Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/dc2912-c7b0-4df4-9aa8-65332b47f5eb/1/sy9l6Om7C30Vxsnzw_R2LyprFfQ.roa
File: sy9l6Om7C30Vxsnzw_R2LyprFfQ.roa (raw, json)
Hash identifier: rckwbg9ocmVsBuchWxtXVZjwTDfhqojKmdNb7xAvKos=
Subject key identifier: B3:2F:65:E8:E9:BB:0B:7D:15:C6:C9:F3:C3:F4:76:2F:2A:6B:15:F4
Certificate issuer: /CN=c089423af1be03027196d1f81df22992978cda6e
Certificate serial: 06BBCB6B
Authority key identifier: C0:89:42:3A:F1:BE:03:02:71:96:D1:F8:1D:F2:29:92:97:8C:DA:6E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wIlCOvG-AwJxltH4HfIpkpeM2m4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/dc2912-c7b0-4df4-9aa8-65332b47f5eb/1/sy9l6Om7C30Vxsnzw_R2LyprFfQ.roa
Signing time: Sat 01 Jan 2022 11:03:13 +0000
ROA not before: Sat 01 Jan 2022 11:03:13 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 54600
IP address blocks: 45.159.176.0/22 maxlen: 22
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 112970603 (0x6bbcb6b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c089423af1be03027196d1f81df22992978cda6e
Validity
Not Before: Jan 1 11:03:13 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b32f65e8e9bb0b7d15c6c9f3c3f4762f2a6b15f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:51:06:6d:14:b6:e4:10:24:88:2c:b3:fa:5a:
63:dc:67:56:2c:1b:d9:78:a3:32:5e:30:71:19:ce:
18:17:8d:38:df:3e:a1:42:c3:3c:cd:b5:fa:59:8f:
cd:0e:28:62:e6:6a:7f:55:12:0c:ee:91:c3:4d:65:
b8:28:a0:9a:f6:60:67:ea:6d:c0:1f:ea:9e:fc:fe:
e2:cb:59:e6:f1:2a:33:94:27:12:4e:a3:17:c6:74:
52:1a:c8:e4:08:60:c0:69:c2:a8:8b:fd:ff:14:94:
96:82:a8:4d:ac:69:79:7c:43:b6:23:1e:b8:a8:55:
b1:57:48:4a:1b:92:1e:79:6c:d7:09:d3:c9:75:d2:
c8:2d:4c:58:fa:9f:2f:fe:b8:d9:82:d2:ba:a7:94:
9a:d7:37:0b:f0:8f:e4:10:ba:6e:0d:04:c6:68:e1:
e4:9f:b3:64:58:81:9e:30:5c:45:55:08:6c:67:c6:
0a:75:27:d5:8a:9b:2c:72:e4:9a:77:8c:6a:7b:df:
d4:0e:0d:1f:05:81:c2:9c:9e:b8:30:44:d3:19:f4:
22:3f:2a:96:7c:8f:9a:85:6e:b0:d0:64:e0:f1:bf:
93:fc:44:3a:35:65:a4:5d:e3:fa:32:a9:32:69:66:
32:dc:f9:ac:84:09:9d:22:03:bc:74:02:c2:fb:12:
f5:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:2F:65:E8:E9:BB:0B:7D:15:C6:C9:F3:C3:F4:76:2F:2A:6B:15:F4
X509v3 Authority Key Identifier:
keyid:C0:89:42:3A:F1:BE:03:02:71:96:D1:F8:1D:F2:29:92:97:8C:DA:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wIlCOvG-AwJxltH4HfIpkpeM2m4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/dc2912-c7b0-4df4-9aa8-65332b47f5eb/1/sy9l6Om7C30Vxsnzw_R2LyprFfQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/dc2912-c7b0-4df4-9aa8-65332b47f5eb/1/wIlCOvG-AwJxltH4HfIpkpeM2m4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.159.176.0/22
Signature Algorithm: sha256WithRSAEncryption
b2:e6:f8:98:a9:4e:d5:54:a4:ff:71:93:42:74:c8:74:f0:f9:
8f:5a:9b:17:bb:73:d0:9f:10:1b:67:6c:59:9f:2f:21:ed:48:
80:e1:49:ce:0f:d0:df:ee:2f:7a:6e:c3:d7:76:c4:9b:b7:f9:
3b:b2:f4:04:51:86:d6:16:0c:80:10:a9:a2:78:e3:82:0c:98:
ed:80:90:7a:d5:d1:57:84:82:6a:83:65:d3:0c:a6:6a:24:e1:
34:10:0b:16:c6:af:08:a7:48:68:40:90:7e:4a:c1:e4:1f:95:
e2:ed:b7:6e:53:f0:97:cf:11:7e:8b:7a:c4:5b:83:c8:70:55:
ce:d7:5f:06:88:3a:57:67:5c:3e:a2:6d:fd:ad:59:e8:cd:a1:
84:4f:78:a6:d8:f4:cd:35:89:5b:bc:6a:93:0a:3d:ac:1f:67:
56:53:62:2f:55:eb:4d:af:1e:9c:c9:2a:d1:db:c2:96:88:e5:
aa:b3:67:ed:eb:6a:0e:a2:6a:32:00:68:f6:f0:10:46:58:c5:
a8:23:bc:11:81:1e:4a:b9:90:08:37:ae:e5:ad:52:5a:32:25:
b9:0a:41:d3:20:3e:fb:47:4b:78:59:c6:fc:4f:8a:94:a6:7e:
03:a9:ba:53:30:24:3b:55:45:63:2e:3c:70:4b:10:b3:f2:4f:
fe:ac:97:14
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEBrvLazANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhj
MDg5NDIzYWYxYmUwMzAyNzE5NmQxZjgxZGYyMjk5Mjk3OGNkYTZlMB4XDTIyMDEw
MTExMDMxM1oXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoYjMyZjY1ZThlOWJi
MGI3ZDE1YzZjOWYzYzNmNDc2MmYyYTZiMTVmNDCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAMJRBm0UtuQQJIgss/paY9xnViwb2XijMl4wcRnOGBeNON8+
oULDPM21+lmPzQ4oYuZqf1USDO6Rw01luCigmvZgZ+ptwB/qnvz+4stZ5vEqM5Qn
Ek6jF8Z0UhrI5AhgwGnCqIv9/xSUloKoTaxpeXxDtiMeuKhVsVdIShuSHnls1wnT
yXXSyC1MWPqfL/642YLSuqeUmtc3C/CP5BC6bg0Exmjh5J+zZFiBnjBcRVUIbGfG
CnUn1YqbLHLkmneManvf1A4NHwWBwpyeuDBE0xn0Ij8qlnyPmoVusNBk4PG/k/xE
OjVlpF3j+jKpMmlmMtz5rIQJnSIDvHQCwvsS9ckCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBSzL2Xo6bsLfRXGyfPD9HYvKmsV9DAfBgNVHSMEGDAWgBTAiUI68b4DAnGW
0fgd8imSl4zabjAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L3dJbENPdkctQXdKeGx0SDRIZklwa3BlTTJtNC5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvMjcvZGMyOTEyLWM3YjAtNGRmNC05YWE4LTY1MzMyYjQ3ZjVlYi8x
L3N5OWw2T203QzMwVnhzbnp3X1IyTHlwckZmUS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMjcv
ZGMyOTEyLWM3YjAtNGRmNC05YWE4LTY1MzMyYjQ3ZjVlYi8xL3dJbENPdkctQXdK
eGx0SDRIZklwa3BlTTJtNC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAi2fsDANBgkqhkiG9w0BAQsFAAOC
AQEAsub4mKlO1VSk/3GTQnTIdPD5j1qbF7tz0J8QG2dsWZ8vIe1IgOFJzg/Q3+4v
em7D13bEm7f5O7L0BFGG1hYMgBCponjjggyY7YCQetXRV4SCaoNl0wymaiThNBAL
FsavCKdIaECQfkrB5B+V4u23blPwl88Rfot6xFuDyHBVztdfBog6V2dcPqJt/a1Z
6M2hhE94ptj0zTWJW7xqkwo9rB9nVlNiL1XrTa8enMkq0dvClojlqrNn7etqDqJq
MgBo9vAQRljFqCO8EYEeSrmQCDeu5a1SWjIluQpB0yA++0dLeFnG/E+KlKZ+A6m6
UzAkO1VFYy48cEsQs/JP/qyXFA==
-----END CERTIFICATE-----
Generated at Wed Feb 19 22:36:47 2025 by rpki-client