Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/5ae3c4-4aa4-4c62-8eb5-4ea47cce0c63/1/AMciVPWL9GNceI8mNiIzESjuFkQ.roa
File: AMciVPWL9GNceI8mNiIzESjuFkQ.roa (raw, json)
Hash identifier: ZuAR49yyH+hQcI8W5xqQHlIiZsWfNsVXVb8J3q+YdoU=
Subject key identifier: 00:C7:22:54:F5:8B:F4:63:5C:78:8F:26:36:22:33:11:28:EE:16:44
Certificate issuer: /CN=7fa3f99dba94a307b6cd2e1d90f678dac05681f8
Certificate serial: 01857383AAD0B762A1D0399C56B183524B3F
Authority key identifier: 7F:A3:F9:9D:BA:94:A3:07:B6:CD:2E:1D:90:F6:78:DA:C0:56:81:F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/f6P5nbqUowe2zS4dkPZ42sBWgfg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/5ae3c4-4aa4-4c62-8eb5-4ea47cce0c63/1/AMciVPWL9GNceI8mNiIzESjuFkQ.roa
Signing time: Mon 02 Jan 2023 17:24:46 +0000
ROA not before: Mon 02 Jan 2023 17:24:46 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 212182
IP address blocks: 94.154.184.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:73:83:aa:d0:b7:62:a1:d0:39:9c:56:b1:83:52:4b:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7fa3f99dba94a307b6cd2e1d90f678dac05681f8
Validity
Not Before: Jan 2 17:24:46 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=00c72254f58bf4635c788f263622331128ee1644
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:ed:3f:21:75:76:44:ab:70:85:93:dc:6c:0e:
fe:80:82:f9:01:32:77:24:48:a5:ef:23:dc:90:e2:
4c:36:03:2d:f5:29:9f:0d:54:b9:84:34:7d:41:2e:
9c:30:46:cc:ee:14:13:6e:28:18:69:ec:f1:93:4b:
90:87:a8:48:a6:e0:1c:19:42:55:23:0a:12:42:6f:
01:c2:11:53:41:a1:38:da:23:61:ab:5b:d0:0e:8b:
6e:e3:2a:33:50:51:4e:08:10:52:82:c7:56:f7:f1:
fd:65:ff:32:01:d7:d5:43:82:9a:8f:6c:96:45:2c:
ea:90:05:e3:8d:7e:6b:db:e0:2b:72:cf:c0:2a:21:
2c:77:71:2a:bb:ab:c6:58:fd:bc:fa:a5:31:db:3e:
7f:2d:d1:d6:19:de:85:7a:91:74:81:e0:a9:e1:22:
fc:30:39:dd:a8:1e:97:05:e6:d9:32:4c:c2:41:4c:
18:58:91:f0:e8:a7:d6:e5:78:fb:4e:e4:43:50:bc:
07:8d:00:27:fb:6b:25:55:a1:45:40:72:70:16:0b:
81:35:c1:ba:3e:81:52:0e:6d:50:96:55:74:9a:51:
43:18:66:71:86:07:e3:5b:5e:7a:20:a5:90:74:ee:
7c:22:30:24:4b:1e:33:bd:cb:16:68:50:f9:81:32:
f8:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:C7:22:54:F5:8B:F4:63:5C:78:8F:26:36:22:33:11:28:EE:16:44
X509v3 Authority Key Identifier:
keyid:7F:A3:F9:9D:BA:94:A3:07:B6:CD:2E:1D:90:F6:78:DA:C0:56:81:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6P5nbqUowe2zS4dkPZ42sBWgfg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/5ae3c4-4aa4-4c62-8eb5-4ea47cce0c63/1/AMciVPWL9GNceI8mNiIzESjuFkQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/5ae3c4-4aa4-4c62-8eb5-4ea47cce0c63/1/f6P5nbqUowe2zS4dkPZ42sBWgfg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.154.184.0/24
Signature Algorithm: sha256WithRSAEncryption
5e:45:8d:a6:e1:18:01:8e:0f:57:77:27:be:ce:e2:f6:ff:fb:
2d:6f:03:82:ca:2e:75:df:67:97:d2:04:b3:90:6f:e2:b9:40:
fa:ea:6b:ff:a4:b2:09:d7:a0:a1:b2:67:37:06:13:40:9e:45:
5d:5c:7a:c5:22:84:19:c1:0f:54:7d:a8:d2:ff:da:b7:2e:9e:
5b:16:bc:90:93:b6:8c:06:4e:4f:61:17:38:b6:00:60:62:d4:
c6:4e:99:12:07:ca:f5:b6:d2:b3:69:d3:6d:b1:bc:01:bb:a1:
2f:22:93:b3:59:e8:5c:b9:9a:b3:12:09:07:e7:05:13:ba:53:
6b:58:ef:be:bc:1f:89:aa:5a:96:fe:0c:6b:33:0c:1e:82:90:
7a:94:28:a9:d2:9c:f8:31:3b:92:f8:04:ef:54:04:58:a5:d7:
e3:fa:c6:9d:5f:65:36:ba:ef:8e:b1:ca:6d:68:35:bd:93:3e:
df:d8:df:a6:e2:e4:0c:b5:69:c1:d3:97:73:90:c3:93:d7:da:
16:83:b6:c7:96:50:90:2b:4b:b4:18:f8:0d:3b:29:4c:76:e2:
2f:93:7b:53:e5:ad:f5:05:6f:5b:ca:69:1d:14:5e:1e:a4:f3:
24:64:2f:d7:81:d2:53:62:69:2f:29:9b:5e:1f:ca:e2:7a:db:
52:b6:d6:b2
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVzg6rQt2Kh0DmcVrGDUks/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdmYTNmOTlkYmE5NGEzMDdiNmNkMmUxZDkwZjY3OGRhYzA1
NjgxZjgwHhcNMjMwMTAyMTcyNDQ2WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwMGM3MjI1NGY1OGJmNDYzNWM3ODhmMjYzNjIyMzMxMTI4ZWUxNjQ0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAje0/IXV2RKtwhZPcbA7+gIL5ATJ3
JEil7yPckOJMNgMt9SmfDVS5hDR9QS6cMEbM7hQTbigYaezxk0uQh6hIpuAcGUJV
IwoSQm8BwhFTQaE42iNhq1vQDotu4yozUFFOCBBSgsdW9/H9Zf8yAdfVQ4Kaj2yW
RSzqkAXjjX5r2+Arcs/AKiEsd3Equ6vGWP28+qUx2z5/LdHWGd6FepF0geCp4SL8
MDndqB6XBebZMkzCQUwYWJHw6KfW5Xj7TuRDULwHjQAn+2slVaFFQHJwFguBNcG6
PoFSDm1QllV0mlFDGGZxhgfjW156IKWQdO58IjAkSx4zvcsWaFD5gTL4XwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFADHIlT1i/RjXHiPJjYiMxEo7hZEMB8GA1UdIwQY
MBaAFH+j+Z26lKMHts0uHZD2eNrAVoH4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZjZQNW5icVVvd2UyelM0ZGtQWjQyc0JXZ2ZnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNS81YWUzYzQtNGFhNC00YzYyLThlYjUt
NGVhNDdjY2UwYzYzLzEvQU1jaVZQV0w5R05jZUk4bU5pSXpFU2p1RmtRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNS81YWUzYzQtNGFhNC00YzYyLThlYjUtNGVhNDdjY2UwYzYz
LzEvZjZQNW5icVVvd2UyelM0ZGtQWjQyc0JXZ2ZnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAXpq4MA0G
CSqGSIb3DQEBCwUAA4IBAQBeRY2m4RgBjg9Xdye+zuL2//stbwOCyi5132eX0gSz
kG/iuUD66mv/pLIJ16Chsmc3BhNAnkVdXHrFIoQZwQ9UfajS/9q3Lp5bFryQk7aM
Bk5PYRc4tgBgYtTGTpkSB8r1ttKzadNtsbwBu6EvIpOzWehcuZqzEgkH5wUTulNr
WO++vB+JqlqW/gxrMwwegpB6lCip0pz4MTuS+ATvVARYpdfj+sadX2U2uu+Oscpt
aDW9kz7f2N+m4uQMtWnB05dzkMOT19oWg7bHllCQK0u0GPgNOylMduIvk3tT5a31
BW9bymkdFF4epPMkZC/XgdJTYmkvKZteH8riettSttay
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:55:03 2024 by rpki-client on console-ams.rpki-client.org