Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/04032c8f-1d57-4c3b-9043-a0e7febf167d/0/3139332e3139342e32302e302f32342d3234203d3e203630383538.roa
File: 3139332e3139342e32302e302f32342d3234203d3e203630383538.roa (raw, json)
Hash identifier: tZCNik55wGadeNSVuV38HV7dWKV3u/pmtlzL5LQ0qtg=
Subject key identifier: B3:FF:3E:66:31:91:57:4C:68:95:60:20:15:79:85:E2:04:DE:C4:9B
Certificate issuer: /CN=d5c3d5e70fc9ad10ba90d45dc66454e9e3a146a8
Certificate serial: 23A11A466D2BB75A808DE29F504856432138E815
Authority key identifier: D5:C3:D5:E7:0F:C9:AD:10:BA:90:D4:5D:C6:64:54:E9:E3:A1:46:A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1cPV5w_JrRC6kNRdxmRU6eOhRqg.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/04032c8f-1d57-4c3b-9043-a0e7febf167d/0/3139332e3139342e32302e302f32342d3234203d3e203630383538.roa
Signing time: Tue 21 May 2024 12:52:52 +0000
ROA not before: Tue 21 May 2024 12:47:52 +0000
ROA not after: Tue 20 May 2025 12:52:52 +0000
asID: 60858
IP address blocks: 193.194.20.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
23:a1:1a:46:6d:2b:b7:5a:80:8d:e2:9f:50:48:56:43:21:38:e8:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5c3d5e70fc9ad10ba90d45dc66454e9e3a146a8
Validity
Not Before: May 21 12:47:52 2024 GMT
Not After : May 20 12:52:52 2025 GMT
Subject: CN=B3FF3E663191574C68956020157985E204DEC49B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:30:ae:3d:1a:3f:45:29:e6:c0:b1:b3:76:9d:
fd:82:1e:7c:ce:89:31:b6:77:f7:73:d7:cf:be:7b:
46:65:f9:5d:bd:53:5e:09:74:7d:a3:5c:c9:53:aa:
0b:9c:6a:9a:9f:71:a3:77:33:91:37:1b:a9:01:68:
b3:3e:d4:9e:c3:18:63:e2:cb:8f:e8:d4:42:e2:fd:
5e:fd:ef:2b:29:ee:ca:68:a6:17:71:05:32:f6:39:
06:2b:a9:63:1b:85:21:65:34:a9:be:11:63:58:67:
cd:8c:43:48:71:ff:a6:dc:d0:58:67:af:60:e8:b5:
8a:ea:57:51:cb:a6:99:c6:0b:92:e4:2d:ec:7e:2b:
97:67:3c:d1:1c:cf:8f:92:ee:59:9e:3e:3c:13:04:
58:1c:78:49:34:d9:fd:2a:6f:d5:74:84:6f:e7:aa:
4a:19:65:74:ff:02:53:3e:68:3e:6b:8c:b7:9f:92:
4a:71:0a:39:34:e0:63:6c:ea:9b:77:aa:ce:3f:c1:
da:07:18:bf:f4:b4:c2:64:0e:41:44:d2:0b:fd:ef:
5b:83:c7:d4:66:f0:a3:aa:21:0c:22:85:c8:60:fb:
e6:c7:69:e3:24:4e:46:dd:cc:a0:7f:23:46:4d:87:
d5:85:2e:72:1f:44:c0:03:9a:e3:f3:76:da:c5:1f:
a4:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:FF:3E:66:31:91:57:4C:68:95:60:20:15:79:85:E2:04:DE:C4:9B
X509v3 Authority Key Identifier:
keyid:D5:C3:D5:E7:0F:C9:AD:10:BA:90:D4:5D:C6:64:54:E9:E3:A1:46:A8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/04032c8f-1d57-4c3b-9043-a0e7febf167d/0/D5C3D5E70FC9AD10BA90D45DC66454E9E3A146A8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1cPV5w_JrRC6kNRdxmRU6eOhRqg.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/04032c8f-1d57-4c3b-9043-a0e7febf167d/0/3139332e3139342e32302e302f32342d3234203d3e203630383538.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.194.20.0/24
Signature Algorithm: sha256WithRSAEncryption
54:4e:12:3b:54:8b:43:33:c7:87:1b:94:bb:55:01:f3:da:6d:
14:57:9d:a7:82:57:44:03:c0:b3:4a:f4:71:07:a9:06:63:79:
05:2d:39:aa:b3:64:4f:60:96:d5:a9:97:a7:a6:9b:83:08:96:
37:cd:8f:ed:34:f6:0a:55:87:61:6a:40:2b:e6:37:62:c7:4a:
6b:0a:55:92:96:0c:a0:67:3f:4a:c7:69:64:aa:47:7a:4a:58:
5d:f9:d3:b1:ea:6a:94:ea:b4:3e:d0:ab:3f:52:50:ba:bf:77:
56:e5:b3:b5:89:1a:12:64:36:16:54:bd:96:98:db:da:f2:85:
d1:6c:1b:86:71:ce:70:e3:3b:66:4e:76:55:ea:d7:42:a1:a4:
72:36:27:60:eb:c7:50:5b:ca:46:8f:75:6c:fa:62:d6:b6:a5:
b8:e1:a3:ba:04:b8:34:2e:4e:ae:59:e2:c8:4b:c8:ea:7a:12:
6c:a1:6f:9e:35:5d:14:59:27:10:f7:97:dc:7d:b8:1b:05:b0:
b6:73:cb:cd:ca:ec:e1:9e:79:e7:fc:19:1d:72:b0:79:da:75:
c6:c1:03:76:6a:9e:38:d7:72:3c:ff:4c:b9:e2:1c:5c:7a:fc:
2f:f5:d2:11:b7:69:06:5f:23:a1:8b:30:ce:b6:e1:86:f4:4b:
40:92:a1:44
-----BEGIN CERTIFICATE-----
MIIFMzCCBBugAwIBAgIUI6EaRm0rt1qAjeKfUEhWQyE46BUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoZDVjM2Q1ZTcwZmM5YWQxMGJhOTBkNDVkYzY2NDU0ZTll
M2ExNDZhODAeFw0yNDA1MjExMjQ3NTJaFw0yNTA1MjAxMjUyNTJaMDMxMTAvBgNV
BAMTKEIzRkYzRTY2MzE5MTU3NEM2ODk1NjAyMDE1Nzk4NUUyMDRERUM0OUIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQChMK49Gj9FKebAsbN2nf2CHnzO
iTG2d/dz18++e0Zl+V29U14JdH2jXMlTqgucapqfcaN3M5E3G6kBaLM+1J7DGGPi
y4/o1ELi/V797ysp7spophdxBTL2OQYrqWMbhSFlNKm+EWNYZ82MQ0hx/6bc0Fhn
r2DotYrqV1HLppnGC5LkLex+K5dnPNEcz4+S7lmePjwTBFgceEk02f0qb9V0hG/n
qkoZZXT/AlM+aD5rjLefkkpxCjk04GNs6pt3qs4/wdoHGL/0tMJkDkFE0gv971uD
x9Rm8KOqIQwihchg++bHaeMkTkbdzKB/I0ZNh9WFLnIfRMADmuPzdtrFH6RzAgMB
AAGjggI9MIICOTAdBgNVHQ4EFgQUs/8+ZjGRV0xolWAgFXmF4gTexJswHwYDVR0j
BBgwFoAU1cPV5w/JrRC6kNRdxmRU6eOhRqgwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvMDQwMzJjOGYtMWQ1Ny00YzNiLTkwNDMtYTBlN2ZlYmYx
NjdkLzAvRDVDM0Q1RTcwRkM5QUQxMEJBOTBENDVEQzY2NDU0RTlFM0ExNDZBOC5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzFjUFY1d19KclJDNmtOUmR4bVJVNmVP
aFJxZy5jZXIwga0GCCsGAQUFBwELBIGgMIGdMIGaBggrBgEFBQcwC4aBjXJzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvMDQwMzJjOGYt
MWQ1Ny00YzNiLTkwNDMtYTBlN2ZlYmYxNjdkLzAvMzEzOTMzMmUzMTM5MzQyZTMy
MzAyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzNjMwMzgzNTM4LnJvYTAYBgNVHSAB
Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA
wcIUMA0GCSqGSIb3DQEBCwUAA4IBAQBUThI7VItDM8eHG5S7VQHz2m0UV52ngldE
A8CzSvRxB6kGY3kFLTmqs2RPYJbVqZenppuDCJY3zY/tNPYKVYdhakAr5jdix0pr
ClWSlgygZz9Kx2lkqkd6Slhd+dOx6mqU6rQ+0Ks/UlC6v3dW5bO1iRoSZDYWVL2W
mNva8oXRbBuGcc5w4ztmTnZV6tdCoaRyNidg68dQW8pGj3Vs+mLWtqW44aO6BLg0
Lk6uWeLIS8jqehJsoW+eNV0UWScQ95fcfbgbBbC2c8vNyuzhnnnn/BkdcrB52nXG
wQN2ap4413I8/0y54hxcevwv9dIRt2kGXyOhizDOtuGG9EtAkqFE
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:08 2024 by rpki-client on console-fra.rpki-client.org