Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/d1a261-8f83-4f6a-87ab-cf41f76d7f03/1/kRAPF3QriOOxD7_6Z7aP4OepttY.roa
File: kRAPF3QriOOxD7_6Z7aP4OepttY.roa (raw, json)
Hash identifier: gKpzbste55nEdZuQW8kLx8r70yugRPvbs31B9k9c3lo=
Subject key identifier: 91:10:0F:17:74:2B:88:E3:B1:0F:BF:FA:67:B6:8F:E0:E7:A9:B6:D6
Certificate issuer: /CN=342b03896c76698286f881a6ba472a08b7963ca2
Certificate serial: 0D511446
Authority key identifier: 34:2B:03:89:6C:76:69:82:86:F8:81:A6:BA:47:2A:08:B7:96:3C:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NCsDiWx2aYKG-IGmukcqCLeWPKI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/d1a261-8f83-4f6a-87ab-cf41f76d7f03/1/kRAPF3QriOOxD7_6Z7aP4OepttY.roa
Signing time: Sat 01 Jan 2022 15:00:18 +0000
ROA not before: Sat 01 Jan 2022 15:00:18 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 205729
IP address blocks: 80.79.60.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 223417414 (0xd511446)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=342b03896c76698286f881a6ba472a08b7963ca2
Validity
Not Before: Jan 1 15:00:18 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=91100f17742b88e3b10fbffa67b68fe0e7a9b6d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:b7:e6:65:4e:6d:a5:6f:1a:88:b2:43:85:77:
aa:ca:bc:cf:34:0c:9a:97:09:83:cf:9c:c4:0d:d7:
c8:6e:26:a2:2e:bc:48:19:23:ab:46:9b:2c:70:78:
b8:a5:f9:b3:c9:8c:58:ed:38:e3:43:55:a0:89:6d:
23:52:e2:92:79:3b:4e:15:0d:19:96:08:82:55:02:
09:7f:dc:95:e3:0c:0b:81:87:86:4c:8a:05:5d:05:
d9:0e:0a:f4:72:9c:df:06:19:0c:fe:34:90:c5:5d:
a0:40:7f:e4:e8:7e:a8:76:86:18:51:5f:5a:7c:08:
3c:c5:fc:07:c3:87:d7:5e:a5:76:4c:20:26:a3:48:
fb:19:58:a8:42:a0:f4:37:69:d7:b2:21:9a:fb:2d:
b9:e2:a4:bd:5c:30:fd:72:9f:d5:b6:bb:fa:7d:47:
a7:d6:91:40:69:9d:cc:e1:b7:11:4d:dd:1b:a5:7d:
e8:fc:56:74:de:81:99:ef:06:8d:47:f5:43:7f:c7:
4b:4f:b5:37:51:ab:46:77:c9:85:03:3a:7e:a1:14:
16:e7:f1:4e:e5:7d:c6:68:17:35:75:41:39:ae:6d:
f1:29:c3:1b:ef:e8:80:09:27:c1:55:09:d4:90:4f:
7b:65:c7:b8:b1:9f:2b:78:81:d1:ae:39:29:90:31:
d6:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:10:0F:17:74:2B:88:E3:B1:0F:BF:FA:67:B6:8F:E0:E7:A9:B6:D6
X509v3 Authority Key Identifier:
keyid:34:2B:03:89:6C:76:69:82:86:F8:81:A6:BA:47:2A:08:B7:96:3C:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NCsDiWx2aYKG-IGmukcqCLeWPKI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/d1a261-8f83-4f6a-87ab-cf41f76d7f03/1/kRAPF3QriOOxD7_6Z7aP4OepttY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/d1a261-8f83-4f6a-87ab-cf41f76d7f03/1/NCsDiWx2aYKG-IGmukcqCLeWPKI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.79.60.0/24
Signature Algorithm: sha256WithRSAEncryption
bc:05:07:3c:4c:f5:ed:bc:b6:29:65:95:2d:4e:4c:a7:c6:df:
e6:c1:ed:78:68:2d:10:99:1c:e8:88:ae:db:e5:3b:bd:1a:6a:
ba:bc:6e:28:17:1d:06:3a:7c:87:59:0b:e1:ec:2c:87:2a:c1:
3c:e2:30:c0:56:ca:9f:85:7a:f1:69:de:52:76:76:78:73:0a:
cc:e6:98:48:18:40:8a:6e:65:5e:1d:7b:c2:a2:6f:e0:c9:39:
bf:b4:16:77:f4:7c:9e:4a:42:96:24:4b:cf:51:52:dd:98:19:
50:4a:b5:9d:d3:a2:02:b8:33:9d:77:60:b3:de:03:4e:67:78:
c9:68:b8:31:6e:62:d8:ab:de:1d:f6:27:8f:05:90:31:3c:be:
ba:f6:47:62:db:35:c0:3e:96:49:60:57:f6:fb:44:2e:ad:d2:
0e:d9:64:63:8d:49:08:59:89:01:6b:e7:5b:2d:2f:ea:c6:be:
4c:92:43:21:99:ca:d9:66:eb:99:4a:3e:a2:e7:77:f4:c3:7f:
4d:0e:c9:8e:4b:ab:af:27:b5:e1:92:36:19:de:bb:ba:01:a6:
9b:4c:df:e8:d9:52:c6:d7:14:c2:1b:6a:6e:72:01:9a:c8:b4:
04:9c:c4:a2:b4:f2:fc:69:c3:c7:2d:a4:dc:f6:8e:4d:47:77:
d8:11:30:9e
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEDVEURjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygz
NDJiMDM4OTZjNzY2OTgyODZmODgxYTZiYTQ3MmEwOGI3OTYzY2EyMB4XDTIyMDEw
MTE1MDAxOFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoOTExMDBmMTc3NDJi
ODhlM2IxMGZiZmZhNjdiNjhmZTBlN2E5YjZkNjCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAJ635mVObaVvGoiyQ4V3qsq8zzQMmpcJg8+cxA3XyG4moi68
SBkjq0abLHB4uKX5s8mMWO0440NVoIltI1Liknk7ThUNGZYIglUCCX/cleMMC4GH
hkyKBV0F2Q4K9HKc3wYZDP40kMVdoEB/5Oh+qHaGGFFfWnwIPMX8B8OH116ldkwg
JqNI+xlYqEKg9Ddp17IhmvstueKkvVww/XKf1ba7+n1Hp9aRQGmdzOG3EU3dG6V9
6PxWdN6Bme8GjUf1Q3/HS0+1N1GrRnfJhQM6fqEUFufxTuV9xmgXNXVBOa5t8SnD
G+/ogAknwVUJ1JBPe2XHuLGfK3iB0a45KZAx1qcCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBSREA8XdCuI47EPv/pnto/g56m21jAfBgNVHSMEGDAWgBQ0KwOJbHZpgob4
gaa6RyoIt5Y8ojAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L05Dc0RpV3gyYVlLRy1JR211a2NxQ0xlV1BLSS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvMzMvZDFhMjYxLThmODMtNGY2YS04N2FiLWNmNDFmNzZkN2YwMy8x
L2tSQVBGM1FyaU9PeEQ3XzZaN2FQNE9lcHR0WS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMzMv
ZDFhMjYxLThmODMtNGY2YS04N2FiLWNmNDFmNzZkN2YwMy8xL05Dc0RpV3gyYVlL
Ry1JR211a2NxQ0xlV1BLSS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAFBPPDANBgkqhkiG9w0BAQsFAAOC
AQEAvAUHPEz17by2KWWVLU5Mp8bf5sHteGgtEJkc6Iiu2+U7vRpqurxuKBcdBjp8
h1kL4ewshyrBPOIwwFbKn4V68WneUnZ2eHMKzOaYSBhAim5lXh17wqJv4Mk5v7QW
d/R8nkpCliRLz1FS3ZgZUEq1ndOiArgznXdgs94DTmd4yWi4MW5i2KveHfYnjwWQ
MTy+uvZHYts1wD6WSWBX9vtELq3SDtlkY41JCFmJAWvnWy0v6sa+TJJDIZnK2Wbr
mUo+oud39MN/TQ7Jjkurrye14ZI2Gd67ugGmm0zf6NlSxtcUwhtqbnIBmsi0BJzE
orTy/GnDxy2k3PaOTUd32BEwng==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:50:04 2023 by rpki-client on console-ams.rpki-client.org