Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/bDokqXUixvsmJ7julxCu_nzlcHw.roa
File: bDokqXUixvsmJ7julxCu_nzlcHw.roa (raw, json)
Hash identifier: XXCLyX/OhVTYJn+I2uo3EoOWLg4sWxcjiabjQO+GFl4=
Subject key identifier: 6C:3A:24:A9:75:22:C6:FB:26:27:B8:EE:97:10:AE:FE:7C:E5:70:7C
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 1DCAD71D
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/bDokqXUixvsmJ7julxCu_nzlcHw.roa
Signing time: Fri 08 Apr 2022 12:32:17 +0000
ROA not before: Fri 08 Apr 2022 12:32:17 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 0
IP address blocks: 92.249.51.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 499832605 (0x1dcad71d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Apr 8 12:32:17 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6c3a24a97522c6fb2627b8ee9710aefe7ce5707c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:16:32:ff:83:e7:59:01:78:b7:2e:00:d5:45:
af:9e:72:44:58:d0:7e:b1:28:87:ae:37:88:34:58:
07:88:f3:91:4a:1a:51:5f:72:fa:c4:2e:02:2e:e0:
1d:fc:d4:fe:be:56:a2:74:c5:04:b4:51:f9:66:20:
30:74:e9:04:f0:b3:08:17:71:65:b1:51:4c:40:9b:
35:2c:e3:9a:80:1e:43:61:b4:53:43:bc:c1:3c:c4:
8f:9e:46:9e:69:d3:ec:7b:a8:e7:87:51:8b:f0:28:
fc:12:97:b1:79:f2:c7:4a:56:3a:c3:ae:aa:f4:7a:
36:c7:37:8c:05:c5:08:e3:89:3d:8b:eb:01:93:5d:
5b:a7:80:e3:6f:ac:57:ee:66:20:51:34:49:ca:c8:
90:95:72:af:7d:86:2b:c2:76:f4:e5:85:56:60:67:
ff:a5:bb:07:23:f5:e1:38:09:d8:5c:14:a3:ed:35:
6a:2e:5f:9a:f9:22:ec:12:7f:2c:f9:03:fc:46:11:
fd:c2:d6:01:48:5c:8a:73:2a:a3:e9:69:89:ed:ff:
8a:39:bf:4c:3a:6c:2c:08:f5:cb:eb:89:51:a8:1f:
4d:20:da:5b:b8:1e:4d:69:8d:8e:a6:c3:c6:51:b3:
12:c8:ef:b6:fb:68:8f:a3:01:33:bd:db:46:c7:94:
cd:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:3A:24:A9:75:22:C6:FB:26:27:B8:EE:97:10:AE:FE:7C:E5:70:7C
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/bDokqXUixvsmJ7julxCu_nzlcHw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.249.51.0/24
Signature Algorithm: sha256WithRSAEncryption
3a:17:14:1f:d7:cd:84:6c:9e:d9:70:cb:d2:3e:6c:08:78:4c:
18:fa:3e:52:c9:fd:81:48:c5:dd:26:2c:a8:70:4b:80:2e:55:
51:4a:2d:7d:0a:82:00:81:1b:8b:5a:a8:08:0f:e7:98:cf:b9:
80:aa:30:e3:d1:5b:38:2f:fb:8a:38:7a:c1:5e:b6:ee:3d:41:
08:4e:a1:2a:79:89:38:78:e7:77:c4:0f:60:18:2d:ce:cd:63:
2b:83:c9:f2:21:31:77:95:13:19:5b:49:92:88:9c:92:1d:af:
4c:23:30:30:a9:b7:22:95:73:60:ef:b2:cd:20:23:fd:cf:a8:
87:4b:27:c0:a0:98:0c:04:f2:1c:b3:d3:e4:f5:ff:37:14:b6:
95:ea:f6:c4:f0:69:7d:7a:d6:4c:89:a0:58:70:95:23:44:c7:
fd:ce:ea:e3:a7:fa:95:18:65:ed:40:3d:b7:be:78:0f:e3:1b:
67:30:78:2b:ba:81:27:0a:72:c7:e8:56:d3:fc:8c:0e:cc:45:
98:b7:76:ef:60:35:b3:01:74:e9:15:43:90:9a:ba:f2:dc:c6:
9c:cb:fb:3a:bb:50:b1:c5:b2:9c:70:e0:64:ae:36:b2:6f:f8:
ab:a7:6e:87:df:10:fe:32:9e:09:47:2a:1b:cd:f2:db:68:52:
40:ec:18:43
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEHcrXHTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygy
MmM0YWMzZTNjNDNkNzBkMDUzNDljODE1YmFhZGQzOGFkNzc1ZTlkMB4XDTIyMDQw
ODEyMzIxN1oXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoNmMzYTI0YTk3NTIy
YzZmYjI2MjdiOGVlOTcxMGFlZmU3Y2U1NzA3YzCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAMwWMv+D51kBeLcuANVFr55yRFjQfrEoh643iDRYB4jzkUoa
UV9y+sQuAi7gHfzU/r5WonTFBLRR+WYgMHTpBPCzCBdxZbFRTECbNSzjmoAeQ2G0
U0O8wTzEj55GnmnT7Huo54dRi/Ao/BKXsXnyx0pWOsOuqvR6Nsc3jAXFCOOJPYvr
AZNdW6eA42+sV+5mIFE0ScrIkJVyr32GK8J29OWFVmBn/6W7ByP14TgJ2FwUo+01
ai5fmvki7BJ/LPkD/EYR/cLWAUhcinMqo+lpie3/ijm/TDpsLAj1y+uJUagfTSDa
W7geTWmNjqbDxlGzEsjvtvtoj6MBM73bRseUzdMCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBRsOiSpdSLG+yYnuO6XEK7+fOVwfDAfBgNVHSMEGDAWgBQixKw+PEPXDQU0
nIFbqt04rXdenTAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L0lzU3NQanhEMXcwRk5KeUJXNnJkT0sxM1hwMC5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvMDMvOTEzYTNhLWY1NTAtNDZmMC1hY2M3LWNkM2NhNTk3NTcxMi8x
L2JEb2txWFVpeHZzbUo3anVseEN1X256bGNIdy5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMDMv
OTEzYTNhLWY1NTAtNDZmMC1hY2M3LWNkM2NhNTk3NTcxMi8xL0lzU3NQanhEMXcw
Rk5KeUJXNnJkT0sxM1hwMC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAFz5MzANBgkqhkiG9w0BAQsFAAOC
AQEAOhcUH9fNhGye2XDL0j5sCHhMGPo+Usn9gUjF3SYsqHBLgC5VUUotfQqCAIEb
i1qoCA/nmM+5gKow49FbOC/7ijh6wV627j1BCE6hKnmJOHjnd8QPYBgtzs1jK4PJ
8iExd5UTGVtJkoickh2vTCMwMKm3IpVzYO+yzSAj/c+oh0snwKCYDATyHLPT5PX/
NxS2ler2xPBpfXrWTImgWHCVI0TH/c7q46f6lRhl7UA9t754D+MbZzB4K7qBJwpy
x+hW0/yMDsxFmLd272A1swF06RVDkJq68tzGnMv7OrtQscWynHDgZK42sm/4q6du
h98Q/jKeCUcqG83y22hSQOwYQw==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:42:45 2023 by rpki-client on console-fra.rpki-client.org