Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/ef5fb3-3e56-4b77-aac7-085fa0a56052/1/D_gYIrN-EJf-nN1XJYA1JBkRkMg.roa
File: D_gYIrN-EJf-nN1XJYA1JBkRkMg.roa (raw, json)
Hash identifier: gvbJ/4ufzLU9y3mEiNml4jnryQl27+VZh/jm/L/7Ciw=
Subject key identifier: 0F:F8:18:22:B3:7E:10:97:FE:9C:DD:57:25:80:35:24:19:11:90:C8
Certificate issuer: /CN=07f231365985828d5a9663ed1b440624b24fec13
Certificate serial: 01916992A0CC8A147E332A78CBDE613F8B21
Authority key identifier: 07:F2:31:36:59:85:82:8D:5A:96:63:ED:1B:44:06:24:B2:4F:EC:13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B_IxNlmFgo1almPtG0QGJLJP7BM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/ef5fb3-3e56-4b77-aac7-085fa0a56052/1/D_gYIrN-EJf-nN1XJYA1JBkRkMg.roa
Signing time: Mon 19 Aug 2024 07:38:22 +0000
ROA not before: Mon 19 Aug 2024 07:38:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 91.199.44.0/24 maxlen: 24
91.199.47.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:69:92:a0:cc:8a:14:7e:33:2a:78:cb:de:61:3f:8b:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07f231365985828d5a9663ed1b440624b24fec13
Validity
Not Before: Aug 19 07:38:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0ff81822b37e1097fe9cdd5725803524191190c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fe:75:8e:36:f3:03:d7:b8:b4:a5:3a:db:6d:a9:
2a:07:32:72:4f:6e:3f:33:67:6c:c4:44:65:93:47:
54:62:22:54:30:c7:b6:18:c2:91:ed:9d:8b:8d:0a:
e9:e3:be:6f:38:6f:6e:55:28:8e:b9:18:1c:b4:f9:
2b:ef:1b:d5:4e:fc:c1:fa:eb:68:e4:32:27:6d:b3:
c0:07:74:45:42:50:52:5d:66:ff:6e:3a:2a:96:86:
c2:88:8c:4c:c3:1d:a4:6b:18:bd:0b:e8:1d:d5:22:
37:4e:53:2e:5f:f1:8c:b6:8d:62:ef:d7:2b:cf:88:
72:2a:70:1d:36:ba:2e:94:bd:38:54:03:dc:ad:75:
2c:f9:b0:ac:79:b0:3d:5e:71:8b:b3:69:32:9f:e9:
c7:d8:1b:49:e1:18:fa:15:46:f2:e6:28:99:38:90:
30:ca:f2:9d:47:d9:04:9e:b5:50:dc:7c:4b:b4:a3:
86:ad:dc:0b:cf:4b:6b:d3:4b:9d:a8:0b:49:8e:07:
0d:e1:a7:b0:7d:e5:2c:30:d6:f9:7e:18:b5:dc:a2:
06:b5:6c:99:bf:de:4d:b2:cb:01:44:a5:89:7a:f7:
ab:18:c9:e7:9e:0b:59:2c:05:f6:47:10:9a:de:b7:
4a:5c:e0:e4:67:28:87:58:04:99:70:2a:ac:dc:e4:
a4:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:F8:18:22:B3:7E:10:97:FE:9C:DD:57:25:80:35:24:19:11:90:C8
X509v3 Authority Key Identifier:
keyid:07:F2:31:36:59:85:82:8D:5A:96:63:ED:1B:44:06:24:B2:4F:EC:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B_IxNlmFgo1almPtG0QGJLJP7BM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/ef5fb3-3e56-4b77-aac7-085fa0a56052/1/D_gYIrN-EJf-nN1XJYA1JBkRkMg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/ef5fb3-3e56-4b77-aac7-085fa0a56052/1/B_IxNlmFgo1almPtG0QGJLJP7BM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.199.44.0/24
91.199.47.0/24
Signature Algorithm: sha256WithRSAEncryption
5d:8f:b3:bc:d6:e2:53:05:a0:10:17:0e:46:33:29:54:0b:ab:
33:ac:25:0b:5e:1c:e0:df:9a:59:1b:d6:16:31:1f:7b:cb:dc:
75:fa:3e:8f:c9:e5:88:e2:e2:3e:aa:48:c7:9d:f8:dc:8e:2f:
2c:83:a5:88:6b:62:ec:7c:a7:0f:3e:81:4b:c3:3e:27:7f:93:
15:d4:c1:96:c4:13:10:5d:4f:45:34:30:07:0b:94:81:54:18:
ad:07:1c:3a:34:f9:e7:f8:9a:2a:2d:d5:9b:4b:d4:b6:8a:6f:
90:b5:22:65:df:81:7d:12:2e:fd:33:44:f8:f3:57:5d:06:ad:
02:63:af:c3:c3:64:e4:76:dd:19:2f:55:3c:ae:65:04:d6:86:
63:a5:ee:16:44:4a:6e:81:f0:ad:1a:0a:42:5f:c7:59:7b:0d:
c0:3d:09:78:3a:3a:96:36:d8:36:77:72:88:e8:7d:39:3b:33:
02:a4:61:4a:b7:05:b5:a3:9f:7f:49:1f:2e:dd:ea:e9:ca:75:
d2:56:df:f9:c3:b0:d8:df:eb:ce:92:9a:f0:65:ec:3b:d8:d4:
05:c4:c4:6a:cf:08:af:ce:a4:b1:94:48:20:7f:83:79:72:76:
ef:09:ac:2a:29:e4:0a:41:f4:f2:38:62:a8:53:e2:89:eb:e2:
9e:bc:36:a8
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZFpkqDMihR+Myp4y95hP4shMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA3ZjIzMTM2NTk4NTgyOGQ1YTk2NjNlZDFiNDQwNjI0YjI0
ZmVjMTMwHhcNMjQwODE5MDczODIyWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwZmY4MTgyMmIzN2UxMDk3ZmU5Y2RkNTcyNTgwMzUyNDE5MTE5MGM4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA/nWONvMD17i0pTrbbakqBzJyT24/
M2dsxERlk0dUYiJUMMe2GMKR7Z2LjQrp475vOG9uVSiOuRgctPkr7xvVTvzB+uto
5DInbbPAB3RFQlBSXWb/bjoqlobCiIxMwx2kaxi9C+gd1SI3TlMuX/GMto1i79cr
z4hyKnAdNroulL04VAPcrXUs+bCsebA9XnGLs2kyn+nH2BtJ4Rj6FUby5iiZOJAw
yvKdR9kEnrVQ3HxLtKOGrdwLz0tr00udqAtJjgcN4aewfeUsMNb5fhi13KIGtWyZ
v95NsssBRKWJeverGMnnngtZLAX2RxCa3rdKXODkZyiHWASZcCqs3OSkuwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFA/4GCKzfhCX/pzdVyWANSQZEZDIMB8GA1UdIwQY
MBaAFAfyMTZZhYKNWpZj7RtEBiSyT+wTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQl9JeE5sbUZnbzFhbG1QdEcwUUdKTEpQN0JNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZS9lZjVmYjMtM2U1Ni00Yjc3LWFhYzct
MDg1ZmEwYTU2MDUyLzEvRF9nWUlyTi1FSmYtbk4xWEpZQTFKQmtSa01nLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80ZS9lZjVmYjMtM2U1Ni00Yjc3LWFhYzctMDg1ZmEwYTU2MDUy
LzEvQl9JeE5sbUZnbzFhbG1QdEcwUUdKTEpQN0JNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAW8csAwQA
W8cvMA0GCSqGSIb3DQEBCwUAA4IBAQBdj7O81uJTBaAQFw5GMylUC6szrCULXhzg
35pZG9YWMR97y9x1+j6PyeWI4uI+qkjHnfjcji8sg6WIa2LsfKcPPoFLwz4nf5MV
1MGWxBMQXU9FNDAHC5SBVBitBxw6NPnn+JoqLdWbS9S2im+QtSJl34F9Ei79M0T4
81ddBq0CY6/Dw2Tkdt0ZL1U8rmUE1oZjpe4WREpugfCtGgpCX8dZew3APQl4OjqW
Ntg2d3KI6H05OzMCpGFKtwW1o59/SR8u3erpynXSVt/5w7DY3+vOkprwZew72NQF
xMRqzwivzqSxlEggf4N5cnbvCawqKeQKQfTyOGKoU+KJ6+KevDao
-----END CERTIFICATE-----
Generated at Tue Oct 15 09:37:17 2024 by rpki-client on console-ams.rpki-client.org