Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/6e615f-5fd7-45b6-8acb-76999bf9999f/1/fVz_AQx3fitPrgB80nCOAUkw2Xo.roa
File: fVz_AQx3fitPrgB80nCOAUkw2Xo.roa (raw, json)
Hash identifier: HswVlSOa9tyEw3kL1TZzyh2xFPvJN+AbmF0pHVnh5Nw=
Subject key identifier: 7D:5C:FF:01:0C:77:7E:2B:4F:AE:00:7C:D2:70:8E:01:49:30:D9:7A
Certificate issuer: /CN=468c267a6474fcb7cc49cf325d0e9dcc5fe8d20d
Certificate serial: 01818CB4
Authority key identifier: 46:8C:26:7A:64:74:FC:B7:CC:49:CF:32:5D:0E:9D:CC:5F:E8:D2:0D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RowmemR0_LfMSc8yXQ6dzF_o0g0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/6e615f-5fd7-45b6-8acb-76999bf9999f/1/fVz_AQx3fitPrgB80nCOAUkw2Xo.roa
Signing time: Sun 09 Jan 2022 13:18:32 +0000
ROA not before: Sun 09 Jan 2022 13:18:32 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 41114
IP address blocks: 109.106.24.0/22 maxlen: 24
77.83.228.0/22 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 25267380 (0x1818cb4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=468c267a6474fcb7cc49cf325d0e9dcc5fe8d20d
Validity
Not Before: Jan 9 13:18:32 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=7d5cff010c777e2b4fae007cd2708e014930d97a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:90:3b:ba:97:3a:4a:9a:12:f4:79:3e:71:9d:
b0:df:91:e9:d6:9b:27:1c:98:35:c7:6b:df:9f:9d:
6c:08:ae:b4:b3:8f:3f:b9:cc:87:bb:80:35:c6:98:
de:68:c7:05:b8:14:50:cf:74:fc:ba:64:54:6b:66:
ab:d8:2f:e4:fe:45:c0:8c:fd:5b:e8:c1:8b:0c:0d:
cb:2b:52:b9:a9:34:60:60:22:84:2e:29:92:4b:2b:
a3:14:cf:bc:c9:15:3d:b1:59:b9:c5:35:05:55:2d:
56:17:ce:91:3b:bd:55:ca:36:ba:2f:1f:1c:6a:cf:
8e:99:0b:76:e5:b8:b9:6d:19:6c:9f:cb:76:8c:05:
a5:c3:2d:f6:d1:b4:35:8a:c0:31:46:21:d3:7a:51:
d2:53:9e:23:5f:85:2f:9c:be:a6:35:86:cc:11:6a:
2e:9f:bd:d4:b0:3f:c0:12:73:16:85:cc:91:50:bb:
37:c2:6f:95:49:3b:47:e2:c3:8f:16:08:0a:b9:05:
8e:73:e6:c1:84:15:5d:25:25:79:b3:39:ff:c0:2a:
4c:95:24:fc:a5:7c:c3:bc:aa:b0:3f:34:02:29:1e:
c1:7a:3b:f4:c2:85:da:97:47:5c:f5:15:d0:be:fc:
b6:9c:72:68:02:e8:c3:92:03:08:f6:13:15:f7:37:
aa:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:5C:FF:01:0C:77:7E:2B:4F:AE:00:7C:D2:70:8E:01:49:30:D9:7A
X509v3 Authority Key Identifier:
keyid:46:8C:26:7A:64:74:FC:B7:CC:49:CF:32:5D:0E:9D:CC:5F:E8:D2:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RowmemR0_LfMSc8yXQ6dzF_o0g0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/6e615f-5fd7-45b6-8acb-76999bf9999f/1/fVz_AQx3fitPrgB80nCOAUkw2Xo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/6e615f-5fd7-45b6-8acb-76999bf9999f/1/RowmemR0_LfMSc8yXQ6dzF_o0g0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.83.228.0/22
109.106.24.0/22
Signature Algorithm: sha256WithRSAEncryption
5f:60:ea:da:a6:f4:00:71:33:70:5b:c2:8c:26:fc:cc:7d:ff:
74:ab:40:43:b7:04:af:19:2c:61:cb:45:37:c1:a3:49:a4:17:
74:fe:74:10:ac:cb:b2:35:8d:e1:16:08:89:dc:8d:2e:56:89:
0a:5a:28:f7:67:17:c3:b8:fd:5d:b5:9b:8b:ec:49:6d:e3:a9:
98:b5:e3:69:a2:51:55:a9:97:b3:dd:a0:f8:4e:d3:7c:ee:6d:
ad:29:9c:76:6b:75:e0:fc:a8:db:8a:45:5c:98:ef:3a:02:87:
56:de:df:20:83:33:3c:0f:9c:4d:b6:ef:3a:a3:b7:e1:49:2e:
4e:99:5a:dd:68:63:54:86:66:33:2f:cf:bf:55:b0:cc:36:d9:
1e:92:7f:c6:fc:00:46:cb:84:04:6d:45:47:3b:f9:b2:fb:6f:
98:f6:a9:33:b6:e4:bc:95:53:e2:46:35:7b:c2:04:75:e2:f1:
e6:e8:69:dd:6e:b4:5a:d2:c8:a4:0a:27:06:fa:c2:b0:cf:f7:
ce:ef:9e:47:50:d0:0d:19:e2:89:8f:9c:a9:5e:00:75:17:05:
e8:fa:89:40:33:be:f4:15:8d:18:17:35:ec:5b:ba:d3:d1:35:
a1:35:ba:df:4a:c8:9e:6e:61:58:68:0d:48:38:0e:aa:5c:9b:
12:18:53:58
-----BEGIN CERTIFICATE-----
MIIE9TCCA92gAwIBAgIEAYGMtDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg0
NjhjMjY3YTY0NzRmY2I3Y2M0OWNmMzI1ZDBlOWRjYzVmZThkMjBkMB4XDTIyMDEw
OTEzMTgzMloXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoN2Q1Y2ZmMDEwYzc3
N2UyYjRmYWUwMDdjZDI3MDhlMDE0OTMwZDk3YTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAOCQO7qXOkqaEvR5PnGdsN+R6dabJxyYNcdr35+dbAiutLOP
P7nMh7uANcaY3mjHBbgUUM90/LpkVGtmq9gv5P5FwIz9W+jBiwwNyytSuak0YGAi
hC4pkksroxTPvMkVPbFZucU1BVUtVhfOkTu9Vco2ui8fHGrPjpkLduW4uW0ZbJ/L
dowFpcMt9tG0NYrAMUYh03pR0lOeI1+FL5y+pjWGzBFqLp+91LA/wBJzFoXMkVC7
N8JvlUk7R+LDjxYICrkFjnPmwYQVXSUlebM5/8AqTJUk/KV8w7yqsD80AikewXo7
9MKF2pdHXPUV0L78tpxyaALow5IDCPYTFfc3qrECAwEAAaOCAg8wggILMB0GA1Ud
DgQWBBR9XP8BDHd+K0+uAHzScI4BSTDZejAfBgNVHSMEGDAWgBRGjCZ6ZHT8t8xJ
zzJdDp3MX+jSDTAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L1Jvd21lbVIwX0xmTVNjOHlYUTZkekZfbzBnMC5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNTAvNmU2MTVmLTVmZDctNDViNi04YWNiLTc2OTk5YmY5OTk5Zi8x
L2ZWel9BUXgzZml0UHJnQjgwbkNPQVVrdzJYby5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNTAv
NmU2MTVmLTVmZDctNDViNi04YWNiLTc2OTk5YmY5OTk5Zi8xL1Jvd21lbVIwX0xm
TVNjOHlYUTZkekZfbzBnMC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAl
BggrBgEFBQcBBwEB/wQWMBQwEgQCAAEwDAMEAk1T5AMEAm1qGDANBgkqhkiG9w0B
AQsFAAOCAQEAX2Dq2qb0AHEzcFvCjCb8zH3/dKtAQ7cErxksYctFN8GjSaQXdP50
EKzLsjWN4RYIidyNLlaJCloo92cXw7j9XbWbi+xJbeOpmLXjaaJRVamXs92g+E7T
fO5trSmcdmt14Pyo24pFXJjvOgKHVt7fIIMzPA+cTbbvOqO34UkuTpla3WhjVIZm
My/Pv1WwzDbZHpJ/xvwARsuEBG1FRzv5svtvmPapM7bkvJVT4kY1e8IEdeLx5uhp
3W60WtLIpAonBvrCsM/3zu+eR1DQDRniiY+cqV4AdRcF6PqJQDO+9BWNGBc17Fu6
09E1oTW630rInm5hWGgNSDgOqlybEhhTWA==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:29:15 2024 by rpki-client on console-fra.rpki-client.org