Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/edaeb5-5e6e-411b-99cb-3c50180780b0/1/jRXUvFnuWCtgdgo2hVMXtG8Oxm0.roa
File: jRXUvFnuWCtgdgo2hVMXtG8Oxm0.roa (raw, json)
Hash identifier: L/PHo9I0pu+bRQ3Gy3HQo+9TmINppxq572TDzedGV58=
Subject key identifier: 8D:15:D4:BC:59:EE:58:2B:60:76:0A:36:85:53:17:B4:6F:0E:C6:6D
Certificate issuer: /CN=0c4579a4028829d37acac65f66c056063251e57e
Certificate serial: 018EEC0D8B602877A84DF74D63193474098B
Authority key identifier: 0C:45:79:A4:02:88:29:D3:7A:CA:C6:5F:66:C0:56:06:32:51:E5:7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DEV5pAKIKdN6ysZfZsBWBjJR5X4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/edaeb5-5e6e-411b-99cb-3c50180780b0/1/jRXUvFnuWCtgdgo2hVMXtG8Oxm0.roa
Signing time: Wed 17 Apr 2024 12:34:54 +0000
ROA not before: Wed 17 Apr 2024 12:34:54 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 47787
IP address blocks: 82.215.71.0/24 maxlen: 24
185.162.183.0/24 maxlen: 24
193.109.184.0/21 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:ec:0d:8b:60:28:77:a8:4d:f7:4d:63:19:34:74:09:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c4579a4028829d37acac65f66c056063251e57e
Validity
Not Before: Apr 17 12:34:54 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8d15d4bc59ee582b60760a36855317b46f0ec66d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:93:a0:07:67:64:e8:3f:5e:34:f3:eb:f7:ba:
62:8a:d5:6a:53:d8:dd:ca:c8:ed:8e:5d:3c:27:a7:
34:c7:de:49:0d:70:a7:bc:87:f3:27:0e:77:5a:4e:
c1:e7:58:17:d1:dd:34:0a:32:bf:33:05:d0:9c:24:
1a:b0:29:9a:d1:d6:e1:3f:3a:3f:98:ff:4d:ca:d0:
71:d8:9d:e7:9d:db:ca:aa:2a:9e:9c:1d:c0:71:75:
72:df:54:9b:f4:a9:42:f9:9b:8f:31:ea:5a:60:04:
03:9d:24:71:7b:e6:09:10:9f:dd:42:55:e1:09:1c:
0f:1e:1a:26:b0:8d:ac:aa:29:59:6c:18:6a:13:48:
51:1b:dd:14:7a:98:8c:65:c2:c6:51:fd:ce:3e:3b:
8f:ce:02:9d:94:9b:74:cd:39:9f:69:cf:c7:4f:53:
be:39:51:d0:de:68:f2:76:7e:9a:1f:52:57:72:2a:
82:05:19:1c:d8:be:6f:d5:d9:3e:3b:69:86:d2:87:
20:a3:58:dd:5c:55:b4:90:04:8e:07:e7:19:06:59:
6f:c1:6b:6c:69:c4:5d:86:4e:83:58:4c:7b:a8:a9:
72:fc:04:75:bd:b8:ad:bd:18:49:6f:58:11:65:51:
99:0e:9a:dd:3b:b2:9a:fe:98:eb:48:b8:00:e4:5d:
5c:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:15:D4:BC:59:EE:58:2B:60:76:0A:36:85:53:17:B4:6F:0E:C6:6D
X509v3 Authority Key Identifier:
keyid:0C:45:79:A4:02:88:29:D3:7A:CA:C6:5F:66:C0:56:06:32:51:E5:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DEV5pAKIKdN6ysZfZsBWBjJR5X4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/edaeb5-5e6e-411b-99cb-3c50180780b0/1/jRXUvFnuWCtgdgo2hVMXtG8Oxm0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/edaeb5-5e6e-411b-99cb-3c50180780b0/1/DEV5pAKIKdN6ysZfZsBWBjJR5X4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.215.71.0/24
185.162.183.0/24
193.109.184.0/21
Signature Algorithm: sha256WithRSAEncryption
88:d4:3e:5d:6b:c4:3c:11:df:72:ec:ff:90:d4:a7:ef:c5:a1:
67:09:15:f7:03:80:a5:23:03:b8:3f:52:92:98:8d:8d:ec:82:
5c:1c:44:fc:8c:96:d9:a1:93:74:dd:fb:32:53:2c:c4:a9:29:
7d:0b:b2:de:7d:aa:89:6c:f6:89:e5:ed:2b:41:b0:89:0b:aa:
1a:9d:d9:b6:91:ce:6b:2f:dc:fa:43:2f:6f:40:06:85:f5:e9:
0d:67:ec:a5:08:16:e6:16:80:fa:ee:bf:08:d3:0f:96:93:25:
12:bb:d0:b5:7b:38:60:c9:33:b4:0c:89:df:e2:5f:69:25:3d:
81:18:ed:d4:66:8c:f8:3e:53:9e:75:a5:3a:8c:38:09:fa:ed:
77:18:20:a0:28:91:ba:e3:74:5a:9c:99:04:57:d0:84:6e:ab:
a0:44:a4:d2:67:29:4a:02:ab:10:01:e3:4a:8e:70:14:f1:0e:
5e:5e:b5:d7:0c:c3:5a:82:fc:2b:73:97:27:1e:2e:72:f5:65:
f1:c1:f6:e2:88:2f:28:f0:f9:d9:d1:6b:66:04:aa:00:f1:2f:
4f:b0:61:8a:a0:4f:c2:11:1f:d5:85:63:ce:3a:b9:21:18:34:
36:32:7c:71:bc:9d:1a:4b:b0:f3:b2:f7:ce:76:95:93:3a:47:
d3:7b:d4:cc
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAY7sDYtgKHeoTfdNYxk0dAmLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBjNDU3OWE0MDI4ODI5ZDM3YWNhYzY1ZjY2YzA1NjA2MzI1
MWU1N2UwHhcNMjQwNDE3MTIzNDU0WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4ZDE1ZDRiYzU5ZWU1ODJiNjA3NjBhMzY4NTUzMTdiNDZmMGVjNjZkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApZOgB2dk6D9eNPPr97piitVqU9jd
ysjtjl08J6c0x95JDXCnvIfzJw53Wk7B51gX0d00CjK/MwXQnCQasCma0dbhPzo/
mP9NytBx2J3nndvKqiqenB3AcXVy31Sb9KlC+ZuPMepaYAQDnSRxe+YJEJ/dQlXh
CRwPHhomsI2sqilZbBhqE0hRG90UepiMZcLGUf3OPjuPzgKdlJt0zTmfac/HT1O+
OVHQ3mjydn6aH1JXciqCBRkc2L5v1dk+O2mG0ocgo1jdXFW0kASOB+cZBllvwWts
acRdhk6DWEx7qKly/AR1vbitvRhJb1gRZVGZDprdO7Ka/pjrSLgA5F1cDwIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFI0V1LxZ7lgrYHYKNoVTF7RvDsZtMB8GA1UdIwQY
MBaAFAxFeaQCiCnTesrGX2bAVgYyUeV+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvREVWNXBBS0lLZE42eXNaZlpzQldCakpSNVg0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC9lZGFlYjUtNWU2ZS00MTFiLTk5Y2It
M2M1MDE4MDc4MGIwLzEvalJYVXZGbnVXQ3RnZGdvMmhWTVh0RzhPeG0wLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNC9lZGFlYjUtNWU2ZS00MTFiLTk5Y2ItM2M1MDE4MDc4MGIw
LzEvREVWNXBBS0lLZE42eXNaZlpzQldCakpSNVg0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAUtdHAwQA
uaK3AwQDwW24MA0GCSqGSIb3DQEBCwUAA4IBAQCI1D5da8Q8Ed9y7P+Q1KfvxaFn
CRX3A4ClIwO4P1KSmI2N7IJcHET8jJbZoZN03fsyUyzEqSl9C7LefaqJbPaJ5e0r
QbCJC6oandm2kc5rL9z6Qy9vQAaF9ekNZ+ylCBbmFoD67r8I0w+WkyUSu9C1ezhg
yTO0DInf4l9pJT2BGO3UZoz4PlOedaU6jDgJ+u13GCCgKJG643RanJkEV9CEbqug
RKTSZylKAqsQAeNKjnAU8Q5eXrXXDMNagvwrc5cnHi5y9WXxwfbiiC8o8PnZ0Wtm
BKoA8S9PsGGKoE/CER/VhWPOOrkhGDQ2MnxxvJ0aS7DzsvfOdpWTOkfTe9TM
-----END CERTIFICATE-----
Generated at Thu Jul 18 11:03:18 2024 by rpki-client on console-fra.rpki-client.org