Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/4e03f0-9820-496e-bee5-74ec15e72ee8/1/bB1xB4jc1SPOMPNn7vU_zLBAjg4.roa
File: bB1xB4jc1SPOMPNn7vU_zLBAjg4.roa (raw, json)
Hash identifier: +hb5x8emVNhaUnyyVETRlWOGdxAsUCf0oA7fRLDzPEs=
Subject key identifier: 6C:1D:71:07:88:DC:D5:23:CE:30:F3:67:EE:F5:3F:CC:B0:40:8E:0E
Certificate issuer: /CN=fb0726994524a2757a42c9d6e4e0e1726c795931
Certificate serial: 01899873B423B1A1EB96CD245FACE0C9E114
Authority key identifier: FB:07:26:99:45:24:A2:75:7A:42:C9:D6:E4:E0:E1:72:6C:79:59:31
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-wcmmUUkonV6QsnW5ODhcmx5WTE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/4e03f0-9820-496e-bee5-74ec15e72ee8/1/bB1xB4jc1SPOMPNn7vU_zLBAjg4.roa
Signing time: Thu 27 Jul 2023 17:44:26 +0000
ROA not before: Thu 27 Jul 2023 17:44:26 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 209242
IP address blocks: 45.80.109.0/24 maxlen: 24
45.80.111.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:98:73:b4:23:b1:a1:eb:96:cd:24:5f:ac:e0:c9:e1:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fb0726994524a2757a42c9d6e4e0e1726c795931
Validity
Not Before: Jul 27 17:44:26 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6c1d710788dcd523ce30f367eef53fccb0408e0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:72:f6:88:0e:bd:f7:bc:ff:97:b1:a5:79:df:
3a:50:75:b3:36:19:c9:83:b9:87:87:bf:8c:b0:60:
f5:a3:2c:8b:74:d7:fc:e9:e2:cb:5c:83:b1:e5:9e:
89:53:1f:a5:16:ca:bb:03:42:40:54:05:b3:99:0b:
15:a2:05:5e:95:8f:4a:09:97:fe:af:a4:cb:b9:86:
4e:11:25:5e:8d:9f:e8:90:d0:2a:5f:40:3e:ec:43:
60:81:4b:d9:91:89:7b:7f:a9:d0:8f:76:9e:0f:54:
fb:e1:ec:69:e6:fa:ca:ef:0d:de:b5:ba:de:c6:cf:
71:59:7e:3e:67:fd:f3:df:a9:04:d1:0e:96:c9:db:
bd:be:59:ee:71:2b:d5:be:5f:a3:9b:6e:3e:2b:56:
9b:ef:1f:f2:58:f6:4b:e2:d8:5e:76:77:12:60:d2:
22:d9:d1:ec:18:49:d3:ae:eb:54:c5:49:df:cc:af:
97:60:d5:2f:fc:a2:e2:8b:5d:eb:1a:e3:5f:48:cf:
ae:f5:ae:8c:76:13:8e:fe:8d:6a:a8:49:ee:94:b4:
4a:18:55:6f:49:0f:db:1e:b0:05:21:51:e1:1c:34:
68:1c:fe:69:3c:26:d3:f3:30:30:17:1a:59:03:c3:
f7:8e:9b:12:f1:c2:8f:22:79:c0:c4:78:b2:70:67:
14:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:1D:71:07:88:DC:D5:23:CE:30:F3:67:EE:F5:3F:CC:B0:40:8E:0E
X509v3 Authority Key Identifier:
keyid:FB:07:26:99:45:24:A2:75:7A:42:C9:D6:E4:E0:E1:72:6C:79:59:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-wcmmUUkonV6QsnW5ODhcmx5WTE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/4e03f0-9820-496e-bee5-74ec15e72ee8/1/bB1xB4jc1SPOMPNn7vU_zLBAjg4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/4e03f0-9820-496e-bee5-74ec15e72ee8/1/1-wcmmUUkonV6QsnW5ODhcmx5WTE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.80.109.0/24
45.80.111.0/24
Signature Algorithm: sha256WithRSAEncryption
a3:50:bf:a7:04:70:2e:fb:4e:3e:19:88:1d:20:2f:f8:2a:3f:
62:50:94:8a:bd:c8:28:a7:9c:ba:f9:04:63:5a:02:a6:2b:32:
0f:f1:2c:4e:5f:ff:17:27:f7:87:91:cf:6c:0d:e2:fa:ae:60:
f8:8d:23:e6:4e:39:f0:ca:fb:2f:46:9c:49:d4:bc:ba:ca:0d:
2c:bc:87:80:8a:d0:94:8f:62:c7:b9:cb:61:d3:7f:27:13:c4:
e1:57:da:09:93:98:d2:75:5f:54:51:6d:72:d0:19:b0:f6:13:
d7:c4:f5:36:14:8b:14:c3:87:b8:64:d5:d5:63:c8:8a:4b:8b:
51:a6:cc:7d:a4:fe:80:37:de:d3:82:1d:0b:d8:f4:3f:4a:ac:
06:5d:c7:8f:1b:0f:85:4a:42:68:e4:95:94:b3:38:73:9b:68:
0a:a9:79:00:37:7c:ff:63:48:23:68:b9:14:92:24:e4:1e:12:
a1:30:3a:5d:41:30:bb:b1:6f:b9:08:e9:6d:60:e4:6e:93:8c:
cf:43:53:ce:89:d1:f7:00:71:d9:d8:3f:1f:25:bc:94:9e:90:
bb:3e:f6:d0:ed:b4:e2:20:67:b7:dd:4a:21:ec:e8:83:4b:a1:
34:a9:45:8b:99:e6:03:a6:6e:fd:28:f3:e5:17:a6:e5:45:5b:
95:b8:91:a2
-----BEGIN CERTIFICATE-----
MIIFBTCCA+2gAwIBAgISAYmYc7QjsaHrls0kX6zgyeEUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZiMDcyNjk5NDUyNGEyNzU3YTQyYzlkNmU0ZTBlMTcyNmM3
OTU5MzEwHhcNMjMwNzI3MTc0NDI2WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2YzFkNzEwNzg4ZGNkNTIzY2UzMGYzNjdlZWY1M2ZjY2IwNDA4ZTBlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkHL2iA6997z/l7Gled86UHWzNhnJ
g7mHh7+MsGD1oyyLdNf86eLLXIOx5Z6JUx+lFsq7A0JAVAWzmQsVogVelY9KCZf+
r6TLuYZOESVejZ/okNAqX0A+7ENggUvZkYl7f6nQj3aeD1T74exp5vrK7w3etbre
xs9xWX4+Z/3z36kE0Q6Wydu9vlnucSvVvl+jm24+K1ab7x/yWPZL4thedncSYNIi
2dHsGEnTrutUxUnfzK+XYNUv/KLii13rGuNfSM+u9a6MdhOO/o1qqEnulLRKGFVv
SQ/bHrAFIVHhHDRoHP5pPCbT8zAwFxpZA8P3jpsS8cKPInnAxHiycGcUswIDAQAB
o4ICETCCAg0wHQYDVR0OBBYEFGwdcQeI3NUjzjDzZ+71P8ywQI4OMB8GA1UdIwQY
MBaAFPsHJplFJKJ1ekLJ1uTg4XJseVkxMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS13Y21tVVVrb25WNlFzblc1T0RoY214NVdURS5jZXIw
gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMjMvNGUwM2YwLTk4MjAtNDk2ZS1iZWU1
LTc0ZWMxNWU3MmVlOC8xL2JCMXhCNGpjMVNQT01QTm43dlVfekxCQWpnNC5yb2Ew
gYIGA1UdHwR7MHkwd6B1oHOGcXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvMjMvNGUwM2YwLTk4MjAtNDk2ZS1iZWU1LTc0ZWMxNWU3MmVl
OC8xLzEtd2NtbVVVa29uVjZRc25XNU9EaGNteDVXVEUuY3JsMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwJQYIKwYBBQUHAQcBAf8EFjAUMBIEAgABMAwDBAAtUG0D
BAAtUG8wDQYJKoZIhvcNAQELBQADggEBAKNQv6cEcC77Tj4ZiB0gL/gqP2JQlIq9
yCinnLr5BGNaAqYrMg/xLE5f/xcn94eRz2wN4vquYPiNI+ZOOfDK+y9GnEnUvLrK
DSy8h4CK0JSPYse5y2HTfycTxOFX2gmTmNJ1X1RRbXLQGbD2E9fE9TYUixTDh7hk
1dVjyIpLi1GmzH2k/oA33tOCHQvY9D9KrAZdx48bD4VKQmjklZSzOHObaAqpeQA3
fP9jSCNouRSSJOQeEqEwOl1BMLuxb7kI6W1g5G6TjM9DU86J0fcAcdnYPx8lvJSe
kLs+9tDttOIgZ7fdSiHs6INLoTSpRYuZ5gOmbv0o8+UXpuVFW5W4kaI=
-----END CERTIFICATE-----
Generated at Mon Sep 11 09:49:53 2023 by rpki-client on console-fra.rpki-client.org