Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/c61092-734a-4eef-9d67-4905243bc828/1/nrKWj6G4f1aXc3rEPD73UoWeYJo.roa
File: nrKWj6G4f1aXc3rEPD73UoWeYJo.roa (raw, json)
Hash identifier: HN5lO3mF4b3LoA8fdSIK6eCLjq4Iyp2HURRQH/aow74=
Subject key identifier: 9E:B2:96:8F:A1:B8:7F:56:97:73:7A:C4:3C:3E:F7:52:85:9E:60:9A
Certificate issuer: /CN=05b1d13c2e26e12786246a5ec4c5bea69864b20f
Certificate serial: 01856E2FC3713F361C8375B8232DB99E75CC
Authority key identifier: 05:B1:D1:3C:2E:26:E1:27:86:24:6A:5E:C4:C5:BE:A6:98:64:B2:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BbHRPC4m4SeGJGpexMW-pphksg8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/c61092-734a-4eef-9d67-4905243bc828/1/nrKWj6G4f1aXc3rEPD73UoWeYJo.roa
Signing time: Sun 01 Jan 2023 16:35:02 +0000
ROA not before: Sun 01 Jan 2023 16:35:02 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 211529
IP address blocks: 194.5.95.0/24 maxlen: 24
45.66.118.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:2f:c3:71:3f:36:1c:83:75:b8:23:2d:b9:9e:75:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05b1d13c2e26e12786246a5ec4c5bea69864b20f
Validity
Not Before: Jan 1 16:35:02 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9eb2968fa1b87f5697737ac43c3ef752859e609a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:2b:86:50:fe:b8:bd:68:07:5d:66:93:0b:97:
95:89:f5:93:44:bc:0f:f8:6d:2d:d3:f3:97:39:df:
fa:7c:00:44:c0:b5:e7:15:55:dd:f9:2f:7f:7f:ea:
a8:e8:6d:9e:1e:9c:fd:66:8c:f8:f1:24:47:6c:e1:
79:69:1d:6c:ef:fc:ab:23:59:1c:58:72:c3:01:13:
b9:5a:62:0e:7f:15:38:5e:0a:d9:40:de:1c:82:35:
90:9a:4e:8b:5f:a2:5a:c5:bb:f2:ad:19:ac:44:56:
1c:29:c1:9e:fc:ad:8c:cf:a2:0a:55:90:b1:13:40:
3d:b9:65:56:ce:49:10:82:1b:37:3e:a5:14:55:bb:
58:e9:89:9c:cd:fa:ee:46:a2:ad:c7:ab:15:d4:84:
16:d6:3f:61:05:9b:03:85:27:c9:7c:fe:27:0a:db:
36:1e:68:8c:d4:5f:6a:ec:d7:f4:9a:af:a4:e1:dc:
1c:01:ac:8b:68:71:6d:dc:aa:6d:3a:19:c2:36:c4:
1e:51:6f:99:09:48:e8:c8:95:b3:4e:74:79:b9:93:
92:cf:33:9e:b4:52:82:bf:67:90:d7:8b:53:7a:34:
eb:37:04:e6:8c:a6:8a:c0:4a:05:e6:32:4e:dc:c9:
f1:4e:7e:5e:2f:52:78:b0:72:cf:13:69:17:15:db:
dd:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:B2:96:8F:A1:B8:7F:56:97:73:7A:C4:3C:3E:F7:52:85:9E:60:9A
X509v3 Authority Key Identifier:
keyid:05:B1:D1:3C:2E:26:E1:27:86:24:6A:5E:C4:C5:BE:A6:98:64:B2:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BbHRPC4m4SeGJGpexMW-pphksg8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/c61092-734a-4eef-9d67-4905243bc828/1/nrKWj6G4f1aXc3rEPD73UoWeYJo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/c61092-734a-4eef-9d67-4905243bc828/1/BbHRPC4m4SeGJGpexMW-pphksg8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.66.118.0/24
194.5.95.0/24
Signature Algorithm: sha256WithRSAEncryption
2d:ea:67:ba:f1:a5:6d:7d:e3:46:d2:3a:c0:f7:db:6e:1a:22:
6c:e2:81:bd:25:9e:85:d5:d5:25:d2:87:f0:0d:8e:6a:e1:8d:
75:40:53:1b:be:ca:41:b4:91:e7:56:10:52:41:ed:05:49:44:
0c:41:ca:ec:b6:48:a8:c6:81:50:68:0f:44:3d:dd:e1:d0:aa:
66:1b:60:f8:b7:2a:a6:c3:c1:34:d3:e1:47:15:0b:0b:0a:78:
9b:8b:15:ac:6c:68:85:16:ba:47:e1:d6:a3:a1:b9:36:c0:1b:
f3:86:aa:7e:03:f7:5b:29:35:e4:6e:c2:70:02:1b:d8:5d:d1:
ee:79:c3:d5:b4:97:f5:80:31:95:05:db:03:23:70:1a:04:86:
64:45:91:f6:67:95:6c:c7:c1:d4:1c:06:3b:d0:b3:93:a6:98:
1a:6d:d7:63:fd:0e:ed:4c:8a:50:79:ab:86:68:e6:63:8e:ca:
1a:cf:4f:56:6e:75:32:51:75:17:d5:65:eb:4d:cc:c1:89:1f:
9d:b6:da:52:a5:34:bf:ca:cf:6a:47:34:19:0c:cc:a0:3c:3d:
34:a3:0e:19:98:86:c0:93:85:52:51:b6:d6:72:3d:3f:80:5f:
3c:66:2a:20:ac:19:a6:03:5f:06:3a:40:5d:48:6e:c4:19:5c:
c5:25:26:66
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYVuL8NxPzYcg3W4Iy25nnXMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA1YjFkMTNjMmUyNmUxMjc4NjI0NmE1ZWM0YzViZWE2OTg2
NGIyMGYwHhcNMjMwMTAxMTYzNTAyWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5ZWIyOTY4ZmExYjg3ZjU2OTc3MzdhYzQzYzNlZjc1Mjg1OWU2MDlhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjiuGUP64vWgHXWaTC5eVifWTRLwP
+G0t0/OXOd/6fABEwLXnFVXd+S9/f+qo6G2eHpz9Zoz48SRHbOF5aR1s7/yrI1kc
WHLDARO5WmIOfxU4XgrZQN4cgjWQmk6LX6JaxbvyrRmsRFYcKcGe/K2Mz6IKVZCx
E0A9uWVWzkkQghs3PqUUVbtY6YmczfruRqKtx6sV1IQW1j9hBZsDhSfJfP4nCts2
HmiM1F9q7Nf0mq+k4dwcAayLaHFt3KptOhnCNsQeUW+ZCUjoyJWzTnR5uZOSzzOe
tFKCv2eQ14tTejTrNwTmjKaKwEoF5jJO3MnxTn5eL1J4sHLPE2kXFdvdwwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFJ6ylo+huH9Wl3N6xDw+91KFnmCaMB8GA1UdIwQY
MBaAFAWx0TwuJuEnhiRqXsTFvqaYZLIPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQmJIUlBDNG00U2VHSkdwZXhNVy1wcGhrc2c4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOC9jNjEwOTItNzM0YS00ZWVmLTlkNjct
NDkwNTI0M2JjODI4LzEvbnJLV2o2RzRmMWFYYzNyRVBENzNVb1dlWUpvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hOC9jNjEwOTItNzM0YS00ZWVmLTlkNjctNDkwNTI0M2JjODI4
LzEvQmJIUlBDNG00U2VHSkdwZXhNVy1wcGhrc2c4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQALUJ2AwQA
wgVfMA0GCSqGSIb3DQEBCwUAA4IBAQAt6me68aVtfeNG0jrA99tuGiJs4oG9JZ6F
1dUl0ofwDY5q4Y11QFMbvspBtJHnVhBSQe0FSUQMQcrstkioxoFQaA9EPd3h0Kpm
G2D4tyqmw8E00+FHFQsLCnibixWsbGiFFrpH4dajobk2wBvzhqp+A/dbKTXkbsJw
AhvYXdHuecPVtJf1gDGVBdsDI3AaBIZkRZH2Z5Vsx8HUHAY70LOTppgabddj/Q7t
TIpQeauGaOZjjsoaz09WbnUyUXUX1WXrTczBiR+dttpSpTS/ys9qRzQZDMygPD00
ow4ZmIbAk4VSUbbWcj0/gF88ZiogrBmmA18GOkBdSG7EGVzFJSZm
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:05:47 2023 by rpki-client on console-ams.rpki-client.org