Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/6a5e8c-d831-41e3-84e5-f42176cd0445/1/PCAY0ORZ1xYvAJkZHRrq1xit41M.roa
File: PCAY0ORZ1xYvAJkZHRrq1xit41M.roa (raw, json)
Hash identifier: kJrw9aUVpMBqfQN8+zxmcgR11ykmicQWezuF+NxlUqc=
Subject key identifier: 3C:20:18:D0:E4:59:D7:16:2F:00:99:19:1D:1A:EA:D7:18:AD:E3:53
Certificate issuer: /CN=e378a94b9964ea5e9f8b05938702ba58316b500f
Certificate serial: 0588A98E
Authority key identifier: E3:78:A9:4B:99:64:EA:5E:9F:8B:05:93:87:02:BA:58:31:6B:50:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/43ipS5lk6l6fiwWThwK6WDFrUA8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/6a5e8c-d831-41e3-84e5-f42176cd0445/1/PCAY0ORZ1xYvAJkZHRrq1xit41M.roa
Signing time: Sat 01 Jan 2022 13:06:06 +0000
ROA not before: Sat 01 Jan 2022 13:06:06 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 50057
IP address blocks: 45.147.78.0/24 maxlen: 24
45.147.79.0/24 maxlen: 24
185.161.112.0/24 maxlen: 24
185.161.113.0/24 maxlen: 24
185.161.114.0/24 maxlen: 24
185.161.115.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 92842382 (0x588a98e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e378a94b9964ea5e9f8b05938702ba58316b500f
Validity
Not Before: Jan 1 13:06:06 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=3c2018d0e459d7162f0099191d1aead718ade353
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:f9:74:14:91:96:6b:8d:6e:16:ef:3a:49:43:
68:83:cd:f5:b9:c8:a8:bd:56:f6:6f:b5:a9:2f:71:
24:a9:f3:dd:7b:5b:b3:75:75:ab:f2:c1:80:f9:22:
aa:99:b0:c7:93:71:39:b2:ba:27:84:e2:f7:1d:ae:
06:50:4d:61:78:25:80:49:da:da:06:1c:0c:f4:23:
4a:d7:e7:80:b0:86:37:b4:17:2e:8b:1a:47:c6:d4:
12:79:c8:13:22:cb:ca:91:44:4d:4f:89:a0:f9:ae:
4b:c9:d9:77:38:79:df:88:c0:9d:a1:f2:04:ac:d6:
a6:ac:11:a6:18:67:8b:90:61:4e:aa:ac:76:83:e7:
da:49:7e:eb:ee:c4:3e:22:bd:85:bf:86:f9:10:e9:
14:f3:86:40:af:52:35:dd:bf:d8:37:72:e2:b7:b8:
f1:c7:58:cf:a0:dc:84:49:c6:b7:1f:20:ad:85:d2:
b0:56:f8:2a:d4:8e:f0:f2:d1:7d:ec:73:81:90:e1:
ac:06:4c:b4:c0:99:4f:cf:7a:a9:49:5e:e5:c1:21:
4b:2c:4c:4d:a2:d8:d8:f2:ac:6f:76:8a:c2:58:47:
11:5a:1f:6f:0f:01:1d:65:4b:34:81:38:2f:a0:b2:
0f:5f:21:eb:11:4a:10:66:ba:59:af:76:65:40:1c:
ce:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:20:18:D0:E4:59:D7:16:2F:00:99:19:1D:1A:EA:D7:18:AD:E3:53
X509v3 Authority Key Identifier:
keyid:E3:78:A9:4B:99:64:EA:5E:9F:8B:05:93:87:02:BA:58:31:6B:50:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/43ipS5lk6l6fiwWThwK6WDFrUA8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/6a5e8c-d831-41e3-84e5-f42176cd0445/1/PCAY0ORZ1xYvAJkZHRrq1xit41M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/6a5e8c-d831-41e3-84e5-f42176cd0445/1/43ipS5lk6l6fiwWThwK6WDFrUA8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.147.78.0/23
185.161.112.0/22
Signature Algorithm: sha256WithRSAEncryption
28:ae:7e:78:bc:45:55:3e:5f:51:e4:60:02:8b:c6:f4:33:d0:
f1:0f:74:8f:c4:49:db:3c:5e:53:17:ce:17:d5:68:6f:67:ff:
ac:ea:cb:76:67:e1:77:e4:64:6b:db:03:c4:e3:dd:74:71:b2:
8c:85:b8:60:2a:93:c1:48:8f:ec:78:93:b8:1b:f3:bc:0e:08:
0c:b5:28:3d:be:1b:e1:69:61:1e:19:38:10:df:5e:b7:fa:27:
f8:c0:ac:b7:d5:fc:fd:5a:8c:84:d7:49:d9:18:23:73:bf:c9:
39:4b:f5:c0:65:56:04:3a:9b:d0:a1:c1:32:76:47:6b:7a:33:
b1:6d:67:dd:b2:3a:6a:d0:da:d8:aa:e8:79:e7:35:f6:ce:00:
b3:1c:11:a7:14:10:e1:32:9c:fa:f2:21:11:c0:5d:14:a9:08:
18:7a:a6:8e:82:4f:76:68:1c:9d:60:f3:62:36:07:e2:fb:4c:
5b:7e:4e:2e:d7:0d:5b:4c:17:7e:0d:78:71:28:ee:d7:3c:99:
d2:b3:55:a3:aa:1d:a6:5b:8b:3a:65:cd:d1:66:55:81:8a:5e:
4e:53:18:91:05:27:db:6e:16:ff:9d:ae:f3:e2:94:e4:83:b2:
84:3f:cf:d8:d9:ce:dc:c3:69:f0:b0:58:35:f7:49:62:c6:d8:
1d:57:71:d6
-----BEGIN CERTIFICATE-----
MIIE9TCCA92gAwIBAgIEBYipjjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhl
Mzc4YTk0Yjk5NjRlYTVlOWY4YjA1OTM4NzAyYmE1ODMxNmI1MDBmMB4XDTIyMDEw
MTEzMDYwNloXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoM2MyMDE4ZDBlNDU5
ZDcxNjJmMDA5OTE5MWQxYWVhZDcxOGFkZTM1MzCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAM35dBSRlmuNbhbvOklDaIPN9bnIqL1W9m+1qS9xJKnz3Xtb
s3V1q/LBgPkiqpmwx5NxObK6J4Ti9x2uBlBNYXglgEna2gYcDPQjStfngLCGN7QX
LosaR8bUEnnIEyLLypFETU+JoPmuS8nZdzh534jAnaHyBKzWpqwRphhni5BhTqqs
doPn2kl+6+7EPiK9hb+G+RDpFPOGQK9SNd2/2Ddy4re48cdYz6DchEnGtx8grYXS
sFb4KtSO8PLRfexzgZDhrAZMtMCZT896qUle5cEhSyxMTaLY2PKsb3aKwlhHEVof
bw8BHWVLNIE4L6CyD18h6xFKEGa6Wa92ZUAczoUCAwEAAaOCAg8wggILMB0GA1Ud
DgQWBBQ8IBjQ5FnXFi8AmRkdGurXGK3jUzAfBgNVHSMEGDAWgBTjeKlLmWTqXp+L
BZOHArpYMWtQDzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
LzQzaXBTNWxrNmw2Zml3V1Rod0s2V0RGclVBOC5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvMjMvNmE1ZThjLWQ4MzEtNDFlMy04NGU1LWY0MjE3NmNkMDQ0NS8x
L1BDQVkwT1JaMXhZdkFKa1pIUnJxMXhpdDQxTS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMjMv
NmE1ZThjLWQ4MzEtNDFlMy04NGU1LWY0MjE3NmNkMDQ0NS8xLzQzaXBTNWxrNmw2
Zml3V1Rod0s2V0RGclVBOC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAl
BggrBgEFBQcBBwEB/wQWMBQwEgQCAAEwDAMEAS2TTgMEArmhcDANBgkqhkiG9w0B
AQsFAAOCAQEAKK5+eLxFVT5fUeRgAovG9DPQ8Q90j8RJ2zxeUxfOF9Vob2f/rOrL
dmfhd+Rka9sDxOPddHGyjIW4YCqTwUiP7HiTuBvzvA4IDLUoPb4b4WlhHhk4EN9e
t/on+MCst9X8/VqMhNdJ2Rgjc7/JOUv1wGVWBDqb0KHBMnZHa3ozsW1n3bI6atDa
2Kroeec19s4AsxwRpxQQ4TKc+vIhEcBdFKkIGHqmjoJPdmgcnWDzYjYH4vtMW35O
LtcNW0wXfg14cSju1zyZ0rNVo6odpluLOmXN0WZVgYpeTlMYkQUn224W/52u8+KU
5IOyhD/P2NnO3MNp8LBYNfdJYsbYHVdx1g==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:22:25 2024 by rpki-client on console-fra.rpki-client.org