Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/a68f21-9ff8-4a44-a36d-d1cde2465f89/1/7oWNkn0AEUwZmkKcLbp7bwPzbSU.roa
File: 7oWNkn0AEUwZmkKcLbp7bwPzbSU.roa (raw, json)
Hash identifier: sXakfm16NymM5l1ggstTYQuMva0qsexS7HLbAqNP09g=
Subject key identifier: EE:85:8D:92:7D:00:11:4C:19:9A:42:9C:2D:BA:7B:6F:03:F3:6D:25
Certificate issuer: /CN=ca9ccd830b7e03308bf5cf25e67a7fc2bde0957c
Certificate serial: 018D13D7EB2B9CFE6199A480BCC9439B8216
Authority key identifier: CA:9C:CD:83:0B:7E:03:30:8B:F5:CF:25:E6:7A:7F:C2:BD:E0:95:7C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ypzNgwt-AzCL9c8l5np_wr3glXw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/a68f21-9ff8-4a44-a36d-d1cde2465f89/1/7oWNkn0AEUwZmkKcLbp7bwPzbSU.roa
Signing time: Tue 16 Jan 2024 19:55:34 +0000
ROA not before: Tue 16 Jan 2024 19:55:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 12722
IP address blocks: 37.221.80.0/24 maxlen: 24
45.11.22.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:13:d7:eb:2b:9c:fe:61:99:a4:80:bc:c9:43:9b:82:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca9ccd830b7e03308bf5cf25e67a7fc2bde0957c
Validity
Not Before: Jan 16 19:55:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ee858d927d00114c199a429c2dba7b6f03f36d25
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:ba:92:23:e6:46:67:e4:b8:28:85:a5:41:90:
9a:e9:27:d7:01:f5:ad:e1:2f:18:74:54:32:f0:b9:
5f:85:ff:31:05:9f:10:1c:45:db:27:d5:81:24:93:
34:0e:4b:62:87:98:c2:5f:cc:1f:ad:3a:e0:44:db:
e4:42:af:2f:32:04:d1:65:58:e0:42:8c:e8:91:d5:
32:03:79:74:44:d5:b3:bf:f1:a3:91:e9:19:f1:9c:
9f:56:70:4d:93:aa:e9:e7:4f:ea:d2:a1:79:b3:6c:
fb:50:c4:14:d1:51:2d:af:8d:5e:fa:fe:fb:61:0a:
de:98:58:80:f3:da:a4:50:8c:d0:f4:38:be:4c:ee:
f0:f7:ba:75:08:78:01:f4:38:67:24:35:38:76:96:
8c:32:b8:c9:ec:87:52:01:22:9e:3d:6a:e3:1a:32:
7d:83:8b:2f:a0:ec:7a:0f:81:43:02:68:67:6e:43:
6b:78:f7:18:35:36:3e:ae:3c:bb:00:91:34:a8:87:
50:cb:9d:46:0f:b2:fb:bd:4a:c3:a7:29:99:c3:bc:
fa:44:cb:4e:ad:cc:8a:7c:e2:c2:c9:4e:df:83:ef:
d4:98:e4:95:d8:e2:68:60:32:56:9e:4f:19:7a:aa:
13:3f:bb:90:ac:fc:a2:7a:b1:f5:32:c3:74:3b:aa:
10:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:85:8D:92:7D:00:11:4C:19:9A:42:9C:2D:BA:7B:6F:03:F3:6D:25
X509v3 Authority Key Identifier:
keyid:CA:9C:CD:83:0B:7E:03:30:8B:F5:CF:25:E6:7A:7F:C2:BD:E0:95:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ypzNgwt-AzCL9c8l5np_wr3glXw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/a68f21-9ff8-4a44-a36d-d1cde2465f89/1/7oWNkn0AEUwZmkKcLbp7bwPzbSU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/a68f21-9ff8-4a44-a36d-d1cde2465f89/1/ypzNgwt-AzCL9c8l5np_wr3glXw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.221.80.0/24
45.11.22.0/24
Signature Algorithm: sha256WithRSAEncryption
00:67:ef:a0:be:a1:9f:c5:ae:00:12:be:b1:bc:ea:64:fd:74:
64:61:97:35:df:c5:07:65:0b:04:0c:84:4c:8d:f9:bf:82:b5:
1e:18:5b:06:d6:71:fa:8f:65:11:f4:c7:95:67:91:46:e4:c7:
43:ae:e6:56:a8:2f:50:41:9a:c6:d8:09:4a:b3:18:a2:98:b9:
77:b6:19:44:22:67:84:55:5e:69:69:5a:34:2c:30:d0:99:c0:
75:e5:78:1f:b9:70:a1:65:b6:ef:26:98:28:49:8b:92:ab:29:
d5:6d:81:ed:30:ed:56:d1:f9:63:90:af:0e:81:79:8a:fd:9e:
9e:ae:81:b8:8d:91:b3:22:5c:68:b5:d7:63:da:39:a7:67:c8:
a6:cd:e7:76:0e:9a:66:4c:89:00:dd:fd:70:90:7b:10:27:8e:
ee:fa:18:3f:92:1f:fe:95:63:08:55:f4:be:01:52:2a:1e:66:
9a:67:85:b4:b7:ef:a7:22:25:33:32:da:cc:3d:69:d6:61:b9:
ac:d0:9d:d7:c0:3c:be:86:f5:32:c6:03:a3:b7:0f:8b:40:f8:
bb:78:cc:c6:61:87:d5:a2:75:f4:1e:6c:f3:1a:c5:41:42:98:
4a:cd:5a:b6:f1:9e:c8:74:b1:b3:e4:58:b4:2a:c4:3d:53:48:
e4:b9:c5:42
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAY0T1+srnP5hmaSAvMlDm4IWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNhOWNjZDgzMGI3ZTAzMzA4YmY1Y2YyNWU2N2E3ZmMyYmRl
MDk1N2MwHhcNMjQwMTE2MTk1NTM0WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlZTg1OGQ5MjdkMDAxMTRjMTk5YTQyOWMyZGJhN2I2ZjAzZjM2ZDI1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9bqSI+ZGZ+S4KIWlQZCa6SfXAfWt
4S8YdFQy8Llfhf8xBZ8QHEXbJ9WBJJM0Dktih5jCX8wfrTrgRNvkQq8vMgTRZVjg
QozokdUyA3l0RNWzv/GjkekZ8ZyfVnBNk6rp50/q0qF5s2z7UMQU0VEtr41e+v77
YQremFiA89qkUIzQ9Di+TO7w97p1CHgB9DhnJDU4dpaMMrjJ7IdSASKePWrjGjJ9
g4svoOx6D4FDAmhnbkNrePcYNTY+rjy7AJE0qIdQy51GD7L7vUrDpymZw7z6RMtO
rcyKfOLCyU7fg+/UmOSV2OJoYDJWnk8ZeqoTP7uQrPyierH1MsN0O6oQhQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFO6FjZJ9ABFMGZpCnC26e28D820lMB8GA1UdIwQY
MBaAFMqczYMLfgMwi/XPJeZ6f8K94JV8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveXB6Tmd3dC1BekNMOWM4bDVucF93cjNnbFh3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80My9hNjhmMjEtOWZmOC00YTQ0LWEzNmQt
ZDFjZGUyNDY1Zjg5LzEvN29XTmtuMEFFVXdabWtLY0xicDdid1B6YlNVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80My9hNjhmMjEtOWZmOC00YTQ0LWEzNmQtZDFjZGUyNDY1Zjg5
LzEveXB6Tmd3dC1BekNMOWM4bDVucF93cjNnbFh3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAJd1QAwQA
LQsWMA0GCSqGSIb3DQEBCwUAA4IBAQAAZ++gvqGfxa4AEr6xvOpk/XRkYZc138UH
ZQsEDIRMjfm/grUeGFsG1nH6j2UR9MeVZ5FG5MdDruZWqC9QQZrG2AlKsxiimLl3
thlEImeEVV5paVo0LDDQmcB15XgfuXChZbbvJpgoSYuSqynVbYHtMO1W0fljkK8O
gXmK/Z6eroG4jZGzIlxotddj2jmnZ8imzed2DppmTIkA3f1wkHsQJ47u+hg/kh/+
lWMIVfS+AVIqHmaaZ4W0t++nIiUzMtrMPWnWYbms0J3XwDy+hvUyxgOjtw+LQPi7
eMzGYYfVonX0HmzzGsVBQphKzVq28Z7IdLGz5Fi0KsQ9U0jkucVC
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:05:37 2024 by rpki-client on console-ams.rpki-client.org