Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/32d85d-a717-4d68-82a6-2f365f22a18c/1/7yFhCT9MKgjqNc6kq4KQaGpi2e8.roa
File: 7yFhCT9MKgjqNc6kq4KQaGpi2e8.roa (raw, json)
Hash identifier: gC9TXqiRdNImR0ay8nUDuql2ohIqHT24Zmcks8cKt74=
Subject key identifier: EF:21:61:09:3F:4C:2A:08:EA:35:CE:A4:AB:82:90:68:6A:62:D9:EF
Certificate issuer: /CN=1a392dfc6ba2d3186d3269c7091b7019815345d3
Certificate serial: 378BFBD5
Authority key identifier: 1A:39:2D:FC:6B:A2:D3:18:6D:32:69:C7:09:1B:70:19:81:53:45:D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Gjkt_Gui0xhtMmnHCRtwGYFTRdM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/32d85d-a717-4d68-82a6-2f365f22a18c/1/7yFhCT9MKgjqNc6kq4KQaGpi2e8.roa
Signing time: Sat 01 Jan 2022 15:01:27 +0000
ROA not before: Sat 01 Jan 2022 15:01:27 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 60786
IP address blocks: 185.136.183.0/24 maxlen: 24
185.136.180.0/24 maxlen: 24
185.136.181.0/24 maxlen: 24
185.136.182.0/24 maxlen: 24
185.107.244.0/24 maxlen: 24
185.107.245.0/24 maxlen: 24
185.107.246.0/24 maxlen: 24
185.107.247.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 931920853 (0x378bfbd5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a392dfc6ba2d3186d3269c7091b7019815345d3
Validity
Not Before: Jan 1 15:01:27 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ef2161093f4c2a08ea35cea4ab8290686a62d9ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:f0:f1:7e:16:8b:b2:fb:63:df:df:e4:00:88:
5f:ef:69:4f:a2:75:69:4b:70:55:d9:a0:9a:4c:5b:
45:d1:97:49:fc:08:99:c5:7e:f9:09:72:df:b3:23:
ac:c5:1e:79:e9:47:0f:d1:8a:75:e2:e1:7c:cc:3c:
2a:10:74:1f:a0:07:00:12:d6:35:21:15:0c:44:01:
c3:87:2a:da:9d:32:1c:1e:ca:61:2e:6b:b3:c2:55:
25:c5:3a:77:8e:1f:46:fd:91:3d:6a:fe:ca:54:48:
f1:03:5f:bd:48:e4:dc:a8:1d:5b:ba:25:a0:f9:a9:
0a:75:84:ab:76:52:b5:69:ca:fd:b0:54:54:20:f4:
f7:96:1b:25:6c:4d:fe:5e:92:31:0e:4b:e6:ae:6a:
6c:c3:3d:49:2c:1d:84:b0:e7:f6:1d:d8:81:75:72:
af:bd:ef:6a:c3:cb:ab:6c:ab:8a:59:7f:34:50:9a:
b0:a2:ca:25:db:e6:d4:79:da:04:3a:82:82:01:08:
70:47:a8:71:a3:3a:a0:99:47:67:59:ed:d9:d3:1f:
5f:a4:7a:69:4b:8b:70:ba:30:99:fc:5c:d5:09:8c:
f3:37:26:b4:d5:1a:98:ff:38:1e:9a:51:a7:20:7f:
97:f3:54:6c:17:66:4f:0e:e0:b4:d1:1e:05:a2:a7:
5c:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:21:61:09:3F:4C:2A:08:EA:35:CE:A4:AB:82:90:68:6A:62:D9:EF
X509v3 Authority Key Identifier:
keyid:1A:39:2D:FC:6B:A2:D3:18:6D:32:69:C7:09:1B:70:19:81:53:45:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Gjkt_Gui0xhtMmnHCRtwGYFTRdM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/32d85d-a717-4d68-82a6-2f365f22a18c/1/7yFhCT9MKgjqNc6kq4KQaGpi2e8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/32d85d-a717-4d68-82a6-2f365f22a18c/1/Gjkt_Gui0xhtMmnHCRtwGYFTRdM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.107.244.0/22
185.136.180.0/22
Signature Algorithm: sha256WithRSAEncryption
3f:f6:62:ea:7b:79:9a:af:58:8e:73:74:97:55:5d:a8:62:f9:
1e:d4:36:dc:5f:04:32:b5:01:b1:e2:8c:e6:01:06:d1:01:d0:
71:cc:f0:6a:23:f9:67:30:da:68:d7:8a:33:49:c7:6c:22:b3:
d5:2a:02:2c:4a:d2:cc:d8:1b:46:bd:5b:ac:52:bd:65:c6:0a:
3d:25:85:08:5e:3d:ef:ca:5a:e8:cd:16:04:27:e5:90:1a:73:
37:6b:a1:ef:54:26:ac:9b:77:27:d9:8c:f2:c6:cd:c2:4f:44:
df:f1:d7:99:9b:38:c5:bc:39:43:e0:ea:be:33:97:b2:c9:ea:
bd:f6:4d:54:77:f5:22:24:dd:fe:c3:dd:29:3e:b2:bb:f6:5a:
38:b2:5e:e5:e9:8d:e0:b4:34:16:95:65:00:2b:89:29:fc:42:
b1:50:8a:d8:bd:ee:ba:40:6c:99:9c:ff:ef:22:63:ea:a7:c3:
3e:80:f6:b8:e9:47:8b:e7:e4:7c:34:83:c9:b9:69:05:d5:7d:
b8:96:7f:f0:d9:c3:e6:7c:91:e9:c3:ab:fd:4b:a9:35:45:e3:
4c:2b:65:88:96:61:0a:77:b7:01:19:fc:94:39:7e:5f:bb:69:
d4:7c:1c:a9:09:9c:f3:a3:3d:08:eb:77:19:22:33:77:a1:41:
ea:1c:92:4b
-----BEGIN CERTIFICATE-----
MIIE9TCCA92gAwIBAgIEN4v71TANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygx
YTM5MmRmYzZiYTJkMzE4NmQzMjY5YzcwOTFiNzAxOTgxNTM0NWQzMB4XDTIyMDEw
MTE1MDEyN1oXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoZWYyMTYxMDkzZjRj
MmEwOGVhMzVjZWE0YWI4MjkwNjg2YTYyZDllZjCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAMjw8X4Wi7L7Y9/f5ACIX+9pT6J1aUtwVdmgmkxbRdGXSfwI
mcV++Qly37MjrMUeeelHD9GKdeLhfMw8KhB0H6AHABLWNSEVDEQBw4cq2p0yHB7K
YS5rs8JVJcU6d44fRv2RPWr+ylRI8QNfvUjk3KgdW7oloPmpCnWEq3ZStWnK/bBU
VCD095YbJWxN/l6SMQ5L5q5qbMM9SSwdhLDn9h3YgXVyr73vasPLq2yrill/NFCa
sKLKJdvm1HnaBDqCggEIcEeocaM6oJlHZ1nt2dMfX6R6aUuLcLowmfxc1QmM8zcm
tNUamP84HppRpyB/l/NUbBdmTw7gtNEeBaKnXFMCAwEAAaOCAg8wggILMB0GA1Ud
DgQWBBTvIWEJP0wqCOo1zqSrgpBoamLZ7zAfBgNVHSMEGDAWgBQaOS38a6LTGG0y
accJG3AZgVNF0zAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L0dqa3RfR3VpMHhodE1tbkhDUnR3R1lGVFJkTS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvMWUvMzJkODVkLWE3MTctNGQ2OC04MmE2LTJmMzY1ZjIyYTE4Yy8x
Lzd5RmhDVDlNS2dqcU5jNmtxNEtRYUdwaTJlOC5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMWUv
MzJkODVkLWE3MTctNGQ2OC04MmE2LTJmMzY1ZjIyYTE4Yy8xL0dqa3RfR3VpMHho
dE1tbkhDUnR3R1lGVFJkTS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAl
BggrBgEFBQcBBwEB/wQWMBQwEgQCAAEwDAMEArlr9AMEArmItDANBgkqhkiG9w0B
AQsFAAOCAQEAP/Zi6nt5mq9YjnN0l1VdqGL5HtQ23F8EMrUBseKM5gEG0QHQcczw
aiP5ZzDaaNeKM0nHbCKz1SoCLErSzNgbRr1brFK9ZcYKPSWFCF4978pa6M0WBCfl
kBpzN2uh71QmrJt3J9mM8sbNwk9E3/HXmZs4xbw5Q+DqvjOXssnqvfZNVHf1IiTd
/sPdKT6yu/ZaOLJe5emN4LQ0FpVlACuJKfxCsVCK2L3uukBsmZz/7yJj6qfDPoD2
uOlHi+fkfDSDyblpBdV9uJZ/8NnD5nyR6cOr/UupNUXjTCtliJZhCne3ARn8lDl+
X7tp1HwcqQmc86M9COt3GSIzd6FB6hySSw==
-----END CERTIFICATE-----
Generated at Mon Feb 17 08:20:11 2025 by rpki-client