Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/74e17f-f9f4-4789-92b7-9dd6e88fcc8d/1/3F340TUMZOKrtPNscL-1NJ0ryTQ.roa
File: 3F340TUMZOKrtPNscL-1NJ0ryTQ.roa (raw, json)
Hash identifier: zB8G95gniZ0pLvUXeBNdUI/ZXgDv0Adp1/NJbRF9GL4=
Subject key identifier: DC:5D:F8:D1:35:0C:64:E2:AB:B4:F3:6C:70:BF:B5:34:9D:2B:C9:34
Certificate issuer: /CN=b91b91504983091506a1a944457a4558b94dab7f
Certificate serial: 01840F6B78EE35C78C6A1AA5ABD26657D6EE
Authority key identifier: B9:1B:91:50:49:83:09:15:06:A1:A9:44:45:7A:45:58:B9:4D:AB:7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uRuRUEmDCRUGoalERXpFWLlNq38.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/74e17f-f9f4-4789-92b7-9dd6e88fcc8d/1/3F340TUMZOKrtPNscL-1NJ0ryTQ.roa
Signing time: Tue 25 Oct 2022 13:53:32 +0000
ROA not before: Tue 25 Oct 2022 13:53:32 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 35534
IP address blocks: 178.175.162.0/23 maxlen: 24
178.175.160.0/23 maxlen: 24
178.175.178.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:0f:6b:78:ee:35:c7:8c:6a:1a:a5:ab:d2:66:57:d6:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b91b91504983091506a1a944457a4558b94dab7f
Validity
Not Before: Oct 25 13:53:32 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=dc5df8d1350c64e2abb4f36c70bfb5349d2bc934
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:27:ba:6a:5a:e9:48:70:cb:e0:da:71:9c:59:
63:02:45:0e:67:91:bd:f3:86:fc:52:3d:26:22:8a:
d1:72:eb:77:05:e2:85:50:e0:1e:50:64:f5:94:ff:
55:61:36:33:a3:76:54:9d:67:3a:86:5f:56:cf:c3:
75:42:a6:70:76:47:69:c3:96:e9:f4:2a:8f:9c:ce:
4f:15:82:51:11:46:9b:29:93:4c:52:dd:25:3a:8f:
38:e5:61:af:a6:19:c3:6d:dd:f1:a0:42:e9:7b:5e:
7f:f1:68:15:be:cb:2a:d9:c8:9b:92:6f:0f:0a:00:
26:bd:ad:45:9d:d8:49:90:18:6d:e4:a3:29:ec:16:
2e:59:0c:f0:01:1c:9a:ff:9d:3b:20:41:24:ee:a1:
fc:ad:e5:ac:ee:e1:de:e3:60:6d:c7:09:85:2c:d3:
0e:83:9c:93:c4:c3:1f:66:89:6b:f6:2d:18:d6:62:
48:2f:e9:29:6d:37:a0:6a:a4:45:1d:7d:a6:a7:33:
41:f1:4e:5c:bc:b0:22:c8:10:b5:61:c9:57:64:67:
ca:ba:cf:f3:24:bf:92:c4:02:a6:88:0c:41:26:c7:
2d:b6:96:df:c2:3c:99:09:71:45:ce:1e:76:ce:7b:
92:3c:6a:05:b8:2b:51:e1:d3:d3:f6:fb:dc:60:7b:
ba:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:5D:F8:D1:35:0C:64:E2:AB:B4:F3:6C:70:BF:B5:34:9D:2B:C9:34
X509v3 Authority Key Identifier:
keyid:B9:1B:91:50:49:83:09:15:06:A1:A9:44:45:7A:45:58:B9:4D:AB:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uRuRUEmDCRUGoalERXpFWLlNq38.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/74e17f-f9f4-4789-92b7-9dd6e88fcc8d/1/3F340TUMZOKrtPNscL-1NJ0ryTQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/74e17f-f9f4-4789-92b7-9dd6e88fcc8d/1/uRuRUEmDCRUGoalERXpFWLlNq38.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.175.160.0/22
178.175.178.0/24
Signature Algorithm: sha256WithRSAEncryption
a1:76:c0:df:90:c6:50:12:51:c8:01:3e:9e:8d:f8:5e:4d:7c:
34:cc:d6:53:6a:4f:81:6b:72:4b:81:cf:fc:de:06:e3:72:06:
03:1f:ac:28:b1:a1:4e:cd:8a:b8:14:a3:4a:d9:87:07:a4:2e:
5b:69:4e:5a:37:b3:17:66:9f:24:cd:cd:36:1c:b1:ea:a0:2f:
71:37:e3:4b:ad:6b:dc:66:59:f0:cf:69:5b:78:8f:15:d5:56:
62:ec:32:5e:ce:91:7c:33:8a:0f:9c:88:2c:3b:5d:55:8c:52:
9d:31:ff:8d:29:60:27:11:b8:f0:60:07:64:44:4d:44:6e:7a:
64:4b:52:b4:7f:51:60:f0:e4:4c:a5:bd:dd:7a:e4:87:92:8e:
ff:52:8f:f0:07:eb:89:65:c1:96:d3:9a:81:94:42:fa:8a:13:
37:64:c1:e2:9c:e2:f5:63:09:48:54:68:ed:c4:bb:37:76:96:
ba:dc:03:e5:61:24:ba:17:f6:f3:40:f0:99:d7:83:61:b5:7c:
41:3c:c0:bc:d7:b4:0c:7b:ba:68:8f:76:68:24:1e:4b:20:4d:
2d:5b:cf:88:c4:05:0e:5d:c3:a8:65:b8:51:d5:90:55:9c:b2:
05:27:68:3c:3b:7e:55:7f:97:be:12:33:54:4a:d8:48:6d:35:
d3:4f:c0:cf
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYQPa3juNceMahqlq9JmV9buMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI5MWI5MTUwNDk4MzA5MTUwNmExYTk0NDQ1N2E0NTU4Yjk0
ZGFiN2YwHhcNMjIxMDI1MTM1MzMyWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkYzVkZjhkMTM1MGM2NGUyYWJiNGYzNmM3MGJmYjUzNDlkMmJjOTM0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiSe6alrpSHDL4NpxnFljAkUOZ5G9
84b8Uj0mIorRcut3BeKFUOAeUGT1lP9VYTYzo3ZUnWc6hl9Wz8N1QqZwdkdpw5bp
9CqPnM5PFYJREUabKZNMUt0lOo845WGvphnDbd3xoELpe15/8WgVvssq2cibkm8P
CgAmva1FndhJkBht5KMp7BYuWQzwARya/507IEEk7qH8reWs7uHe42BtxwmFLNMO
g5yTxMMfZolr9i0Y1mJIL+kpbTegaqRFHX2mpzNB8U5cvLAiyBC1YclXZGfKus/z
JL+SxAKmiAxBJscttpbfwjyZCXFFzh52znuSPGoFuCtR4dPT9vvcYHu65QIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFNxd+NE1DGTiq7TzbHC/tTSdK8k0MB8GA1UdIwQY
MBaAFLkbkVBJgwkVBqGpREV6RVi5Tat/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdVJ1UlVFbURDUlVHb2FsRVJYcEZXTGxOcTM4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNS83NGUxN2YtZjlmNC00Nzg5LTkyYjct
OWRkNmU4OGZjYzhkLzEvM0YzNDBUVU1aT0tydFBOc2NMLTFOSjByeVRRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNS83NGUxN2YtZjlmNC00Nzg5LTkyYjctOWRkNmU4OGZjYzhk
LzEvdVJ1UlVFbURDUlVHb2FsRVJYcEZXTGxOcTM4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCsq+gAwQA
sq+yMA0GCSqGSIb3DQEBCwUAA4IBAQChdsDfkMZQElHIAT6ejfheTXw0zNZTak+B
a3JLgc/83gbjcgYDH6wosaFOzYq4FKNK2YcHpC5baU5aN7MXZp8kzc02HLHqoC9x
N+NLrWvcZlnwz2lbeI8V1VZi7DJezpF8M4oPnIgsO11VjFKdMf+NKWAnEbjwYAdk
RE1EbnpkS1K0f1Fg8ORMpb3deuSHko7/Uo/wB+uJZcGW05qBlEL6ihM3ZMHinOL1
YwlIVGjtxLs3dpa63APlYSS6F/bzQPCZ14NhtXxBPMC817QMe7poj3ZoJB5LIE0t
W8+IxAUOXcOoZbhR1ZBVnLIFJ2g8O35Vf5e+EjNUSthIbTXTT8DP
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:44:28 2023 by rpki-client on console-fra.rpki-client.org