Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/8e1198-e50f-416f-9d6b-1e9bff5e4021/1/FImbgEONUgAKXZCIJ5CZEEdAlQI.roa
File: FImbgEONUgAKXZCIJ5CZEEdAlQI.roa (raw, json)
Hash identifier: hozKCSKVNFEPOtbcv9WEJtwtMRKDUBzobhpyQZP6v3o=
Subject key identifier: 14:89:9B:80:43:8D:52:00:0A:5D:90:88:27:90:99:10:47:40:95:02
Certificate issuer: /CN=4df0970484eb26bc59fd8fa8d5bf7c3c7212d011
Certificate serial: 018539AC5B7B13E460E9DEF6A6D01FFF4EEC
Authority key identifier: 4D:F0:97:04:84:EB:26:BC:59:FD:8F:A8:D5:BF:7C:3C:72:12:D0:11
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TfCXBITrJrxZ_Y-o1b98PHIS0BE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/8e1198-e50f-416f-9d6b-1e9bff5e4021/1/FImbgEONUgAKXZCIJ5CZEEdAlQI.roa
Signing time: Thu 22 Dec 2022 11:51:15 +0000
ROA not before: Thu 22 Dec 2022 11:51:15 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 49832
IP address blocks: 91.132.164.0/22 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:39:ac:5b:7b:13:e4:60:e9:de:f6:a6:d0:1f:ff:4e:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4df0970484eb26bc59fd8fa8d5bf7c3c7212d011
Validity
Not Before: Dec 22 11:51:15 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=14899b80438d52000a5d90882790991047409502
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:63:95:30:06:a3:02:77:be:27:34:bd:38:2e:
be:97:97:77:7b:b8:ed:76:4a:03:14:83:f7:e4:28:
3d:86:d6:88:f7:b3:7d:e9:98:12:07:d6:7d:7c:50:
8b:f6:d3:8f:ed:e7:58:99:b5:a5:16:01:97:73:7e:
67:a1:0c:ce:f5:f9:d3:64:cb:23:9d:ac:d6:39:48:
1d:3d:85:7b:51:02:f6:dd:6b:79:2c:dd:4f:1d:1b:
8f:60:3e:14:a1:a4:85:04:60:17:ad:88:a0:10:44:
d9:07:9d:87:56:6a:fb:73:d1:c6:77:4a:8f:74:25:
19:25:37:1b:9f:6b:d3:fa:6f:c3:36:2d:3f:39:3d:
2a:f2:8d:c6:0b:ac:02:11:7e:68:a0:4b:cc:f2:e3:
e7:87:eb:aa:77:e1:9b:ca:da:dc:55:95:a0:9f:cb:
cd:f0:d1:04:a8:af:b4:19:b5:3a:40:cc:33:d5:51:
ef:f2:40:30:fa:19:78:9f:e0:a5:a4:66:af:59:18:
eb:be:98:a9:4d:7c:5b:3f:f2:6d:35:00:e0:57:f9:
00:82:e4:d0:b9:3e:89:ce:cc:0c:1d:d6:97:a6:b8:
13:f3:e1:77:6b:c9:2e:57:93:a9:92:4b:88:21:e8:
f9:2f:f8:7e:88:08:b7:a3:1a:ed:a0:8e:e6:5c:8d:
e0:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:89:9B:80:43:8D:52:00:0A:5D:90:88:27:90:99:10:47:40:95:02
X509v3 Authority Key Identifier:
keyid:4D:F0:97:04:84:EB:26:BC:59:FD:8F:A8:D5:BF:7C:3C:72:12:D0:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TfCXBITrJrxZ_Y-o1b98PHIS0BE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/8e1198-e50f-416f-9d6b-1e9bff5e4021/1/FImbgEONUgAKXZCIJ5CZEEdAlQI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/8e1198-e50f-416f-9d6b-1e9bff5e4021/1/TfCXBITrJrxZ_Y-o1b98PHIS0BE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.132.164.0/22
Signature Algorithm: sha256WithRSAEncryption
bc:21:50:5d:4c:75:32:01:70:1b:8b:55:dd:d2:81:b8:0b:74:
a7:21:1f:d5:63:81:72:fb:e5:db:34:d4:8d:3d:43:01:52:68:
37:96:26:29:bf:64:27:c9:17:08:2a:35:0c:0c:b4:dd:0e:dd:
e4:c0:39:81:72:5a:b0:de:fe:30:63:0f:66:ee:0c:cf:64:50:
9c:01:f5:df:51:40:0e:31:ae:e3:f2:92:44:f2:23:cf:27:e9:
72:4e:b9:05:34:b0:4a:1c:53:0b:a5:8b:44:01:43:0a:9b:99:
21:73:27:ba:66:c4:4b:d1:ca:18:55:b2:77:b5:23:bb:b8:8a:
20:9f:b5:8f:2e:69:91:06:e7:46:28:08:77:0d:b7:b5:07:40:
07:09:e5:3a:0f:56:5f:16:5b:f9:06:6d:a0:73:22:17:cd:53:
13:82:b3:91:13:67:b6:0c:d0:31:b9:11:e0:9f:da:62:f4:c0:
42:a5:b4:ba:1d:20:84:c2:b9:2d:c0:78:bd:84:c2:0c:1b:5d:
b4:a1:16:dc:e2:30:ce:f3:30:f0:5b:7d:3d:1b:cd:06:0e:5f:
41:39:8f:14:47:6f:af:b5:6d:57:fe:fa:b2:60:08:d8:79:e0:
ea:6a:14:0a:5e:40:08:8e:a3:e7:9d:e4:77:ea:21:b3:94:11:
b0:77:c2:d4
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYU5rFt7E+Rg6d72ptAf/07sMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRkZjA5NzA0ODRlYjI2YmM1OWZkOGZhOGQ1YmY3YzNjNzIx
MmQwMTEwHhcNMjIxMjIyMTE1MTE1WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxNDg5OWI4MDQzOGQ1MjAwMGE1ZDkwODgyNzkwOTkxMDQ3NDA5NTAyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtGOVMAajAne+JzS9OC6+l5d3e7jt
dkoDFIP35Cg9htaI97N96ZgSB9Z9fFCL9tOP7edYmbWlFgGXc35noQzO9fnTZMsj
nazWOUgdPYV7UQL23Wt5LN1PHRuPYD4UoaSFBGAXrYigEETZB52HVmr7c9HGd0qP
dCUZJTcbn2vT+m/DNi0/OT0q8o3GC6wCEX5ooEvM8uPnh+uqd+GbytrcVZWgn8vN
8NEEqK+0GbU6QMwz1VHv8kAw+hl4n+ClpGavWRjrvpipTXxbP/JtNQDgV/kAguTQ
uT6JzswMHdaXprgT8+F3a8kuV5OpkkuIIej5L/h+iAi3oxrtoI7mXI3g3wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFBSJm4BDjVIACl2QiCeQmRBHQJUCMB8GA1UdIwQY
MBaAFE3wlwSE6ya8Wf2PqNW/fDxyEtARMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVGZDWEJJVHJKcnhaX1ktbzFiOThQSElTMEJFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOC84ZTExOTgtZTUwZi00MTZmLTlkNmIt
MWU5YmZmNWU0MDIxLzEvRkltYmdFT05VZ0FLWFpDSUo1Q1pFRWRBbFFJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yOC84ZTExOTgtZTUwZi00MTZmLTlkNmItMWU5YmZmNWU0MDIx
LzEvVGZDWEJJVHJKcnhaX1ktbzFiOThQSElTMEJFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCW4SkMA0G
CSqGSIb3DQEBCwUAA4IBAQC8IVBdTHUyAXAbi1Xd0oG4C3SnIR/VY4Fy++XbNNSN
PUMBUmg3liYpv2QnyRcIKjUMDLTdDt3kwDmBclqw3v4wYw9m7gzPZFCcAfXfUUAO
Ma7j8pJE8iPPJ+lyTrkFNLBKHFMLpYtEAUMKm5khcye6ZsRL0coYVbJ3tSO7uIog
n7WPLmmRBudGKAh3Dbe1B0AHCeU6D1ZfFlv5Bm2gcyIXzVMTgrORE2e2DNAxuRHg
n9pi9MBCpbS6HSCEwrktwHi9hMIMG120oRbc4jDO8zDwW309G80GDl9BOY8UR2+v
tW1X/vqyYAjYeeDqahQKXkAIjqPnneR36iGzlBGwd8LU
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:59:31 2024 by rpki-client on console-ams.rpki-client.org