Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/i5v1fberMq9vmlJ9rqU6NCSZc1c.roa
File: i5v1fberMq9vmlJ9rqU6NCSZc1c.roa (raw, json)
Hash identifier: HhlpoMSuwh76Kucqslbr+ErjOj/fNjuD86RcZDcZe10=
Subject key identifier: 8B:9B:F5:7D:B7:AB:32:AF:6F:9A:52:7D:AE:A5:3A:34:24:99:73:57
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 1E19A523
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/i5v1fberMq9vmlJ9rqU6NCSZc1c.roa
Signing time: Thu 21 Apr 2022 12:46:17 +0000
ROA not before: Thu 21 Apr 2022 12:46:17 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 7018
IP address blocks: 87.121.124.0/23 maxlen: 24
87.121.122.0/23 maxlen: 24
91.92.115.0/24 maxlen: 24
185.207.12.0/24 maxlen: 24
87.120.84.0/22 maxlen: 24
109.206.238.0/24 maxlen: 24
84.21.172.0/23 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 504997155 (0x1e19a523)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Apr 21 12:46:17 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=8b9bf57db7ab32af6f9a527daea53a3424997357
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:30:1f:20:76:4d:76:e8:d2:a7:fd:58:3f:70:
c5:b0:a8:ad:25:3f:e4:6a:33:60:10:35:b0:28:c6:
7a:cc:5e:f1:83:5c:12:bd:60:53:82:72:3f:e8:6d:
be:7b:78:1f:7f:5a:fa:cd:98:18:3b:2f:00:35:ab:
54:23:d7:e0:be:4e:be:aa:42:89:e2:3d:30:99:c1:
47:7b:c1:b6:76:76:25:ad:60:cb:64:eb:91:92:0e:
07:52:e2:26:aa:eb:82:a1:ef:44:4b:5f:e0:9a:d6:
98:dc:1e:b3:8e:ec:f8:4a:09:7a:05:10:0e:3c:1d:
aa:eb:fd:08:94:e8:a2:17:69:e8:11:c2:f0:4a:1c:
6e:61:d6:d3:31:a4:1c:66:ef:ef:03:e8:74:6a:c3:
fc:9f:73:50:fd:e6:af:84:03:d5:79:f2:b8:98:70:
b2:65:ce:e5:b3:ce:72:82:7c:2c:ed:3e:13:25:5b:
52:d1:1f:56:ef:17:d2:12:04:3f:b0:ce:07:23:c8:
f2:cc:8b:b2:23:b8:5e:81:ec:f6:ac:36:cf:68:2d:
06:7c:ea:0e:ba:a7:bd:62:08:ba:4f:72:84:5e:9d:
46:d0:97:3c:26:1e:34:e1:03:20:2d:25:44:57:36:
2f:7b:47:1b:3d:cc:6c:c1:85:81:5f:73:74:8a:b8:
6c:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:9B:F5:7D:B7:AB:32:AF:6F:9A:52:7D:AE:A5:3A:34:24:99:73:57
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/i5v1fberMq9vmlJ9rqU6NCSZc1c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.21.172.0/23
87.120.84.0/22
87.121.122.0-87.121.125.255
91.92.115.0/24
109.206.238.0/24
185.207.12.0/24
Signature Algorithm: sha256WithRSAEncryption
46:28:09:ff:c5:37:7f:aa:23:8b:d3:37:24:e2:ad:62:fd:17:
e5:87:62:83:f0:ad:19:e9:4e:4e:71:b6:97:50:48:ce:2d:73:
6d:b3:fa:f7:d1:d4:0a:12:7f:ea:95:28:0e:38:ee:64:12:cb:
b0:d7:58:0f:2c:c1:b6:7d:ef:8b:f1:ed:ff:a0:79:d1:17:5c:
00:28:55:55:a9:9a:5d:0f:69:78:00:9f:63:d8:2d:50:ac:8e:
1b:81:0c:88:f3:91:69:94:28:cd:cf:bf:1c:c1:72:d7:d0:af:
8e:9a:68:2c:4b:0e:bf:00:9c:f2:19:53:8e:ae:ed:f1:5e:22:
9c:aa:57:67:ba:3b:7c:8a:5f:49:f6:82:35:db:61:66:5b:d0:
30:3f:f3:a3:13:23:9d:4e:53:12:62:a4:c1:c8:f7:56:fe:3f:
6d:d4:c1:0b:43:b8:68:f3:c0:97:42:81:a8:51:ab:2c:ca:86:
df:14:5e:99:28:69:86:4e:a8:e3:5b:26:26:00:05:61:f4:bc:
d3:96:d2:0b:43:48:56:2b:c7:5a:40:97:01:29:47:e7:6c:71:
b5:fc:ce:71:21:dc:6c:c4:a8:d0:ea:1a:f2:ff:ca:59:3d:db:
8f:27:d9:ac:15:d4:c6:5d:2a:58:2e:5e:c8:2a:8f:4f:e0:54:
4f:fb:11:c3
-----BEGIN CERTIFICATE-----
MIIFFTCCA/2gAwIBAgIEHhmlIzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygy
MmM0YWMzZTNjNDNkNzBkMDUzNDljODE1YmFhZGQzOGFkNzc1ZTlkMB4XDTIyMDQy
MTEyNDYxN1oXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoOGI5YmY1N2RiN2Fi
MzJhZjZmOWE1MjdkYWVhNTNhMzQyNDk5NzM1NzCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBALAwHyB2TXbo0qf9WD9wxbCorSU/5GozYBA1sCjGesxe8YNc
Er1gU4JyP+htvnt4H39a+s2YGDsvADWrVCPX4L5OvqpCieI9MJnBR3vBtnZ2Ja1g
y2TrkZIOB1LiJqrrgqHvREtf4JrWmNwes47s+EoJegUQDjwdquv9CJToohdp6BHC
8EocbmHW0zGkHGbv7wPodGrD/J9zUP3mr4QD1XnyuJhwsmXO5bPOcoJ8LO0+EyVb
UtEfVu8X0hIEP7DOByPI8syLsiO4XoHs9qw2z2gtBnzqDrqnvWIIuk9yhF6dRtCX
PCYeNOEDIC0lRFc2L3tHGz3MbMGFgV9zdIq4bLUCAwEAAaOCAi8wggIrMB0GA1Ud
DgQWBBSLm/V9t6syr2+aUn2upTo0JJlzVzAfBgNVHSMEGDAWgBQixKw+PEPXDQU0
nIFbqt04rXdenTAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L0lzU3NQanhEMXcwRk5KeUJXNnJkT0sxM1hwMC5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvMDMvOTEzYTNhLWY1NTAtNDZmMC1hY2M3LWNkM2NhNTk3NTcxMi8x
L2k1djFmYmVyTXE5dm1sSjlycVU2TkNTWmMxYy5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMDMv
OTEzYTNhLWY1NTAtNDZmMC1hY2M3LWNkM2NhNTk3NTcxMi8xL0lzU3NQanhEMXcw
Rk5KeUJXNnJkT0sxM1hwMC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBF
BggrBgEFBQcBBwEB/wQ2MDQwMgQCAAEwLAMEAVQVrAMEAld4VDAMAwQBV3l6AwQB
V3l8AwQAW1xzAwQAbc7uAwQAuc8MMA0GCSqGSIb3DQEBCwUAA4IBAQBGKAn/xTd/
qiOL0zck4q1i/Rflh2KD8K0Z6U5OcbaXUEjOLXNts/r30dQKEn/qlSgOOO5kEsuw
11gPLMG2fe+L8e3/oHnRF1wAKFVVqZpdD2l4AJ9j2C1QrI4bgQyI85FplCjNz78c
wXLX0K+OmmgsSw6/AJzyGVOOru3xXiKcqldnujt8il9J9oI122FmW9AwP/OjEyOd
TlMSYqTByPdW/j9t1MELQ7ho88CXQoGoUassyobfFF6ZKGmGTqjjWyYmAAVh9LzT
ltILQ0hWK8daQJcBKUfnbHG1/M5xIdxsxKjQ6hry/8pZPduPJ9msFdTGXSpYLl7I
Ko9P4FRP+xHD
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:46:41 2023 by rpki-client on console-ams.rpki-client.org