Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/6a5e8c-d831-41e3-84e5-f42176cd0445/1/ooGasEa8dtBcCYj6rO7rPsiAKgI.roa
File: ooGasEa8dtBcCYj6rO7rPsiAKgI.roa (raw, json)
Hash identifier: 6uLQ+0/jqYZeIGOvJQou9L+TY1T3k3ntU036fZYHwgo=
Subject key identifier: A2:81:9A:B0:46:BC:76:D0:5C:09:88:FA:AC:EE:EB:3E:C8:80:2A:02
Certificate issuer: /CN=e378a94b9964ea5e9f8b05938702ba58316b500f
Certificate serial: 01856DCAF2C156C533CEEADF806932BA39DA
Authority key identifier: E3:78:A9:4B:99:64:EA:5E:9F:8B:05:93:87:02:BA:58:31:6B:50:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/43ipS5lk6l6fiwWThwK6WDFrUA8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/6a5e8c-d831-41e3-84e5-f42176cd0445/1/ooGasEa8dtBcCYj6rO7rPsiAKgI.roa
Signing time: Sun 01 Jan 2023 14:44:55 +0000
ROA not before: Sun 01 Jan 2023 14:44:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 60631
IP address blocks: 45.147.77.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:ca:f2:c1:56:c5:33:ce:ea:df:80:69:32:ba:39:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e378a94b9964ea5e9f8b05938702ba58316b500f
Validity
Not Before: Jan 1 14:44:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a2819ab046bc76d05c0988faaceeeb3ec8802a02
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:38:3e:73:01:35:a6:16:5b:1d:b1:df:43:e9:
19:21:be:d1:c0:96:a6:e8:1f:6b:1e:36:a4:f1:43:
a3:c9:51:fb:f6:18:1a:40:cc:d7:ca:6a:81:5b:30:
54:1c:b5:b1:d4:59:5d:bf:ac:63:d5:72:4c:5e:66:
8b:ad:ab:96:b0:0d:b3:c6:c2:a7:fc:89:76:fb:f8:
7a:95:6d:e2:19:8b:8a:eb:33:00:5a:e0:d1:a7:e4:
68:dd:ea:f2:53:7b:c4:94:50:56:4f:18:55:c0:59:
05:85:80:ae:e6:b3:fc:a0:91:75:8e:50:70:28:13:
97:91:6f:ad:eb:e3:8d:a8:0d:00:d7:8e:ab:b4:be:
7b:2f:b5:52:3f:e5:b1:86:f9:bb:05:99:a1:d1:db:
6d:e4:7b:1a:f1:a0:a3:ac:b3:ec:70:a9:de:4f:c6:
44:4c:10:bc:ee:79:ad:de:c8:de:d2:4d:a8:d4:7e:
31:da:1d:52:87:9e:d0:5d:d1:7b:45:a4:da:97:3c:
9a:59:fa:66:a6:55:91:88:65:49:be:d2:6f:a3:7d:
28:3d:c9:ba:70:c6:25:43:f8:52:fe:3f:e9:f4:d5:
40:3e:5d:69:a1:cb:e5:1f:21:89:c3:4d:ee:58:0d:
2f:c7:db:d8:f5:68:b6:6a:3c:0d:da:51:0a:bf:c4:
8e:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:81:9A:B0:46:BC:76:D0:5C:09:88:FA:AC:EE:EB:3E:C8:80:2A:02
X509v3 Authority Key Identifier:
keyid:E3:78:A9:4B:99:64:EA:5E:9F:8B:05:93:87:02:BA:58:31:6B:50:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/43ipS5lk6l6fiwWThwK6WDFrUA8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/6a5e8c-d831-41e3-84e5-f42176cd0445/1/ooGasEa8dtBcCYj6rO7rPsiAKgI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/6a5e8c-d831-41e3-84e5-f42176cd0445/1/43ipS5lk6l6fiwWThwK6WDFrUA8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.147.77.0/24
Signature Algorithm: sha256WithRSAEncryption
21:5f:ab:e6:e5:d7:fb:a3:cf:91:e5:76:d1:da:0d:bd:da:f1:
b2:99:75:c5:cb:dc:74:67:e4:36:55:10:e2:04:c5:80:1f:17:
b9:f9:76:26:c2:7f:fb:e4:5d:fc:15:2e:12:fa:37:14:03:b3:
97:41:5f:46:27:ec:46:14:8b:20:61:e8:cd:c8:6d:6f:28:20:
12:5a:40:a6:d3:77:2e:15:18:45:b7:43:ba:6d:de:51:8e:7a:
f1:1d:fd:3a:72:30:1c:bf:dd:c1:cb:47:e7:7d:af:3d:b9:92:
67:7a:32:f9:67:73:49:ea:48:52:52:a7:27:1b:30:46:09:73:
5b:c8:9e:80:47:2d:7a:39:41:6d:a8:dc:2a:cf:3b:e6:0d:fc:
c5:7d:0c:22:af:00:fb:7c:3c:2d:3a:6a:f9:24:0a:e5:8c:94:
1e:23:d0:4a:c2:73:54:ed:f5:be:a0:d2:d9:e0:58:6c:27:f2:
94:7c:1f:49:e0:c3:08:5b:19:d6:b5:1c:32:ef:82:2c:50:8f:
e5:7d:f0:67:53:6b:65:ac:c5:d8:a1:38:a0:89:76:a7:72:2e:
3c:b1:a1:52:ec:a8:1b:0f:44:d8:46:2e:f4:6e:28:42:78:5f:
ee:2f:c1:9c:bb:cc:cb:96:bc:97:c5:2b:3f:69:9b:b1:33:fb:
7c:2d:cd:0c
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVtyvLBVsUzzurfgGkyujnaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUzNzhhOTRiOTk2NGVhNWU5ZjhiMDU5Mzg3MDJiYTU4MzE2
YjUwMGYwHhcNMjMwMTAxMTQ0NDU1WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhMjgxOWFiMDQ2YmM3NmQwNWMwOTg4ZmFhY2VlZWIzZWM4ODAyYTAyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxjg+cwE1phZbHbHfQ+kZIb7RwJam
6B9rHjak8UOjyVH79hgaQMzXymqBWzBUHLWx1Fldv6xj1XJMXmaLrauWsA2zxsKn
/Il2+/h6lW3iGYuK6zMAWuDRp+Ro3eryU3vElFBWTxhVwFkFhYCu5rP8oJF1jlBw
KBOXkW+t6+ONqA0A146rtL57L7VSP+Wxhvm7BZmh0dtt5Hsa8aCjrLPscKneT8ZE
TBC87nmt3sje0k2o1H4x2h1Sh57QXdF7RaTalzyaWfpmplWRiGVJvtJvo30oPcm6
cMYlQ/hS/j/p9NVAPl1pocvlHyGJw03uWA0vx9vY9Wi2ajwN2lEKv8SOeQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFKKBmrBGvHbQXAmI+qzu6z7IgCoCMB8GA1UdIwQY
MBaAFON4qUuZZOpen4sFk4cCulgxa1APMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNDNpcFM1bGs2bDZmaXdXVGh3SzZXREZyVUE4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMy82YTVlOGMtZDgzMS00MWUzLTg0ZTUt
ZjQyMTc2Y2QwNDQ1LzEvb29HYXNFYThkdEJjQ1lqNnJPN3JQc2lBS2dJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMy82YTVlOGMtZDgzMS00MWUzLTg0ZTUtZjQyMTc2Y2QwNDQ1
LzEvNDNpcFM1bGs2bDZmaXdXVGh3SzZXREZyVUE4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALZNNMA0G
CSqGSIb3DQEBCwUAA4IBAQAhX6vm5df7o8+R5XbR2g292vGymXXFy9x0Z+Q2VRDi
BMWAHxe5+XYmwn/75F38FS4S+jcUA7OXQV9GJ+xGFIsgYejNyG1vKCASWkCm03cu
FRhFt0O6bd5RjnrxHf06cjAcv93By0fnfa89uZJnejL5Z3NJ6khSUqcnGzBGCXNb
yJ6ARy16OUFtqNwqzzvmDfzFfQwirwD7fDwtOmr5JArljJQeI9BKwnNU7fW+oNLZ
4FhsJ/KUfB9J4MMIWxnWtRwy74IsUI/lffBnU2tlrMXYoTigiXanci48saFS7Kgb
D0TYRi70bihCeF/uL8Gcu8zLlryXxSs/aZuxM/t8Lc0M
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:58:12 2024 by rpki-client on console-ams.rpki-client.org