Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/6RkHpyLeLnX63o_Di2NjSBEpQWM.roa
File: 6RkHpyLeLnX63o_Di2NjSBEpQWM.roa (raw, json)
Hash identifier: 5e6MkVC6IKKxsDKWdozbS3gsztIAqQmWF92RAB83Xiw=
Subject key identifier: E9:19:07:A7:22:DE:2E:75:FA:DE:8F:C3:8B:63:63:48:11:29:41:63
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 01877AFF4381ADE9FE327C84E6695603EF40
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/6RkHpyLeLnX63o_Di2NjSBEpQWM.roa
Signing time: Thu 13 Apr 2023 14:22:41 +0000
ROA not before: Thu 13 Apr 2023 14:22:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 1
IP address blocks: 45.139.100.0/22 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:7a:ff:43:81:ad:e9:fe:32:7c:84:e6:69:56:03:ef:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Apr 13 14:22:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e91907a722de2e75fade8fc38b63634811294163
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:6b:cc:1b:37:41:db:e5:dc:c0:bd:f5:fb:0c:
80:d6:9b:e0:b0:9b:ce:f7:8e:ca:2b:2d:b3:e6:98:
9a:71:4d:e1:ea:bf:92:72:04:b1:d2:3b:f0:b9:d6:
d4:5f:87:e6:8b:9d:39:67:3e:00:6e:71:06:fa:df:
b4:ac:fb:e4:08:bd:9c:16:43:67:a0:73:56:d5:6f:
66:43:83:1d:7c:7e:62:3a:21:54:43:d8:df:2a:d4:
3c:e7:1f:62:7c:0c:60:39:42:1d:c6:09:71:c3:2f:
4c:b1:cf:0f:d6:ef:dc:2c:76:84:6f:8b:7e:0f:e2:
e9:a1:ef:09:48:8e:0a:76:e9:4a:6b:1b:16:77:4b:
10:e8:ad:cd:eb:c8:79:f0:74:fa:aa:45:a7:93:90:
41:4e:21:94:2e:18:3b:35:47:b3:09:b0:d5:ae:79:
71:7b:0d:31:29:b8:c0:3f:60:21:96:c9:8d:f2:bc:
a5:b6:41:e4:d4:43:bc:56:59:95:1f:b3:2b:9b:47:
40:57:18:e7:52:c3:9b:e8:08:3f:65:f1:21:ad:23:
62:ff:1a:6a:7b:9d:99:9e:5a:95:4f:47:6f:d8:b5:
b7:b2:62:e3:ce:63:ba:26:e1:d0:76:ad:f5:76:99:
aa:f1:56:2c:54:07:8c:03:87:ef:b0:a2:07:e5:ae:
42:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:19:07:A7:22:DE:2E:75:FA:DE:8F:C3:8B:63:63:48:11:29:41:63
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/6RkHpyLeLnX63o_Di2NjSBEpQWM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.139.100.0/22
Signature Algorithm: sha256WithRSAEncryption
32:86:5d:3d:48:50:b7:ae:ae:fb:4b:a1:24:11:dd:f1:0d:a6:
1f:9a:27:65:73:3f:0d:cc:d6:96:1b:00:54:07:82:24:75:2b:
c5:20:14:dc:8d:5c:ef:e5:bb:12:82:e3:07:e6:d5:aa:82:e3:
c4:0c:57:0c:6a:47:d8:19:e4:2e:df:fa:2b:bb:51:63:3f:9b:
55:ba:8f:47:49:e5:0c:90:a0:36:bd:c3:8b:ae:27:c0:f0:d0:
86:d2:7f:6c:90:f2:ce:7e:0e:47:83:80:11:4c:68:0d:da:55:
66:5e:ec:0a:17:bb:8e:99:ee:50:a0:83:ce:98:87:f8:3c:7d:
d9:f3:bf:e4:8f:1b:91:39:0f:bc:99:6b:df:a7:3c:99:a8:da:
40:7c:ee:c7:5a:ef:2f:cb:f2:91:e6:73:e5:5b:2c:57:a9:36:
fc:41:30:a2:39:5b:16:8a:52:da:5d:e6:62:51:ee:62:e7:a7:
17:f2:b3:cd:e4:ad:2b:28:7d:90:dd:e9:01:93:8f:f8:50:c7:
0b:8e:33:b7:ed:12:70:7f:d6:7c:dd:f3:6c:0c:73:96:ea:33:
0c:5d:1b:b3:c5:c7:1c:0a:7b:e9:93:95:f5:a5:46:37:88:e5:
13:62:9d:7d:00:74:79:0c:8c:1e:3b:f6:d2:30:a0:4c:16:ca:
14:d2:b4:f3
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYd6/0OBren+MnyE5mlWA+9AMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIyYzRhYzNlM2M0M2Q3MGQwNTM0OWM4MTViYWFkZDM4YWQ3
NzVlOWQwHhcNMjMwNDEzMTQyMjQxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlOTE5MDdhNzIyZGUyZTc1ZmFkZThmYzM4YjYzNjM0ODExMjk0MTYzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzmvMGzdB2+XcwL31+wyA1pvgsJvO
947KKy2z5piacU3h6r+ScgSx0jvwudbUX4fmi505Zz4AbnEG+t+0rPvkCL2cFkNn
oHNW1W9mQ4MdfH5iOiFUQ9jfKtQ85x9ifAxgOUIdxglxwy9Msc8P1u/cLHaEb4t+
D+Lpoe8JSI4KdulKaxsWd0sQ6K3N68h58HT6qkWnk5BBTiGULhg7NUezCbDVrnlx
ew0xKbjAP2AhlsmN8ryltkHk1EO8VlmVH7Mrm0dAVxjnUsOb6Ag/ZfEhrSNi/xpq
e52ZnlqVT0dv2LW3smLjzmO6JuHQdq31dpmq8VYsVAeMA4fvsKIH5a5CYQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFOkZB6ci3i51+t6Pw4tjY0gRKUFjMB8GA1UdIwQY
MBaAFCLErD48Q9cNBTScgVuq3Titd16dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzct
Y2QzY2E1OTc1NzEyLzEvNlJrSHB5TGVMblg2M29fRGkyTmpTQkVwUVdNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzctY2QzY2E1OTc1NzEy
LzEvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCLYtkMA0G
CSqGSIb3DQEBCwUAA4IBAQAyhl09SFC3rq77S6EkEd3xDaYfmidlcz8NzNaWGwBU
B4IkdSvFIBTcjVzv5bsSguMH5tWqguPEDFcMakfYGeQu3/oru1FjP5tVuo9HSeUM
kKA2vcOLrifA8NCG0n9skPLOfg5Hg4ARTGgN2lVmXuwKF7uOme5QoIPOmIf4PH3Z
87/kjxuROQ+8mWvfpzyZqNpAfO7HWu8vy/KR5nPlWyxXqTb8QTCiOVsWilLaXeZi
Ue5i56cX8rPN5K0rKH2Q3ekBk4/4UMcLjjO37RJwf9Z83fNsDHOW6jMMXRuzxccc
Cnvpk5X1pUY3iOUTYp19AHR5DIweO/bSMKBMFsoU0rTz
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:46:32 2023 by rpki-client on console-ams.rpki-client.org