Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/373bcf-79d6-4863-9bf0-d8c964591afa/1/o05BUkkUnkVdsWO_uWOvbdHdZRI.roa
File: o05BUkkUnkVdsWO_uWOvbdHdZRI.roa (raw, json)
Hash identifier: C5eCnEElNVb4fct+GgHu/EQS/ucPsTmJwcxUpTOBvMk=
Subject key identifier: A3:4E:41:52:49:14:9E:45:5D:B1:63:BF:B9:63:AF:6D:D1:DD:65:12
Certificate issuer: /CN=7c46a3cad80965af86cbb0083dfb40ab2ff1bacf
Certificate serial: 018CC26D4789FDCC593ED5CDC58676657EAF
Authority key identifier: 7C:46:A3:CA:D8:09:65:AF:86:CB:B0:08:3D:FB:40:AB:2F:F1:BA:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fEajytgJZa-Gy7AIPftAqy_xus8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/373bcf-79d6-4863-9bf0-d8c964591afa/1/o05BUkkUnkVdsWO_uWOvbdHdZRI.roa
Signing time: Mon 01 Jan 2024 00:29:50 +0000
ROA not before: Mon 01 Jan 2024 00:29:50 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 60949
IP address blocks: 130.185.160.0/21 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:6d:47:89:fd:cc:59:3e:d5:cd:c5:86:76:65:7e:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7c46a3cad80965af86cbb0083dfb40ab2ff1bacf
Validity
Not Before: Jan 1 00:29:50 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a34e415249149e455db163bfb963af6dd1dd6512
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:6e:5b:f2:b7:c1:fd:3b:30:cb:79:8d:1e:43:
bd:6b:34:88:50:39:f6:03:5f:f2:16:1e:1e:41:4e:
aa:cf:95:a5:48:7a:5b:33:e7:11:d2:82:36:04:96:
74:49:67:40:8b:b9:42:19:6c:b0:9d:b9:a2:bf:ea:
9c:c2:16:2a:97:62:96:ff:e0:6f:76:d9:d8:38:d6:
fc:7a:fc:ac:d2:e6:ac:34:6e:87:79:2e:94:7f:6f:
90:5b:72:18:07:18:25:06:26:e7:d4:d1:27:f7:fd:
55:6b:0b:22:0d:50:aa:27:a1:d9:b7:76:ec:34:79:
06:1d:ac:04:04:f3:2f:51:fe:a2:88:2d:79:6b:01:
6e:8b:58:0a:f1:90:4d:6a:a9:6c:6b:ee:c5:a3:d5:
26:34:d4:c3:31:d8:03:4f:79:57:db:dd:2e:0e:7f:
02:80:06:e8:66:d8:53:bd:93:1a:a5:ac:e1:82:bc:
c9:12:15:8c:59:ab:62:0e:1d:09:f8:19:e8:2a:e2:
20:81:de:c7:6e:f1:fb:9d:54:83:d2:3a:53:7f:54:
bc:37:b3:da:94:b6:b8:e6:e6:b7:fb:c4:82:85:6f:
d3:2d:af:65:00:11:8e:95:82:93:75:30:7f:ad:43:
92:b1:16:a5:45:83:25:ff:87:10:52:f9:34:bd:1b:
82:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:4E:41:52:49:14:9E:45:5D:B1:63:BF:B9:63:AF:6D:D1:DD:65:12
X509v3 Authority Key Identifier:
keyid:7C:46:A3:CA:D8:09:65:AF:86:CB:B0:08:3D:FB:40:AB:2F:F1:BA:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fEajytgJZa-Gy7AIPftAqy_xus8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/373bcf-79d6-4863-9bf0-d8c964591afa/1/o05BUkkUnkVdsWO_uWOvbdHdZRI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/373bcf-79d6-4863-9bf0-d8c964591afa/1/fEajytgJZa-Gy7AIPftAqy_xus8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
130.185.160.0/21
Signature Algorithm: sha256WithRSAEncryption
71:1e:aa:fb:82:4c:3a:92:26:79:7c:1b:78:c6:9c:21:0b:55:
f0:9a:44:b4:1d:52:82:e4:e3:9a:2c:3b:1c:8c:cd:b4:c2:6e:
48:05:f9:37:ae:7f:7c:2c:74:98:ba:12:96:59:26:a1:d6:6f:
44:30:44:76:45:1e:05:ee:29:3b:7b:c7:c4:a4:1f:bc:50:c6:
94:f5:02:10:e7:a3:f4:fd:0d:bc:77:03:31:23:2a:a4:77:ed:
67:2b:52:eb:dd:08:bb:c9:79:11:ed:1d:fe:63:15:fa:50:71:
c7:2f:9c:dc:84:15:bc:5e:a8:01:39:20:19:d9:37:62:0a:cf:
fb:f5:3b:db:a7:1d:5d:ae:0d:e2:7e:91:39:a0:9c:82:46:25:
a0:c0:06:aa:98:ca:de:af:82:31:0a:15:aa:bb:e3:35:b2:09:
13:40:4d:e6:7c:68:f9:61:aa:79:ff:58:14:2c:16:8f:8d:49:
16:90:21:ed:2e:dd:2c:2b:e2:40:e7:75:12:cd:98:c9:2a:bf:
08:83:6f:be:99:80:09:9f:3e:22:e3:08:60:19:56:f1:c9:aa:
f8:ee:9b:ea:87:23:ec:ed:98:da:63:41:b6:a4:e6:2b:2d:fa:
d4:ea:e8:b1:91:dd:bc:74:16:e7:e3:9a:b4:a7:05:35:7e:db:
9b:dd:59:de
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzCbUeJ/cxZPtXNxYZ2ZX6vMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdjNDZhM2NhZDgwOTY1YWY4NmNiYjAwODNkZmI0MGFiMmZm
MWJhY2YwHhcNMjQwMTAxMDAyOTUwWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhMzRlNDE1MjQ5MTQ5ZTQ1NWRiMTYzYmZiOTYzYWY2ZGQxZGQ2NTEyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyW5b8rfB/Tswy3mNHkO9azSIUDn2
A1/yFh4eQU6qz5WlSHpbM+cR0oI2BJZ0SWdAi7lCGWywnbmiv+qcwhYql2KW/+Bv
dtnYONb8evys0uasNG6HeS6Uf2+QW3IYBxglBibn1NEn9/1VawsiDVCqJ6HZt3bs
NHkGHawEBPMvUf6iiC15awFui1gK8ZBNaqlsa+7Fo9UmNNTDMdgDT3lX290uDn8C
gAboZthTvZMapazhgrzJEhWMWatiDh0J+BnoKuIggd7HbvH7nVSD0jpTf1S8N7Pa
lLa45ua3+8SChW/TLa9lABGOlYKTdTB/rUOSsRalRYMl/4cQUvk0vRuC5QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFKNOQVJJFJ5FXbFjv7ljr23R3WUSMB8GA1UdIwQY
MBaAFHxGo8rYCWWvhsuwCD37QKsv8brPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZkVhanl0Z0paYS1HeTdBSVBmdEFxeV94dXM4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZS8zNzNiY2YtNzlkNi00ODYzLTliZjAt
ZDhjOTY0NTkxYWZhLzEvbzA1QlVra1Vua1Zkc1dPX3VXT3ZiZEhkWlJJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xZS8zNzNiY2YtNzlkNi00ODYzLTliZjAtZDhjOTY0NTkxYWZh
LzEvZkVhanl0Z0paYS1HeTdBSVBmdEFxeV94dXM4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDgrmgMA0G
CSqGSIb3DQEBCwUAA4IBAQBxHqr7gkw6kiZ5fBt4xpwhC1XwmkS0HVKC5OOaLDsc
jM20wm5IBfk3rn98LHSYuhKWWSah1m9EMER2RR4F7ik7e8fEpB+8UMaU9QIQ56P0
/Q28dwMxIyqkd+1nK1Lr3Qi7yXkR7R3+YxX6UHHHL5zchBW8XqgBOSAZ2TdiCs/7
9Tvbpx1drg3ifpE5oJyCRiWgwAaqmMrer4IxChWqu+M1sgkTQE3mfGj5Yap5/1gU
LBaPjUkWkCHtLt0sK+JA53USzZjJKr8Ig2++mYAJnz4i4whgGVbxyar47pvqhyPs
7ZjaY0G2pOYrLfrU6uixkd28dBbn45q0pwU1ftub3Vne
-----END CERTIFICATE-----
Generated at Mon Feb 17 08:05:34 2025 by rpki-client