Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/513734-a485-4c28-8aa6-9555d30f6f8f/1/f8jm82jBTBXkQezhvQ86r-kwh-k.roa
File: f8jm82jBTBXkQezhvQ86r-kwh-k.roa (raw, json)
Hash identifier: HmZid4uLrtIh0nclAyCIhlMnYaMlbD0sln64QiAW8CU=
Subject key identifier: 7F:C8:E6:F3:68:C1:4C:15:E4:41:EC:E1:BD:0F:3A:AF:E9:30:87:E9
Certificate issuer: /CN=fd3a1e8465bfc4df700894372d0b9808e8b629ea
Certificate serial: 29529E96
Authority key identifier: FD:3A:1E:84:65:BF:C4:DF:70:08:94:37:2D:0B:98:08:E8:B6:29:EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_ToehGW_xN9wCJQ3LQuYCOi2Keo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/513734-a485-4c28-8aa6-9555d30f6f8f/1/f8jm82jBTBXkQezhvQ86r-kwh-k.roa
Signing time: Sat 01 Jan 2022 01:00:54 +0000
ROA not before: Sat 01 Jan 2022 01:00:54 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 208582
IP address blocks: 185.51.8.0/22 maxlen: 24
2a01:aee0::/32 maxlen: 32
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 693280406 (0x29529e96)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fd3a1e8465bfc4df700894372d0b9808e8b629ea
Validity
Not Before: Jan 1 01:00:54 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=7fc8e6f368c14c15e441ece1bd0f3aafe93087e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:2c:19:11:62:60:4f:18:fe:7e:5d:32:e7:64:
0d:24:04:f4:4c:72:89:cc:f7:3d:72:ae:b7:a5:9e:
58:72:a0:86:fa:e3:e8:85:6d:48:5d:15:4e:34:cb:
db:7a:7d:26:c8:ec:d5:1c:c6:36:a0:e0:10:8e:f2:
c5:9d:7d:d7:57:94:43:1b:4d:35:da:75:20:1b:61:
45:3c:da:0c:49:4b:99:c4:65:15:0e:35:16:5e:5e:
32:91:cd:cb:96:e0:f7:3c:20:00:d3:af:d7:02:ac:
92:7c:96:dd:39:e9:b8:e6:13:6e:be:39:e9:68:dc:
e4:3d:70:09:31:f3:98:94:62:fe:f9:99:48:33:3a:
b5:13:d6:a3:a7:e2:80:31:98:2b:74:38:2c:91:fb:
94:27:ce:23:b3:49:17:6e:b5:65:81:a7:e3:de:27:
33:f2:2c:60:e4:da:99:6d:15:26:05:bd:ef:38:40:
bf:01:e5:34:cb:fa:c8:54:ba:a0:19:fc:7f:a2:4f:
e1:22:c8:71:91:fb:21:97:9d:04:ef:fa:0b:57:4c:
ac:61:39:26:b7:04:cd:92:57:f3:88:58:ba:2d:44:
96:50:4d:b1:e7:15:22:15:04:c4:de:47:65:e2:c0:
e0:d1:ec:11:c5:6f:51:f4:06:6a:40:47:f7:ed:bc:
b1:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:C8:E6:F3:68:C1:4C:15:E4:41:EC:E1:BD:0F:3A:AF:E9:30:87:E9
X509v3 Authority Key Identifier:
keyid:FD:3A:1E:84:65:BF:C4:DF:70:08:94:37:2D:0B:98:08:E8:B6:29:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_ToehGW_xN9wCJQ3LQuYCOi2Keo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/513734-a485-4c28-8aa6-9555d30f6f8f/1/f8jm82jBTBXkQezhvQ86r-kwh-k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/513734-a485-4c28-8aa6-9555d30f6f8f/1/_ToehGW_xN9wCJQ3LQuYCOi2Keo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.51.8.0/22
IPv6:
2a01:aee0::/32
Signature Algorithm: sha256WithRSAEncryption
58:1c:a8:60:ba:e2:07:5d:83:01:16:72:59:b9:83:06:4c:1a:
e2:8e:c4:d1:62:db:73:ad:30:b0:6f:f8:5a:c3:95:7e:85:ee:
60:08:48:cd:df:63:dd:9b:e4:cc:a8:38:35:fb:c5:46:e4:fe:
13:2b:2f:e0:96:6b:52:ae:9e:79:26:18:5a:75:f8:dd:42:2d:
86:e1:f0:c7:79:1b:2c:6a:c5:e9:04:b9:10:c1:51:fd:75:55:
d8:48:34:31:0c:51:13:63:40:f2:45:77:db:25:bf:1c:21:83:
86:84:5f:96:08:a9:b9:fb:5f:79:ee:62:f9:06:54:04:55:88:
39:a7:97:0d:7e:d1:6a:10:a1:d9:5b:2c:91:38:4d:e7:cd:95:
e4:cf:ea:ef:ab:09:16:e0:ef:6f:b4:64:c8:ec:23:b7:c0:a0:
2c:73:a1:9d:05:90:4d:bb:70:05:2d:07:06:15:b8:85:e5:73:
0c:d0:d0:92:c2:a8:6a:3c:05:74:f2:93:c8:f2:8b:aa:ad:dc:
9d:c9:90:29:87:3b:a6:56:af:3a:21:b3:1c:86:9d:50:e1:d8:
c9:26:61:c2:51:63:05:60:af:64:c3:3b:a4:54:c5:90:5f:ba:
ed:1c:8d:2b:1e:e4:3d:4a:c1:40:ec:35:78:b9:2c:95:46:b4:
11:9e:52:06
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgIEKVKeljANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhm
ZDNhMWU4NDY1YmZjNGRmNzAwODk0MzcyZDBiOTgwOGU4YjYyOWVhMB4XDTIyMDEw
MTAxMDA1NFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoN2ZjOGU2ZjM2OGMx
NGMxNWU0NDFlY2UxYmQwZjNhYWZlOTMwODdlOTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAKUsGRFiYE8Y/n5dMudkDSQE9Exyicz3PXKut6WeWHKghvrj
6IVtSF0VTjTL23p9Jsjs1RzGNqDgEI7yxZ1911eUQxtNNdp1IBthRTzaDElLmcRl
FQ41Fl5eMpHNy5bg9zwgANOv1wKsknyW3TnpuOYTbr456Wjc5D1wCTHzmJRi/vmZ
SDM6tRPWo6figDGYK3Q4LJH7lCfOI7NJF261ZYGn494nM/IsYOTamW0VJgW97zhA
vwHlNMv6yFS6oBn8f6JP4SLIcZH7IZedBO/6C1dMrGE5JrcEzZJX84hYui1EllBN
secVIhUExN5HZeLA4NHsEcVvUfQGakBH9+28scMCAwEAAaOCAhgwggIUMB0GA1Ud
DgQWBBR/yObzaMFMFeRB7OG9Dzqv6TCH6TAfBgNVHSMEGDAWgBT9Oh6EZb/E33AI
lDctC5gI6LYp6jAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L19Ub2VoR1dfeE45d0NKUTNMUXVZQ09pMktlby5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvMDEvNTEzNzM0LWE0ODUtNGMyOC04YWE2LTk1NTVkMzBmNmY4Zi8x
L2Y4am04MmpCVEJYa1Flemh2UTg2ci1rd2gtay5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMDEv
NTEzNzM0LWE0ODUtNGMyOC04YWE2LTk1NTVkMzBmNmY4Zi8xL19Ub2VoR1dfeE45
d0NKUTNMUXVZQ09pMktlby5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAu
BggrBgEFBQcBBwEB/wQfMB0wDAQCAAEwBgMEArkzCDANBAIAAjAHAwUAKgGu4DAN
BgkqhkiG9w0BAQsFAAOCAQEAWByoYLriB12DARZyWbmDBkwa4o7E0WLbc60wsG/4
WsOVfoXuYAhIzd9j3ZvkzKg4NfvFRuT+Eysv4JZrUq6eeSYYWnX43UIthuHwx3kb
LGrF6QS5EMFR/XVV2Eg0MQxRE2NA8kV32yW/HCGDhoRflgipuftfee5i+QZUBFWI
OaeXDX7RahCh2VsskThN582V5M/q76sJFuDvb7RkyOwjt8CgLHOhnQWQTbtwBS0H
BhW4heVzDNDQksKoajwFdPKTyPKLqq3cncmQKYc7plavOiGzHIadUOHYySZhwlFj
BWCvZMM7pFTFkF+67RyNKx7kPUrBQOw1eLkslUa0EZ5SBg==
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:49:56 2024 by rpki-client on console-ams.rpki-client.org