Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/6ca5b6-c423-4b54-9655-7c5964990397/1/Q14UsNH4E1FacjXVi9JR2eeigKU.roa
File: Q14UsNH4E1FacjXVi9JR2eeigKU.roa (raw, json)
Hash identifier: 63pOIUqLWStC8nh/5W3425tsaS+Bxr3quhRAl0gm/SU=
Subject key identifier: 43:5E:14:B0:D1:F8:13:51:5A:72:35:D5:8B:D2:51:D9:E7:A2:80:A5
Certificate issuer: /CN=a036af22669183ba26f23976530e349b34651968
Certificate serial: 06AFD2EA
Authority key identifier: A0:36:AF:22:66:91:83:BA:26:F2:39:76:53:0E:34:9B:34:65:19:68
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oDavImaRg7om8jl2Uw40mzRlGWg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/6ca5b6-c423-4b54-9655-7c5964990397/1/Q14UsNH4E1FacjXVi9JR2eeigKU.roa
Signing time: Sat 01 Jan 2022 15:55:14 +0000
ROA not before: Sat 01 Jan 2022 15:55:14 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 201844
IP address blocks: 80.64.22.0/23 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 112186090 (0x6afd2ea)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a036af22669183ba26f23976530e349b34651968
Validity
Not Before: Jan 1 15:55:14 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=435e14b0d1f813515a7235d58bd251d9e7a280a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:62:9b:31:83:39:81:8e:00:50:f8:c5:6e:95:
65:82:4b:f6:56:6b:82:45:f2:95:32:9e:e8:d1:cc:
47:58:a5:23:17:2b:58:7b:c4:06:eb:22:38:1f:84:
17:84:b9:eb:29:49:33:29:59:76:cd:bb:f6:00:fd:
36:70:2c:b9:90:9a:9b:77:f6:79:97:2c:04:16:c6:
8c:84:d9:fc:fc:bf:cd:13:92:0d:1f:7d:38:43:2c:
1b:a4:e0:4a:b1:e7:58:64:91:b6:81:16:13:f3:a7:
72:c4:b8:80:f1:d2:b5:4c:12:6c:fb:e3:2c:d8:64:
fb:a5:4c:e6:85:46:f6:11:09:5b:d8:c3:b2:35:a5:
c7:d6:0b:76:5b:d9:fc:c6:d5:75:ad:d4:bd:77:80:
60:7b:f8:ec:fe:11:15:be:bb:f6:53:65:83:d6:2f:
57:36:a1:b0:f4:cd:8d:57:83:4d:98:a8:d6:f0:81:
b3:c8:8e:62:79:69:5c:d3:d4:52:18:e8:7e:65:cd:
27:48:c3:b1:00:ef:d9:4f:ab:ba:fc:65:74:ba:f6:
16:44:af:ea:4f:44:38:b1:91:b9:53:8b:c3:78:76:
d2:1c:3a:c8:30:4d:11:70:32:cc:3b:52:b7:f0:88:
78:0d:ac:62:64:ef:4d:1a:56:a8:a8:e5:47:3c:d5:
9c:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:5E:14:B0:D1:F8:13:51:5A:72:35:D5:8B:D2:51:D9:E7:A2:80:A5
X509v3 Authority Key Identifier:
keyid:A0:36:AF:22:66:91:83:BA:26:F2:39:76:53:0E:34:9B:34:65:19:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oDavImaRg7om8jl2Uw40mzRlGWg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/6ca5b6-c423-4b54-9655-7c5964990397/1/Q14UsNH4E1FacjXVi9JR2eeigKU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/6ca5b6-c423-4b54-9655-7c5964990397/1/oDavImaRg7om8jl2Uw40mzRlGWg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.64.22.0/23
Signature Algorithm: sha256WithRSAEncryption
a9:91:bf:eb:53:08:47:d4:a2:cf:32:70:f7:d1:35:1d:b8:ce:
44:fb:68:08:8f:9a:45:0a:08:c8:c7:6c:f2:2b:95:bf:d7:2d:
d4:92:ae:90:6d:b0:b2:e7:ce:8e:c2:10:68:fb:10:38:df:3f:
5e:e2:f7:14:d7:a7:a8:db:7c:f1:40:38:ae:b5:19:d9:dc:c6:
3d:58:db:5b:97:b1:41:a9:29:25:a1:cd:bf:4d:03:8f:59:2a:
a6:e8:cd:95:46:fb:43:38:5b:3a:af:be:a3:e4:f4:00:3c:66:
ec:64:fd:c9:7d:20:04:56:5d:34:bd:fe:a0:8f:1a:de:64:58:
98:fb:94:9b:3f:63:3d:a3:ca:a6:a4:fd:dd:26:bf:73:b9:53:
0b:6f:1e:70:4b:1a:eb:b2:30:b2:75:5b:03:49:c0:05:a0:67:
d1:0b:7e:ec:1c:6c:60:13:cc:99:25:f4:51:1d:c6:49:f5:d7:
03:ce:be:ff:84:00:fc:73:fd:e2:99:ee:fc:df:d5:40:2c:8a:
3a:0a:c8:a2:63:9d:a6:05:1e:a5:80:17:b8:b5:09:66:10:9e:
76:17:46:ea:a1:46:4e:0b:d9:08:f7:b1:b0:af:78:36:51:46:
66:1e:08:f3:06:bf:59:47:27:67:ce:94:84:d1:0c:99:52:40:
a1:e4:45:88
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEBq/S6jANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhh
MDM2YWYyMjY2OTE4M2JhMjZmMjM5NzY1MzBlMzQ5YjM0NjUxOTY4MB4XDTIyMDEw
MTE1NTUxNFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoNDM1ZTE0YjBkMWY4
MTM1MTVhNzIzNWQ1OGJkMjUxZDllN2EyODBhNTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBALRimzGDOYGOAFD4xW6VZYJL9lZrgkXylTKe6NHMR1ilIxcr
WHvEBusiOB+EF4S56ylJMylZds279gD9NnAsuZCam3f2eZcsBBbGjITZ/Py/zROS
DR99OEMsG6TgSrHnWGSRtoEWE/OncsS4gPHStUwSbPvjLNhk+6VM5oVG9hEJW9jD
sjWlx9YLdlvZ/MbVda3UvXeAYHv47P4RFb679lNlg9YvVzahsPTNjVeDTZio1vCB
s8iOYnlpXNPUUhjofmXNJ0jDsQDv2U+ruvxldLr2FkSv6k9EOLGRuVOLw3h20hw6
yDBNEXAyzDtSt/CIeA2sYmTvTRpWqKjlRzzVnF8CAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBRDXhSw0fgTUVpyNdWL0lHZ56KApTAfBgNVHSMEGDAWgBSgNq8iZpGDuiby
OXZTDjSbNGUZaDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L29EYXZJbWFSZzdvbThqbDJVdzQwbXpSbEdXZy5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvMTgvNmNhNWI2LWM0MjMtNGI1NC05NjU1LTdjNTk2NDk5MDM5Ny8x
L1ExNFVzTkg0RTFGYWNqWFZpOUpSMmVlaWdLVS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMTgv
NmNhNWI2LWM0MjMtNGI1NC05NjU1LTdjNTk2NDk5MDM5Ny8xL29EYXZJbWFSZzdv
bThqbDJVdzQwbXpSbEdXZy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAVBAFjANBgkqhkiG9w0BAQsFAAOC
AQEAqZG/61MIR9SizzJw99E1HbjORPtoCI+aRQoIyMds8iuVv9ct1JKukG2wsufO
jsIQaPsQON8/XuL3FNenqNt88UA4rrUZ2dzGPVjbW5exQakpJaHNv00Dj1kqpujN
lUb7QzhbOq++o+T0ADxm7GT9yX0gBFZdNL3+oI8a3mRYmPuUmz9jPaPKpqT93Sa/
c7lTC28ecEsa67IwsnVbA0nABaBn0Qt+7BxsYBPMmSX0UR3GSfXXA86+/4QA/HP9
4pnu/N/VQCyKOgrIomOdpgUepYAXuLUJZhCedhdG6qFGTgvZCPexsK94NlFGZh4I
8wa/WUcnZ86UhNEMmVJAoeRFiA==
-----END CERTIFICATE-----
Generated at Sun Apr 13 10:57:28 2025 by rpki-client