Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/6046a6-decb-49a3-a3b4-3087f86a63ab/1/KVpVpyEtDwxQOgcIILmId8ZOzQo.roa
File: KVpVpyEtDwxQOgcIILmId8ZOzQo.roa (raw, json)
Hash identifier: E3eTmf1hdexRJ5pbmI9qWtsldmbA/QbUaFfUnv9PGR8=
Subject key identifier: 29:5A:55:A7:21:2D:0F:0C:50:3A:07:08:20:B9:88:77:C6:4E:CD:0A
Certificate issuer: /CN=c605871889b9dcafe7ec3136aed1ddfee2dfbc7d
Certificate serial: 0184AA99B52D48196A4701056B8A6C8B1FD6
Authority key identifier: C6:05:87:18:89:B9:DC:AF:E7:EC:31:36:AE:D1:DD:FE:E2:DF:BC:7D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xgWHGIm53K_n7DE2rtHd_uLfvH0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/6046a6-decb-49a3-a3b4-3087f86a63ab/1/KVpVpyEtDwxQOgcIILmId8ZOzQo.roa
Signing time: Thu 24 Nov 2022 17:05:10 +0000
ROA not before: Thu 24 Nov 2022 17:05:10 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 31019
IP address blocks: 91.228.151.0/24 maxlen: 24
185.82.184.0/22 maxlen: 22
2a05:9280::/29 maxlen: 29
2001:67c:22dc::/48 maxlen: 48
2a05:9280::/32 maxlen: 32
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:aa:99:b5:2d:48:19:6a:47:01:05:6b:8a:6c:8b:1f:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c605871889b9dcafe7ec3136aed1ddfee2dfbc7d
Validity
Not Before: Nov 24 17:05:10 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=295a55a7212d0f0c503a070820b98877c64ecd0a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:bb:cc:76:ee:94:2a:21:5d:a1:6c:af:d0:c1:
b4:7b:f6:67:13:71:88:f3:18:54:11:40:ae:c4:e9:
17:ed:82:2f:e4:a9:52:a3:ec:ef:e4:4b:af:12:0b:
a4:b1:ab:29:70:6d:41:ab:ed:9b:f2:f4:13:45:7a:
0d:46:d4:72:ed:39:2c:f5:e7:ee:6e:b0:9a:0c:83:
32:67:ea:3c:07:9d:ee:4a:86:d3:01:ad:8a:dd:0b:
f1:70:8e:9a:41:cc:e9:5e:51:51:41:d5:c4:2b:85:
2e:5d:29:aa:f4:d2:41:74:54:d9:e9:2f:ce:02:3f:
61:b9:2b:bb:1a:b2:98:59:b4:dc:b3:cc:f5:9d:2d:
08:4d:63:06:29:33:5a:a9:67:06:33:48:33:85:a9:
6b:ac:a3:a9:82:cd:60:0d:7e:89:80:67:34:a6:71:
6c:ad:f3:6b:b2:cd:6b:e7:7b:94:7b:28:c2:68:ba:
9c:05:ed:4c:5b:9f:62:c7:d1:7f:35:0c:e2:f5:43:
c7:75:b8:79:aa:58:99:5b:61:d0:11:0c:64:a7:b0:
fc:41:42:96:0d:4a:15:59:7b:0e:3a:4a:13:cd:b4:
cf:7e:30:07:fd:b0:30:19:db:4c:1e:3b:6b:0f:59:
3f:51:9d:d4:f3:ce:cc:3d:99:76:5d:6c:8f:5e:62:
e9:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:5A:55:A7:21:2D:0F:0C:50:3A:07:08:20:B9:88:77:C6:4E:CD:0A
X509v3 Authority Key Identifier:
keyid:C6:05:87:18:89:B9:DC:AF:E7:EC:31:36:AE:D1:DD:FE:E2:DF:BC:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xgWHGIm53K_n7DE2rtHd_uLfvH0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/6046a6-decb-49a3-a3b4-3087f86a63ab/1/KVpVpyEtDwxQOgcIILmId8ZOzQo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/6046a6-decb-49a3-a3b4-3087f86a63ab/1/xgWHGIm53K_n7DE2rtHd_uLfvH0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.228.151.0/24
185.82.184.0/22
IPv6:
2001:67c:22dc::/48
2a05:9280::/29
Signature Algorithm: sha256WithRSAEncryption
3d:ce:19:b4:bc:2b:e2:6a:16:e1:52:79:3a:bf:7f:cd:a2:66:
49:f2:7f:7a:bd:d0:79:ba:d0:5a:b3:d2:5b:18:b7:26:3d:6e:
a6:66:3e:f6:82:03:c7:1c:a5:2e:e2:2f:8c:41:ae:91:a6:f8:
09:70:c6:7e:68:21:18:70:11:d2:dc:40:d1:c5:61:32:06:96:
d5:97:a8:73:0f:90:de:d3:cc:e9:5b:51:53:91:13:bb:36:af:
a4:61:6e:a1:1c:d5:2a:0f:dd:44:35:f3:a8:bc:b6:e1:ae:83:
4d:58:b6:11:7e:25:eb:a2:a6:b8:e5:cf:1d:d3:a4:80:8f:7e:
03:b2:16:04:60:48:ff:f8:6f:23:df:48:ab:1e:00:00:b2:d8:
02:41:70:f2:5d:b1:7b:ef:c5:38:28:6d:ae:27:cf:6b:c9:38:
9c:d6:e9:2f:57:ce:5a:a8:ea:30:8b:1d:2c:8a:52:26:bc:ae:
cf:3a:69:b1:f7:1a:2b:a2:de:ca:90:2a:0a:dc:20:29:c4:fd:
88:31:97:cc:39:2b:15:dd:3d:02:df:34:30:52:a3:e5:2a:8d:
31:61:7b:31:1f:33:f5:09:40:4e:34:bb:9e:45:07:20:9c:0b:
03:66:41:19:3b:ad:94:e7:93:6c:33:f1:7a:7e:0f:7c:ff:03:
67:9a:06:29
-----BEGIN CERTIFICATE-----
MIIFGzCCBAOgAwIBAgISAYSqmbUtSBlqRwEFa4psix/WMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM2MDU4NzE4ODliOWRjYWZlN2VjMzEzNmFlZDFkZGZlZTJk
ZmJjN2QwHhcNMjIxMTI0MTcwNTEwWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyOTVhNTVhNzIxMmQwZjBjNTAzYTA3MDgyMGI5ODg3N2M2NGVjZDBhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAobvMdu6UKiFdoWyv0MG0e/ZnE3GI
8xhUEUCuxOkX7YIv5KlSo+zv5EuvEguksaspcG1Bq+2b8vQTRXoNRtRy7Tks9efu
brCaDIMyZ+o8B53uSobTAa2K3QvxcI6aQczpXlFRQdXEK4UuXSmq9NJBdFTZ6S/O
Aj9huSu7GrKYWbTcs8z1nS0ITWMGKTNaqWcGM0gzhalrrKOpgs1gDX6JgGc0pnFs
rfNrss1r53uUeyjCaLqcBe1MW59ix9F/NQzi9UPHdbh5qliZW2HQEQxkp7D8QUKW
DUoVWXsOOkoTzbTPfjAH/bAwGdtMHjtrD1k/UZ3U887MPZl2XWyPXmLpjQIDAQAB
o4ICJzCCAiMwHQYDVR0OBBYEFClaVachLQ8MUDoHCCC5iHfGTs0KMB8GA1UdIwQY
MBaAFMYFhxiJudyv5+wxNq7R3f7i37x9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveGdXSEdJbTUzS19uN0RFMnJ0SGRfdUxmdkgwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy82MDQ2YTYtZGVjYi00OWEzLWEzYjQt
MzA4N2Y4NmE2M2FiLzEvS1ZwVnB5RXREd3hRT2djSUlMbUlkOFpPelFvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNy82MDQ2YTYtZGVjYi00OWEzLWEzYjQtMzA4N2Y4NmE2M2Fi
LzEveGdXSEdJbTUzS19uN0RFMnJ0SGRfdUxmdkgwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMD0GCCsGAQUFBwEHAQH/BC4wLDASBAIAATAMAwQAW+SXAwQC
uVK4MBYEAgACMBADBwAgAQZ8ItwDBQMqBZKAMA0GCSqGSIb3DQEBCwUAA4IBAQA9
zhm0vCviahbhUnk6v3/NomZJ8n96vdB5utBas9JbGLcmPW6mZj72ggPHHKUu4i+M
Qa6RpvgJcMZ+aCEYcBHS3EDRxWEyBpbVl6hzD5De08zpW1FTkRO7Nq+kYW6hHNUq
D91ENfOovLbhroNNWLYRfiXroqa45c8d06SAj34DshYEYEj/+G8j30irHgAAstgC
QXDyXbF778U4KG2uJ89ryTic1ukvV85aqOowix0silImvK7POmmx9xorot7KkCoK
3CApxP2IMZfMOSsV3T0C3zQwUqPlKo0xYXsxHzP1CUBONLueRQcgnAsDZkEZO62U
55NsM/F6fg98/wNnmgYp
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:53:21 2024 by rpki-client on console-fra.rpki-client.org