Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/_vW7Z80KHVCTIcMwkRAp3PJ3-XQ.roa
File: _vW7Z80KHVCTIcMwkRAp3PJ3-XQ.roa (raw, json)
Hash identifier: 8xAXFdB/s/c335ik6iSoujyk9/wOFQ4zS6HhESYaa9A=
Subject key identifier: FE:F5:BB:67:CD:0A:1D:50:93:21:C3:30:91:10:29:DC:F2:77:F9:74
Certificate issuer: /CN=368bfb8a5eee49082ea628df25a4a5d50f3aa9b3
Certificate serial: 0183A8009419972408FE3BD27FB940E4FF51
Authority key identifier: 36:8B:FB:8A:5E:EE:49:08:2E:A6:28:DF:25:A4:A5:D5:0F:3A:A9:B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/_vW7Z80KHVCTIcMwkRAp3PJ3-XQ.roa
Signing time: Wed 05 Oct 2022 11:55:53 +0000
ROA not before: Wed 05 Oct 2022 11:55:53 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 210703
IP address blocks: 185.126.82.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:a8:00:94:19:97:24:08:fe:3b:d2:7f:b9:40:e4:ff:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=368bfb8a5eee49082ea628df25a4a5d50f3aa9b3
Validity
Not Before: Oct 5 11:55:53 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=fef5bb67cd0a1d509321c330911029dcf277f974
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:08:69:67:66:80:c7:09:5a:8e:e0:f4:13:4f:
68:32:2e:f7:e2:f0:39:b1:21:0e:c8:18:4f:04:24:
58:40:01:52:96:9c:3d:2b:c8:51:fe:26:5e:0e:59:
e3:16:07:74:20:27:1b:71:a8:1d:e6:1d:cd:19:f8:
2a:a4:63:c7:b2:2d:4d:71:26:81:f9:ed:be:58:69:
1b:7b:7f:3d:e2:0a:23:f7:8d:47:5f:03:03:0f:d6:
14:38:60:2e:1f:ab:a7:0f:30:32:50:21:39:5c:32:
40:8c:b0:6d:bd:e8:c4:99:c7:4f:de:53:f5:aa:7b:
94:fe:ae:27:5d:90:3d:88:6c:25:ac:2e:fb:da:9f:
33:79:a1:00:b1:55:25:ff:ca:d0:9e:96:b8:3a:82:
53:d5:48:b1:67:08:98:f6:5a:d8:82:a2:59:c2:f1:
ff:5b:cd:79:85:c6:29:f7:44:7f:ca:b6:a0:ef:ec:
cc:41:c1:de:8a:b7:40:c7:b1:6a:02:88:42:e4:31:
52:6f:51:34:60:ed:4d:4c:8f:7e:71:c2:28:f7:75:
9d:cd:7d:41:d8:0b:8e:1f:e6:8b:07:4e:2c:93:74:
2a:32:23:c4:32:e8:62:a1:24:42:56:5d:32:a3:3b:
ee:55:27:8c:d8:52:55:8f:d7:d5:5b:f1:d4:d2:81:
29:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:F5:BB:67:CD:0A:1D:50:93:21:C3:30:91:10:29:DC:F2:77:F9:74
X509v3 Authority Key Identifier:
keyid:36:8B:FB:8A:5E:EE:49:08:2E:A6:28:DF:25:A4:A5:D5:0F:3A:A9:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/_vW7Z80KHVCTIcMwkRAp3PJ3-XQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.126.82.0/24
Signature Algorithm: sha256WithRSAEncryption
a0:31:41:4f:1f:cd:2b:90:08:ed:75:ef:c5:75:eb:07:ac:6d:
c1:3b:1a:e6:e8:ea:58:af:a2:5b:e9:0e:d5:2f:d5:bc:60:0c:
20:f6:8b:59:4e:0f:b1:b9:4b:b3:28:64:c2:a7:62:d5:45:fd:
c4:2f:b2:59:05:78:20:18:04:d1:8d:40:b8:61:ce:c7:02:bb:
68:1e:f1:76:eb:09:6e:0c:1d:7d:44:db:81:ab:0f:0b:f8:b1:
1b:e1:d3:41:ee:ff:45:cc:c9:81:97:d2:68:18:67:de:48:a0:
b9:36:f8:fd:ec:59:54:42:f0:59:84:e0:bc:ee:2a:dc:31:2b:
71:e4:c4:c6:c6:20:af:71:52:0f:fa:97:ea:c9:95:47:0c:1e:
f5:86:0b:4f:19:d1:c3:90:6f:e8:6f:08:56:3d:46:31:c3:a6:
b5:f7:b1:74:3c:72:69:23:02:7e:aa:db:4a:e1:b4:8e:4b:2b:
86:ba:76:e7:78:f5:99:0c:3f:3a:22:16:ab:7b:76:8e:2d:c9:
b7:d1:4a:95:24:a0:41:42:c3:06:13:77:c4:f8:7a:0b:f4:ed:
63:8b:c3:86:1a:67:f0:ca:14:04:2a:81:22:8f:18:8a:f6:71:
d9:ae:b3:70:f2:84:55:a7:93:bc:00:5e:1f:5e:ec:95:c9:c7:
d9:7c:71:07
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYOoAJQZlyQI/jvSf7lA5P9RMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM2OGJmYjhhNWVlZTQ5MDgyZWE2MjhkZjI1YTRhNWQ1MGYz
YWE5YjMwHhcNMjIxMDA1MTE1NTUzWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmZWY1YmI2N2NkMGExZDUwOTMyMWMzMzA5MTEwMjlkY2YyNzdmOTc0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlwhpZ2aAxwlajuD0E09oMi734vA5
sSEOyBhPBCRYQAFSlpw9K8hR/iZeDlnjFgd0ICcbcagd5h3NGfgqpGPHsi1NcSaB
+e2+WGkbe3894goj941HXwMDD9YUOGAuH6unDzAyUCE5XDJAjLBtvejEmcdP3lP1
qnuU/q4nXZA9iGwlrC772p8zeaEAsVUl/8rQnpa4OoJT1UixZwiY9lrYgqJZwvH/
W815hcYp90R/yrag7+zMQcHeirdAx7FqAohC5DFSb1E0YO1NTI9+ccIo93WdzX1B
2AuOH+aLB04sk3QqMiPEMuhioSRCVl0yozvuVSeM2FJVj9fVW/HU0oEpLQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFP71u2fNCh1QkyHDMJEQKdzyd/l0MB8GA1UdIwQY
MBaAFDaL+4pe7kkILqYo3yWkpdUPOqmzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTm92N2lsN3VTUWd1cGlqZkphU2wxUTg2cWJNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS9hYTU4YzMtZTcwNi00YTQ5LWE3YzUt
MGFlMmU5MjJhMjkyLzEvX3ZXN1o4MEtIVkNUSWNNd2tSQXAzUEozLVhRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNS9hYTU4YzMtZTcwNi00YTQ5LWE3YzUtMGFlMmU5MjJhMjky
LzEvTm92N2lsN3VTUWd1cGlqZkphU2wxUTg2cWJNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuX5SMA0G
CSqGSIb3DQEBCwUAA4IBAQCgMUFPH80rkAjtde/FdesHrG3BOxrm6OpYr6Jb6Q7V
L9W8YAwg9otZTg+xuUuzKGTCp2LVRf3EL7JZBXggGATRjUC4Yc7HArtoHvF26wlu
DB19RNuBqw8L+LEb4dNB7v9FzMmBl9JoGGfeSKC5Nvj97FlUQvBZhOC87ircMStx
5MTGxiCvcVIP+pfqyZVHDB71hgtPGdHDkG/obwhWPUYxw6a197F0PHJpIwJ+qttK
4bSOSyuGunbnePWZDD86Ihare3aOLcm30UqVJKBBQsMGE3fE+HoL9O1ji8OGGmfw
yhQEKoEijxiK9nHZrrNw8oRVp5O8AF4fXuyVycfZfHEH
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:25:13 2024 by rpki-client on console-fra.rpki-client.org