Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/e1171c-5270-49cd-9379-b95b08a23ae1/1/uaop2m5RamLfR9cB0T-_GmbzK1s.roa
File: uaop2m5RamLfR9cB0T-_GmbzK1s.roa (raw, json)
Hash identifier: HwFkQgqLmn8W7yf+cvwHlmPS7GsZeUkTutQRrygQHdI=
Subject key identifier: B9:AA:29:DA:6E:51:6A:62:DF:47:D7:01:D1:3F:BF:1A:66:F3:2B:5B
Certificate issuer: /CN=408af485b4fd0f03717cd4a709ef11c61d3ef46e
Certificate serial: 018572711AD91F751789C66EBE657D5AE3A8
Authority key identifier: 40:8A:F4:85:B4:FD:0F:03:71:7C:D4:A7:09:EF:11:C6:1D:3E:F4:6E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QIr0hbT9DwNxfNSnCe8Rxh0-9G4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/e1171c-5270-49cd-9379-b95b08a23ae1/1/uaop2m5RamLfR9cB0T-_GmbzK1s.roa
Signing time: Mon 02 Jan 2023 12:24:52 +0000
ROA not before: Mon 02 Jan 2023 12:24:52 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 59854
IP address blocks: 188.214.142.0/24 maxlen: 24
89.35.173.0/24 maxlen: 24
93.119.227.0/24 maxlen: 24
185.171.185.0/24 maxlen: 24
185.171.184.0/24 maxlen: 24
185.171.187.0/24 maxlen: 24
77.81.164.0/23 maxlen: 23
188.215.36.0/24 maxlen: 24
128.0.46.0/23 maxlen: 23
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:71:1a:d9:1f:75:17:89:c6:6e:be:65:7d:5a:e3:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=408af485b4fd0f03717cd4a709ef11c61d3ef46e
Validity
Not Before: Jan 2 12:24:52 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b9aa29da6e516a62df47d701d13fbf1a66f32b5b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:84:9b:1b:89:6e:bc:b2:6d:a2:af:35:04:3d:
ff:3d:bc:ea:d8:ef:b6:8a:e5:d7:49:dd:6d:27:49:
72:12:0f:9c:2c:b4:2f:c9:b6:c1:68:1f:d9:3b:bf:
b1:37:7f:5b:0d:d6:1a:10:9b:b2:7f:aa:da:c3:3d:
14:7d:65:44:ab:96:c4:f2:42:5e:f6:81:f6:20:84:
68:ef:53:d0:d5:14:90:91:68:de:1d:d3:b5:2f:48:
71:fc:75:44:fd:42:e4:c4:f4:aa:18:63:0a:f2:d1:
65:23:bd:29:30:d9:02:e3:8d:97:19:ed:a5:b0:0b:
94:d4:be:91:ae:f8:32:c7:e2:eb:aa:8a:9e:a0:0e:
2b:7c:02:8a:bf:ae:3b:b6:c7:16:4e:f5:58:bf:08:
4c:47:c1:6f:a7:28:c4:91:8f:ed:3d:db:54:8a:02:
bb:cd:77:cd:46:cc:e6:3c:f2:d2:38:40:8d:af:61:
6e:a6:79:39:35:cb:22:92:85:bd:2e:03:04:32:f4:
ea:a2:20:fd:1c:7b:f2:7e:d4:bc:e7:8a:fb:3f:3c:
19:66:fc:29:1b:63:0c:e6:d2:3f:d1:b2:bb:b6:be:
30:4d:3a:27:7b:3f:f3:33:49:72:48:0d:ae:36:20:
03:2d:99:3d:65:92:d1:eb:66:c3:84:1c:8f:48:28:
e8:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:AA:29:DA:6E:51:6A:62:DF:47:D7:01:D1:3F:BF:1A:66:F3:2B:5B
X509v3 Authority Key Identifier:
keyid:40:8A:F4:85:B4:FD:0F:03:71:7C:D4:A7:09:EF:11:C6:1D:3E:F4:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QIr0hbT9DwNxfNSnCe8Rxh0-9G4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/e1171c-5270-49cd-9379-b95b08a23ae1/1/uaop2m5RamLfR9cB0T-_GmbzK1s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/e1171c-5270-49cd-9379-b95b08a23ae1/1/QIr0hbT9DwNxfNSnCe8Rxh0-9G4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.81.164.0/23
89.35.173.0/24
93.119.227.0/24
128.0.46.0/23
185.171.184.0/23
185.171.187.0/24
188.214.142.0/24
188.215.36.0/24
Signature Algorithm: sha256WithRSAEncryption
2d:f4:d9:08:85:5b:3e:9d:29:7c:59:f9:e8:10:3c:cd:e8:7f:
27:fd:fb:5a:44:3f:bb:bc:35:88:54:0f:b2:02:7d:11:c2:6b:
89:a2:3a:7d:a3:76:4a:63:93:9a:dc:13:a2:b7:5c:cd:dd:c1:
9f:9c:db:66:e5:55:ca:92:0a:55:96:7a:a0:ce:c6:94:59:80:
09:31:e3:36:e1:a9:9b:44:64:13:f1:df:80:42:35:21:f7:57:
8a:34:db:37:46:89:f8:65:95:35:83:71:14:a9:41:4d:85:3f:
92:9c:7f:64:8b:32:b4:14:3e:d2:59:d4:6f:c7:1e:e4:78:ec:
dd:e0:7a:52:cc:a4:34:c3:44:29:1f:60:a1:58:67:41:d9:72:
05:30:0d:35:f2:17:3e:08:81:3a:75:cc:33:ba:9a:0f:94:d3:
4b:c4:1c:f2:58:3f:d6:df:90:22:f8:36:34:b1:52:09:ce:0c:
12:64:e7:46:a6:8d:b8:f0:77:bb:16:b8:2c:f1:1a:8a:3a:de:
eb:a5:c8:0d:c8:d6:9f:81:f7:d0:5f:a9:9f:2f:95:45:b4:66:
f1:68:34:99:cd:2d:2a:9b:06:28:4b:7f:da:3e:71:b6:bf:2f:
0a:f1:74:3a:1f:f4:53:a8:27:63:d7:75:7f:91:b5:ba:4f:58:
50:ba:cb:db
-----BEGIN CERTIFICATE-----
MIIFJzCCBA+gAwIBAgISAYVycRrZH3UXicZuvmV9WuOoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQwOGFmNDg1YjRmZDBmMDM3MTdjZDRhNzA5ZWYxMWM2MWQz
ZWY0NmUwHhcNMjMwMTAyMTIyNDUyWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiOWFhMjlkYTZlNTE2YTYyZGY0N2Q3MDFkMTNmYmYxYTY2ZjMyYjViMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhYSbG4luvLJtoq81BD3/Pbzq2O+2
iuXXSd1tJ0lyEg+cLLQvybbBaB/ZO7+xN39bDdYaEJuyf6rawz0UfWVEq5bE8kJe
9oH2IIRo71PQ1RSQkWjeHdO1L0hx/HVE/ULkxPSqGGMK8tFlI70pMNkC442XGe2l
sAuU1L6Rrvgyx+LrqoqeoA4rfAKKv647tscWTvVYvwhMR8FvpyjEkY/tPdtUigK7
zXfNRszmPPLSOECNr2Fupnk5NcsikoW9LgMEMvTqoiD9HHvyftS854r7PzwZZvwp
G2MM5tI/0bK7tr4wTTonez/zM0lySA2uNiADLZk9ZZLR62bDhByPSCjopwIDAQAB
o4ICMzCCAi8wHQYDVR0OBBYEFLmqKdpuUWpi30fXAdE/vxpm8ytbMB8GA1UdIwQY
MBaAFECK9IW0/Q8DcXzUpwnvEcYdPvRuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUUlyMGhiVDlEd054Zk5TbkNlOFJ4aDAtOUc0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi9lMTE3MWMtNTI3MC00OWNkLTkzNzkt
Yjk1YjA4YTIzYWUxLzEvdWFvcDJtNVJhbUxmUjljQjBULV9HbWJ6SzFzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNi9lMTE3MWMtNTI3MC00OWNkLTkzNzktYjk1YjA4YTIzYWUx
LzEvUUlyMGhiVDlEd054Zk5TbkNlOFJ4aDAtOUc0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEkGCCsGAQUFBwEHAQH/BDowODA2BAIAATAwAwQBTVGkAwQA
WSOtAwQAXXfjAwQBgAAuAwQBuau4AwQAuau7AwQAvNaOAwQAvNckMA0GCSqGSIb3
DQEBCwUAA4IBAQAt9NkIhVs+nSl8WfnoEDzN6H8n/ftaRD+7vDWIVA+yAn0RwmuJ
ojp9o3ZKY5Oa3BOit1zN3cGfnNtm5VXKkgpVlnqgzsaUWYAJMeM24ambRGQT8d+A
QjUh91eKNNs3Ron4ZZU1g3EUqUFNhT+SnH9kizK0FD7SWdRvxx7keOzd4HpSzKQ0
w0QpH2ChWGdB2XIFMA018hc+CIE6dcwzupoPlNNLxBzyWD/W35Ai+DY0sVIJzgwS
ZOdGpo248He7Frgs8RqKOt7rpcgNyNafgffQX6mfL5VFtGbxaDSZzS0qmwYoS3/a
PnG2vy8K8XQ6H/RTqCdj13V/kbW6T1hQusvb
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:46:36 2023 by rpki-client on console-fra.rpki-client.org