Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/b0jKGhPqn4LKch8pGtGPGsxk-DE.roa
File: b0jKGhPqn4LKch8pGtGPGsxk-DE.roa (raw, json)
Hash identifier: qLrowUF9uCDz84R/+sCVVvBPLUOpo8Nhrfp6W7gLiI4=
Subject key identifier: 6F:48:CA:1A:13:EA:9F:82:CA:72:1F:29:1A:D1:8F:1A:CC:64:F8:31
Certificate issuer: /CN=d747017564c711bcbd57680a0dfd00f2a5d099db
Certificate serial: 0C5F8926
Authority key identifier: D7:47:01:75:64:C7:11:BC:BD:57:68:0A:0D:FD:00:F2:A5:D0:99:DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/10cBdWTHEby9V2gKDf0A8qXQmds.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/b0jKGhPqn4LKch8pGtGPGsxk-DE.roa
Signing time: Thu 03 Mar 2022 10:31:15 +0000
ROA not before: Thu 03 Mar 2022 10:31:15 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 21700
IP address blocks: 151.106.80.0/20 maxlen: 24
194.233.240.0/20 maxlen: 24
195.180.168.0/22 maxlen: 22
195.180.172.0/22 maxlen: 22
194.163.224.0/20 maxlen: 24
194.195.16.0/20 maxlen: 24
62.138.68.0/22 maxlen: 22
62.138.76.0/22 maxlen: 22
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 207587622 (0xc5f8926)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d747017564c711bcbd57680a0dfd00f2a5d099db
Validity
Not Before: Mar 3 10:31:15 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6f48ca1a13ea9f82ca721f291ad18f1acc64f831
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:77:1c:36:0d:10:78:c1:25:fc:04:d5:1c:1c:
75:17:8a:2d:f0:72:52:4c:13:ef:d4:38:d6:fe:a9:
af:2e:fc:69:23:2f:45:f1:98:65:d4:b4:83:f3:59:
3c:de:a8:6b:f6:0b:32:6f:e2:d7:df:6d:d6:80:55:
92:f0:6b:c6:0c:e2:19:16:11:fe:69:fb:8c:75:1b:
4f:ad:4a:fc:bc:c9:ff:2f:63:6f:d0:ec:f7:47:38:
cf:d3:51:e7:9b:e0:d4:b0:a1:1e:e5:03:4a:ff:95:
7e:d1:13:c9:07:67:8a:86:82:ae:98:36:d0:f0:f1:
ae:3a:07:97:be:77:d2:d2:56:c0:e7:6f:e6:18:04:
72:77:58:aa:3b:dd:8c:c3:eb:95:31:59:d9:be:ec:
e4:86:12:94:56:93:ae:b3:f9:b9:9e:ad:ad:e9:6f:
df:38:d7:d2:f1:55:7d:ba:c5:77:9d:d8:6b:71:81:
01:be:0a:63:8b:57:27:65:34:13:39:77:ad:ee:8f:
b5:e5:62:17:58:6e:d9:31:a7:2b:1a:a3:44:f2:96:
cf:a2:58:6f:f6:74:8d:f8:b2:67:96:0a:04:56:fa:
d6:1c:9e:19:1f:92:f2:82:db:4e:92:38:85:03:af:
bd:26:68:f9:ac:71:07:cb:ee:11:d8:8f:0c:b0:40:
9c:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:48:CA:1A:13:EA:9F:82:CA:72:1F:29:1A:D1:8F:1A:CC:64:F8:31
X509v3 Authority Key Identifier:
keyid:D7:47:01:75:64:C7:11:BC:BD:57:68:0A:0D:FD:00:F2:A5:D0:99:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/10cBdWTHEby9V2gKDf0A8qXQmds.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/b0jKGhPqn4LKch8pGtGPGsxk-DE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/10cBdWTHEby9V2gKDf0A8qXQmds.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.138.68.0/22
62.138.76.0/22
151.106.80.0/20
194.163.224.0/20
194.195.16.0/20
194.233.240.0/20
195.180.168.0/21
Signature Algorithm: sha256WithRSAEncryption
54:09:b1:dc:d2:2e:a3:d7:05:88:3f:2a:3c:dc:ba:cb:93:92:
f0:e9:22:82:c6:4e:07:6b:94:30:eb:45:c9:3e:56:f8:c9:92:
87:90:e5:3f:ce:25:75:98:4f:3a:66:46:ca:6f:8d:ed:4b:44:
a6:cf:b2:e3:10:fc:83:7e:ce:a6:41:29:52:30:9f:76:14:9d:
b9:07:21:d2:97:e4:b5:e7:87:1f:e5:3c:c7:a0:d1:98:7f:71:
be:5e:39:96:97:7c:c6:01:cb:16:b4:96:0b:f6:80:d7:3c:f6:
b6:a9:a9:aa:b6:e0:bb:a5:63:fd:a5:cc:bf:ff:5f:36:68:84:
ca:4a:a7:c8:b5:94:a0:81:c3:8f:2e:82:e0:b5:ed:ed:37:13:
1b:f1:d6:48:74:64:ae:00:71:67:a6:e9:1e:4b:f5:47:4c:30:
f1:30:43:f7:68:96:13:90:ac:90:d3:53:9c:ba:a2:84:fd:08:
72:fa:a9:60:91:f7:5c:8e:2b:ad:06:4d:41:01:90:03:12:ad:
d9:a5:03:54:e1:82:cf:40:41:99:b4:29:68:0b:5c:9a:07:85:
bf:b0:6b:e4:1b:c5:a7:5e:8c:5b:e3:aa:46:7e:3d:1d:13:b9:
5c:6b:8f:f7:04:8e:b0:2f:fb:dd:cd:1d:08:37:98:7a:2c:b7:
d2:46:2c:b4
-----BEGIN CERTIFICATE-----
MIIFEzCCA/ugAwIBAgIEDF+JJjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhk
NzQ3MDE3NTY0YzcxMWJjYmQ1NzY4MGEwZGZkMDBmMmE1ZDA5OWRiMB4XDTIyMDMw
MzEwMzExNVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoNmY0OGNhMWExM2Vh
OWY4MmNhNzIxZjI5MWFkMThmMWFjYzY0ZjgzMTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAMF3HDYNEHjBJfwE1RwcdReKLfByUkwT79Q41v6pry78aSMv
RfGYZdS0g/NZPN6oa/YLMm/i199t1oBVkvBrxgziGRYR/mn7jHUbT61K/LzJ/y9j
b9Ds90c4z9NR55vg1LChHuUDSv+VftETyQdnioaCrpg20PDxrjoHl7530tJWwOdv
5hgEcndYqjvdjMPrlTFZ2b7s5IYSlFaTrrP5uZ6trelv3zjX0vFVfbrFd53Ya3GB
Ab4KY4tXJ2U0Ezl3re6PteViF1hu2TGnKxqjRPKWz6JYb/Z0jfiyZ5YKBFb61hye
GR+S8oLbTpI4hQOvvSZo+axxB8vuEdiPDLBAnJMCAwEAAaOCAi0wggIpMB0GA1Ud
DgQWBBRvSMoaE+qfgspyHyka0Y8azGT4MTAfBgNVHSMEGDAWgBTXRwF1ZMcRvL1X
aAoN/QDypdCZ2zAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
LzEwY0JkV1RIRWJ5OVYyZ0tEZjBBOHFYUW1kcy5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvMTgvYmEyMzYyLTBjYzUtNDliZC1hNTIyLTRmMGU4Y2UxMWE3ZC8x
L2IwaktHaFBxbjRMS2NoOHBHdEdQR3N4ay1ERS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMTgv
YmEyMzYyLTBjYzUtNDliZC1hNTIyLTRmMGU4Y2UxMWE3ZC8xLzEwY0JkV1RIRWJ5
OVYyZ0tEZjBBOHFYUW1kcy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBD
BggrBgEFBQcBBwEB/wQ0MDIwMAQCAAEwKgMEAj6KRAMEAj6KTAMEBJdqUAMEBMKj
4AMEBMLDEAMEBMLp8AMEA8O0qDANBgkqhkiG9w0BAQsFAAOCAQEAVAmx3NIuo9cF
iD8qPNy6y5OS8OkigsZOB2uUMOtFyT5W+MmSh5DlP84ldZhPOmZGym+N7UtEps+y
4xD8g37OpkEpUjCfdhSduQch0pfkteeHH+U8x6DRmH9xvl45lpd8xgHLFrSWC/aA
1zz2tqmpqrbgu6Vj/aXMv/9fNmiEykqnyLWUoIHDjy6C4LXt7TcTG/HWSHRkrgBx
Z6bpHkv1R0ww8TBD92iWE5CskNNTnLqihP0IcvqpYJH3XI4rrQZNQQGQAxKt2aUD
VOGCz0BBmbQpaAtcmgeFv7Br5BvFp16MW+OqRn49HRO5XGuP9wSOsC/73c0dCDeY
eiy30kYstA==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:44:42 2023 by rpki-client on console-fra.rpki-client.org