Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/098d13-6d6d-4294-9753-a8773de768f7/1/hFrmyK6O60yX4RX_mbIJLhxbn2A.roa
File: hFrmyK6O60yX4RX_mbIJLhxbn2A.roa (raw, json)
Hash identifier: CsQd5iGsxLwfKG8K+p2uHiFxaHAuDT1HOoUGjJDBpA8=
Subject key identifier: 84:5A:E6:C8:AE:8E:EB:4C:97:E1:15:FF:99:B2:09:2E:1C:5B:9F:60
Certificate issuer: /CN=00aff6b4effe7c363ef200f6f3e5888b915ba681
Certificate serial: 01902D205E59A50E48A7FAB9ACDED10C2E1F
Authority key identifier: 00:AF:F6:B4:EF:FE:7C:36:3E:F2:00:F6:F3:E5:88:8B:91:5B:A6:81
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AK_2tO_-fDY-8gD28-WIi5FbpoE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/098d13-6d6d-4294-9753-a8773de768f7/1/hFrmyK6O60yX4RX_mbIJLhxbn2A.roa
Signing time: Tue 18 Jun 2024 20:53:34 +0000
ROA not before: Tue 18 Jun 2024 20:53:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 89.46.8.0/24 maxlen: 24
89.46.9.0/24 maxlen: 24
89.46.10.0/24 maxlen: 24
89.46.11.0/24 maxlen: 24
91.243.176.0/24 maxlen: 24
91.243.178.0/24 maxlen: 24
91.243.179.0/24 maxlen: 24
93.114.60.0/24 maxlen: 24
93.114.61.0/24 maxlen: 24
93.114.62.0/24 maxlen: 24
93.114.63.0/24 maxlen: 24
185.81.180.0/23 maxlen: 23
185.81.180.0/24 maxlen: 24
185.81.181.0/24 maxlen: 24
185.81.182.0/24 maxlen: 24
185.81.183.0/24 maxlen: 24
195.242.240.0/24 maxlen: 24
195.242.241.0/24 maxlen: 24
195.242.242.0/24 maxlen: 24
195.242.243.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:2d:20:5e:59:a5:0e:48:a7:fa:b9:ac:de:d1:0c:2e:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00aff6b4effe7c363ef200f6f3e5888b915ba681
Validity
Not Before: Jun 18 20:53:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=845ae6c8ae8eeb4c97e115ff99b2092e1c5b9f60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:bd:05:ec:fb:90:9d:9a:ce:70:03:3a:8b:ad:
c0:07:6a:67:aa:0b:53:05:18:0b:48:f1:6d:c3:02:
c3:36:12:23:84:87:cb:f1:ad:0c:19:1d:8c:5f:93:
3f:a8:d2:8a:47:a4:3c:64:3f:36:dd:c3:30:0b:45:
3c:7e:eb:2b:9b:a6:87:0a:72:12:56:e5:be:96:53:
d8:0b:90:90:94:ff:69:bf:64:a8:05:d8:bd:55:de:
51:50:ca:fb:c6:70:37:89:8b:91:a4:7e:2e:f8:cc:
e4:b2:5a:d5:f8:34:57:f4:b4:1c:2b:92:fa:04:73:
5a:68:d4:92:40:9c:33:0b:ea:93:03:f3:84:2f:45:
c4:82:33:01:bd:85:28:6b:b9:56:f4:7f:ea:b2:1d:
68:71:f3:82:8e:73:35:75:ee:e5:c6:e7:0e:70:47:
21:e2:61:a7:bb:94:ba:95:38:99:a3:f0:27:2a:73:
13:e4:5a:f5:1f:00:46:f8:19:27:6d:ff:fe:62:63:
ad:f3:7b:f6:b2:8e:32:68:f7:2a:36:49:d6:19:9d:
c3:c2:96:75:2f:b8:6d:5d:aa:f2:28:76:c0:12:f5:
f5:8b:f5:7b:b3:95:49:1c:c7:76:e0:18:cb:50:6f:
f9:be:4a:ba:e2:41:60:4d:c4:dd:c0:fc:54:6a:ea:
cf:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:5A:E6:C8:AE:8E:EB:4C:97:E1:15:FF:99:B2:09:2E:1C:5B:9F:60
X509v3 Authority Key Identifier:
keyid:00:AF:F6:B4:EF:FE:7C:36:3E:F2:00:F6:F3:E5:88:8B:91:5B:A6:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AK_2tO_-fDY-8gD28-WIi5FbpoE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/098d13-6d6d-4294-9753-a8773de768f7/1/hFrmyK6O60yX4RX_mbIJLhxbn2A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/098d13-6d6d-4294-9753-a8773de768f7/1/AK_2tO_-fDY-8gD28-WIi5FbpoE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.46.8.0/22
91.243.176.0/24
91.243.178.0/23
93.114.60.0/22
185.81.180.0/22
195.242.240.0/22
Signature Algorithm: sha256WithRSAEncryption
65:dc:10:b4:a8:a6:18:70:3d:21:63:77:ae:bb:97:29:2e:34:
34:88:07:6b:79:bb:50:40:4c:db:3e:df:55:12:bc:35:7d:0c:
88:3a:0c:32:7e:5d:67:f1:97:d5:67:3a:2c:21:15:42:55:52:
a5:39:10:e2:24:16:c4:42:2c:8d:4f:63:12:6b:d5:f9:c6:8a:
25:ea:40:e0:82:e5:56:a8:7f:c9:6f:00:98:36:37:b4:5f:3f:
51:ad:4b:7f:cd:d0:ae:f0:af:c6:c0:a9:fd:35:b1:3b:39:d3:
1e:43:ea:b7:22:59:24:b9:62:0e:26:5d:bd:52:fc:e2:b8:0f:
fc:b1:a4:b3:f2:b3:ca:8b:11:f1:25:47:e2:b4:50:f9:69:d5:
56:e7:43:f7:fe:f4:d9:3e:dc:94:d9:c7:0a:22:a2:e4:ac:27:
0f:03:57:fe:79:30:40:c7:9e:e2:61:58:e3:2a:0e:f2:65:93:
95:1e:5f:4a:de:d0:1c:c1:ec:95:18:40:a4:81:e1:b9:06:e8:
48:83:ca:62:52:f0:b4:cf:d7:67:01:b7:8c:46:02:a6:e5:c2:
0c:10:21:75:08:97:82:e9:a7:44:23:e4:a8:d0:2e:93:ff:06:
72:cc:f8:86:c0:e8:15:e7:8c:ba:fc:b3:b7:8c:ef:93:10:ca:
07:7b:02:b9
-----BEGIN CERTIFICATE-----
MIIFGzCCBAOgAwIBAgISAZAtIF5ZpQ5Ip/q5rN7RDC4fMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAwYWZmNmI0ZWZmZTdjMzYzZWYyMDBmNmYzZTU4ODhiOTE1
YmE2ODEwHhcNMjQwNjE4MjA1MzM0WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4NDVhZTZjOGFlOGVlYjRjOTdlMTE1ZmY5OWIyMDkyZTFjNWI5ZjYwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyr0F7PuQnZrOcAM6i63AB2pnqgtT
BRgLSPFtwwLDNhIjhIfL8a0MGR2MX5M/qNKKR6Q8ZD823cMwC0U8fusrm6aHCnIS
VuW+llPYC5CQlP9pv2SoBdi9Vd5RUMr7xnA3iYuRpH4u+MzkslrV+DRX9LQcK5L6
BHNaaNSSQJwzC+qTA/OEL0XEgjMBvYUoa7lW9H/qsh1ocfOCjnM1de7lxucOcEch
4mGnu5S6lTiZo/AnKnMT5Fr1HwBG+Bknbf/+YmOt83v2so4yaPcqNknWGZ3DwpZ1
L7htXaryKHbAEvX1i/V7s5VJHMd24BjLUG/5vkq64kFgTcTdwPxUaurPEwIDAQAB
o4ICJzCCAiMwHQYDVR0OBBYEFIRa5siujutMl+EV/5myCS4cW59gMB8GA1UdIwQY
MBaAFACv9rTv/nw2PvIA9vPliIuRW6aBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQUtfMnRPXy1mRFktOGdEMjgtV0lpNUZicG9FLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC8wOThkMTMtNmQ2ZC00Mjk0LTk3NTMt
YTg3NzNkZTc2OGY3LzEvaEZybXlLNk82MHlYNFJYX21iSUpMaHhibjJBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNC8wOThkMTMtNmQ2ZC00Mjk0LTk3NTMtYTg3NzNkZTc2OGY3
LzEvQUtfMnRPXy1mRFktOGdEMjgtV0lpNUZicG9FLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMD0GCCsGAQUFBwEHAQH/BC4wLDAqBAIAATAkAwQCWS4IAwQA
W/OwAwQBW/OyAwQCXXI8AwQCuVG0AwQCw/LwMA0GCSqGSIb3DQEBCwUAA4IBAQBl
3BC0qKYYcD0hY3euu5cpLjQ0iAdrebtQQEzbPt9VErw1fQyIOgwyfl1n8ZfVZzos
IRVCVVKlORDiJBbEQiyNT2MSa9X5xool6kDgguVWqH/JbwCYNje0Xz9RrUt/zdCu
8K/GwKn9NbE7OdMeQ+q3IlkkuWIOJl29UvziuA/8saSz8rPKixHxJUfitFD5adVW
50P3/vTZPtyU2ccKIqLkrCcPA1f+eTBAx57iYVjjKg7yZZOVHl9K3tAcweyVGECk
geG5BuhIg8piUvC0z9dnAbeMRgKm5cIMECF1CJeC6adEI+So0C6T/wZyzPiGwOgV
54y6/LO3jO+TEMoHewK5
-----END CERTIFICATE-----
Generated at Mon Jul 15 15:35:18 2024 by rpki-client on console-ams.rpki-client.org