Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/78db29-e46d-41f4-87c7-95c42e4a84c0/1/CRxkUu07r2wdOORGz-2DEExecCo.roa
File: CRxkUu07r2wdOORGz-2DEExecCo.roa (raw, json)
Hash identifier: xcnjGfBYfm8KXjy6b42n3+CoVgrU4Cduf0gGLLwJQ3c=
Subject key identifier: 09:1C:64:52:ED:3B:AF:6C:1D:38:E4:46:CF:ED:83:10:4C:5E:70:2A
Certificate issuer: /CN=e94978779e930e01fbfe7e0c5fcb41611129d4e8
Certificate serial: 0D6F208B
Authority key identifier: E9:49:78:77:9E:93:0E:01:FB:FE:7E:0C:5F:CB:41:61:11:29:D4:E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6Ul4d56TDgH7_n4MX8tBYREp1Og.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/78db29-e46d-41f4-87c7-95c42e4a84c0/1/CRxkUu07r2wdOORGz-2DEExecCo.roa
Signing time: Sun 12 Jun 2022 16:02:07 +0000
ROA not before: Sun 12 Jun 2022 16:02:07 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 41227
IP address blocks: 78.111.1.0/24 maxlen: 24
78.111.6.0/24 maxlen: 24
87.247.171.0/24 maxlen: 24
87.247.172.0/24 maxlen: 24
87.247.170.0/24 maxlen: 24
87.247.173.0/24 maxlen: 24
87.247.178.0/24 maxlen: 24
87.247.184.0/21 maxlen: 21
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 225386635 (0xd6f208b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e94978779e930e01fbfe7e0c5fcb41611129d4e8
Validity
Not Before: Jun 12 16:02:07 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=091c6452ed3baf6c1d38e446cfed83104c5e702a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:1e:7b:b6:40:25:76:04:47:8f:82:16:a1:3e:
07:df:e4:7a:9c:f5:88:5d:f6:2a:ce:73:1b:7f:09:
f8:bd:c7:fd:dc:7e:1f:22:66:23:b8:f1:62:0a:0f:
e5:39:ad:f2:32:54:fe:47:f5:a1:1f:16:36:13:ca:
9f:78:c4:3e:0b:5b:be:f4:2a:31:73:b4:ca:8c:7f:
fe:8c:a8:8d:55:bf:74:ab:87:3f:d0:64:04:ec:99:
ea:cc:d3:78:dd:36:c8:5f:a8:cc:21:73:00:e3:81:
81:f5:bd:24:3c:bb:21:86:16:de:90:01:e3:12:0d:
f8:67:8f:3c:69:31:63:f1:da:92:48:59:d2:78:ac:
16:9a:a7:18:cc:3e:0e:a9:4f:7c:79:e0:1f:5c:43:
18:c6:0a:00:19:83:3c:e9:3a:39:c3:26:7a:aa:0d:
92:d2:79:88:8f:af:26:a5:f9:40:39:73:6c:5b:ff:
ab:5f:94:5d:e0:52:85:ef:7c:4e:08:ff:a6:2c:a8:
76:28:76:84:a6:a3:3c:66:1e:85:d0:6b:d2:7a:1f:
5f:7c:3c:bd:65:eb:74:a3:67:6f:b4:13:1f:42:18:
78:5f:76:77:80:00:b5:dd:37:f0:89:36:88:1e:6b:
86:a5:d6:39:ff:c2:54:81:77:ac:85:68:37:a2:b2:
9e:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:1C:64:52:ED:3B:AF:6C:1D:38:E4:46:CF:ED:83:10:4C:5E:70:2A
X509v3 Authority Key Identifier:
keyid:E9:49:78:77:9E:93:0E:01:FB:FE:7E:0C:5F:CB:41:61:11:29:D4:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6Ul4d56TDgH7_n4MX8tBYREp1Og.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/78db29-e46d-41f4-87c7-95c42e4a84c0/1/CRxkUu07r2wdOORGz-2DEExecCo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/78db29-e46d-41f4-87c7-95c42e4a84c0/1/6Ul4d56TDgH7_n4MX8tBYREp1Og.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.111.1.0/24
78.111.6.0/24
87.247.170.0-87.247.173.255
87.247.178.0/24
87.247.184.0/21
Signature Algorithm: sha256WithRSAEncryption
66:24:07:4c:eb:cd:23:1f:c6:75:56:83:84:b9:4b:cb:f0:3f:
cd:00:c1:09:37:1c:a5:46:63:e9:65:15:ab:73:3d:01:2e:3e:
55:3a:4f:c8:ca:e1:e3:5f:cb:42:56:f8:bf:aa:2b:e0:7f:03:
d3:3e:17:00:01:47:f4:45:23:c9:12:b1:68:ea:30:6f:d0:76:
0c:84:28:fc:2b:5e:7d:28:6c:fe:25:d4:55:43:71:6b:10:60:
49:ec:72:be:c9:3a:62:64:79:4a:2b:80:9d:77:e7:f9:bf:2e:
fd:b5:83:07:af:8d:46:e6:b5:bc:f0:fe:38:7e:1f:4f:f0:9c:
2d:8e:27:a9:52:07:26:2a:f9:e7:5e:c1:4c:c7:91:f2:65:48:
e6:03:c4:c3:05:f2:09:99:0e:63:55:29:fc:19:a4:14:00:50:
2a:cd:d3:40:56:a9:f9:9b:6f:10:2c:89:44:75:74:4e:bc:9a:
8f:a6:bf:fa:03:46:aa:20:f4:e6:d3:97:41:8f:be:7c:55:be:
e1:02:7f:00:81:ec:c2:9a:3c:2a:c6:1f:c3:20:41:91:d4:35:
aa:6b:27:80:8c:d4:f2:3f:df:d1:e1:3f:07:a2:14:47:8d:4b:
81:08:f0:c2:de:af:c0:27:c6:aa:47:c2:0b:3f:cb:b7:1d:b6:
04:05:fc:03
-----BEGIN CERTIFICATE-----
MIIFDzCCA/egAwIBAgIEDW8gizANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhl
OTQ5Nzg3NzllOTMwZTAxZmJmZTdlMGM1ZmNiNDE2MTExMjlkNGU4MB4XDTIyMDYx
MjE2MDIwN1oXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoMDkxYzY0NTJlZDNi
YWY2YzFkMzhlNDQ2Y2ZlZDgzMTA0YzVlNzAyYTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAJwee7ZAJXYER4+CFqE+B9/kepz1iF32Ks5zG38J+L3H/dx+
HyJmI7jxYgoP5Tmt8jJU/kf1oR8WNhPKn3jEPgtbvvQqMXO0yox//oyojVW/dKuH
P9BkBOyZ6szTeN02yF+ozCFzAOOBgfW9JDy7IYYW3pAB4xIN+GePPGkxY/HakkhZ
0nisFpqnGMw+DqlPfHngH1xDGMYKABmDPOk6OcMmeqoNktJ5iI+vJqX5QDlzbFv/
q1+UXeBShe98Tgj/piyodih2hKajPGYehdBr0nofX3w8vWXrdKNnb7QTH0IYeF92
d4AAtd038Ik2iB5rhqXWOf/CVIF3rIVoN6Kyno0CAwEAAaOCAikwggIlMB0GA1Ud
DgQWBBQJHGRS7TuvbB045EbP7YMQTF5wKjAfBgNVHSMEGDAWgBTpSXh3npMOAfv+
fgxfy0FhESnU6DAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
LzZVbDRkNTZURGdIN19uNE1YOHRCWVJFcDFPZy5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvYjEvNzhkYjI5LWU0NmQtNDFmNC04N2M3LTk1YzQyZTRhODRjMC8x
L0NSeGtVdTA3cjJ3ZE9PUkd6LTJERUV4ZWNDby5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYjEv
NzhkYjI5LWU0NmQtNDFmNC04N2M3LTk1YzQyZTRhODRjMC8xLzZVbDRkNTZURGdI
N19uNE1YOHRCWVJFcDFPZy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjA/
BggrBgEFBQcBBwEB/wQwMC4wLAQCAAEwJgMEAE5vAQMEAE5vBjAMAwQBV/eqAwQB
V/esAwQAV/eyAwQDV/e4MA0GCSqGSIb3DQEBCwUAA4IBAQBmJAdM680jH8Z1VoOE
uUvL8D/NAMEJNxylRmPpZRWrcz0BLj5VOk/IyuHjX8tCVvi/qivgfwPTPhcAAUf0
RSPJErFo6jBv0HYMhCj8K159KGz+JdRVQ3FrEGBJ7HK+yTpiZHlKK4Cdd+f5vy79
tYMHr41G5rW88P44fh9P8JwtjiepUgcmKvnnXsFMx5HyZUjmA8TDBfIJmQ5jVSn8
GaQUAFAqzdNAVqn5m28QLIlEdXROvJqPpr/6A0aqIPTm05dBj758Vb7hAn8AgezC
mjwqxh/DIEGR1DWqayeAjNTyP9/R4T8HohRHjUuBCPDC3q/AJ8aqR8ILP8u3HbYE
BfwD
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:39:08 2024 by rpki-client on console-ams.rpki-client.org