Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/e4f3ef-7bfc-4055-b798-028a2b0a53d5/1/xlv2B_Op_NFuPaVj--qyjdrQ8Ms.roa
File: xlv2B_Op_NFuPaVj--qyjdrQ8Ms.roa (raw, json)
Hash identifier: tL4RIqlftL4StsLJzSLo4z32RKW2XviTkmUU16bW2nw=
Subject key identifier: C6:5B:F6:07:F3:A9:FC:D1:6E:3D:A5:63:FB:EA:B2:8D:DA:D0:F0:CB
Certificate issuer: /CN=b0a7252aa643d0dbc42da410e9c20f5703368cd8
Certificate serial: 0186B5E8D6878BEAF7BBDC53B9F48BCBEFE2
Authority key identifier: B0:A7:25:2A:A6:43:D0:DB:C4:2D:A4:10:E9:C2:0F:57:03:36:8C:D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sKclKqZD0NvELaQQ6cIPVwM2jNg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/e4f3ef-7bfc-4055-b798-028a2b0a53d5/1/xlv2B_Op_NFuPaVj--qyjdrQ8Ms.roa
Signing time: Mon 06 Mar 2023 07:53:00 +0000
ROA not before: Mon 06 Mar 2023 07:53:00 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 21067
IP address blocks: 185.110.148.0/22 maxlen: 24
151.216.128.0/17 maxlen: 24
2a06:5840::/29 maxlen: 32
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:b5:e8:d6:87:8b:ea:f7:bb:dc:53:b9:f4:8b:cb:ef:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b0a7252aa643d0dbc42da410e9c20f5703368cd8
Validity
Not Before: Mar 6 07:53:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c65bf607f3a9fcd16e3da563fbeab28ddad0f0cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:24:64:86:75:b5:b9:40:ca:74:a6:4e:49:7b:
a4:49:92:f5:3f:2c:fe:bf:74:26:2b:e9:01:b2:94:
e3:c7:6b:ed:35:53:55:7e:ea:ee:bf:3b:d2:29:af:
01:d8:0e:88:a2:28:78:f2:9a:b7:99:14:b1:05:70:
af:e5:44:bb:ec:6f:69:5c:ed:1b:c2:a2:88:fc:6c:
c1:d0:3e:47:0a:95:db:60:81:62:d4:66:f5:2f:49:
da:31:1d:71:2b:7e:52:5d:9a:10:76:74:4b:90:7f:
8f:59:3f:95:a0:c1:28:69:a2:2a:50:23:b8:19:a2:
7f:19:9f:51:a8:11:07:d6:91:57:24:b2:3d:03:59:
45:24:0f:b8:60:a4:03:ff:35:82:4c:cd:30:b6:25:
3d:81:91:16:07:5a:25:25:65:56:31:b1:97:c6:88:
99:2e:a4:87:15:41:70:df:58:46:05:c7:55:ac:a4:
0f:1f:67:1b:49:cc:26:8c:4c:8c:3b:39:09:e4:34:
01:fa:eb:3a:5f:27:8a:b2:39:a5:36:e5:24:dc:16:
26:30:d2:11:4c:a5:bc:0d:a5:31:34:5b:1c:85:04:
11:e0:1b:db:7c:d4:46:e5:36:bc:08:38:32:68:05:
fa:d8:71:44:ce:ca:0b:ee:48:1e:25:cc:a4:03:7b:
01:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:5B:F6:07:F3:A9:FC:D1:6E:3D:A5:63:FB:EA:B2:8D:DA:D0:F0:CB
X509v3 Authority Key Identifier:
keyid:B0:A7:25:2A:A6:43:D0:DB:C4:2D:A4:10:E9:C2:0F:57:03:36:8C:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sKclKqZD0NvELaQQ6cIPVwM2jNg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/e4f3ef-7bfc-4055-b798-028a2b0a53d5/1/xlv2B_Op_NFuPaVj--qyjdrQ8Ms.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/e4f3ef-7bfc-4055-b798-028a2b0a53d5/1/sKclKqZD0NvELaQQ6cIPVwM2jNg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.216.128.0/17
185.110.148.0/22
IPv6:
2a06:5840::/29
Signature Algorithm: sha256WithRSAEncryption
85:05:86:f6:76:93:a6:dd:04:72:36:3a:6f:66:43:79:17:c7:
55:7c:e3:d0:7e:2e:88:36:ae:b2:af:4f:9b:55:c5:c7:ae:70:
20:08:ae:fb:8e:e1:60:39:6a:20:49:a4:78:57:e2:1b:62:e7:
2c:ca:5e:43:19:e4:c4:e9:7f:9f:5e:70:76:96:f9:8b:8d:dd:
cf:92:70:2c:ad:c1:6f:ed:0c:d5:32:e3:76:38:69:65:ce:f2:
07:32:5b:9d:b6:6a:db:c7:55:f8:2e:aa:c4:3d:8f:72:fa:9c:
f5:f6:af:a4:6a:16:e6:0f:a1:9c:84:88:05:4e:7a:57:2d:1f:
3a:b4:9d:05:06:e6:23:b1:2e:0a:5d:6c:73:a3:f3:45:02:02:
c3:96:11:5a:8f:22:e2:8a:f2:55:92:38:f0:62:1f:a8:07:7f:
07:e7:77:b4:9f:48:b5:62:43:72:ec:31:a0:9a:2f:a8:b2:1d:
48:6e:61:c1:78:48:96:27:b3:3f:d6:f5:c7:ae:24:9e:47:dd:
c1:45:40:49:c1:50:47:a1:3d:8b:66:c1:e8:1a:33:9b:3a:2c:
be:d8:8a:44:33:31:26:76:aa:56:78:eb:78:f1:7a:cd:90:e5:
0c:e7:7f:8b:61:ef:53:35:7d:26:87:5b:02:f1:ab:8b:29:57:
b6:29:59:d8
-----BEGIN CERTIFICATE-----
MIIFEjCCA/qgAwIBAgISAYa16NaHi+r3u9xTufSLy+/iMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIwYTcyNTJhYTY0M2QwZGJjNDJkYTQxMGU5YzIwZjU3MDMz
NjhjZDgwHhcNMjMwMzA2MDc1MzAwWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjNjViZjYwN2YzYTlmY2QxNmUzZGE1NjNmYmVhYjI4ZGRhZDBmMGNiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqyRkhnW1uUDKdKZOSXukSZL1Pyz+
v3QmK+kBspTjx2vtNVNVfuruvzvSKa8B2A6Ioih48pq3mRSxBXCv5US77G9pXO0b
wqKI/GzB0D5HCpXbYIFi1Gb1L0naMR1xK35SXZoQdnRLkH+PWT+VoMEoaaIqUCO4
GaJ/GZ9RqBEH1pFXJLI9A1lFJA+4YKQD/zWCTM0wtiU9gZEWB1olJWVWMbGXxoiZ
LqSHFUFw31hGBcdVrKQPH2cbScwmjEyMOzkJ5DQB+us6XyeKsjmlNuUk3BYmMNIR
TKW8DaUxNFschQQR4BvbfNRG5Ta8CDgyaAX62HFEzsoL7kgeJcykA3sBWwIDAQAB
o4ICHjCCAhowHQYDVR0OBBYEFMZb9gfzqfzRbj2lY/vqso3a0PDLMB8GA1UdIwQY
MBaAFLCnJSqmQ9DbxC2kEOnCD1cDNozYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc0tjbEtxWkQwTnZFTGFRUTZjSVBWd00yak5nLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi9lNGYzZWYtN2JmYy00MDU1LWI3OTgt
MDI4YTJiMGE1M2Q1LzEveGx2MkJfT3BfTkZ1UGFWai0tcXlqZHJROE1zLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNi9lNGYzZWYtN2JmYy00MDU1LWI3OTgtMDI4YTJiMGE1M2Q1
LzEvc0tjbEtxWkQwTnZFTGFRUTZjSVBWd00yak5nLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQHl9iAAwQC
uW6UMA0EAgACMAcDBQMqBlhAMA0GCSqGSIb3DQEBCwUAA4IBAQCFBYb2dpOm3QRy
NjpvZkN5F8dVfOPQfi6INq6yr0+bVcXHrnAgCK77juFgOWogSaR4V+IbYucsyl5D
GeTE6X+fXnB2lvmLjd3PknAsrcFv7QzVMuN2OGllzvIHMludtmrbx1X4LqrEPY9y
+pz19q+kahbmD6GchIgFTnpXLR86tJ0FBuYjsS4KXWxzo/NFAgLDlhFajyLiivJV
kjjwYh+oB38H53e0n0i1YkNy7DGgmi+osh1IbmHBeEiWJ7M/1vXHriSeR93BRUBJ
wVBHoT2LZsHoGjObOiy+2IpEMzEmdqpWeOt48XrNkOUM53+LYe9TNX0mh1sC8auL
KVe2KVnY
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:50:20 2023 by rpki-client on console-ams.rpki-client.org