Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/143d29-cf72-4d01-918c-16afc4dffdd4/1/3Quz0yw03Psj19gKdSLzmVCjah8.roa
File: 3Quz0yw03Psj19gKdSLzmVCjah8.roa (raw, json)
Hash identifier: X+ojDh7choNED3S/VvnDrjbOQq2iwgksWntGZpOf23o=
Subject key identifier: DD:0B:B3:D3:2C:34:DC:FB:23:D7:D8:0A:75:22:F3:99:50:A3:6A:1F
Certificate issuer: /CN=3a00807698f0b097d69ab3926917d1dcc838a624
Certificate serial: 0185A6BF79658838317C3368E333B0AAEEEA
Authority key identifier: 3A:00:80:76:98:F0:B0:97:D6:9A:B3:92:69:17:D1:DC:C8:38:A6:24
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OgCAdpjwsJfWmrOSaRfR3Mg4piQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/143d29-cf72-4d01-918c-16afc4dffdd4/1/3Quz0yw03Psj19gKdSLzmVCjah8.roa
Signing time: Thu 12 Jan 2023 16:10:44 +0000
ROA not before: Thu 12 Jan 2023 16:10:44 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 147001
IP address blocks: 45.10.172.0/23 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:a6:bf:79:65:88:38:31:7c:33:68:e3:33:b0:aa:ee:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3a00807698f0b097d69ab3926917d1dcc838a624
Validity
Not Before: Jan 12 16:10:44 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=dd0bb3d32c34dcfb23d7d80a7522f39950a36a1f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:9c:89:5e:ed:f1:92:93:c5:9f:b9:dd:94:94:
a5:cd:a0:e8:ec:2f:af:12:37:97:3f:12:11:91:a5:
95:40:d7:0e:76:31:bd:4a:07:97:22:55:65:81:02:
cb:bc:5c:e5:4d:0c:fa:64:30:27:a1:be:9e:b4:5c:
84:7a:b0:df:e1:b0:42:2d:3a:19:3b:30:29:97:8a:
3c:5f:73:f5:0c:e1:21:89:bd:19:80:cd:b8:cb:29:
38:09:01:09:6c:48:d4:37:f3:28:e3:23:fe:95:b8:
c4:e8:44:1c:bd:20:74:c9:77:ba:bd:81:24:29:8b:
91:80:d0:f9:9c:42:6c:2a:5c:70:eb:14:23:c3:b0:
b9:a5:2c:8f:5e:97:28:5e:2e:59:87:cb:39:dc:4b:
f9:b4:85:d9:00:a2:93:c7:58:ba:54:d3:71:8f:b7:
38:18:28:f2:d0:2d:34:32:a3:30:56:67:29:c1:78:
05:09:ca:6d:ad:a5:68:07:0a:06:86:1b:2a:05:7c:
82:b9:fe:3c:a6:a1:c4:83:92:e9:74:35:38:ff:c8:
14:3b:3b:f5:20:9e:66:43:3d:f8:78:2d:e7:ed:70:
c0:bc:da:45:b9:b8:8f:7f:d1:95:53:40:10:d7:a9:
aa:fd:81:93:99:5b:88:aa:90:c9:5c:66:d1:d7:b2:
57:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:0B:B3:D3:2C:34:DC:FB:23:D7:D8:0A:75:22:F3:99:50:A3:6A:1F
X509v3 Authority Key Identifier:
keyid:3A:00:80:76:98:F0:B0:97:D6:9A:B3:92:69:17:D1:DC:C8:38:A6:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OgCAdpjwsJfWmrOSaRfR3Mg4piQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/143d29-cf72-4d01-918c-16afc4dffdd4/1/3Quz0yw03Psj19gKdSLzmVCjah8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/143d29-cf72-4d01-918c-16afc4dffdd4/1/OgCAdpjwsJfWmrOSaRfR3Mg4piQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.10.172.0/23
Signature Algorithm: sha256WithRSAEncryption
38:fb:f8:c5:6a:fc:66:5e:60:0a:87:d1:b6:a3:38:f8:f1:37:
c7:ea:b0:61:c7:b6:d9:c7:40:a9:a1:ed:a4:97:b5:a8:cf:f8:
07:db:73:8e:4c:c7:2b:33:e9:da:ae:95:50:8e:90:89:c9:9c:
68:3f:a0:54:20:96:e9:74:c0:2f:bb:7c:8c:ea:45:12:d8:12:
79:e3:51:73:7f:9f:2f:f4:79:51:29:1b:b3:ae:ea:20:9d:11:
d2:12:6f:20:52:3c:83:cc:aa:85:f4:81:bb:33:7b:6c:5f:95:
47:f9:3f:ca:70:36:a5:3c:f9:65:72:bb:39:52:73:5a:33:78:
b9:ee:ff:aa:77:18:ff:89:e7:30:f8:53:60:20:e4:dc:e3:fb:
0a:82:44:79:80:94:26:aa:38:88:a4:e8:e4:f3:30:62:2c:2d:
fd:a6:54:8f:1b:85:d3:a9:5b:2f:89:90:4e:c9:97:da:31:80:
86:0b:c8:01:12:d4:2b:6b:00:22:08:67:13:3a:6b:2f:64:f4:
e7:1b:cc:51:44:48:92:e0:9b:05:6c:50:b6:64:7f:85:d8:88:
43:40:c2:4f:53:50:74:a8:cd:c2:d7:90:3f:e3:3f:b3:c2:01:
43:75:1f:28:16:f5:59:f6:ed:7d:6f:9a:5d:3e:aa:e3:f8:cd:
86:cc:14:6f
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYWmv3lliDgxfDNo4zOwqu7qMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNhMDA4MDc2OThmMGIwOTdkNjlhYjM5MjY5MTdkMWRjYzgz
OGE2MjQwHhcNMjMwMTEyMTYxMDQ0WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkZDBiYjNkMzJjMzRkY2ZiMjNkN2Q4MGE3NTIyZjM5OTUwYTM2YTFmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjJyJXu3xkpPFn7ndlJSlzaDo7C+v
EjeXPxIRkaWVQNcOdjG9SgeXIlVlgQLLvFzlTQz6ZDAnob6etFyEerDf4bBCLToZ
OzApl4o8X3P1DOEhib0ZgM24yyk4CQEJbEjUN/Mo4yP+lbjE6EQcvSB0yXe6vYEk
KYuRgND5nEJsKlxw6xQjw7C5pSyPXpcoXi5Zh8s53Ev5tIXZAKKTx1i6VNNxj7c4
GCjy0C00MqMwVmcpwXgFCcptraVoBwoGhhsqBXyCuf48pqHEg5LpdDU4/8gUOzv1
IJ5mQz34eC3n7XDAvNpFubiPf9GVU0AQ16mq/YGTmVuIqpDJXGbR17JXhwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFN0Ls9MsNNz7I9fYCnUi85lQo2ofMB8GA1UdIwQY
MBaAFDoAgHaY8LCX1pqzkmkX0dzIOKYkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT2dDQWRwandzSmZXbXJPU2FSZlIzTWc0cGlRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYS8xNDNkMjktY2Y3Mi00ZDAxLTkxOGMt
MTZhZmM0ZGZmZGQ0LzEvM1F1ejB5dzAzUHNqMTlnS2RTTHptVkNqYWg4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYS8xNDNkMjktY2Y3Mi00ZDAxLTkxOGMtMTZhZmM0ZGZmZGQ0
LzEvT2dDQWRwandzSmZXbXJPU2FSZlIzTWc0cGlRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBLQqsMA0G
CSqGSIb3DQEBCwUAA4IBAQA4+/jFavxmXmAKh9G2ozj48TfH6rBhx7bZx0Cpoe2k
l7Woz/gH23OOTMcrM+narpVQjpCJyZxoP6BUIJbpdMAvu3yM6kUS2BJ541Fzf58v
9HlRKRuzruognRHSEm8gUjyDzKqF9IG7M3tsX5VH+T/KcDalPPllcrs5UnNaM3i5
7v+qdxj/iecw+FNgIOTc4/sKgkR5gJQmqjiIpOjk8zBiLC39plSPG4XTqVsviZBO
yZfaMYCGC8gBEtQrawAiCGcTOmsvZPTnG8xRREiS4JsFbFC2ZH+F2IhDQMJPU1B0
qM3C15A/4z+zwgFDdR8oFvVZ9u19b5pdPqrj+M2GzBRv
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:40:43 2024 by rpki-client on console-ams.rpki-client.org