Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/uiwIHOvMkO6J-zmoQiiFxgJJq1M.roa
File: uiwIHOvMkO6J-zmoQiiFxgJJq1M.roa (raw, json)
Hash identifier: xbusnfWx4sTjelckaj6ojvGIvo4Lf4kAgP0TB5gwoic=
Subject key identifier: BA:2C:08:1C:EB:CC:90:EE:89:FB:39:A8:42:28:85:C6:02:49:AB:53
Certificate issuer: /CN=8bab30683859ec7e0206fe9265363e8e3971a9a8
Certificate serial: 14A5BAF2
Authority key identifier: 8B:AB:30:68:38:59:EC:7E:02:06:FE:92:65:36:3E:8E:39:71:A9:A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/uiwIHOvMkO6J-zmoQiiFxgJJq1M.roa
Signing time: Sun 10 Apr 2022 08:13:48 +0000
ROA not before: Sun 10 Apr 2022 08:13:48 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 19120
IP address blocks: 5.180.4.0/22 maxlen: 22
45.145.40.0/22 maxlen: 22
2.59.204.0/22 maxlen: 22
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 346405618 (0x14a5baf2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8bab30683859ec7e0206fe9265363e8e3971a9a8
Validity
Not Before: Apr 10 08:13:48 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ba2c081cebcc90ee89fb39a8422885c60249ab53
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:99:1b:60:62:82:fd:a7:15:8e:65:b9:c4:d3:
2f:26:b7:34:65:a5:ed:64:5b:cd:c6:20:b0:bb:38:
30:20:54:67:bb:8a:67:48:bc:44:b2:f5:31:7e:4b:
c3:5d:02:ce:fe:be:72:a5:3f:98:e4:89:60:af:ef:
e0:3f:72:13:f5:e6:23:c0:13:b1:e6:3f:34:a0:52:
5d:55:bb:5b:d9:c7:8b:51:03:22:5b:cc:df:d4:5f:
1f:6f:c7:30:15:dc:cd:c9:b5:f7:e5:fa:bb:fd:6f:
ed:c6:85:68:16:29:b4:99:da:fc:06:2c:6b:c6:c9:
16:e2:b1:54:29:99:09:39:9d:ca:a8:e8:fc:64:89:
1f:ad:37:91:10:dc:8a:a6:a7:66:c7:5a:da:12:9b:
bb:6d:9e:69:ce:57:48:ad:ac:98:be:c0:d3:ca:db:
7c:6d:20:74:6f:6c:fc:35:a0:6f:a4:61:98:cc:24:
5a:b3:aa:42:22:1c:44:cb:9b:a1:ad:43:89:07:57:
40:48:2a:56:c0:4f:51:81:78:13:e6:1c:b5:5e:ef:
31:d0:63:01:72:b5:e5:40:47:88:6e:cc:a9:73:8d:
d5:e8:74:0e:c7:f6:2e:af:55:10:83:8f:8a:25:20:
cd:c6:84:8b:ca:ad:b6:82:db:ab:54:e1:1a:b4:23:
24:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:2C:08:1C:EB:CC:90:EE:89:FB:39:A8:42:28:85:C6:02:49:AB:53
X509v3 Authority Key Identifier:
keyid:8B:AB:30:68:38:59:EC:7E:02:06:FE:92:65:36:3E:8E:39:71:A9:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/uiwIHOvMkO6J-zmoQiiFxgJJq1M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/i6swaDhZ7H4CBv6SZTY-jjlxqag.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.59.204.0/22
5.180.4.0/22
45.145.40.0/22
Signature Algorithm: sha256WithRSAEncryption
22:3a:eb:3a:d8:88:c9:b0:40:23:c6:9b:74:82:5f:d1:63:31:
d4:d0:af:e6:d3:fa:43:51:10:fe:e4:80:70:22:ba:e3:69:ab:
5d:bb:5a:70:50:41:98:f9:cb:c3:9a:b0:8b:1a:79:ee:45:09:
92:7f:a3:57:31:62:7b:8a:e6:a3:16:68:0b:bd:1a:83:83:28:
30:6b:81:d1:9c:2e:d4:b5:90:f6:38:90:92:8b:7e:30:b9:a2:
58:96:c7:1b:81:a6:f5:82:8b:ab:23:9b:50:89:13:4a:fc:ed:
7e:af:48:f3:66:db:1f:d5:ea:6a:34:00:9d:d0:18:8c:86:8c:
b7:9c:13:be:59:61:66:e2:8f:2e:df:82:f4:1e:12:d0:89:ea:
ed:81:3f:31:49:bf:a1:49:f0:f5:8d:33:d5:1c:b4:11:3f:0c:
6d:27:e3:da:c3:fe:d2:32:5b:9b:be:7b:ac:dc:e8:a2:6e:64:
67:92:de:fa:54:b9:29:14:29:df:9a:41:c7:cb:c0:7d:f1:72:
dd:ed:4f:dc:c0:3b:8c:79:46:2a:86:35:80:ae:47:44:39:97:
73:8d:a1:51:54:64:20:eb:fa:ed:e6:3d:fb:76:44:52:3d:fd:
b0:19:11:bd:1a:88:4c:02:7d:42:ec:f4:e1:d0:b0:33:5d:7e:
db:2c:cd:37
-----BEGIN CERTIFICATE-----
MIIE+zCCA+OgAwIBAgIEFKW68jANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg4
YmFiMzA2ODM4NTllYzdlMDIwNmZlOTI2NTM2M2U4ZTM5NzFhOWE4MB4XDTIyMDQx
MDA4MTM0OFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoYmEyYzA4MWNlYmNj
OTBlZTg5ZmIzOWE4NDIyODg1YzYwMjQ5YWI1MzCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAO2ZG2Bigv2nFY5lucTTLya3NGWl7WRbzcYgsLs4MCBUZ7uK
Z0i8RLL1MX5Lw10Czv6+cqU/mOSJYK/v4D9yE/XmI8ATseY/NKBSXVW7W9nHi1ED
IlvM39RfH2/HMBXczcm19+X6u/1v7caFaBYptJna/AYsa8bJFuKxVCmZCTmdyqjo
/GSJH603kRDciqanZsda2hKbu22eac5XSK2smL7A08rbfG0gdG9s/DWgb6RhmMwk
WrOqQiIcRMuboa1DiQdXQEgqVsBPUYF4E+YctV7vMdBjAXK15UBHiG7MqXON1eh0
Dsf2Lq9VEIOPiiUgzcaEi8qttoLbq1ThGrQjJJcCAwEAAaOCAhUwggIRMB0GA1Ud
DgQWBBS6LAgc68yQ7on7OahCKIXGAkmrUzAfBgNVHSMEGDAWgBSLqzBoOFnsfgIG
/pJlNj6OOXGpqDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L2k2c3dhRGhaN0g0Q0J2NlNaVFktampseHFhZy5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvMmIvODFmZDFhLTQ3YTctNDVkOC1iZTc0LTNhYzllNTZjMzA4OS8x
L3Vpd0lIT3ZNa082Si16bW9RaWlGeGdKSnExTS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMmIv
ODFmZDFhLTQ3YTctNDVkOC1iZTc0LTNhYzllNTZjMzA4OS8xL2k2c3dhRGhaN0g0
Q0J2NlNaVFktampseHFhZy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAr
BggrBgEFBQcBBwEB/wQcMBowGAQCAAEwEgMEAgI7zAMEAgW0BAMEAi2RKDANBgkq
hkiG9w0BAQsFAAOCAQEAIjrrOtiIybBAI8abdIJf0WMx1NCv5tP6Q1EQ/uSAcCK6
42mrXbtacFBBmPnLw5qwixp57kUJkn+jVzFie4rmoxZoC70ag4MoMGuB0Zwu1LWQ
9jiQkot+MLmiWJbHG4Gm9YKLqyObUIkTSvztfq9I82bbH9XqajQAndAYjIaMt5wT
vllhZuKPLt+C9B4S0Inq7YE/MUm/oUnw9Y0z1Ry0ET8MbSfj2sP+0jJbm757rNzo
om5kZ5Le+lS5KRQp35pBx8vAffFy3e1P3MA7jHlGKoY1gK5HRDmXc42hUVRkIOv6
7eY9+3ZEUj39sBkRvRqITAJ9Quz04dCwM11+2yzNNw==
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:00:27 2024 by rpki-client on console-ams.rpki-client.org