Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/c800c9-51b5-4589-9260-063fcdd3a057/1/pGv2CDeDxSndUp31A3WMORraLyc.roa
File: pGv2CDeDxSndUp31A3WMORraLyc.roa (raw, json)
Hash identifier: rBKqWAlBfFYdGBflHz7DBEvtJ2ftPGwwyzX6DxZNPy8=
Subject key identifier: A4:6B:F6:08:37:83:C5:29:DD:52:9D:F5:03:75:8C:39:1A:DA:2F:27
Certificate issuer: /CN=7c3c39d1899e699bf5177418ee381489edff4380
Certificate serial: 0187EB7DF0C039F50F00133FF82E857731F9
Authority key identifier: 7C:3C:39:D1:89:9E:69:9B:F5:17:74:18:EE:38:14:89:ED:FF:43:80
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fDw50YmeaZv1F3QY7jgUie3_Q4A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/c800c9-51b5-4589-9260-063fcdd3a057/1/pGv2CDeDxSndUp31A3WMORraLyc.roa
Signing time: Fri 05 May 2023 10:38:32 +0000
ROA not before: Fri 05 May 2023 10:38:32 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 185.27.178.0/23 maxlen: 24
109.246.128.0/17 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:eb:7d:f0:c0:39:f5:0f:00:13:3f:f8:2e:85:77:31:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7c3c39d1899e699bf5177418ee381489edff4380
Validity
Not Before: May 5 10:38:32 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a46bf6083783c529dd529df503758c391ada2f27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:bf:8e:2e:a0:6d:12:f6:cf:5c:10:40:64:00:
68:b9:44:34:dd:69:be:13:8a:3f:90:08:ae:4e:e6:
f4:02:e1:17:4d:f9:7e:3d:e4:a9:db:9e:ef:d4:fd:
08:b7:37:a7:d5:f5:75:66:b0:cd:d9:e8:fb:52:c8:
66:3e:48:9c:30:a9:dc:51:b2:9e:95:a1:04:d9:4b:
cf:27:9b:7c:0b:15:1a:e0:50:7f:30:78:e6:fa:00:
f3:97:08:08:03:4b:f4:6d:e5:2b:b9:e0:a7:cf:8f:
83:8e:f8:50:88:e9:e4:2b:ce:37:1d:9d:50:54:d0:
82:74:fc:15:fa:2e:a5:61:56:e0:7d:17:f1:69:68:
49:01:3e:87:b2:ca:69:04:9b:07:ce:bc:ba:e4:04:
20:1b:95:fb:4a:ab:9e:77:af:fe:7f:39:a8:f9:7e:
db:11:ca:d0:75:9a:1d:14:d1:4f:6b:f3:a7:c9:55:
09:e8:ba:2c:52:b0:44:b9:01:4b:34:8b:fb:82:c9:
00:cc:26:f1:b9:11:53:b8:ad:03:b2:07:ad:28:5c:
ca:1b:d2:47:67:46:59:a4:6d:a9:c8:43:9d:0e:fe:
26:82:4d:56:ba:f9:22:b3:6b:66:0f:73:ee:a1:78:
7d:9b:a2:99:b6:ea:0b:23:83:bb:04:fa:8a:48:a6:
6a:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:6B:F6:08:37:83:C5:29:DD:52:9D:F5:03:75:8C:39:1A:DA:2F:27
X509v3 Authority Key Identifier:
keyid:7C:3C:39:D1:89:9E:69:9B:F5:17:74:18:EE:38:14:89:ED:FF:43:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fDw50YmeaZv1F3QY7jgUie3_Q4A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/c800c9-51b5-4589-9260-063fcdd3a057/1/pGv2CDeDxSndUp31A3WMORraLyc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/c800c9-51b5-4589-9260-063fcdd3a057/1/fDw50YmeaZv1F3QY7jgUie3_Q4A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.246.128.0/17
185.27.178.0/23
Signature Algorithm: sha256WithRSAEncryption
90:f0:0c:ab:ed:f1:30:7f:c2:e0:b7:60:c2:ca:ef:f5:77:57:
b5:2b:70:4b:7a:42:56:2d:59:97:c3:30:79:48:1d:ad:79:99:
87:e9:ae:ac:51:a5:98:2e:17:9f:68:0f:ab:f8:97:45:ef:10:
ff:67:ec:b5:ca:35:17:5f:aa:66:ad:49:0c:ad:ca:bb:ff:e7:
8b:7f:46:e3:e1:5f:da:55:49:a1:63:e5:97:a9:bb:8e:22:94:
a0:70:39:99:cf:a7:e8:b6:da:7a:37:03:43:1d:77:49:c7:1b:
00:a0:7b:3b:2a:e2:7c:ba:6b:b1:a4:b8:76:b1:5d:ee:8e:d1:
04:52:2e:91:4f:97:a8:07:a0:ac:ef:f7:de:fa:ec:67:e8:91:
86:2c:86:9c:79:4e:97:08:02:a0:8a:e5:b9:0c:29:ed:da:5e:
48:e6:28:38:b9:a9:ef:4c:e2:f4:c0:19:6a:e2:89:af:b1:89:
02:18:37:18:1f:37:a3:4b:07:e8:82:a2:8c:a9:d1:18:be:eb:
34:5a:9a:6e:e7:fd:9c:cd:69:3a:b5:fb:c5:30:30:8b:65:9d:
5b:3e:ec:ae:b1:0a:f5:c7:6c:9c:e9:f7:9b:33:13:8c:5b:81:
28:54:ed:b0:6d:c9:69:8a:55:6f:23:27:92:d6:7e:f9:ed:24:
92:ff:c7:49
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYfrffDAOfUPABM/+C6FdzH5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdjM2MzOWQxODk5ZTY5OWJmNTE3NzQxOGVlMzgxNDg5ZWRm
ZjQzODAwHhcNMjMwNTA1MTAzODMyWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhNDZiZjYwODM3ODNjNTI5ZGQ1MjlkZjUwMzc1OGMzOTFhZGEyZjI3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvr+OLqBtEvbPXBBAZABouUQ03Wm+
E4o/kAiuTub0AuEXTfl+PeSp257v1P0Itzen1fV1ZrDN2ej7UshmPkicMKncUbKe
laEE2UvPJ5t8CxUa4FB/MHjm+gDzlwgIA0v0beUrueCnz4+DjvhQiOnkK843HZ1Q
VNCCdPwV+i6lYVbgfRfxaWhJAT6HssppBJsHzry65AQgG5X7Squed6/+fzmo+X7b
EcrQdZodFNFPa/OnyVUJ6LosUrBEuQFLNIv7gskAzCbxuRFTuK0DsgetKFzKG9JH
Z0ZZpG2pyEOdDv4mgk1Wuvkis2tmD3PuoXh9m6KZtuoLI4O7BPqKSKZqiwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFKRr9gg3g8Up3VKd9QN1jDka2i8nMB8GA1UdIwQY
MBaAFHw8OdGJnmmb9Rd0GO44FInt/0OAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZkR3NTBZbWVhWnYxRjNRWTdqZ1VpZTNfUTRBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi9jODAwYzktNTFiNS00NTg5LTkyNjAt
MDYzZmNkZDNhMDU3LzEvcEd2MkNEZUR4U25kVXAzMUEzV01PUnJhTHljLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNi9jODAwYzktNTFiNS00NTg5LTkyNjAtMDYzZmNkZDNhMDU3
LzEvZkR3NTBZbWVhWnYxRjNRWTdqZ1VpZTNfUTRBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQHbfaAAwQB
uRuyMA0GCSqGSIb3DQEBCwUAA4IBAQCQ8Ayr7fEwf8Lgt2DCyu/1d1e1K3BLekJW
LVmXwzB5SB2teZmH6a6sUaWYLhefaA+r+JdF7xD/Z+y1yjUXX6pmrUkMrcq7/+eL
f0bj4V/aVUmhY+WXqbuOIpSgcDmZz6fottp6NwNDHXdJxxsAoHs7KuJ8umuxpLh2
sV3ujtEEUi6RT5eoB6Cs7/fe+uxn6JGGLIaceU6XCAKgiuW5DCnt2l5I5ig4uanv
TOL0wBlq4omvsYkCGDcYHzejSwfogqKMqdEYvus0Wppu5/2czWk6tfvFMDCLZZ1b
PuyusQr1x2yc6febMxOMW4EoVO2wbclpilVvIyeS1n757SSS/8dJ
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:50:18 2023 by rpki-client on console-ams.rpki-client.org