Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/098d13-6d6d-4294-9753-a8773de768f7/1/L2l8TxP738_Lacn1CiRh4Md-tL8.roa
File: L2l8TxP738_Lacn1CiRh4Md-tL8.roa (raw, json)
Hash identifier: GZFrD9uUqv0Qdf5XtPtTwIQ9t5aMxpwTjUZA+YgwyJs=
Subject key identifier: 2F:69:7C:4F:13:FB:DF:CF:CB:69:C9:F5:0A:24:61:E0:C7:7E:B4:BF
Certificate issuer: /CN=00aff6b4effe7c363ef200f6f3e5888b915ba681
Certificate serial: 0182C488CC095E303F16111CA771E153FFD0
Authority key identifier: 00:AF:F6:B4:EF:FE:7C:36:3E:F2:00:F6:F3:E5:88:8B:91:5B:A6:81
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AK_2tO_-fDY-8gD28-WIi5FbpoE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/098d13-6d6d-4294-9753-a8773de768f7/1/L2l8TxP738_Lacn1CiRh4Md-tL8.roa
Signing time: Mon 22 Aug 2022 07:51:15 +0000
ROA not before: Mon 22 Aug 2022 07:51:15 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 20473
IP address blocks: 91.243.177.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:c4:88:cc:09:5e:30:3f:16:11:1c:a7:71:e1:53:ff:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00aff6b4effe7c363ef200f6f3e5888b915ba681
Validity
Not Before: Aug 22 07:51:15 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=2f697c4f13fbdfcfcb69c9f50a2461e0c77eb4bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:0b:8a:29:50:97:d0:ab:43:28:eb:fa:06:d9:
86:96:28:f8:01:4c:49:13:5f:6e:a2:7e:86:ae:71:
ca:92:ca:51:1e:d0:34:b9:ff:ce:cf:5a:e5:c9:96:
6e:e5:8c:66:0a:62:2f:56:39:9f:26:85:cb:7e:05:
49:d8:d3:99:81:61:09:23:9a:24:75:12:51:2e:52:
7c:79:8f:71:91:7a:a3:39:b0:1b:31:dc:da:9c:57:
a1:d7:5b:09:64:db:81:c7:bb:9a:03:b0:f8:dc:01:
89:77:c7:48:4e:27:4f:6e:08:f6:91:b4:a2:cd:28:
10:18:3f:cd:ef:d8:57:da:8a:3a:ea:0f:c4:ed:2b:
41:33:e1:12:9e:0b:49:4a:17:b4:0d:5a:15:ff:68:
54:7a:10:61:98:45:db:86:b2:92:5e:4c:6e:05:ef:
f8:64:48:ad:37:92:3a:91:a4:4f:b1:31:73:56:4e:
e3:f0:7f:ff:78:6c:8d:19:86:76:63:02:b1:1e:6c:
58:4f:d3:1b:51:84:dd:69:d1:6a:84:d4:80:20:dd:
92:2e:30:9d:7c:6b:11:41:38:b0:6b:89:7a:da:02:
ea:6f:7d:41:2b:60:61:83:4c:8a:01:00:62:92:f6:
62:7a:c0:ba:ee:0c:3b:3b:80:f5:ae:c8:69:fc:00:
a8:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:69:7C:4F:13:FB:DF:CF:CB:69:C9:F5:0A:24:61:E0:C7:7E:B4:BF
X509v3 Authority Key Identifier:
keyid:00:AF:F6:B4:EF:FE:7C:36:3E:F2:00:F6:F3:E5:88:8B:91:5B:A6:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AK_2tO_-fDY-8gD28-WIi5FbpoE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/098d13-6d6d-4294-9753-a8773de768f7/1/L2l8TxP738_Lacn1CiRh4Md-tL8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/098d13-6d6d-4294-9753-a8773de768f7/1/AK_2tO_-fDY-8gD28-WIi5FbpoE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.243.177.0/24
Signature Algorithm: sha256WithRSAEncryption
10:ba:c1:11:23:00:68:a3:6f:dc:0e:9f:63:54:f5:3e:f9:05:
3c:1e:04:73:5f:f3:39:cc:9e:94:07:25:08:ea:33:43:34:d7:
d1:8a:f6:12:19:46:98:4d:09:bc:cf:25:9f:3c:07:e4:11:71:
31:60:88:83:a7:ea:c8:7e:27:37:26:43:34:de:e9:34:5a:a5:
f5:b6:cd:3b:d5:8c:68:3d:6f:4d:b3:61:13:d7:3c:49:b3:3b:
68:b2:c5:4b:da:48:0a:fb:9e:35:ad:29:19:5a:d4:00:a9:ac:
b4:b5:4b:61:90:c1:bc:93:30:71:7c:25:4d:7b:fe:e8:ef:0c:
8e:8f:68:80:16:87:b0:20:1a:19:4e:83:de:7b:f5:e3:b5:02:
63:b4:a6:c6:c4:3a:3e:44:4d:4c:68:20:3a:73:54:11:9d:33:
9c:20:08:16:66:cb:e3:a9:3b:11:a3:95:5e:1f:95:65:06:9a:
69:b5:0f:e2:90:f1:5f:1c:e0:b9:55:fa:20:22:ce:de:a7:e1:
96:3f:df:a3:5d:c5:67:b0:2d:bc:39:19:0c:e5:87:c1:b3:c6:
24:b6:85:99:c4:e8:66:fc:6b:09:2c:02:ea:0a:29:de:44:6f:
89:66:1b:69:45:dd:33:e4:6a:c8:e0:d5:18:3e:b8:51:78:71:
f8:bd:ca:43
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYLEiMwJXjA/FhEcp3HhU//QMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAwYWZmNmI0ZWZmZTdjMzYzZWYyMDBmNmYzZTU4ODhiOTE1
YmE2ODEwHhcNMjIwODIyMDc1MTE1WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyZjY5N2M0ZjEzZmJkZmNmY2I2OWM5ZjUwYTI0NjFlMGM3N2ViNGJmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgwuKKVCX0KtDKOv6BtmGlij4AUxJ
E19uon6GrnHKkspRHtA0uf/Oz1rlyZZu5YxmCmIvVjmfJoXLfgVJ2NOZgWEJI5ok
dRJRLlJ8eY9xkXqjObAbMdzanFeh11sJZNuBx7uaA7D43AGJd8dITidPbgj2kbSi
zSgQGD/N79hX2oo66g/E7StBM+ESngtJShe0DVoV/2hUehBhmEXbhrKSXkxuBe/4
ZEitN5I6kaRPsTFzVk7j8H//eGyNGYZ2YwKxHmxYT9MbUYTdadFqhNSAIN2SLjCd
fGsRQTiwa4l62gLqb31BK2Bhg0yKAQBikvZiesC67gw7O4D1rshp/ACouwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFC9pfE8T+9/Py2nJ9QokYeDHfrS/MB8GA1UdIwQY
MBaAFACv9rTv/nw2PvIA9vPliIuRW6aBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQUtfMnRPXy1mRFktOGdEMjgtV0lpNUZicG9FLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC8wOThkMTMtNmQ2ZC00Mjk0LTk3NTMt
YTg3NzNkZTc2OGY3LzEvTDJsOFR4UDczOF9MYWNuMUNpUmg0TWQtdEw4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNC8wOThkMTMtNmQ2ZC00Mjk0LTk3NTMtYTg3NzNkZTc2OGY3
LzEvQUtfMnRPXy1mRFktOGdEMjgtV0lpNUZicG9FLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW/OxMA0G
CSqGSIb3DQEBCwUAA4IBAQAQusERIwBoo2/cDp9jVPU++QU8HgRzX/M5zJ6UByUI
6jNDNNfRivYSGUaYTQm8zyWfPAfkEXExYIiDp+rIfic3JkM03uk0WqX1ts071Yxo
PW9Ns2ET1zxJsztossVL2kgK+541rSkZWtQAqay0tUthkMG8kzBxfCVNe/7o7wyO
j2iAFoewIBoZToPee/XjtQJjtKbGxDo+RE1MaCA6c1QRnTOcIAgWZsvjqTsRo5Ve
H5VlBppptQ/ikPFfHOC5VfogIs7ep+GWP9+jXcVnsC28ORkM5YfBs8YktoWZxOhm
/GsJLALqCineRG+JZhtpRd0z5GrI4NUYPrhReHH4vcpD
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:36:14 2025 by rpki-client