Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/c800c9-51b5-4589-9260-063fcdd3a057/1/lCKNq8YmGwHstFJTtaPBkZmH2kg.roa
File: lCKNq8YmGwHstFJTtaPBkZmH2kg.roa (raw, json)
Hash identifier: OgR9Vf+0a0b0CEISAHR9LZ3ZPDNdpxj+LTW5FshEUgU=
Subject key identifier: 94:22:8D:AB:C6:26:1B:01:EC:B4:52:53:B5:A3:C1:91:99:87:DA:48
Certificate issuer: /CN=7c3c39d1899e699bf5177418ee381489edff4380
Certificate serial: 1AFBA7CD
Authority key identifier: 7C:3C:39:D1:89:9E:69:9B:F5:17:74:18:EE:38:14:89:ED:FF:43:80
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fDw50YmeaZv1F3QY7jgUie3_Q4A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/c800c9-51b5-4589-9260-063fcdd3a057/1/lCKNq8YmGwHstFJTtaPBkZmH2kg.roa
Signing time: Thu 10 Mar 2022 09:31:45 +0000
ROA not before: Thu 10 Mar 2022 09:31:45 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 1239
IP address blocks: 109.246.240.0/20 maxlen: 24
109.246.144.0/20 maxlen: 24
185.27.178.0/23 maxlen: 24
109.246.160.0/20 maxlen: 24
185.18.123.0/24 maxlen: 24
109.246.176.0/20 maxlen: 24
109.246.192.0/20 maxlen: 24
109.246.208.0/20 maxlen: 24
109.246.0.0/17 maxlen: 24
109.246.224.0/20 maxlen: 24
109.246.128.0/20 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 452700109 (0x1afba7cd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7c3c39d1899e699bf5177418ee381489edff4380
Validity
Not Before: Mar 10 09:31:45 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=94228dabc6261b01ecb45253b5a3c1919987da48
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:19:0f:37:8e:d5:c9:af:e7:25:58:89:0b:4d:
03:0c:ce:00:66:32:49:5e:9e:7b:55:5d:f2:99:8c:
72:3f:5f:ea:48:65:53:72:f9:06:22:0e:5f:b9:29:
43:fe:5d:f1:61:7e:cf:54:2f:f5:09:c3:8a:06:48:
bb:fe:b9:01:af:b3:80:ce:6d:61:30:13:24:dd:e0:
07:7c:a3:a2:29:b1:e9:29:4a:8d:45:90:11:f3:7d:
1b:53:b7:24:46:ff:af:0e:17:ca:1a:4b:54:a8:67:
1b:43:8b:24:17:ac:93:51:94:ee:ab:51:5b:e6:f4:
1a:ea:02:6e:91:7b:10:f2:7d:20:42:e5:4c:61:35:
41:06:ae:ac:69:75:25:b5:3c:9b:1e:fc:31:03:31:
7a:47:5c:16:06:fe:52:d4:e7:93:f7:60:e3:7f:a7:
bc:b7:cb:37:4a:43:62:b3:3d:e8:a1:3f:76:28:07:
a6:be:ae:2a:12:1c:0c:c5:57:ac:d6:f8:39:63:f7:
c5:88:d0:62:b7:e3:0c:48:19:82:26:6c:7c:a9:46:
6f:cb:e3:22:ee:d2:45:02:f4:2d:ce:78:f8:a7:05:
3c:b1:78:4c:7a:fb:8e:77:31:bb:1b:73:e1:ac:17:
2b:55:df:7c:ab:ff:fe:55:c1:ab:22:07:35:95:a1:
2d:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:22:8D:AB:C6:26:1B:01:EC:B4:52:53:B5:A3:C1:91:99:87:DA:48
X509v3 Authority Key Identifier:
keyid:7C:3C:39:D1:89:9E:69:9B:F5:17:74:18:EE:38:14:89:ED:FF:43:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fDw50YmeaZv1F3QY7jgUie3_Q4A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/c800c9-51b5-4589-9260-063fcdd3a057/1/lCKNq8YmGwHstFJTtaPBkZmH2kg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/c800c9-51b5-4589-9260-063fcdd3a057/1/fDw50YmeaZv1F3QY7jgUie3_Q4A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.246.0.0/16
185.18.123.0/24
185.27.178.0/23
Signature Algorithm: sha256WithRSAEncryption
7c:67:44:f2:aa:30:bd:bf:02:92:95:3b:b3:38:4a:c0:a3:ff:
78:a3:22:ea:06:1c:3b:82:45:de:f5:eb:e0:76:df:92:1e:01:
aa:49:74:05:74:64:b5:fb:79:43:d3:d2:9e:15:66:cb:65:75:
77:c9:90:e5:6b:d3:5a:db:2b:ce:c6:81:25:21:5f:1a:2e:85:
c7:34:a0:9d:ff:e6:ce:a4:b0:a4:ee:76:d3:1a:7a:ba:22:78:
2f:8e:36:d7:ca:f2:25:d7:95:a3:57:8a:38:7a:75:57:09:8f:
97:42:43:be:10:ce:c6:58:b1:f1:f9:04:6c:ec:61:fc:2b:18:
24:a9:c1:05:0e:cf:d5:7a:7d:cd:df:af:9b:b7:16:26:88:42:
cb:17:18:25:4f:21:4b:fb:e8:bd:7e:ae:74:44:c3:a0:11:fb:
e7:2f:b9:3a:6f:8b:ed:65:0f:e9:e5:ea:61:42:bf:dc:e5:7e:
0c:34:1b:f3:b2:a3:df:61:b2:7c:79:21:5e:f9:63:db:bd:9b:
cf:57:80:9d:e9:82:1b:cf:53:f3:27:81:e4:da:9e:e5:9a:19:
f3:ad:11:b8:89:6b:b5:cd:33:84:a7:cd:be:10:30:78:c8:c7:
e6:bb:bf:be:3c:c0:ad:9c:0f:2e:49:08:2f:69:39:51:1d:5f:
6e:40:ea:fb
-----BEGIN CERTIFICATE-----
MIIE+jCCA+KgAwIBAgIEGvunzTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg3
YzNjMzlkMTg5OWU2OTliZjUxNzc0MThlZTM4MTQ4OWVkZmY0MzgwMB4XDTIyMDMx
MDA5MzE0NVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoOTQyMjhkYWJjNjI2
MWIwMWVjYjQ1MjUzYjVhM2MxOTE5OTg3ZGE0ODCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBANMZDzeO1cmv5yVYiQtNAwzOAGYySV6ee1Vd8pmMcj9f6khl
U3L5BiIOX7kpQ/5d8WF+z1Qv9QnDigZIu/65Aa+zgM5tYTATJN3gB3yjoimx6SlK
jUWQEfN9G1O3JEb/rw4XyhpLVKhnG0OLJBesk1GU7qtRW+b0GuoCbpF7EPJ9IELl
TGE1QQaurGl1JbU8mx78MQMxekdcFgb+UtTnk/dg43+nvLfLN0pDYrM96KE/digH
pr6uKhIcDMVXrNb4OWP3xYjQYrfjDEgZgiZsfKlGb8vjIu7SRQL0Lc54+KcFPLF4
THr7jncxuxtz4awXK1XffKv//lXBqyIHNZWhLXUCAwEAAaOCAhQwggIQMB0GA1Ud
DgQWBBSUIo2rxiYbAey0UlO1o8GRmYfaSDAfBgNVHSMEGDAWgBR8PDnRiZ5pm/UX
dBjuOBSJ7f9DgDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L2ZEdzUwWW1lYVp2MUYzUVk3amdVaWUzX1E0QS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvMzYvYzgwMGM5LTUxYjUtNDU4OS05MjYwLTA2M2ZjZGQzYTA1Ny8x
L2xDS05xOFltR3dIc3RGSlR0YVBCa1ptSDJrZy5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMzYv
YzgwMGM5LTUxYjUtNDU4OS05MjYwLTA2M2ZjZGQzYTA1Ny8xL2ZEdzUwWW1lYVp2
MUYzUVk3amdVaWUzX1E0QS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAq
BggrBgEFBQcBBwEB/wQbMBkwFwQCAAEwEQMDAG32AwQAuRJ7AwQBuRuyMA0GCSqG
SIb3DQEBCwUAA4IBAQB8Z0TyqjC9vwKSlTuzOErAo/94oyLqBhw7gkXe9evgdt+S
HgGqSXQFdGS1+3lD09KeFWbLZXV3yZDla9Na2yvOxoElIV8aLoXHNKCd/+bOpLCk
7nbTGnq6IngvjjbXyvIl15WjV4o4enVXCY+XQkO+EM7GWLHx+QRs7GH8KxgkqcEF
Ds/Ven3N36+btxYmiELLFxglTyFL++i9fq50RMOgEfvnL7k6b4vtZQ/p5ephQr/c
5X4MNBvzsqPfYbJ8eSFe+WPbvZvPV4Cd6YIbz1PzJ4Hk2p7lmhnzrRG4iWu1zTOE
p82+EDB4yMfmu7++PMCtnA8uSQgvaTlRHV9uQOr7
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:50:18 2023 by rpki-client on console-ams.rpki-client.org