Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/8ea9b9-3b6e-4fdf-b5d1-f04fdcc09e51/1/DuY851UK2hbc6BSwpDs_B7MDcaU.roa
File: DuY851UK2hbc6BSwpDs_B7MDcaU.roa (raw, json)
Hash identifier: Y2h/3BNmQzq6sxGP6Bc+limQdyQvg+bCTtXU0B2tTaY=
Subject key identifier: 0E:E6:3C:E7:55:0A:DA:16:DC:E8:14:B0:A4:3B:3F:07:B3:03:71:A5
Certificate issuer: /CN=992b86095ce558d2e9618728a44228a27be9098f
Certificate serial: 0186115A3EC8EF327D3083686E2BAFCF3BB4
Authority key identifier: 99:2B:86:09:5C:E5:58:D2:E9:61:87:28:A4:42:28:A2:7B:E9:09:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mSuGCVzlWNLpYYcopEIoonvpCY8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/8ea9b9-3b6e-4fdf-b5d1-f04fdcc09e51/1/DuY851UK2hbc6BSwpDs_B7MDcaU.roa
Signing time: Thu 02 Feb 2023 08:59:32 +0000
ROA not before: Thu 02 Feb 2023 08:59:32 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 166.108.216.0/23 maxlen: 23
166.108.226.0/23 maxlen: 23
166.108.220.0/23 maxlen: 23
166.108.222.0/23 maxlen: 23
166.108.230.0/23 maxlen: 23
166.108.232.0/23 maxlen: 23
166.108.228.0/23 maxlen: 23
166.108.244.0/24 maxlen: 24
166.108.245.0/24 maxlen: 24
166.108.246.0/24 maxlen: 24
166.108.242.0/23 maxlen: 23
166.108.251.0/24 maxlen: 24
166.108.252.0/24 maxlen: 24
166.108.253.0/24 maxlen: 24
166.108.247.0/24 maxlen: 24
166.108.249.0/24 maxlen: 24
166.108.250.0/24 maxlen: 24
166.108.254.0/24 maxlen: 24
166.108.160.0/22 maxlen: 22
166.108.168.0/22 maxlen: 22
166.108.172.0/22 maxlen: 22
166.108.184.0/22 maxlen: 22
166.108.188.0/22 maxlen: 22
166.108.204.0/22 maxlen: 22
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:11:5a:3e:c8:ef:32:7d:30:83:68:6e:2b:af:cf:3b:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=992b86095ce558d2e9618728a44228a27be9098f
Validity
Not Before: Feb 2 08:59:32 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0ee63ce7550ada16dce814b0a43b3f07b30371a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:0f:fa:83:0c:d7:c7:33:86:a0:4e:3d:d7:38:
3e:46:1c:4d:6b:af:75:91:96:00:ce:21:84:8b:98:
19:17:04:0e:26:ad:48:eb:2f:e9:1d:f9:f4:8a:5a:
b0:e3:99:6b:74:6d:ae:30:1a:92:30:91:66:77:84:
38:0a:1e:73:77:88:62:d8:83:7f:75:7f:35:36:19:
14:da:3e:cb:46:1d:18:39:e2:66:95:73:0d:4b:e8:
21:d1:74:f8:f2:9d:30:d7:49:36:9f:f3:a4:6a:2b:
a8:81:b2:8f:db:0e:bd:29:e9:fb:32:6f:60:96:3a:
0d:aa:b6:be:97:4b:52:4f:a0:16:44:bc:04:4f:02:
b3:03:20:d9:e1:53:ff:5c:0b:26:78:5c:fd:ad:12:
3f:79:ed:d7:d4:fd:c9:c4:97:d9:c7:b7:2e:00:69:
94:79:13:ff:ee:a0:40:d0:ed:7c:5d:86:df:b6:61:
13:b5:b1:53:d6:98:ed:89:68:8b:73:be:17:f0:94:
29:de:3a:7b:e6:63:3c:29:f5:44:70:3a:5d:4e:27:
f7:ac:89:5c:91:8c:c6:e7:1d:63:7e:7e:2b:66:6f:
ea:45:80:ea:c8:b4:01:2c:25:fa:15:d5:09:96:e9:
7c:2a:54:09:75:86:7e:77:ba:7e:da:27:70:62:33:
61:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:E6:3C:E7:55:0A:DA:16:DC:E8:14:B0:A4:3B:3F:07:B3:03:71:A5
X509v3 Authority Key Identifier:
keyid:99:2B:86:09:5C:E5:58:D2:E9:61:87:28:A4:42:28:A2:7B:E9:09:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mSuGCVzlWNLpYYcopEIoonvpCY8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/8ea9b9-3b6e-4fdf-b5d1-f04fdcc09e51/1/DuY851UK2hbc6BSwpDs_B7MDcaU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/8ea9b9-3b6e-4fdf-b5d1-f04fdcc09e51/1/mSuGCVzlWNLpYYcopEIoonvpCY8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
166.108.160.0/22
166.108.168.0/21
166.108.184.0/21
166.108.204.0/22
166.108.216.0/23
166.108.220.0/22
166.108.226.0-166.108.233.255
166.108.242.0-166.108.247.255
166.108.249.0-166.108.254.255
Signature Algorithm: sha256WithRSAEncryption
b6:96:23:25:d7:91:e1:95:9b:17:41:fa:39:b0:b8:6d:11:99:
e8:cd:f1:fc:b2:cb:fc:1c:2f:05:de:2b:f3:c4:88:b3:69:d2:
cc:69:03:63:6f:10:bd:b4:bb:cd:94:3c:fd:25:25:29:5a:36:
93:87:ef:9a:87:69:ab:47:3b:5b:d1:0c:9e:d4:7d:db:63:96:
fc:28:45:5a:6f:29:42:b2:10:4e:b6:b0:c4:d4:88:47:dc:77:
d7:c9:e9:29:ef:1d:06:25:65:0e:cb:7a:da:6a:ff:23:1d:85:
7c:ea:c8:cf:d7:35:5b:5c:1a:92:31:f0:82:7f:02:fa:6d:6f:
de:4d:be:94:f0:9e:42:db:ee:dd:a1:80:ef:70:93:fe:17:99:
49:8c:8e:50:f4:69:c0:28:07:42:5b:35:e6:23:55:4e:af:62:
d9:56:c8:80:d5:f2:cb:63:c4:a2:81:b5:c8:9e:9c:e6:c3:b4:
4f:2c:a2:14:65:47:56:84:6e:8d:16:63:e3:be:d0:ab:ea:e6:
cf:40:41:22:d7:aa:80:49:8e:a8:a9:8d:79:26:44:49:97:6e:
25:a9:a8:86:43:c4:2b:50:87:8f:17:9d:c0:ab:09:c0:59:07:
d5:e5:03:6a:77:68:06:12:bd:2d:43:ba:bf:31:bc:20:77:a1:
9d:f6:7e:8d
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgISAYYRWj7I7zJ9MINobiuvzzu0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk5MmI4NjA5NWNlNTU4ZDJlOTYxODcyOGE0NDIyOGEyN2Jl
OTA5OGYwHhcNMjMwMjAyMDg1OTMyWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwZWU2M2NlNzU1MGFkYTE2ZGNlODE0YjBhNDNiM2YwN2IzMDM3MWE1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzQ/6gwzXxzOGoE491zg+RhxNa691
kZYAziGEi5gZFwQOJq1I6y/pHfn0ilqw45lrdG2uMBqSMJFmd4Q4Ch5zd4hi2IN/
dX81NhkU2j7LRh0YOeJmlXMNS+gh0XT48p0w10k2n/OkaiuogbKP2w69Ken7Mm9g
ljoNqra+l0tST6AWRLwETwKzAyDZ4VP/XAsmeFz9rRI/ee3X1P3JxJfZx7cuAGmU
eRP/7qBA0O18XYbftmETtbFT1pjtiWiLc74X8JQp3jp75mM8KfVEcDpdTif3rIlc
kYzG5x1jfn4rZm/qRYDqyLQBLCX6FdUJlul8KlQJdYZ+d7p+2idwYjNhZwIDAQAB
o4ICUTCCAk0wHQYDVR0OBBYEFA7mPOdVCtoW3OgUsKQ7PwezA3GlMB8GA1UdIwQY
MBaAFJkrhglc5VjS6WGHKKRCKKJ76QmPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbVN1R0NWemxXTkxwWVljb3BFSW9vbnZwQ1k4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOS84ZWE5YjktM2I2ZS00ZmRmLWI1ZDEt
ZjA0ZmRjYzA5ZTUxLzEvRHVZODUxVUsyaGJjNkJTd3BEc19CN01EY2FVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zOS84ZWE5YjktM2I2ZS00ZmRmLWI1ZDEtZjA0ZmRjYzA5ZTUx
LzEvbVN1R0NWemxXTkxwWVljb3BFSW9vbnZwQ1k4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMGcGCCsGAQUFBwEHAQH/BFgwVjBUBAIAATBOAwQCpmygAwQD
pmyoAwQDpmy4AwQCpmzMAwQBpmzYAwQCpmzcMAwDBAGmbOIDBAGmbOgwDAMEAaZs
8gMEA6Zs8DAMAwQApmz5AwQApmz+MA0GCSqGSIb3DQEBCwUAA4IBAQC2liMl15Hh
lZsXQfo5sLhtEZnozfH8ssv8HC8F3ivzxIizadLMaQNjbxC9tLvNlDz9JSUpWjaT
h++ah2mrRztb0Qye1H3bY5b8KEVabylCshBOtrDE1IhH3HfXyekp7x0GJWUOy3ra
av8jHYV86sjP1zVbXBqSMfCCfwL6bW/eTb6U8J5C2+7doYDvcJP+F5lJjI5Q9GnA
KAdCWzXmI1VOr2LZVsiA1fLLY8SigbXInpzmw7RPLKIUZUdWhG6NFmPjvtCr6ubP
QEEi16qASY6oqY15JkRJl24lqaiGQ8QrUIePF53AqwnAWQfV5QNqd2gGEr0tQ7q/
Mbwgd6Gd9n6N
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:46:43 2023 by rpki-client on console-fra.rpki-client.org