Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/cdddd5-817a-4113-8b82-23049e4d2f12/1/b5e9kOetlIDPM9gkCWaOnMWlwzs.roa
File: b5e9kOetlIDPM9gkCWaOnMWlwzs.roa (raw, json)
Hash identifier: 8XQJG0bb4/lzKZbKRHB8nFTt2xQTW2fIR4uF4QvAavM=
Subject key identifier: 6F:97:BD:90:E7:AD:94:80:CF:33:D8:24:09:66:8E:9C:C5:A5:C3:3B
Certificate issuer: /CN=351a2fd6f5e5af87d5cea095066fbcc3d3e546a4
Certificate serial: 018529C63C390641528C95E963FC27671E88
Authority key identifier: 35:1A:2F:D6:F5:E5:AF:87:D5:CE:A0:95:06:6F:BC:C3:D3:E5:46:A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NRov1vXlr4fVzqCVBm-8w9PlRqQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/cdddd5-817a-4113-8b82-23049e4d2f12/1/b5e9kOetlIDPM9gkCWaOnMWlwzs.roa
Signing time: Mon 19 Dec 2022 09:45:35 +0000
ROA not before: Mon 19 Dec 2022 09:45:35 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 202228
IP address blocks: 94.240.52.0/22 maxlen: 22
94.240.52.0/24 maxlen: 24
94.240.53.0/24 maxlen: 24
94.240.54.0/24 maxlen: 24
94.240.55.0/24 maxlen: 24
94.240.60.0/24 maxlen: 24
94.240.60.0/23 maxlen: 23
94.240.61.0/24 maxlen: 24
91.106.26.0/23 maxlen: 23
91.106.26.0/24 maxlen: 24
91.106.27.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:29:c6:3c:39:06:41:52:8c:95:e9:63:fc:27:67:1e:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=351a2fd6f5e5af87d5cea095066fbcc3d3e546a4
Validity
Not Before: Dec 19 09:45:35 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6f97bd90e7ad9480cf33d82409668e9cc5a5c33b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:90:d5:30:3f:80:85:54:54:60:09:a1:82:a5:
d9:b0:cf:e4:9e:d2:07:02:b4:e7:2f:b0:52:ba:c2:
f7:ac:56:09:da:8d:5c:6f:fc:47:5d:5f:26:af:68:
45:ba:a6:f3:b4:f1:bc:41:9c:5e:01:29:51:68:77:
38:a5:49:37:a7:cc:d9:11:66:5c:86:c9:b6:53:e3:
9b:ee:28:9b:49:f9:18:a9:b0:76:46:18:cf:02:48:
a9:07:59:41:ab:34:9c:07:f8:ef:b7:e7:89:a8:fb:
95:fe:40:84:1f:9b:dd:f9:fb:c6:a2:8c:84:4c:db:
4e:50:0a:30:28:59:f2:e0:0d:06:ac:79:f1:db:f1:
a0:ab:70:1e:cc:b6:78:65:4d:c1:76:65:a4:29:08:
17:a3:8e:5c:c8:e6:18:c4:9b:7b:1f:c5:99:65:97:
87:d2:b2:99:74:8c:9e:68:a6:d8:14:9d:4d:29:45:
8d:e2:e8:a5:d9:72:c5:c4:da:c3:ed:fe:e8:8d:b5:
e1:fc:83:9d:27:06:85:fc:f5:39:17:70:a9:20:cd:
2c:f8:a7:14:28:6f:7b:8d:67:b3:be:14:67:b1:06:
e0:56:57:ad:57:47:85:24:cf:45:4f:cf:5d:57:ba:
ec:49:8a:a4:db:e1:8d:b8:9b:4d:14:ce:73:f4:46:
4a:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:97:BD:90:E7:AD:94:80:CF:33:D8:24:09:66:8E:9C:C5:A5:C3:3B
X509v3 Authority Key Identifier:
keyid:35:1A:2F:D6:F5:E5:AF:87:D5:CE:A0:95:06:6F:BC:C3:D3:E5:46:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NRov1vXlr4fVzqCVBm-8w9PlRqQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/cdddd5-817a-4113-8b82-23049e4d2f12/1/b5e9kOetlIDPM9gkCWaOnMWlwzs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/cdddd5-817a-4113-8b82-23049e4d2f12/1/NRov1vXlr4fVzqCVBm-8w9PlRqQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.106.26.0/23
94.240.52.0/22
94.240.60.0/23
Signature Algorithm: sha256WithRSAEncryption
2a:46:e4:c0:07:12:2a:2a:c4:84:23:28:37:aa:71:95:01:f8:
24:0d:61:e8:6f:bf:c2:76:63:d8:fb:ed:5e:0d:54:c5:53:6a:
cf:88:ba:a8:ee:c5:13:5c:50:92:ef:69:cb:6d:f6:23:15:1c:
65:f0:63:96:be:72:23:b2:ee:97:38:4a:af:f6:e5:70:6a:13:
61:84:80:58:1d:cf:ec:6f:ef:a8:e2:22:34:26:34:be:d1:c3:
7e:bc:1d:17:34:71:c8:ee:ea:26:9c:95:60:4e:69:4c:01:2b:
16:ad:ab:81:f7:8f:aa:dc:38:f4:16:6f:29:09:70:e1:1f:7e:
35:cb:8f:25:30:b3:64:88:25:5b:14:78:65:14:b9:a6:85:ff:
c8:73:3e:6e:81:d8:3f:00:43:bb:06:a1:5a:e8:de:fc:78:26:
78:ac:03:83:ee:06:d2:7e:5a:55:56:0f:93:35:35:dd:a3:fc:
9a:8e:90:01:b5:96:ff:d2:5b:96:55:8f:2a:12:50:84:b0:54:
8b:a6:96:57:5e:67:50:e5:57:3a:cb:49:cb:e6:fa:10:bd:0f:
0e:90:3d:7e:8d:41:56:b9:bb:c9:f0:55:95:70:d8:ec:23:f4:
d3:26:3f:08:54:60:95:b1:96:b3:70:b7:cd:b4:d4:79:f3:4f:
45:9c:06:c2
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAYUpxjw5BkFSjJXpY/wnZx6IMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM1MWEyZmQ2ZjVlNWFmODdkNWNlYTA5NTA2NmZiY2MzZDNl
NTQ2YTQwHhcNMjIxMjE5MDk0NTM1WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2Zjk3YmQ5MGU3YWQ5NDgwY2YzM2Q4MjQwOTY2OGU5Y2M1YTVjMzNiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsZDVMD+AhVRUYAmhgqXZsM/kntIH
ArTnL7BSusL3rFYJ2o1cb/xHXV8mr2hFuqbztPG8QZxeASlRaHc4pUk3p8zZEWZc
hsm2U+Ob7iibSfkYqbB2RhjPAkipB1lBqzScB/jvt+eJqPuV/kCEH5vd+fvGooyE
TNtOUAowKFny4A0GrHnx2/Ggq3AezLZ4ZU3BdmWkKQgXo45cyOYYxJt7H8WZZZeH
0rKZdIyeaKbYFJ1NKUWN4uil2XLFxNrD7f7ojbXh/IOdJwaF/PU5F3CpIM0s+KcU
KG97jWezvhRnsQbgVletV0eFJM9FT89dV7rsSYqk2+GNuJtNFM5z9EZKNwIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFG+XvZDnrZSAzzPYJAlmjpzFpcM7MB8GA1UdIwQY
MBaAFDUaL9b15a+H1c6glQZvvMPT5UakMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTlJvdjF2WGxyNGZWenFDVkJtLTh3OVBsUnFRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMS9jZGRkZDUtODE3YS00MTEzLThiODIt
MjMwNDllNGQyZjEyLzEvYjVlOWtPZXRsSURQTTlna0NXYU9uTVdsd3pzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMS9jZGRkZDUtODE3YS00MTEzLThiODItMjMwNDllNGQyZjEy
LzEvTlJvdjF2WGxyNGZWenFDVkJtLTh3OVBsUnFRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQBW2oaAwQC
XvA0AwQBXvA8MA0GCSqGSIb3DQEBCwUAA4IBAQAqRuTABxIqKsSEIyg3qnGVAfgk
DWHob7/CdmPY++1eDVTFU2rPiLqo7sUTXFCS72nLbfYjFRxl8GOWvnIjsu6XOEqv
9uVwahNhhIBYHc/sb++o4iI0JjS+0cN+vB0XNHHI7uomnJVgTmlMASsWrauB94+q
3Dj0Fm8pCXDhH341y48lMLNkiCVbFHhlFLmmhf/Icz5ugdg/AEO7BqFa6N78eCZ4
rAOD7gbSflpVVg+TNTXdo/yajpABtZb/0luWVY8qElCEsFSLppZXXmdQ5Vc6y0nL
5voQvQ8OkD1+jUFWubvJ8FWVcNjsI/TTJj8IVGCVsZazcLfNtNR5809FnAbC
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:39:12 2024 by rpki-client on console-ams.rpki-client.org