:bb:fe:d0:
aa:5e:0c:94:d9:9b:11:a7:ef:38:7d:cc:b3:2f:dc:
c5:d1:fc:c0:3c:34:b1:08:d8:88:74:11:a5:df:ec:
f7:f7:c0:f0:ce:5d:6e:15:c6:3b:d9:6c:9b:01:b5:
9e:37:aa:41:81:1a:c8:44:90:88:bd:57:a4:1c:6b:
5a:00:27:4e:17:dd:f6:9e:92:81:79:cc:af:9f:da:
3a:7d:32:8a:5d:81:f1:ce:6f:34:34:e3:74:05:fa:
d4:b9:a3:e8:e7:34:3d:e8:db:b0:ec:eb:05:67:2b:
a2:d4:76:2f:cd:6a:db:66:89:aa:af:e4:57:fc:6e:
44:32:8e:0b:29:a5:fd:a3:ff:fe:4e:0e:b2:1d:0c:
8d:b7:00:8b:39:4c:a6:4f:37:ae:94:87:8f:5b:98:
1b:37:50:8a:e8:7b:ae:ed:37:80:dd:aa:1b:b4:21:
04:50:88:8e:0d:6f:04:09:1d:4c:9f:02:ff:ba:23:
19:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:2A:CE:BC:7C:E1:D9:D3:F7:D9:2D:76:4D:E7:4F:88:34:C7:DC:EF
X509v3 Authority Key Identifier:
keyid:46:5E:BA:5C:1A:80:F8:6A:45:89:27:8E:DD:93:04:B3:F5:16:9F:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Rl66XBqA-GpFiSeO3ZMEs_UWn4M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/c12a7b-5caf-4e7c-970d-5c476e3325f5/1/yyrOvHzh2dP32S12TedPiDTH3O8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/c12a7b-5caf-4e7c-970d-5c476e3325f5/1/Rl66XBqA-GpFiSeO3ZMEs_UWn4M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.239.48.0/24
Signature Algorithm: sha256WithRSAEncryption
06:1b:b8:83:78:54:5d:05:80:f0:af:dc:b2:3b:bb:fe:e7:fe:
b7:9f:e3:c8:8a:eb:f7:1c:d1:0f:08:4e:bd:22:ad:64:ce:fd:
c2:28:35:84:0b:a5:54:e8:65:f6:52:bc:d2:92:fb:7b:9a:98:
6f:42:2b:02:bb:2f:a3:c8:36:b5:98:c3:fb:f6:d7:a9:92:38:
6b:dc:19:09:49:fa:54:a7:06:b9:18:0a:8d:13:20:53:ce:8b:
96:7c:58:c2:a0:93:b6:e9:35:8a:34:ab:a5:eb:8e:66:04:0d:
e6:51:47:3b:68:84:9f:6f:00:32:d1:3a:1d:04:f0:53:c1:89:
85:26:9f:73:da:c5:66:02:0a:2e:91:e3:63:8c:38:07:a1:83:
01:28:9f:52:09:0c:4d:94:1d:ef:da:54:7a:94:42:3c:90:cd:
91:d0:44:b5:ea:98:b9:d9:ae:51:2f:d2:14:c0:17:78:4a:61:
50:8d:9a:90:15:88:b5:71:b0:5b:ec:35:be:ee:6a:0c:ce:cf:
f4:be:e9:cf:20:d3:24:23:1d:de:85:b7:0e:b3:74:fc:83:da:
26:b5:03:60:2a:2a:24:69:57:08:c6:0a:d2:53:f6:03:7d:b2:
1a:dc:99:e3:ad:81:f0:df:dc:9d:33:43:24:d8:8a:f1:99:77:
4d:79:be:1d
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYUU7oE7u/hl4h70xrHUCFN7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ2NWViYTVjMWE4MGY4NmE0NTg5Mjc4ZWRkOTMwNGIzZjUx
NjlmODMwHhcNMjIxMjE1MDgzNzMyWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjYjJhY2ViYzdjZTFkOWQzZjdkOTJkNzY0ZGU3NGY4ODM0YzdkY2VmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh7EDfD11kGln5rp7tN9puhwNHGR8
YA8A9aXaskCYulDgrazXsbwAhKZw0AiiXEEjjIQQQe+bljTwPGc1fOGgNklPv63u
33K7/tCqXgyU2ZsRp+84fcyzL9zF0fzAPDSxCNiIdBGl3+z398Dwzl1uFcY72Wyb
AbWeN6pBgRrIRJCIvVekHGtaACdOF932npKBecyvn9o6fTKKXYHxzm80NON0BfrU
uaPo5zQ96Nuw7OsFZyui1HYvzWrbZomqr+RX/G5EMo4LKaX9o//+Tg6yHQyNtwCL
OUymTzeulIePW5gbN1CK6Huu7TeA3aobtCEEUIiODW8ECR1MnwL/uiMZfwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFMsqzrx84dnT99ktdk3nT4g0x9zvMB8GA1UdIwQY
MBaAFEZeulwagPhqRYknjt2TBLP1Fp+DMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUmw2NlhCcUEtR3BGaVNlTzNaTUVzX1VXbjRNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi9jMTJhN2ItNWNhZi00ZTdjLTk3MGQt
NWM0NzZlMzMyNWY1LzEveXlyT3ZIemgyZFAzMlMxMlRlZFBpRFRIM084LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Mi9jMTJhN2ItNWNhZi00ZTdjLTk3MGQtNWM0NzZlMzMyNWY1
LzEvUmw2NlhCcUEtR3BGaVNlTzNaTUVzX1VXbjRNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAue8wMA0G
CSqGSIb3DQEBCwUAA4IBAQAGG7iDeFRdBYDwr9yyO7v+5/63n+PIiuv3HNEPCE69
Iq1kzv3CKDWEC6VU6GX2UrzSkvt7mphvQisCuy+jyDa1mMP79tepkjhr3BkJSfpU
pwa5GAqNEyBTzouWfFjCoJO26TWKNKul645mBA3mUUc7aISfbwAy0TodBPBTwYmF
Jp9z2sVmAgoukeNjjDgHoYMBKJ9SCQxNlB3v2lR6lEI8kM2R0ES16pi52a5RL9IU
wBd4SmFQjZqQFYi1cbBb7DW+7moMzs/0vunPINMkIx3ehbcOs3T8g9omtQNgKiok
aVcIxgrSU/YDfbIa3JnjrYHw39ydM0Mk2IrxmXdNeb4d
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:59:33 2023 by rpki-client on console-fra.rpki-client.org