Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/098d13-6d6d-4294-9753-a8773de768f7/1/MbS2d4ux-xA1o9PEXV19aU5ymmM.roa
File: MbS2d4ux-xA1o9PEXV19aU5ymmM.roa (raw, json)
Hash identifier: Q0BhaIX7biopkuZIEyJPlLaJNyRWB08Z+e2vENBmk5k=
Subject key identifier: 31:B4:B6:77:8B:B1:FB:10:35:A3:D3:C4:5D:5D:7D:69:4E:72:9A:63
Certificate issuer: /CN=00aff6b4effe7c363ef200f6f3e5888b915ba681
Certificate serial: 0182C4826396F1E7005A9304E1DC9EDEC021
Authority key identifier: 00:AF:F6:B4:EF:FE:7C:36:3E:F2:00:F6:F3:E5:88:8B:91:5B:A6:81
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AK_2tO_-fDY-8gD28-WIi5FbpoE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/098d13-6d6d-4294-9753-a8773de768f7/1/MbS2d4ux-xA1o9PEXV19aU5ymmM.roa
Signing time: Mon 22 Aug 2022 07:44:15 +0000
ROA not before: Mon 22 Aug 2022 07:44:15 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 61105
IP address blocks: 91.243.177.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:c4:82:63:96:f1:e7:00:5a:93:04:e1:dc:9e:de:c0:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00aff6b4effe7c363ef200f6f3e5888b915ba681
Validity
Not Before: Aug 22 07:44:15 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=31b4b6778bb1fb1035a3d3c45d5d7d694e729a63
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:30:c5:7b:b7:e2:6e:54:51:82:2c:1a:f8:6e:
b4:60:25:8c:29:03:bf:12:ff:1e:13:96:cb:bd:af:
26:e0:35:07:bf:96:40:4b:b6:92:ee:bc:99:39:4e:
0b:48:dd:7c:72:99:99:51:e7:c6:c5:f2:49:7f:68:
13:31:03:7e:d4:03:63:f3:94:4b:21:f3:e4:e7:13:
92:89:4f:c3:26:dc:38:bf:5a:ef:ca:10:b5:b7:67:
ed:2a:2a:1b:24:83:d5:b0:4b:3a:a6:48:fa:08:f4:
79:97:93:71:ef:13:b4:d8:cc:bd:99:58:37:50:53:
3f:42:f4:e7:0e:ed:f8:e9:6a:52:06:b2:38:e7:ef:
2a:86:e6:78:26:76:80:1d:e7:84:25:57:82:26:f7:
a3:e9:fe:2b:ab:95:c0:72:ed:43:b8:df:cd:0d:a3:
57:92:d2:a9:b6:b3:af:81:fc:71:09:33:39:d1:8d:
02:49:d7:4b:48:2f:c6:ae:42:07:13:52:9b:2d:eb:
e0:52:12:7d:b8:70:a0:7f:5d:10:20:1e:8c:58:d8:
f4:34:b2:e4:57:a0:7b:1c:a5:5f:bf:2c:06:6f:bc:
3a:a2:df:0a:63:5c:bc:51:07:d6:30:25:09:94:df:
9a:d3:c0:39:f7:5a:9c:13:70:0c:d2:c2:18:50:3e:
52:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:B4:B6:77:8B:B1:FB:10:35:A3:D3:C4:5D:5D:7D:69:4E:72:9A:63
X509v3 Authority Key Identifier:
keyid:00:AF:F6:B4:EF:FE:7C:36:3E:F2:00:F6:F3:E5:88:8B:91:5B:A6:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AK_2tO_-fDY-8gD28-WIi5FbpoE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/098d13-6d6d-4294-9753-a8773de768f7/1/MbS2d4ux-xA1o9PEXV19aU5ymmM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/098d13-6d6d-4294-9753-a8773de768f7/1/AK_2tO_-fDY-8gD28-WIi5FbpoE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.243.177.0/24
Signature Algorithm: sha256WithRSAEncryption
0d:9e:98:2e:51:88:1a:ca:94:dd:c0:82:5a:f0:fe:1c:c5:a0:
33:77:65:60:db:a8:d2:0e:cd:18:69:34:e7:fd:a4:17:aa:e1:
f9:5f:d2:7a:fa:2f:61:70:41:18:41:e1:f3:80:e6:e8:bd:7f:
e7:f7:fa:40:1e:9e:73:23:ad:0b:9f:6c:86:bd:4a:e8:39:27:
dc:f2:74:20:bc:0e:b8:e3:33:3a:2f:9a:0e:be:66:73:f9:19:
e4:21:88:2c:56:cd:26:78:c8:12:95:b2:34:dd:17:f6:0e:bb:
ae:21:ea:c0:dd:6d:96:80:3e:93:72:92:1f:09:da:ff:b5:b4:
a1:75:74:be:07:7c:17:26:74:22:3f:10:01:f9:17:1e:67:7a:
c6:d0:d3:57:36:df:5b:d3:a6:63:19:e0:03:ef:e8:f2:4f:f7:
1b:31:0d:dd:8b:e9:90:ad:81:c3:1f:68:63:ab:14:36:84:eb:
4d:44:a7:b8:80:cc:3e:95:1b:53:f7:ae:3c:cb:87:72:3c:9e:
bf:57:4a:40:f4:b6:a9:a7:0f:26:b9:64:3c:52:51:d6:a1:83:
3c:7f:89:01:38:b4:60:2d:5c:be:f2:fb:a4:73:c6:1f:31:07:
fe:95:ae:d6:d0:0b:02:32:97:f5:22:61:8c:b1:cf:e2:75:61:
c1:8d:bf:bb
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYLEgmOW8ecAWpME4dye3sAhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAwYWZmNmI0ZWZmZTdjMzYzZWYyMDBmNmYzZTU4ODhiOTE1
YmE2ODEwHhcNMjIwODIyMDc0NDE1WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzMWI0YjY3NzhiYjFmYjEwMzVhM2QzYzQ1ZDVkN2Q2OTRlNzI5YTYzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhTDFe7fiblRRgiwa+G60YCWMKQO/
Ev8eE5bLva8m4DUHv5ZAS7aS7ryZOU4LSN18cpmZUefGxfJJf2gTMQN+1ANj85RL
IfPk5xOSiU/DJtw4v1rvyhC1t2ftKiobJIPVsEs6pkj6CPR5l5Nx7xO02My9mVg3
UFM/QvTnDu346WpSBrI45+8qhuZ4JnaAHeeEJVeCJvej6f4rq5XAcu1DuN/NDaNX
ktKptrOvgfxxCTM50Y0CSddLSC/GrkIHE1KbLevgUhJ9uHCgf10QIB6MWNj0NLLk
V6B7HKVfvywGb7w6ot8KY1y8UQfWMCUJlN+a08A591qcE3AM0sIYUD5SXQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFDG0tneLsfsQNaPTxF1dfWlOcppjMB8GA1UdIwQY
MBaAFACv9rTv/nw2PvIA9vPliIuRW6aBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQUtfMnRPXy1mRFktOGdEMjgtV0lpNUZicG9FLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC8wOThkMTMtNmQ2ZC00Mjk0LTk3NTMt
YTg3NzNkZTc2OGY3LzEvTWJTMmQ0dXgteEExbzlQRVhWMTlhVTV5bW1NLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNC8wOThkMTMtNmQ2ZC00Mjk0LTk3NTMtYTg3NzNkZTc2OGY3
LzEvQUtfMnRPXy1mRFktOGdEMjgtV0lpNUZicG9FLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW/OxMA0G
CSqGSIb3DQEBCwUAA4IBAQANnpguUYgaypTdwIJa8P4cxaAzd2Vg26jSDs0YaTTn
/aQXquH5X9J6+i9hcEEYQeHzgObovX/n9/pAHp5zI60Ln2yGvUroOSfc8nQgvA64
4zM6L5oOvmZz+RnkIYgsVs0meMgSlbI03Rf2DruuIerA3W2WgD6TcpIfCdr/tbSh
dXS+B3wXJnQiPxAB+RceZ3rG0NNXNt9b06ZjGeAD7+jyT/cbMQ3di+mQrYHDH2hj
qxQ2hOtNRKe4gMw+lRtT9648y4dyPJ6/V0pA9Lappw8muWQ8UlHWoYM8f4kBOLRg
LVy+8vukc8YfMQf+la7W0AsCMpf1ImGMsc/idWHBjb+7
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:14:25 2025 by rpki-client