Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/7b1205-3450-4e90-8b14-17e66c1fd3d1/1/Lc_4xjWRneuIBKHVQ8JM0N5fWbs.roa
File: Lc_4xjWRneuIBKHVQ8JM0N5fWbs.roa (raw, json)
Hash identifier: 8sRCXs+gvtqc1bPTfmRzFTODorhk+MuPM6f1g35nAMg=
Subject key identifier: 2D:CF:F8:C6:35:91:9D:EB:88:04:A1:D5:43:C2:4C:D0:DE:5F:59:BB
Certificate issuer: /CN=260b2bc45477c81d774daa0c28ab44b774ba0920
Certificate serial: 0A0465
Authority key identifier: 26:0B:2B:C4:54:77:C8:1D:77:4D:AA:0C:28:AB:44:B7:74:BA:09:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JgsrxFR3yB13TaoMKKtEt3S6CSA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/7b1205-3450-4e90-8b14-17e66c1fd3d1/1/Lc_4xjWRneuIBKHVQ8JM0N5fWbs.roa
Signing time: Sat 02 Apr 2022 19:32:23 +0000
ROA not before: Sat 02 Apr 2022 19:32:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 51167
IP address blocks: 45.82.82.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 656485 (0xa0465)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=260b2bc45477c81d774daa0c28ab44b774ba0920
Validity
Not Before: Apr 2 19:32:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=2dcff8c635919deb8804a1d543c24cd0de5f59bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:af:9f:9d:b3:d3:8d:99:53:d6:4c:80:d5:a7:
61:50:9f:70:10:21:ea:22:21:81:c9:7e:5f:a8:4c:
47:87:44:7c:49:fb:5c:01:f7:08:6a:a8:e3:06:87:
1b:38:f4:cb:51:6d:c4:12:0e:e0:51:bd:a9:ba:6f:
82:9a:fe:c2:74:06:d1:61:4e:08:5a:47:45:fd:f2:
9f:f1:3c:9a:2d:d2:94:2a:72:d2:4f:0d:54:c2:c4:
bd:87:62:40:74:15:83:28:40:17:23:ad:d6:8e:e7:
73:02:5d:8f:dd:d9:67:be:3f:d7:2d:04:39:f7:19:
48:65:8a:14:03:0c:a2:bf:5a:c4:05:3f:b0:e7:d0:
7c:05:8d:d7:52:f9:0f:c6:b4:bd:bb:ef:77:e0:9f:
5c:20:b9:b0:fe:c1:b4:ce:bd:5d:a6:c0:0c:17:15:
03:a6:83:69:02:be:f5:87:14:23:a0:f7:0c:e1:14:
42:9d:1e:60:15:23:5c:10:27:fd:63:d9:04:88:67:
e9:d8:e0:9e:18:7e:af:b8:c1:ca:0e:c2:4c:28:e1:
b1:13:e9:ed:37:23:92:0b:8d:e9:ae:07:f1:72:63:
95:5b:68:cb:a3:6e:cf:b1:40:13:aa:54:40:1c:a8:
4c:53:0c:a3:a9:a0:6b:3b:61:58:41:d1:ec:3b:a2:
af:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:CF:F8:C6:35:91:9D:EB:88:04:A1:D5:43:C2:4C:D0:DE:5F:59:BB
X509v3 Authority Key Identifier:
keyid:26:0B:2B:C4:54:77:C8:1D:77:4D:AA:0C:28:AB:44:B7:74:BA:09:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JgsrxFR3yB13TaoMKKtEt3S6CSA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/7b1205-3450-4e90-8b14-17e66c1fd3d1/1/Lc_4xjWRneuIBKHVQ8JM0N5fWbs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/7b1205-3450-4e90-8b14-17e66c1fd3d1/1/JgsrxFR3yB13TaoMKKtEt3S6CSA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.82.82.0/24
Signature Algorithm: sha256WithRSAEncryption
c7:39:dc:07:3f:ad:48:e2:8e:62:07:64:d9:c0:ee:66:0c:c9:
7a:7e:d3:31:bc:d6:94:1d:d8:81:a5:e3:11:07:65:ba:68:94:
c7:5d:5a:35:6d:40:16:83:75:60:56:d7:27:81:4f:c3:ee:82:
49:92:7a:d4:c9:51:a2:7d:a5:17:92:02:7f:29:f5:45:ee:99:
85:27:fc:dc:d1:f0:2b:fe:4b:e2:68:b8:3a:73:a2:4c:23:dd:
2f:4d:02:45:2b:46:9c:29:cb:54:b5:2e:2c:c9:cc:43:84:f1:
ec:cf:21:cb:1f:3a:ef:2c:71:8a:6d:e8:32:d0:f2:6f:c3:b5:
2b:8a:2a:08:0b:88:d9:4d:f3:3b:32:a7:01:0a:17:eb:d3:6f:
c0:4d:74:bf:12:11:20:85:66:00:40:1f:55:04:ff:a1:55:69:
15:ae:08:08:bb:15:98:8f:57:05:c7:7e:b3:1c:9e:e9:16:3c:
c4:0d:8d:c2:bb:cc:82:8b:5c:04:ba:82:a2:89:f0:eb:77:7c:
d8:f1:73:4b:53:99:42:33:6f:8a:3e:d0:4e:01:c7:c7:04:98:
be:59:85:f8:ff:bf:b5:d0:45:4b:36:7e:37:08:f1:4b:67:36:
6c:dc:3a:a7:27:b3:81:ae:1d:e7:9c:02:e4:d8:7b:15:24:48:
10:82:65:cd
-----BEGIN CERTIFICATE-----
MIIE7jCCA9agAwIBAgIDCgRlMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDI2
MGIyYmM0NTQ3N2M4MWQ3NzRkYWEwYzI4YWI0NGI3NzRiYTA5MjAwHhcNMjIwNDAy
MTkzMjIzWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQDEygyZGNmZjhjNjM1OTE5
ZGViODgwNGExZDU0M2MyNGNkMGRlNWY1OWJiMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEA46+fnbPTjZlT1kyA1adhUJ9wECHqIiGByX5fqExHh0R8Sftc
AfcIaqjjBocbOPTLUW3EEg7gUb2pum+Cmv7CdAbRYU4IWkdF/fKf8TyaLdKUKnLS
Tw1UwsS9h2JAdBWDKEAXI63WjudzAl2P3dlnvj/XLQQ59xlIZYoUAwyiv1rEBT+w
59B8BY3XUvkPxrS9u+934J9cILmw/sG0zr1dpsAMFxUDpoNpAr71hxQjoPcM4RRC
nR5gFSNcECf9Y9kEiGfp2OCeGH6vuMHKDsJMKOGxE+ntNyOSC43prgfxcmOVW2jL
o27PsUATqlRAHKhMUwyjqaBrO2FYQdHsO6KvOwIDAQABo4ICCTCCAgUwHQYDVR0O
BBYEFC3P+MY1kZ3riASh1UPCTNDeX1m7MB8GA1UdIwQYMBaAFCYLK8RUd8gdd02q
DCirRLd0ugkgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEFBQcBAQRYMFYwVAYIKwYB
BQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQv
SmdzcnhGUjN5QjEzVGFvTUtLdEV0M1M2Q1NBLmNlcjCBjQYIKwYBBQUHAQsEgYAw
fjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkv
REVGQVVMVC8zYS83YjEyMDUtMzQ1MC00ZTkwLThiMTQtMTdlNjZjMWZkM2QxLzEv
TGNfNHhqV1JuZXVJQktIVlE4Sk0wTjVmV2JzLnJvYTCBgQYDVR0fBHoweDB2oHSg
coZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYS83
YjEyMDUtMzQ1MC00ZTkwLThiMTQtMTdlNjZjMWZkM2QxLzEvSmdzcnhGUjN5QjEz
VGFvTUtLdEV0M1M2Q1NBLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8G
CCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALVJSMA0GCSqGSIb3DQEBCwUAA4IB
AQDHOdwHP61I4o5iB2TZwO5mDMl6ftMxvNaUHdiBpeMRB2W6aJTHXVo1bUAWg3Vg
VtcngU/D7oJJknrUyVGifaUXkgJ/KfVF7pmFJ/zc0fAr/kviaLg6c6JMI90vTQJF
K0acKctUtS4sycxDhPHszyHLHzrvLHGKbegy0PJvw7UriioIC4jZTfM7MqcBChfr
02/ATXS/EhEghWYAQB9VBP+hVWkVrggIuxWYj1cFx36zHJ7pFjzEDY3Cu8yCi1wE
uoKiifDrd3zY8XNLU5lCM2+KPtBOAcfHBJi+WYX4/7+10EVLNn43CPFLZzZs3Dqn
J7OBrh3nnALk2HsVJEgQgmXN
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:26:02 2024 by rpki-client on console-fra.rpki-client.org