Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/5b0222-ed64-4f55-b45b-0059f737ef05/1/So0hg2xxZsBnx-mH691RKw4KKG0.roa
File: So0hg2xxZsBnx-mH691RKw4KKG0.roa (raw, json)
Hash identifier: 3z1nk8KHkMd3JJqNgy7hw3Oh96n/RuAs9/8zGDgHJak=
Subject key identifier: 4A:8D:21:83:6C:71:66:C0:67:C7:E9:87:EB:DD:51:2B:0E:0A:28:6D
Certificate issuer: /CN=e501815c6f98f3a2b6184afebf18ea341be882ea
Certificate serial: 38FAC90E
Authority key identifier: E5:01:81:5C:6F:98:F3:A2:B6:18:4A:FE:BF:18:EA:34:1B:E8:82:EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5QGBXG-Y86K2GEr-vxjqNBvoguo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/5b0222-ed64-4f55-b45b-0059f737ef05/1/So0hg2xxZsBnx-mH691RKw4KKG0.roa
Signing time: Mon 11 Apr 2022 08:04:19 +0000
ROA not before: Mon 11 Apr 2022 08:04:19 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 47894
IP address blocks: 94.103.36.0/24 maxlen: 24
94.103.35.0/24 maxlen: 24
94.103.38.0/24 maxlen: 24
94.103.37.0/24 maxlen: 24
94.103.33.0/24 maxlen: 24
94.103.32.0/24 maxlen: 24
94.103.34.0/24 maxlen: 24
94.103.43.0/24 maxlen: 24
94.103.42.0/24 maxlen: 24
94.103.44.0/24 maxlen: 24
94.103.40.0/24 maxlen: 24
94.103.39.0/24 maxlen: 24
94.103.41.0/24 maxlen: 24
94.103.45.0/24 maxlen: 24
94.103.46.0/24 maxlen: 24
94.103.47.0/24 maxlen: 24
185.35.20.0/24 maxlen: 24
185.35.22.0/24 maxlen: 24
185.35.23.0/24 maxlen: 24
2a00:7300:42::/48 maxlen: 48
2a00:7300:1::/48 maxlen: 48
2a00:7300::/32 maxlen: 32
2a00:7300:100::/48 maxlen: 48
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 955959566 (0x38fac90e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e501815c6f98f3a2b6184afebf18ea341be882ea
Validity
Not Before: Apr 11 08:04:19 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=4a8d21836c7166c067c7e987ebdd512b0e0a286d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:b0:c5:8f:d5:d4:8f:2d:2f:81:67:9e:af:fd:
fc:ce:d9:d5:24:5f:11:5e:e1:19:11:72:a1:76:08:
eb:bf:c8:15:a2:e1:3f:bc:4d:8d:8d:02:c8:b6:45:
63:17:b6:92:c6:c6:1d:36:74:ab:96:9a:d8:91:fa:
b0:66:f4:c9:8c:b1:7e:96:eb:51:51:e1:a5:aa:d3:
64:71:81:3d:b2:2a:03:ba:12:7d:00:0b:02:2e:b7:
db:ab:3b:9d:5e:2e:27:6d:72:b2:ab:17:c0:b9:fc:
0d:a3:b5:08:33:bc:3c:3a:94:13:7d:84:85:4f:2d:
d3:d6:c6:ae:66:3d:e9:72:4f:10:ad:63:0f:13:c9:
83:9c:44:e6:a0:9e:4e:de:9b:ab:00:75:08:30:65:
e7:85:a2:03:37:0d:72:9e:ad:49:fd:b5:36:9c:5b:
67:82:dd:fb:92:e6:4a:06:ef:1f:35:ce:2f:05:d9:
7b:7b:e7:b3:df:6a:45:d9:68:ea:35:f3:be:0c:08:
4b:92:ba:68:d3:a4:e8:09:68:12:91:a4:c7:63:67:
f8:36:45:18:84:4b:c3:b2:d7:f0:e0:43:68:06:0d:
f1:bb:0c:83:99:56:ae:26:37:56:36:c5:d8:24:ed:
65:06:0b:11:a9:a9:5f:19:35:b7:71:49:39:29:45:
1b:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:8D:21:83:6C:71:66:C0:67:C7:E9:87:EB:DD:51:2B:0E:0A:28:6D
X509v3 Authority Key Identifier:
keyid:E5:01:81:5C:6F:98:F3:A2:B6:18:4A:FE:BF:18:EA:34:1B:E8:82:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5QGBXG-Y86K2GEr-vxjqNBvoguo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/5b0222-ed64-4f55-b45b-0059f737ef05/1/So0hg2xxZsBnx-mH691RKw4KKG0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/5b0222-ed64-4f55-b45b-0059f737ef05/1/5QGBXG-Y86K2GEr-vxjqNBvoguo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.103.32.0/20
185.35.20.0/24
185.35.22.0/23
IPv6:
2a00:7300::/32
Signature Algorithm: sha256WithRSAEncryption
59:b9:6d:c6:5b:8c:11:ba:3d:b2:19:8f:41:72:ee:eb:ac:d1:
9b:97:ba:32:b8:8b:fa:6c:90:19:4d:75:06:fc:c3:77:d1:f5:
a2:b1:8a:2d:68:14:9c:d2:13:94:cd:3e:ec:38:4f:55:44:13:
e8:c3:45:56:d9:76:30:f8:1d:46:e3:be:06:01:66:8a:5c:f2:
bd:6a:90:e0:37:f7:af:9c:d6:8f:a3:6a:72:e4:2c:cf:d4:8a:
7c:cc:5f:1b:fe:77:bc:be:b2:14:ea:10:9b:9e:97:5a:61:6e:
28:12:71:2c:43:4c:50:b6:4b:de:c3:e2:b7:ca:d7:0b:56:bd:
9a:b1:37:a7:09:43:3c:9c:60:a7:68:06:d7:e8:86:fb:f0:72:
74:aa:26:50:80:86:55:d1:4e:5b:37:0c:29:0a:30:52:90:f2:
e2:30:c5:72:12:2a:bb:f3:ca:0a:09:ba:bb:d5:19:a4:30:c7:
6d:63:0a:2d:98:f3:e9:a5:95:85:5f:52:49:26:7c:c8:e6:8c:
e0:80:f7:e9:e3:a4:91:31:65:ff:83:de:00:5b:87:89:a0:1b:
d4:30:eb:d9:dd:d3:63:29:b0:e2:25:7b:a9:bd:1c:d5:3e:bf:
c0:a3:ce:3e:df:c3:8d:57:f8:4d:03:7e:ed:2d:ac:f9:2b:0f:
8c:ab:00:1a
-----BEGIN CERTIFICATE-----
MIIFCjCCA/KgAwIBAgIEOPrJDjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhl
NTAxODE1YzZmOThmM2EyYjYxODRhZmViZjE4ZWEzNDFiZTg4MmVhMB4XDTIyMDQx
MTA4MDQxOVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoNGE4ZDIxODM2Yzcx
NjZjMDY3YzdlOTg3ZWJkZDUxMmIwZTBhMjg2ZDCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBALewxY/V1I8tL4Fnnq/9/M7Z1SRfEV7hGRFyoXYI67/IFaLh
P7xNjY0CyLZFYxe2ksbGHTZ0q5aa2JH6sGb0yYyxfpbrUVHhparTZHGBPbIqA7oS
fQALAi6326s7nV4uJ21ysqsXwLn8DaO1CDO8PDqUE32EhU8t09bGrmY96XJPEK1j
DxPJg5xE5qCeTt6bqwB1CDBl54WiAzcNcp6tSf21NpxbZ4Ld+5LmSgbvHzXOLwXZ
e3vns99qRdlo6jXzvgwIS5K6aNOk6AloEpGkx2Nn+DZFGIRLw7LX8OBDaAYN8bsM
g5lWriY3VjbF2CTtZQYLEampXxk1t3FJOSlFG2UCAwEAAaOCAiQwggIgMB0GA1Ud
DgQWBBRKjSGDbHFmwGfH6Yfr3VErDgoobTAfBgNVHSMEGDAWgBTlAYFcb5jzorYY
Sv6/GOo0G+iC6jAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
LzVRR0JYRy1ZODZLMkdFci12eGpxTkJ2b2d1by5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvMWMvNWIwMjIyLWVkNjQtNGY1NS1iNDViLTAwNTlmNzM3ZWYwNS8x
L1NvMGhnMnh4WnNCbngtbUg2OTFSS3c0S0tHMC5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMWMv
NWIwMjIyLWVkNjQtNGY1NS1iNDViLTAwNTlmNzM3ZWYwNS8xLzVRR0JYRy1ZODZL
MkdFci12eGpxTkJ2b2d1by5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjA6
BggrBgEFBQcBBwEB/wQrMCkwGAQCAAEwEgMEBF5nIAMEALkjFAMEAbkjFjANBAIA
AjAHAwUAKgBzADANBgkqhkiG9w0BAQsFAAOCAQEAWbltxluMEbo9shmPQXLu66zR
m5e6MriL+myQGU11BvzDd9H1orGKLWgUnNITlM0+7DhPVUQT6MNFVtl2MPgdRuO+
BgFmilzyvWqQ4Df3r5zWj6NqcuQsz9SKfMxfG/53vL6yFOoQm56XWmFuKBJxLENM
ULZL3sPit8rXC1a9mrE3pwlDPJxgp2gG1+iG+/BydKomUICGVdFOWzcMKQowUpDy
4jDFchIqu/PKCgm6u9UZpDDHbWMKLZjz6aWVhV9SSSZ8yOaM4ID36eOkkTFl/4Pe
AFuHiaAb1DDr2d3TYymw4iV7qb0c1T6/wKPOPt/DjVf4TQN+7S2s+SsPjKsAGg==
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:56:59 2024 by rpki-client on console-ams.rpki-client.org