Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/S_GDFViUig8Wg0R7mtF0s_Jwtds.roa
File: S_GDFViUig8Wg0R7mtF0s_Jwtds.roa (raw, json)
Hash identifier: eTlwu4AhW0oA4+MJMK7BzOVw2Lbwqvr/3cKfYt9dW2A=
Subject key identifier: 4B:F1:83:15:58:94:8A:0F:16:83:44:7B:9A:D1:74:B3:F2:70:B5:DB
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 018224A66F321ED1D18DE58A2B1EBA4E39D1
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/S_GDFViUig8Wg0R7mtF0s_Jwtds.roa
Signing time: Fri 22 Jul 2022 06:44:23 +0000
ROA not before: Fri 22 Jul 2022 06:44:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 397423
IP address blocks: 176.125.252.0/22 maxlen: 24
87.121.220.0/23 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:24:a6:6f:32:1e:d1:d1:8d:e5:8a:2b:1e:ba:4e:39:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Jul 22 06:44:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=4bf1831558948a0f1683447b9ad174b3f270b5db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:c7:89:46:4d:0a:36:c6:1b:1c:97:63:4a:8b:
66:02:ca:e2:a4:36:05:df:d8:30:af:f3:69:2a:87:
bd:27:e6:4f:1f:f4:71:7d:8e:5d:97:c3:b6:a1:27:
8a:8a:4b:63:4d:66:d1:6a:9f:51:f9:b0:12:6f:56:
59:fd:58:53:1f:00:4c:25:a1:66:c8:f8:25:0b:e5:
58:a0:82:11:68:15:54:19:a5:dc:7a:46:3a:ef:19:
4b:ac:19:9c:5f:b3:57:c5:6f:aa:f1:51:73:b5:56:
0d:a8:14:99:c5:ea:88:82:38:9b:82:d8:94:71:4a:
93:19:0f:67:25:2e:c9:2b:19:c0:44:0b:28:36:39:
f6:ae:4e:a8:f7:76:66:d3:39:f2:ce:b2:2a:43:73:
1b:54:9f:b3:51:5c:25:ea:57:64:65:6c:ab:00:f0:
2b:b2:10:28:5f:4e:3b:14:39:17:0a:e6:0b:65:c1:
cf:05:a0:50:00:21:3c:ed:7e:b7:dc:bb:db:92:5a:
ed:57:7a:73:0c:6d:14:eb:a9:b8:f9:20:9f:de:83:
f5:78:e4:d9:fe:fd:df:73:ac:09:e9:14:db:97:f1:
9c:06:92:aa:ae:af:f2:a0:e5:d5:b1:34:c1:76:d8:
27:9b:a3:0d:4d:ed:1d:b4:f3:2b:91:75:d2:f9:16:
fa:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:F1:83:15:58:94:8A:0F:16:83:44:7B:9A:D1:74:B3:F2:70:B5:DB
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/S_GDFViUig8Wg0R7mtF0s_Jwtds.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.121.220.0/23
176.125.252.0/22
Signature Algorithm: sha256WithRSAEncryption
06:c8:86:97:00:28:b2:27:4f:bc:40:e3:e8:1a:40:0b:3d:7d:
cb:9f:c6:06:f0:83:ee:22:56:e5:ee:cf:ea:89:46:32:f1:eb:
04:35:fa:6b:d0:24:c0:b8:6b:f4:ce:a9:af:6f:55:89:20:b6:
b5:32:93:2d:2a:8c:b0:3a:6d:8f:8b:9d:39:81:69:c0:ba:28:
bb:53:83:64:ab:28:14:ed:72:9f:64:b7:e1:59:c3:9e:e9:02:
18:c2:d2:4f:0a:47:6c:6c:a9:e0:96:47:d9:c1:10:67:ba:b9:
ab:46:74:80:b8:34:8f:c9:12:76:fd:99:e8:00:f2:11:61:72:
48:96:53:3c:23:4f:f1:ea:cc:be:a4:41:da:96:85:de:6a:75:
06:2e:a5:cd:3f:60:73:20:01:ea:d0:23:70:94:92:84:d4:74:
a2:8d:4d:5f:d5:92:96:1a:85:f1:29:1d:6d:96:52:8c:de:a9:
a0:88:38:3b:5d:c6:d1:2d:98:21:15:a7:25:d3:09:81:e8:d3:
e1:65:09:32:99:ba:af:13:0f:9a:1e:7e:31:a0:f1:f3:55:f8:
9f:36:db:46:00:b2:8c:44:9b:68:e2:bf:88:1f:44:e4:e0:b2:
e1:3f:aa:da:36:45:9e:48:78:4b:c2:11:02:94:a6:11:6b:cf:
bb:bb:30:77
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYIkpm8yHtHRjeWKKx66TjnRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIyYzRhYzNlM2M0M2Q3MGQwNTM0OWM4MTViYWFkZDM4YWQ3
NzVlOWQwHhcNMjIwNzIyMDY0NDIzWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0YmYxODMxNTU4OTQ4YTBmMTY4MzQ0N2I5YWQxNzRiM2YyNzBiNWRiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs8eJRk0KNsYbHJdjSotmAsripDYF
39gwr/NpKoe9J+ZPH/RxfY5dl8O2oSeKiktjTWbRap9R+bASb1ZZ/VhTHwBMJaFm
yPglC+VYoIIRaBVUGaXcekY67xlLrBmcX7NXxW+q8VFztVYNqBSZxeqIgjibgtiU
cUqTGQ9nJS7JKxnARAsoNjn2rk6o93Zm0znyzrIqQ3MbVJ+zUVwl6ldkZWyrAPAr
shAoX047FDkXCuYLZcHPBaBQACE87X633LvbklrtV3pzDG0U66m4+SCf3oP1eOTZ
/v3fc6wJ6RTbl/GcBpKqrq/yoOXVsTTBdtgnm6MNTe0dtPMrkXXS+Rb6swIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFEvxgxVYlIoPFoNEe5rRdLPycLXbMB8GA1UdIwQY
MBaAFCLErD48Q9cNBTScgVuq3Titd16dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzct
Y2QzY2E1OTc1NzEyLzEvU19HREZWaVVpZzhXZzBSN210RjBzX0p3dGRzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzctY2QzY2E1OTc1NzEy
LzEvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQBV3ncAwQC
sH38MA0GCSqGSIb3DQEBCwUAA4IBAQAGyIaXACiyJ0+8QOPoGkALPX3Ln8YG8IPu
Ilbl7s/qiUYy8esENfpr0CTAuGv0zqmvb1WJILa1MpMtKoywOm2Pi505gWnAuii7
U4NkqygU7XKfZLfhWcOe6QIYwtJPCkdsbKnglkfZwRBnurmrRnSAuDSPyRJ2/Zno
APIRYXJIllM8I0/x6sy+pEHaloXeanUGLqXNP2BzIAHq0CNwlJKE1HSijU1f1ZKW
GoXxKR1tllKM3qmgiDg7XcbRLZghFacl0wmB6NPhZQkymbqvEw+aHn4xoPHzVfif
NttGALKMRJto4r+IH0Tk4LLhP6raNkWeSHhLwhEClKYRa8+7uzB3
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:46:37 2023 by rpki-client on console-ams.rpki-client.org