Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/70a8f1-d8eb-42b5-bddb-6265521f6df7/1/D-MIiGVFOL0lDiVjVuCMsRxujgM.roa
File: D-MIiGVFOL0lDiVjVuCMsRxujgM.roa (raw, json)
Hash identifier: Xlk0coiF0wTnWtUdA8Umy3UQTnlZ5Ztjxfw3xoF86oY=
Subject key identifier: 0F:E3:08:88:65:45:38:BD:25:0E:25:63:56:E0:8C:B1:1C:6E:8E:03
Certificate issuer: /CN=8db34774b01979284fd9e754fea68fa3c61783d0
Certificate serial: 018CC8DF6232ADBD715E3754FCA0D6BD0C74
Authority key identifier: 8D:B3:47:74:B0:19:79:28:4F:D9:E7:54:FE:A6:8F:A3:C6:17:83:D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jbNHdLAZeShP2edU_qaPo8YXg9A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/70a8f1-d8eb-42b5-bddb-6265521f6df7/1/D-MIiGVFOL0lDiVjVuCMsRxujgM.roa
Signing time: Tue 02 Jan 2024 06:32:11 +0000
ROA not before: Tue 02 Jan 2024 06:32:11 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 61347
IP address blocks: 213.226.116.0/24 maxlen: 24
84.54.15.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:df:62:32:ad:bd:71:5e:37:54:fc:a0:d6:bd:0c:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8db34774b01979284fd9e754fea68fa3c61783d0
Validity
Not Before: Jan 2 06:32:11 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0fe30888654538bd250e256356e08cb11c6e8e03
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:2d:0f:20:eb:be:aa:98:2c:a2:18:32:59:7c:
9c:d3:3a:d1:15:7a:94:79:32:ab:f6:a7:3b:27:73:
28:ed:a8:11:1f:15:72:38:1c:ff:31:c7:9b:c3:07:
a3:c5:12:36:bc:ed:00:70:07:5b:da:c9:db:47:de:
cd:f9:ed:36:eb:58:3d:59:fd:cb:64:d7:ac:77:b0:
c5:d5:ce:d2:28:ee:35:b3:42:6a:4f:2a:26:45:3d:
a2:7f:ca:f1:7c:b3:92:9c:b6:09:c3:b8:0b:a6:89:
2f:3f:7f:08:c3:83:10:1e:1b:2d:62:1a:24:34:05:
ac:3d:07:8d:99:4e:3e:d0:48:ec:48:ad:f8:f0:cd:
dc:5d:55:24:f6:22:74:1d:6f:a1:37:aa:35:25:e9:
30:e7:97:a9:d2:13:39:89:4c:97:12:bd:e5:68:47:
a2:b2:c8:ae:45:a1:cb:de:35:87:6c:bb:19:95:b4:
5d:00:22:e9:78:45:c1:d9:92:b7:27:33:22:64:83:
31:96:cf:66:58:e9:ca:44:96:fc:ba:c1:5e:cd:64:
fa:96:31:6e:8a:07:34:e8:2b:2a:ee:0c:55:79:57:
51:9b:8c:0f:0c:8a:c5:4d:3d:2f:c6:79:df:77:2b:
9a:67:bc:2c:60:00:f7:d7:df:82:c2:c9:d1:7a:f1:
a8:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:E3:08:88:65:45:38:BD:25:0E:25:63:56:E0:8C:B1:1C:6E:8E:03
X509v3 Authority Key Identifier:
keyid:8D:B3:47:74:B0:19:79:28:4F:D9:E7:54:FE:A6:8F:A3:C6:17:83:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jbNHdLAZeShP2edU_qaPo8YXg9A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/70a8f1-d8eb-42b5-bddb-6265521f6df7/1/D-MIiGVFOL0lDiVjVuCMsRxujgM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/70a8f1-d8eb-42b5-bddb-6265521f6df7/1/jbNHdLAZeShP2edU_qaPo8YXg9A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.54.15.0/24
213.226.116.0/24
Signature Algorithm: sha256WithRSAEncryption
ae:2b:8d:87:1f:38:66:e8:f1:e7:0c:4a:85:13:ef:ca:63:e4:
1a:5f:0b:80:c3:ce:4d:8b:7b:3f:bd:c8:64:76:48:13:76:e5:
95:ae:a0:52:89:2d:2c:1e:8e:bc:0f:c8:33:a4:5d:2c:20:37:
cf:bb:0f:71:94:2b:50:36:ef:f0:bf:68:f7:b9:f8:c1:8c:03:
9f:68:3b:14:ea:32:5d:b1:90:3e:45:3d:37:c4:27:3a:43:14:
39:0d:95:fb:f2:92:67:39:03:87:a3:7d:28:fa:44:2b:39:cf:
63:d5:44:e8:6a:76:ab:36:5c:eb:4e:21:03:1e:de:34:be:8b:
dd:fb:05:fe:5c:36:f1:b8:36:70:8e:0b:30:fc:76:ba:90:97:
bc:46:4a:da:5f:85:34:45:52:96:79:95:49:0e:c8:15:ea:31:
14:62:d2:80:e1:2b:44:80:20:a4:4d:8e:f1:f9:43:32:70:e4:
65:5f:6f:df:cc:fd:38:ed:81:ca:16:e9:ae:22:0b:a0:a3:0d:
e5:46:36:b6:b0:a3:91:04:b1:f7:4d:00:14:1f:67:d5:b2:0a:
29:1f:a6:77:64:a4:23:7d:a4:48:b1:1b:04:c9:aa:1e:39:b4:
27:04:f2:b6:ab:fc:90:41:cf:14:3f:50:51:d6:27:19:ff:e2:
09:53:d2:bf
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYzI32Iyrb1xXjdU/KDWvQx0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhkYjM0Nzc0YjAxOTc5Mjg0ZmQ5ZTc1NGZlYTY4ZmEzYzYx
NzgzZDAwHhcNMjQwMTAyMDYzMjExWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwZmUzMDg4ODY1NDUzOGJkMjUwZTI1NjM1NmUwOGNiMTFjNmU4ZTAzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmS0PIOu+qpgsohgyWXyc0zrRFXqU
eTKr9qc7J3Mo7agRHxVyOBz/McebwwejxRI2vO0AcAdb2snbR97N+e0261g9Wf3L
ZNesd7DF1c7SKO41s0JqTyomRT2if8rxfLOSnLYJw7gLpokvP38Iw4MQHhstYhok
NAWsPQeNmU4+0EjsSK348M3cXVUk9iJ0HW+hN6o1Jekw55ep0hM5iUyXEr3laEei
ssiuRaHL3jWHbLsZlbRdACLpeEXB2ZK3JzMiZIMxls9mWOnKRJb8usFezWT6ljFu
igc06Csq7gxVeVdRm4wPDIrFTT0vxnnfdyuaZ7wsYAD319+CwsnRevGo4wIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFA/jCIhlRTi9JQ4lY1bgjLEcbo4DMB8GA1UdIwQY
MBaAFI2zR3SwGXkoT9nnVP6mj6PGF4PQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvamJOSGRMQVplU2hQMmVkVV9xYVBvOFlYZzlBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNy83MGE4ZjEtZDhlYi00MmI1LWJkZGIt
NjI2NTUyMWY2ZGY3LzEvRC1NSWlHVkZPTDBsRGlWalZ1Q01zUnh1amdNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNy83MGE4ZjEtZDhlYi00MmI1LWJkZGItNjI2NTUyMWY2ZGY3
LzEvamJOSGRMQVplU2hQMmVkVV9xYVBvOFlYZzlBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAVDYPAwQA
1eJ0MA0GCSqGSIb3DQEBCwUAA4IBAQCuK42HHzhm6PHnDEqFE+/KY+QaXwuAw85N
i3s/vchkdkgTduWVrqBSiS0sHo68D8gzpF0sIDfPuw9xlCtQNu/wv2j3ufjBjAOf
aDsU6jJdsZA+RT03xCc6QxQ5DZX78pJnOQOHo30o+kQrOc9j1UToanarNlzrTiED
Ht40vovd+wX+XDbxuDZwjgsw/Ha6kJe8RkraX4U0RVKWeZVJDsgV6jEUYtKA4StE
gCCkTY7x+UMycORlX2/fzP047YHKFumuIgugow3lRja2sKORBLH3TQAUH2fVsgop
H6Z3ZKQjfaRIsRsEyaoeObQnBPK2q/yQQc8UP1BR1icZ/+IJU9K/
-----END CERTIFICATE-----
Generated at Thu Apr 17 22:34:56 2025 by rpki-client