Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/62764b-9aa6-4f12-a71c-6bac34987019/1/1tWcEhtxYZSyzxAe0O8YBFb8MHM.roa
File: 1tWcEhtxYZSyzxAe0O8YBFb8MHM.roa (raw, json)
Hash identifier: WO5Sz+22esuqET5p9+wLif81z4ZfOC2lE2DyCqxG7qA=
Subject key identifier: D6:D5:9C:12:1B:71:61:94:B2:CF:10:1E:D0:EF:18:04:56:FC:30:73
Certificate issuer: /CN=35c96065093998ba42cfba11bf0d17d3ac403d40
Certificate serial: 018A0F9C211095FC3ED4AD121E083B8EFE96
Authority key identifier: 35:C9:60:65:09:39:98:BA:42:CF:BA:11:BF:0D:17:D3:AC:40:3D:40
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NclgZQk5mLpCz7oRvw0X06xAPUA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/62764b-9aa6-4f12-a71c-6bac34987019/1/1tWcEhtxYZSyzxAe0O8YBFb8MHM.roa
Signing time: Sat 19 Aug 2023 21:03:24 +0000
ROA not before: Sat 19 Aug 2023 21:03:24 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 7018
IP address blocks: 95.178.8.0/21 maxlen: 24
116.50.16.0/21 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:0f:9c:21:10:95:fc:3e:d4:ad:12:1e:08:3b:8e:fe:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35c96065093998ba42cfba11bf0d17d3ac403d40
Validity
Not Before: Aug 19 21:03:24 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d6d59c121b716194b2cf101ed0ef180456fc3073
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:9e:15:81:fa:5b:76:f9:c1:26:c4:0b:31:f6:
82:c7:40:c4:40:6c:70:3d:97:17:69:fa:b2:44:11:
9a:29:a1:ac:89:46:d5:26:f1:3e:26:9c:66:2b:4d:
a2:e7:f2:f9:29:da:d7:91:db:f4:78:a5:2d:7e:9b:
76:72:82:dc:77:85:84:8e:0f:c0:63:80:b3:2e:ce:
c6:49:8b:e1:64:2d:f0:1a:77:f0:87:2b:b2:e2:f3:
27:34:ed:f4:a1:f4:b8:ee:9f:5f:5f:d0:03:b5:07:
17:db:f3:f7:ea:56:08:9b:4a:82:a0:ee:36:00:96:
02:27:0a:69:b3:39:3d:fc:5e:6c:c5:1d:70:be:a3:
e1:6d:36:c9:9d:fc:38:0f:e2:a7:e3:b8:2e:22:4a:
7b:f0:51:bb:10:25:9d:8d:3c:c3:6e:46:21:b8:9c:
8c:61:74:d8:41:a4:bf:c3:6a:48:cd:03:b6:23:bb:
b6:17:80:fe:63:f6:80:26:5d:1b:fc:e0:f5:f8:ac:
cd:69:71:15:bf:fa:a5:22:49:e2:32:5c:4d:12:0b:
f8:ba:8f:80:89:ed:e6:c3:1c:7b:34:53:c6:90:bd:
24:22:00:c9:84:ba:85:62:f1:34:8e:81:cb:2d:a5:
76:75:7a:a4:b5:a3:f6:93:be:eb:e7:2f:13:01:66:
e1:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:D5:9C:12:1B:71:61:94:B2:CF:10:1E:D0:EF:18:04:56:FC:30:73
X509v3 Authority Key Identifier:
keyid:35:C9:60:65:09:39:98:BA:42:CF:BA:11:BF:0D:17:D3:AC:40:3D:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NclgZQk5mLpCz7oRvw0X06xAPUA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/62764b-9aa6-4f12-a71c-6bac34987019/1/1tWcEhtxYZSyzxAe0O8YBFb8MHM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/62764b-9aa6-4f12-a71c-6bac34987019/1/NclgZQk5mLpCz7oRvw0X06xAPUA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.178.8.0/21
116.50.16.0/21
Signature Algorithm: sha256WithRSAEncryption
0d:7e:a4:27:43:44:9e:ee:20:74:00:f9:f2:09:4e:28:bf:2c:
42:89:a6:f9:a4:05:08:d8:48:e1:d8:3e:56:7d:bd:78:b6:72:
73:d9:d9:94:c1:6c:76:19:1e:e5:75:47:fb:7c:f3:91:14:b8:
17:d1:4e:17:cb:b4:38:8d:70:a5:68:22:1d:87:11:47:56:b6:
04:de:f7:da:64:9b:a5:ce:02:6d:2b:6e:6f:6b:56:7e:01:1c:
21:84:d6:19:6c:de:f9:ca:62:91:8d:7a:1b:bf:3c:1e:51:45:
42:a0:1f:99:c8:70:f3:c5:a7:45:c9:fe:83:6f:74:a7:92:09:
5d:44:2a:fc:ae:c7:fc:cf:82:6f:50:8d:9c:c4:50:e0:22:17:
5a:db:74:00:3a:a7:ad:47:be:21:a3:c6:03:a5:3a:16:2b:2d:
0e:ae:e9:46:99:3e:5b:20:a4:ef:c6:64:d4:43:c5:82:ee:14:
94:99:94:db:6d:9c:97:4e:04:e9:9a:2b:9a:cd:84:16:35:04:
9c:44:55:93:dd:2e:36:e5:09:4f:f9:fc:7f:37:5b:72:dd:f5:
f4:65:cb:85:4e:37:80:69:a8:d5:f6:2c:0e:e8:ce:59:23:c5:
69:3b:be:a2:1e:2f:03:70:55:c1:16:34:c4:8d:d7:86:cc:b1:
75:5e:e9:42
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYoPnCEQlfw+1K0SHgg7jv6WMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM1Yzk2MDY1MDkzOTk4YmE0MmNmYmExMWJmMGQxN2QzYWM0
MDNkNDAwHhcNMjMwODE5MjEwMzI0WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkNmQ1OWMxMjFiNzE2MTk0YjJjZjEwMWVkMGVmMTgwNDU2ZmMzMDczMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuJ4VgfpbdvnBJsQLMfaCx0DEQGxw
PZcXafqyRBGaKaGsiUbVJvE+JpxmK02i5/L5KdrXkdv0eKUtfpt2coLcd4WEjg/A
Y4CzLs7GSYvhZC3wGnfwhyuy4vMnNO30ofS47p9fX9ADtQcX2/P36lYIm0qCoO42
AJYCJwppszk9/F5sxR1wvqPhbTbJnfw4D+Kn47guIkp78FG7ECWdjTzDbkYhuJyM
YXTYQaS/w2pIzQO2I7u2F4D+Y/aAJl0b/OD1+KzNaXEVv/qlIkniMlxNEgv4uo+A
ie3mwxx7NFPGkL0kIgDJhLqFYvE0joHLLaV2dXqktaP2k77r5y8TAWbhsQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFNbVnBIbcWGUss8QHtDvGARW/DBzMB8GA1UdIwQY
MBaAFDXJYGUJOZi6Qs+6Eb8NF9OsQD1AMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTmNsZ1pRazVtTHBDejdvUnZ3MFgwNnhBUFVBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yi82Mjc2NGItOWFhNi00ZjEyLWE3MWMt
NmJhYzM0OTg3MDE5LzEvMXRXY0VodHhZWlN5enhBZTBPOFlCRmI4TUhNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Yi82Mjc2NGItOWFhNi00ZjEyLWE3MWMtNmJhYzM0OTg3MDE5
LzEvTmNsZ1pRazVtTHBDejdvUnZ3MFgwNnhBUFVBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQDX7IIAwQD
dDIQMA0GCSqGSIb3DQEBCwUAA4IBAQANfqQnQ0Se7iB0APnyCU4ovyxCiab5pAUI
2Ejh2D5Wfb14tnJz2dmUwWx2GR7ldUf7fPORFLgX0U4Xy7Q4jXClaCIdhxFHVrYE
3vfaZJulzgJtK25va1Z+ARwhhNYZbN75ymKRjXobvzweUUVCoB+ZyHDzxadFyf6D
b3SnkgldRCr8rsf8z4JvUI2cxFDgIhda23QAOqetR74ho8YDpToWKy0OrulGmT5b
IKTvxmTUQ8WC7hSUmZTbbZyXTgTpmiuazYQWNQScRFWT3S425QlP+fx/N1ty3fX0
ZcuFTjeAaajV9iwO6M5ZI8VpO76iHi8DcFXBFjTEjdeGzLF1XulC
-----END CERTIFICATE-----
Generated at Mon Nov 13 09:13:26 2023 by rpki-client on console-ams.rpki-client.org