Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/aca44e-8449-471f-8ebd-52ccf65bd67b/1/cIaHDK_rJmlsVRj_4iNNyiKM6_c.roa
File: cIaHDK_rJmlsVRj_4iNNyiKM6_c.roa (raw, json)
Hash identifier: KuHMp7Wt/nzuOHIo6zW2UnFguZrRZ1CqYeuZSX/wJvc=
Subject key identifier: 70:86:87:0C:AF:EB:26:69:6C:55:18:FF:E2:23:4D:CA:22:8C:EB:F7
Certificate issuer: /CN=281a7f07be5c3138cb43c2c18b29aa5468544ba6
Certificate serial: 018CC64B66660B73842274601399094AEAB2
Authority key identifier: 28:1A:7F:07:BE:5C:31:38:CB:43:C2:C1:8B:29:AA:54:68:54:4B:A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KBp_B75cMTjLQ8LBiymqVGhUS6Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/aca44e-8449-471f-8ebd-52ccf65bd67b/1/cIaHDK_rJmlsVRj_4iNNyiKM6_c.roa
Signing time: Mon 01 Jan 2024 18:31:19 +0000
ROA not before: Mon 01 Jan 2024 18:31:19 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 20668
IP address blocks: 91.212.74.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:4b:66:66:0b:73:84:22:74:60:13:99:09:4a:ea:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=281a7f07be5c3138cb43c2c18b29aa5468544ba6
Validity
Not Before: Jan 1 18:31:19 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7086870cafeb26696c5518ffe2234dca228cebf7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:b1:99:37:2c:2e:d4:ab:fc:6e:fd:dc:cd:76:
00:ea:0c:1f:cd:d2:32:35:11:b9:14:0e:9a:d2:f2:
20:c0:03:13:46:ca:33:95:61:cd:84:b9:16:fc:09:
21:86:41:57:99:e2:db:a3:1d:1c:7e:55:cb:9d:d7:
5f:76:7e:84:a1:32:f8:99:0c:7e:e7:a0:2e:7b:2d:
f6:06:c0:f9:0b:22:7c:aa:b2:62:83:5d:3d:df:49:
b3:46:11:dd:45:10:57:7d:f0:f7:1a:9e:04:92:14:
d5:42:6f:a7:85:81:d4:21:d8:3d:62:c5:a8:07:ac:
79:01:92:00:ee:ae:ec:ff:95:b6:46:63:48:96:2a:
36:72:37:12:19:2f:5f:c7:84:83:a4:fe:c7:8f:d0:
84:a2:44:7f:dd:e7:7f:09:95:85:06:63:53:97:4d:
ac:54:b8:f0:f6:22:f4:84:cf:0e:03:2d:42:c4:f5:
2f:ee:35:dc:6b:a4:9f:60:30:bb:20:25:88:54:39:
dd:5f:28:a1:bd:b4:63:88:24:9c:51:d8:27:bf:ff:
cf:bd:6e:b2:e9:57:66:15:a7:f9:22:6f:b1:41:2b:
da:d1:b3:34:e3:4b:86:d0:ff:05:65:f4:b9:04:c5:
cf:99:a8:18:5d:d1:97:d0:d5:88:5a:9a:56:e1:db:
20:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:86:87:0C:AF:EB:26:69:6C:55:18:FF:E2:23:4D:CA:22:8C:EB:F7
X509v3 Authority Key Identifier:
keyid:28:1A:7F:07:BE:5C:31:38:CB:43:C2:C1:8B:29:AA:54:68:54:4B:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KBp_B75cMTjLQ8LBiymqVGhUS6Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/aca44e-8449-471f-8ebd-52ccf65bd67b/1/cIaHDK_rJmlsVRj_4iNNyiKM6_c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/aca44e-8449-471f-8ebd-52ccf65bd67b/1/KBp_B75cMTjLQ8LBiymqVGhUS6Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.212.74.0/24
Signature Algorithm: sha256WithRSAEncryption
5d:1d:76:e9:0e:9d:c2:cc:e1:ec:40:42:e4:84:b0:31:46:00:
16:90:73:31:15:a9:b2:a9:b5:84:69:7a:4d:48:a7:e9:cb:ca:
42:b1:e4:8d:2a:f8:28:2a:bc:6e:59:30:4d:12:35:25:3e:b1:
c5:43:4c:63:07:63:97:33:89:a4:13:3f:26:dc:90:28:f3:10:
90:9c:89:69:00:61:13:b2:34:82:61:46:07:be:0d:f5:ca:50:
10:26:c5:b0:e4:79:08:7c:17:fb:71:5e:0d:1f:a4:9d:4b:26:
b9:ad:d0:f5:24:77:91:d3:9d:6c:9d:ee:28:c8:ea:97:48:f8:
0c:a4:fd:50:d1:75:25:8f:68:70:d3:f9:e3:15:57:e9:b6:af:
d5:b3:95:e4:ae:66:79:4b:e1:f7:71:04:53:58:20:ae:59:61:
19:ae:98:c9:10:66:05:16:43:66:c2:d9:17:17:44:f6:55:b1:
43:7a:c3:17:0f:38:1c:81:88:3d:11:95:f5:a0:e2:50:e3:a0:
98:b7:25:56:6b:78:bc:b4:3f:9c:86:42:a3:e3:c6:df:ef:ef:
4c:c9:2c:e1:ac:78:17:c5:b3:c2:e4:73:f0:c6:40:7b:a0:ea:
5f:b3:84:26:bb:94:61:39:77:0e:17:1d:ae:9f:e8:e7:c3:6d:
68:83:e1:0f
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzGS2ZmC3OEInRgE5kJSuqyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI4MWE3ZjA3YmU1YzMxMzhjYjQzYzJjMThiMjlhYTU0Njg1
NDRiYTYwHhcNMjQwMTAxMTgzMTE5WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3MDg2ODcwY2FmZWIyNjY5NmM1NTE4ZmZlMjIzNGRjYTIyOGNlYmY3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqLGZNywu1Kv8bv3czXYA6gwfzdIy
NRG5FA6a0vIgwAMTRsozlWHNhLkW/AkhhkFXmeLbox0cflXLnddfdn6EoTL4mQx+
56Auey32BsD5CyJ8qrJig10930mzRhHdRRBXffD3Gp4EkhTVQm+nhYHUIdg9YsWo
B6x5AZIA7q7s/5W2RmNIlio2cjcSGS9fx4SDpP7Hj9CEokR/3ed/CZWFBmNTl02s
VLjw9iL0hM8OAy1CxPUv7jXca6SfYDC7ICWIVDndXyihvbRjiCScUdgnv//PvW6y
6VdmFaf5Im+xQSva0bM040uG0P8FZfS5BMXPmagYXdGX0NWIWppW4dsg5wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFHCGhwyv6yZpbFUY/+IjTcoijOv3MB8GA1UdIwQY
MBaAFCgafwe+XDE4y0PCwYspqlRoVEumMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS0JwX0I3NWNNVGpMUThMQml5bXFWR2hVUzZZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMy9hY2E0NGUtODQ0OS00NzFmLThlYmQt
NTJjY2Y2NWJkNjdiLzEvY0lhSERLX3JKbWxzVlJqXzRpTk55aUtNNl9jLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMy9hY2E0NGUtODQ0OS00NzFmLThlYmQtNTJjY2Y2NWJkNjdi
LzEvS0JwX0I3NWNNVGpMUThMQml5bXFWR2hVUzZZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW9RKMA0G
CSqGSIb3DQEBCwUAA4IBAQBdHXbpDp3CzOHsQELkhLAxRgAWkHMxFamyqbWEaXpN
SKfpy8pCseSNKvgoKrxuWTBNEjUlPrHFQ0xjB2OXM4mkEz8m3JAo8xCQnIlpAGET
sjSCYUYHvg31ylAQJsWw5HkIfBf7cV4NH6SdSya5rdD1JHeR051sne4oyOqXSPgM
pP1Q0XUlj2hw0/njFVfptq/Vs5XkrmZ5S+H3cQRTWCCuWWEZrpjJEGYFFkNmwtkX
F0T2VbFDesMXDzgcgYg9EZX1oOJQ46CYtyVWa3i8tD+chkKj48bf7+9MySzhrHgX
xbPC5HPwxkB7oOpfs4Qmu5RhOXcOFx2un+jnw21og+EP
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:22:27 2024 by rpki-client on console-fra.rpki-client.org