Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/098d13-6d6d-4294-9753-a8773de768f7/1/112jq8miA8H6wCP4ueCFa5i6IU8.roa
File: 112jq8miA8H6wCP4ueCFa5i6IU8.roa (raw, json)
Hash identifier: 2uC6hUCStsUM8Kc/jcORe09cHhdDXYdk621nmLv9m3c=
Subject key identifier: D7:5D:A3:AB:C9:A2:03:C1:FA:C0:23:F8:B9:E0:85:6B:98:BA:21:4F
Certificate issuer: /CN=00aff6b4effe7c363ef200f6f3e5888b915ba681
Certificate serial: 01840ED46882F5B15B7D194410E536D810AF
Authority key identifier: 00:AF:F6:B4:EF:FE:7C:36:3E:F2:00:F6:F3:E5:88:8B:91:5B:A6:81
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AK_2tO_-fDY-8gD28-WIi5FbpoE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/098d13-6d6d-4294-9753-a8773de768f7/1/112jq8miA8H6wCP4ueCFa5i6IU8.roa
Signing time: Tue 25 Oct 2022 11:08:32 +0000
ROA not before: Tue 25 Oct 2022 11:08:32 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 211439
IP address blocks: 89.46.11.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:0e:d4:68:82:f5:b1:5b:7d:19:44:10:e5:36:d8:10:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00aff6b4effe7c363ef200f6f3e5888b915ba681
Validity
Not Before: Oct 25 11:08:32 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d75da3abc9a203c1fac023f8b9e0856b98ba214f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:20:79:a8:8e:96:09:b0:9b:6f:3b:52:e3:f5:
cc:67:f0:34:3b:16:70:61:84:aa:d6:e3:c9:53:9d:
21:ff:9c:a3:78:e8:5d:6e:f0:ea:51:85:3d:59:49:
67:77:8e:10:76:ab:77:07:40:91:6e:45:c1:f2:da:
ef:7c:28:0b:70:80:52:85:71:b9:0b:55:4b:ba:0c:
82:ab:e7:08:31:bd:56:19:1f:dd:a8:d2:d3:3e:2a:
52:39:97:25:6c:fe:7e:6d:e7:72:53:c2:02:69:35:
95:ad:61:8c:99:01:60:13:d1:03:66:a5:da:5c:68:
51:9e:4b:4c:cc:f8:54:9e:c2:6f:5b:6b:12:6e:ad:
47:95:82:37:60:ba:29:0c:11:ec:ea:fc:de:63:22:
c2:8e:71:a4:93:9a:66:6a:83:4c:d4:1e:24:bf:13:
66:dc:7a:31:77:a5:f0:8e:4d:ff:a5:d8:60:5b:7d:
65:f4:5b:ea:b7:e5:9d:5e:f2:a9:48:60:2f:fd:42:
19:57:28:84:62:0f:cc:2c:7c:8b:fe:cf:c3:28:7c:
fa:d7:cb:60:c9:6b:60:f2:ac:11:b6:65:36:07:f0:
64:be:7d:32:c7:4e:93:1e:84:bf:ed:de:e0:5a:ea:
81:d6:f7:77:d4:03:ff:26:e3:bb:92:19:8b:26:e0:
fd:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:5D:A3:AB:C9:A2:03:C1:FA:C0:23:F8:B9:E0:85:6B:98:BA:21:4F
X509v3 Authority Key Identifier:
keyid:00:AF:F6:B4:EF:FE:7C:36:3E:F2:00:F6:F3:E5:88:8B:91:5B:A6:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AK_2tO_-fDY-8gD28-WIi5FbpoE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/098d13-6d6d-4294-9753-a8773de768f7/1/112jq8miA8H6wCP4ueCFa5i6IU8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/098d13-6d6d-4294-9753-a8773de768f7/1/AK_2tO_-fDY-8gD28-WIi5FbpoE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.46.11.0/24
Signature Algorithm: sha256WithRSAEncryption
a1:70:d1:9e:06:29:12:00:c1:92:6c:a6:a1:24:ca:3a:16:c7:
f2:c7:ad:4f:78:5d:cc:80:87:47:aa:66:b3:46:e1:6a:6c:d6:
54:bf:6f:53:99:4d:de:2e:ba:79:84:b4:b9:31:2d:03:2f:3b:
f1:35:e5:9b:69:fa:7d:89:1e:b9:f1:86:45:07:e5:17:c5:f3:
a2:c5:51:e5:f1:62:36:93:96:dd:59:4c:9e:60:8c:62:6a:8a:
3a:8c:6d:cf:7c:a0:0c:9e:8b:c4:24:73:e3:e6:a8:2b:80:1d:
24:68:76:23:67:27:4e:5e:0f:c7:f7:ca:e4:00:dd:e0:62:4b:
5c:30:37:18:83:b7:f9:43:50:06:37:fd:75:ba:89:1e:6b:c1:
a0:6f:fe:53:5a:fa:e9:b0:91:b7:b0:30:7e:c6:28:88:96:04:
99:44:75:d6:e3:d4:1a:d2:6f:ff:c0:6f:83:05:a0:6f:a3:4b:
87:aa:93:64:2e:52:4f:44:2f:5f:91:d8:c6:68:d3:74:aa:fb:
af:d7:23:64:73:af:df:6f:52:00:3a:66:1d:b5:2c:7e:96:17:
1d:c1:d5:d7:e0:6b:71:1b:51:95:f5:ee:aa:8d:9f:30:ae:b1:
f1:1e:cf:8b:db:ab:fe:74:1b:90:fa:5a:d8:d1:bd:46:38:4c:
a1:91:6c:54
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYQO1GiC9bFbfRlEEOU22BCvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAwYWZmNmI0ZWZmZTdjMzYzZWYyMDBmNmYzZTU4ODhiOTE1
YmE2ODEwHhcNMjIxMDI1MTEwODMyWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkNzVkYTNhYmM5YTIwM2MxZmFjMDIzZjhiOWUwODU2Yjk4YmEyMTRmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7CB5qI6WCbCbbztS4/XMZ/A0OxZw
YYSq1uPJU50h/5yjeOhdbvDqUYU9WUlnd44Qdqt3B0CRbkXB8trvfCgLcIBShXG5
C1VLugyCq+cIMb1WGR/dqNLTPipSOZclbP5+bedyU8ICaTWVrWGMmQFgE9EDZqXa
XGhRnktMzPhUnsJvW2sSbq1HlYI3YLopDBHs6vzeYyLCjnGkk5pmaoNM1B4kvxNm
3Hoxd6Xwjk3/pdhgW31l9Fvqt+WdXvKpSGAv/UIZVyiEYg/MLHyL/s/DKHz618tg
yWtg8qwRtmU2B/Bkvn0yx06THoS/7d7gWuqB1vd31AP/JuO7khmLJuD9rwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFNddo6vJogPB+sAj+LnghWuYuiFPMB8GA1UdIwQY
MBaAFACv9rTv/nw2PvIA9vPliIuRW6aBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQUtfMnRPXy1mRFktOGdEMjgtV0lpNUZicG9FLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC8wOThkMTMtNmQ2ZC00Mjk0LTk3NTMt
YTg3NzNkZTc2OGY3LzEvMTEyanE4bWlBOEg2d0NQNHVlQ0ZhNWk2SVU4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNC8wOThkMTMtNmQ2ZC00Mjk0LTk3NTMtYTg3NzNkZTc2OGY3
LzEvQUtfMnRPXy1mRFktOGdEMjgtV0lpNUZicG9FLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAWS4LMA0G
CSqGSIb3DQEBCwUAA4IBAQChcNGeBikSAMGSbKahJMo6Fsfyx61PeF3MgIdHqmaz
RuFqbNZUv29TmU3eLrp5hLS5MS0DLzvxNeWbafp9iR658YZFB+UXxfOixVHl8WI2
k5bdWUyeYIxiaoo6jG3PfKAMnovEJHPj5qgrgB0kaHYjZydOXg/H98rkAN3gYktc
MDcYg7f5Q1AGN/11uokea8Ggb/5TWvrpsJG3sDB+xiiIlgSZRHXW49Qa0m//wG+D
BaBvo0uHqpNkLlJPRC9fkdjGaNN0qvuv1yNkc6/fb1IAOmYdtSx+lhcdwdXX4Gtx
G1GV9e6qjZ8wrrHxHs+L26v+dBuQ+lrY0b1GOEyhkWxU
-----END CERTIFICATE-----
Generated at Thu Mar 13 02:14:05 2025 by rpki-client