Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/098d13-6d6d-4294-9753-a8773de768f7/1/Q-kvdSnGSPjnNFLzCtNItG0gkUA.roa
File: Q-kvdSnGSPjnNFLzCtNItG0gkUA.roa (raw, json)
Hash identifier: Rt7DdnIn61pNi6g1VVp7tpD156vcBAK2KqR4pBC0USA=
Subject key identifier: 43:E9:2F:75:29:C6:48:F8:E7:34:52:F3:0A:D3:48:B4:6D:20:91:40
Certificate issuer: /CN=00aff6b4effe7c363ef200f6f3e5888b915ba681
Certificate serial: 0187E09CC584824F19D0AE6338A015EBE51D
Authority key identifier: 00:AF:F6:B4:EF:FE:7C:36:3E:F2:00:F6:F3:E5:88:8B:91:5B:A6:81
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AK_2tO_-fDY-8gD28-WIi5FbpoE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/098d13-6d6d-4294-9753-a8773de768f7/1/Q-kvdSnGSPjnNFLzCtNItG0gkUA.roa
Signing time: Wed 03 May 2023 07:56:23 +0000
ROA not before: Wed 03 May 2023 07:56:23 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 49981
IP address blocks: 185.81.183.0/24 maxlen: 24
93.114.60.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:e0:9c:c5:84:82:4f:19:d0:ae:63:38:a0:15:eb:e5:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00aff6b4effe7c363ef200f6f3e5888b915ba681
Validity
Not Before: May 3 07:56:23 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=43e92f7529c648f8e73452f30ad348b46d209140
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:90:82:e9:52:0f:51:d3:5b:57:4c:7c:b6:c4:
ff:5d:3d:56:43:21:08:e7:aa:70:13:36:6a:87:21:
e5:2b:aa:27:12:ff:0d:5f:00:4c:d2:7f:ff:5b:ec:
74:0b:bd:65:b2:45:d4:2f:fd:ff:a0:ee:c3:d7:b7:
e4:8c:53:c8:ca:1d:fb:9b:e9:a3:7a:b8:c7:9d:2a:
0b:07:07:4e:d4:82:95:64:da:1d:7b:ca:95:ea:74:
c0:81:ad:20:0e:ca:8e:f9:c4:c1:c2:e9:2f:b2:cb:
2c:33:fc:97:bb:ea:bb:a8:d2:4c:03:df:cd:43:6b:
73:59:d6:24:66:a4:5e:41:68:aa:75:91:95:19:22:
6f:b5:77:2e:fa:e1:d0:cb:47:6a:34:51:09:f7:e0:
5f:a8:8b:a7:34:da:ee:23:79:fa:4f:d1:fb:9c:ca:
c6:1b:a9:42:d6:68:6a:7a:7f:3b:cb:ae:96:93:43:
9a:31:27:c0:eb:26:f5:60:38:b8:7c:af:9f:31:82:
0f:62:c6:8c:b2:9a:35:d8:ed:d5:25:22:bb:6a:f8:
48:3e:7d:28:3f:3a:50:c6:fd:08:c9:64:38:fb:90:
65:0d:52:a6:c7:78:b5:58:58:2a:88:21:58:11:c8:
ee:a7:58:5a:f3:94:eb:eb:0b:8c:84:9a:dc:3c:63:
7a:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:E9:2F:75:29:C6:48:F8:E7:34:52:F3:0A:D3:48:B4:6D:20:91:40
X509v3 Authority Key Identifier:
keyid:00:AF:F6:B4:EF:FE:7C:36:3E:F2:00:F6:F3:E5:88:8B:91:5B:A6:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AK_2tO_-fDY-8gD28-WIi5FbpoE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/098d13-6d6d-4294-9753-a8773de768f7/1/Q-kvdSnGSPjnNFLzCtNItG0gkUA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/098d13-6d6d-4294-9753-a8773de768f7/1/AK_2tO_-fDY-8gD28-WIi5FbpoE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.114.60.0/24
185.81.183.0/24
Signature Algorithm: sha256WithRSAEncryption
82:19:fe:96:85:2a:46:f7:5b:3f:64:45:8e:c2:b2:74:ed:6b:
0b:d1:3e:0b:d8:8e:73:2a:e5:be:1f:74:c9:d9:22:72:2c:10:
d5:66:ba:78:38:ff:fc:bf:c0:0f:ff:ef:13:a4:b2:47:14:eb:
32:64:8b:6b:7c:7a:eb:60:6d:7f:22:9b:13:a4:a7:6f:7f:d0:
1f:33:6d:bd:1a:ac:91:33:03:e2:15:0e:41:b7:94:9d:76:cb:
51:03:0b:3f:29:df:be:b5:a6:54:02:8c:52:56:0e:0e:36:18:
75:6f:c5:50:7b:df:19:76:37:47:14:ab:9e:76:0a:29:5a:4d:
58:4f:aa:04:52:84:2b:dc:14:4d:d9:e9:27:a0:cb:a5:c9:74:
77:7b:05:ff:43:a1:99:e0:44:39:03:0a:e6:9a:d9:3a:0e:54:
a0:e7:d2:9c:a2:07:31:41:3c:f0:bb:ee:1a:85:e9:e9:cf:c3:
12:be:bc:b9:69:d2:f0:ee:27:aa:31:b5:44:ea:05:ba:c8:1e:
4c:10:88:98:b2:b4:e0:3a:50:b5:0f:cb:0e:77:a3:9f:0e:89:
ed:78:6e:0f:88:cb:cf:53:ce:10:01:80:dd:05:50:d2:ac:85:
c6:d2:90:5f:1b:c6:62:aa:44:95:8d:0e:c7:a8:74:20:92:05:
91:90:1a:b6
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYfgnMWEgk8Z0K5jOKAV6+UdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAwYWZmNmI0ZWZmZTdjMzYzZWYyMDBmNmYzZTU4ODhiOTE1
YmE2ODEwHhcNMjMwNTAzMDc1NjIzWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0M2U5MmY3NTI5YzY0OGY4ZTczNDUyZjMwYWQzNDhiNDZkMjA5MTQwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqJCC6VIPUdNbV0x8tsT/XT1WQyEI
56pwEzZqhyHlK6onEv8NXwBM0n//W+x0C71lskXUL/3/oO7D17fkjFPIyh37m+mj
erjHnSoLBwdO1IKVZNode8qV6nTAga0gDsqO+cTBwukvssssM/yXu+q7qNJMA9/N
Q2tzWdYkZqReQWiqdZGVGSJvtXcu+uHQy0dqNFEJ9+BfqIunNNruI3n6T9H7nMrG
G6lC1mhqen87y66Wk0OaMSfA6yb1YDi4fK+fMYIPYsaMspo12O3VJSK7avhIPn0o
PzpQxv0IyWQ4+5BlDVKmx3i1WFgqiCFYEcjup1ha85Tr6wuMhJrcPGN6YQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFEPpL3Upxkj45zRS8wrTSLRtIJFAMB8GA1UdIwQY
MBaAFACv9rTv/nw2PvIA9vPliIuRW6aBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQUtfMnRPXy1mRFktOGdEMjgtV0lpNUZicG9FLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC8wOThkMTMtNmQ2ZC00Mjk0LTk3NTMt
YTg3NzNkZTc2OGY3LzEvUS1rdmRTbkdTUGpuTkZMekN0Tkl0RzBna1VBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNC8wOThkMTMtNmQ2ZC00Mjk0LTk3NTMtYTg3NzNkZTc2OGY3
LzEvQUtfMnRPXy1mRFktOGdEMjgtV0lpNUZicG9FLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAXXI8AwQA
uVG3MA0GCSqGSIb3DQEBCwUAA4IBAQCCGf6WhSpG91s/ZEWOwrJ07WsL0T4L2I5z
KuW+H3TJ2SJyLBDVZrp4OP/8v8AP/+8TpLJHFOsyZItrfHrrYG1/IpsTpKdvf9Af
M229GqyRMwPiFQ5Bt5SddstRAws/Kd++taZUAoxSVg4ONhh1b8VQe98ZdjdHFKue
dgopWk1YT6oEUoQr3BRN2eknoMulyXR3ewX/Q6GZ4EQ5Awrmmtk6DlSg59Kcogcx
QTzwu+4ahenpz8MSvry5adLw7ieqMbVE6gW6yB5MEIiYsrTgOlC1D8sOd6OfDont
eG4PiMvPU84QAYDdBVDSrIXG0pBfG8ZiqkSVjQ7HqHQgkgWRkBq2
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:18:46 2025 by rpki-client