Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/e1171c-5270-49cd-9379-b95b08a23ae1/1/P5yDF9D8o4IOyn360aNHkRcTLhQ.roa
File: P5yDF9D8o4IOyn360aNHkRcTLhQ.roa (raw, json)
Hash identifier: z36IE2qkE28mPf+2NpDubl2GDOZ6n4fNcVUkktCBdJU=
Subject key identifier: 3F:9C:83:17:D0:FC:A3:82:0E:CA:7D:FA:D1:A3:47:91:17:13:2E:14
Certificate issuer: /CN=408af485b4fd0f03717cd4a709ef11c61d3ef46e
Certificate serial: 0322DF23
Authority key identifier: 40:8A:F4:85:B4:FD:0F:03:71:7C:D4:A7:09:EF:11:C6:1D:3E:F4:6E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QIr0hbT9DwNxfNSnCe8Rxh0-9G4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/e1171c-5270-49cd-9379-b95b08a23ae1/1/P5yDF9D8o4IOyn360aNHkRcTLhQ.roa
Signing time: Sat 01 Jan 2022 12:02:31 +0000
ROA not before: Sat 01 Jan 2022 12:02:31 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 3223
IP address blocks: 37.156.32.0/24 maxlen: 24
37.156.33.0/24 maxlen: 24
188.215.36.0/24 maxlen: 24
86.105.187.0/24 maxlen: 24
89.40.21.0/24 maxlen: 24
86.105.215.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 52616995 (0x322df23)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=408af485b4fd0f03717cd4a709ef11c61d3ef46e
Validity
Not Before: Jan 1 12:02:31 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=3f9c8317d0fca3820eca7dfad1a3479117132e14
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:88:8f:54:02:63:49:23:15:d4:d4:ae:6e:3a:
ac:01:cf:01:b4:25:61:a5:fa:ff:47:a5:c8:e9:5a:
b9:c0:b6:12:03:a3:45:ff:50:a5:5c:7c:e1:59:bc:
3b:a1:fc:3a:5f:4a:0e:7c:90:bb:1e:bd:8d:e7:7b:
0d:50:3c:b6:40:a5:bb:c6:da:ef:93:84:79:ae:7e:
aa:e1:df:b1:97:14:f7:f0:51:a8:e1:06:41:7b:8f:
6c:10:c4:3f:7a:48:48:1a:bd:ea:c4:13:b3:67:4d:
e5:f5:e0:13:ee:87:f3:4c:5b:51:97:d5:57:43:cc:
c0:d2:e6:e7:90:ac:a4:c3:2b:f8:4d:5e:c9:53:00:
b5:77:d8:e0:3b:bf:65:63:7f:6c:60:04:61:aa:d3:
a9:76:2d:09:72:ac:8d:59:38:03:c9:0f:bb:76:0e:
13:6d:dc:65:17:3b:cb:6a:68:9a:a7:d1:86:7d:47:
1e:1c:43:67:20:7a:f5:ad:41:2f:69:7b:3f:33:58:
87:98:bd:c2:60:b6:b1:34:54:ca:a8:cc:47:13:cc:
f4:aa:58:80:bc:45:00:70:9f:0f:f8:0e:0f:c2:78:
dc:9a:70:00:99:aa:98:23:4b:89:03:e7:6c:e0:5f:
8f:f5:56:3a:25:c9:2b:f8:08:05:29:b0:24:1e:ed:
f2:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:9C:83:17:D0:FC:A3:82:0E:CA:7D:FA:D1:A3:47:91:17:13:2E:14
X509v3 Authority Key Identifier:
keyid:40:8A:F4:85:B4:FD:0F:03:71:7C:D4:A7:09:EF:11:C6:1D:3E:F4:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QIr0hbT9DwNxfNSnCe8Rxh0-9G4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/e1171c-5270-49cd-9379-b95b08a23ae1/1/P5yDF9D8o4IOyn360aNHkRcTLhQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/e1171c-5270-49cd-9379-b95b08a23ae1/1/QIr0hbT9DwNxfNSnCe8Rxh0-9G4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.156.32.0/23
86.105.187.0/24
86.105.215.0/24
89.40.21.0/24
188.215.36.0/24
Signature Algorithm: sha256WithRSAEncryption
6b:2c:89:60:0f:7e:17:f6:b7:d9:6b:74:b0:6f:8e:bb:e9:2e:
2c:a3:ed:dc:ea:1d:34:07:00:2f:26:e0:1a:41:d2:7a:b5:50:
05:e2:32:4a:d8:d0:20:0b:e7:71:9d:5e:81:1d:c0:a7:54:d0:
dc:88:3b:1d:d0:b3:4a:0a:52:09:95:4a:3f:b5:a1:0f:98:16:
b5:55:4a:0f:39:6c:9e:5e:6e:96:36:63:0d:45:3b:09:a0:30:
83:4f:2c:c4:09:f9:86:64:e3:cf:b2:d3:bb:5a:4a:e1:a4:07:
d1:7d:32:69:3d:76:a4:24:5b:a9:b8:0a:c6:95:00:a4:78:eb:
e8:50:35:be:3a:c7:b9:ef:03:69:ca:cd:5a:3f:53:82:f8:58:
8d:38:d3:fb:c4:8e:93:d8:98:34:59:0b:92:ee:f8:f7:d1:82:
b8:71:d2:95:8c:88:94:50:0e:8a:7b:06:d8:f4:d6:bc:fe:28:
08:cc:c0:25:0a:bf:0c:5a:54:d3:6c:e9:ed:ae:65:31:48:be:
c8:a4:25:c6:29:e4:28:0a:89:5f:1f:12:d6:c6:e0:36:40:40:
5f:1c:2a:ba:c2:0b:90:e1:2d:86:e5:ff:1e:e6:bb:97:b5:c5:
20:c9:c9:a0:d1:b0:fe:e5:69:9c:23:d5:91:ff:ae:ed:b6:ba:
46:38:8c:31
-----BEGIN CERTIFICATE-----
MIIFBzCCA++gAwIBAgIEAyLfIzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg0
MDhhZjQ4NWI0ZmQwZjAzNzE3Y2Q0YTcwOWVmMTFjNjFkM2VmNDZlMB4XDTIyMDEw
MTEyMDIzMVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoM2Y5YzgzMTdkMGZj
YTM4MjBlY2E3ZGZhZDFhMzQ3OTExNzEzMmUxNDCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBANmIj1QCY0kjFdTUrm46rAHPAbQlYaX6/0elyOlaucC2EgOj
Rf9QpVx84Vm8O6H8Ol9KDnyQux69jed7DVA8tkClu8ba75OEea5+quHfsZcU9/BR
qOEGQXuPbBDEP3pISBq96sQTs2dN5fXgE+6H80xbUZfVV0PMwNLm55CspMMr+E1e
yVMAtXfY4Du/ZWN/bGAEYarTqXYtCXKsjVk4A8kPu3YOE23cZRc7y2pomqfRhn1H
HhxDZyB69a1BL2l7PzNYh5i9wmC2sTRUyqjMRxPM9KpYgLxFAHCfD/gOD8J43Jpw
AJmqmCNLiQPnbOBfj/VWOiXJK/gIBSmwJB7t8iMCAwEAAaOCAiEwggIdMB0GA1Ud
DgQWBBQ/nIMX0Pyjgg7KffrRo0eRFxMuFDAfBgNVHSMEGDAWgBRAivSFtP0PA3F8
1KcJ7xHGHT70bjAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L1FJcjBoYlQ5RHdOeGZOU25DZThSeGgwLTlHNC5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvMzYvZTExNzFjLTUyNzAtNDljZC05Mzc5LWI5NWIwOGEyM2FlMS8x
L1A1eURGOUQ4bzRJT3luMzYwYU5Ia1JjVExoUS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMzYv
ZTExNzFjLTUyNzAtNDljZC05Mzc5LWI5NWIwOGEyM2FlMS8xL1FJcjBoYlQ5RHdO
eGZOU25DZThSeGgwLTlHNC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjA3
BggrBgEFBQcBBwEB/wQoMCYwJAQCAAEwHgMEASWcIAMEAFZpuwMEAFZp1wMEAFko
FQMEALzXJDANBgkqhkiG9w0BAQsFAAOCAQEAayyJYA9+F/a32Wt0sG+Ou+kuLKPt
3OodNAcALybgGkHSerVQBeIyStjQIAvncZ1egR3Ap1TQ3Ig7HdCzSgpSCZVKP7Wh
D5gWtVVKDzlsnl5uljZjDUU7CaAwg08sxAn5hmTjz7LTu1pK4aQH0X0yaT12pCRb
qbgKxpUApHjr6FA1vjrHue8DacrNWj9TgvhYjTjT+8SOk9iYNFkLku7499GCuHHS
lYyIlFAOinsG2PTWvP4oCMzAJQq/DFpU02zp7a5lMUi+yKQlxinkKAqJXx8S1sbg
NkBAXxwqusILkOEthuX/Hua7l7XFIMnJoNGw/uVpnCPVkf+u7ba6RjiMMQ==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:46:36 2023 by rpki-client on console-fra.rpki-client.org