Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/f6ada1-7e8a-4b3e-b7e8-f8589f682691/1/pFMdD2ptR6H9L5yC0RsxmmdN5Z8.roa
File: pFMdD2ptR6H9L5yC0RsxmmdN5Z8.roa (raw, json)
Hash identifier: 0Nj2QOyE2sR1ugT+8oIL8sfhdZkzFDQnej9R75LH8p0=
Subject key identifier: A4:53:1D:0F:6A:6D:47:A1:FD:2F:9C:82:D1:1B:31:9A:67:4D:E5:9F
Certificate issuer: /CN=ccd76159bfd9e337523ee930f3df111d6bae7306
Certificate serial: 05A3709C
Authority key identifier: CC:D7:61:59:BF:D9:E3:37:52:3E:E9:30:F3:DF:11:1D:6B:AE:73:06
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zNdhWb_Z4zdSPukw898RHWuucwY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/f6ada1-7e8a-4b3e-b7e8-f8589f682691/1/pFMdD2ptR6H9L5yC0RsxmmdN5Z8.roa
Signing time: Sat 01 Jan 2022 07:57:05 +0000
ROA not before: Sat 01 Jan 2022 07:57:05 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 15626
IP address blocks: 77.83.193.0/24 maxlen: 24
194.147.88.0/24 maxlen: 24
213.139.203.0/24 maxlen: 24
194.169.86.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 94597276 (0x5a3709c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ccd76159bfd9e337523ee930f3df111d6bae7306
Validity
Not Before: Jan 1 07:57:05 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a4531d0f6a6d47a1fd2f9c82d11b319a674de59f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:fa:9c:4b:ef:cd:c9:c5:85:9e:84:ab:a4:c1:
78:60:87:07:4d:40:90:0f:d1:f2:26:3d:40:cf:e7:
a4:71:7c:22:9c:7c:f9:99:6a:9d:db:5f:fd:ad:de:
06:a1:2b:03:b1:43:b3:41:8c:6b:4d:47:d2:0e:47:
e2:3a:8c:77:09:98:a0:0d:af:5b:a1:31:71:1f:ce:
ce:2f:88:8d:b1:b6:ea:ab:c9:04:2e:35:d7:b9:e8:
bb:b7:06:1a:ab:5b:a1:60:4d:05:1d:49:38:79:07:
8f:41:35:56:c4:f2:f9:b7:f5:eb:14:f9:7e:2b:2b:
ce:94:50:40:42:28:8e:c4:bf:91:b7:ac:58:1f:e3:
02:78:d2:64:de:5e:e3:b9:9c:26:d4:02:c7:ce:ed:
81:fc:2c:82:dc:71:ff:fb:49:1b:c9:7c:4e:d3:26:
64:61:5f:5f:7a:2e:fb:4b:dd:8a:b7:50:0e:7b:cc:
f8:05:e6:e7:31:a7:5e:b2:3f:3c:83:15:01:5c:5c:
95:ef:f6:dc:6e:7c:c5:38:d6:c1:e9:a5:56:a8:41:
59:0b:8d:3a:13:61:ce:a0:df:0e:03:1c:8e:a5:8e:
e6:df:cf:78:94:af:84:19:49:7f:3c:1d:db:8d:6a:
fc:eb:6e:a3:42:d9:4c:c4:91:7e:e1:eb:7e:4f:84:
e7:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:53:1D:0F:6A:6D:47:A1:FD:2F:9C:82:D1:1B:31:9A:67:4D:E5:9F
X509v3 Authority Key Identifier:
keyid:CC:D7:61:59:BF:D9:E3:37:52:3E:E9:30:F3:DF:11:1D:6B:AE:73:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zNdhWb_Z4zdSPukw898RHWuucwY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/f6ada1-7e8a-4b3e-b7e8-f8589f682691/1/pFMdD2ptR6H9L5yC0RsxmmdN5Z8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/f6ada1-7e8a-4b3e-b7e8-f8589f682691/1/zNdhWb_Z4zdSPukw898RHWuucwY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.83.193.0/24
194.147.88.0/24
194.169.86.0/24
213.139.203.0/24
Signature Algorithm: sha256WithRSAEncryption
5d:3a:37:42:7c:07:6b:52:d3:c4:c7:1b:fc:5e:7f:d5:90:a4:
31:c8:94:0e:e7:9c:0e:47:b0:c2:cc:6e:48:72:58:95:12:dd:
bb:5c:10:34:08:87:13:a1:96:2d:3b:76:ee:54:8d:e9:bc:02:
93:aa:b3:80:d7:3a:98:21:67:53:89:57:0a:28:74:27:d8:1c:
31:f9:53:69:92:8b:af:e2:0d:ee:fd:af:c6:d1:d1:61:f1:44:
3e:8f:1f:62:1d:94:24:60:d2:95:d6:81:46:53:e2:c7:6e:b6:
3f:07:85:b9:ae:54:9d:7f:e3:6d:43:14:70:47:d0:6d:86:71:
56:5a:8d:5b:2d:96:6f:05:63:7a:8f:cf:66:08:9a:4e:10:8b:
3e:d5:37:05:b1:77:f2:2e:91:c0:3b:e8:f5:1c:2f:a1:24:e3:
87:c7:64:88:12:2a:ad:04:d2:0d:2d:77:d4:8c:26:81:00:ae:
38:46:07:1a:b1:3f:5f:67:c2:c1:2b:24:7d:67:bd:ae:85:a0:
4c:32:ed:68:de:d5:9f:6d:2c:59:e5:5c:4c:2a:dd:19:5e:4b:
64:59:7c:b1:78:2c:1b:f3:58:90:e8:df:f3:e2:fc:48:0d:18:
29:31:92:d5:ef:cc:2d:7d:c0:39:72:77:95:19:09:ff:81:04:
f7:c5:0d:e7
-----BEGIN CERTIFICATE-----
MIIFATCCA+mgAwIBAgIEBaNwnDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhj
Y2Q3NjE1OWJmZDllMzM3NTIzZWU5MzBmM2RmMTExZDZiYWU3MzA2MB4XDTIyMDEw
MTA3NTcwNVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoYTQ1MzFkMGY2YTZk
NDdhMWZkMmY5YzgyZDExYjMxOWE2NzRkZTU5ZjCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAMT6nEvvzcnFhZ6Eq6TBeGCHB01AkA/R8iY9QM/npHF8Ipx8
+Zlqndtf/a3eBqErA7FDs0GMa01H0g5H4jqMdwmYoA2vW6ExcR/Ozi+IjbG26qvJ
BC4117nou7cGGqtboWBNBR1JOHkHj0E1VsTy+bf16xT5fisrzpRQQEIojsS/kbes
WB/jAnjSZN5e47mcJtQCx87tgfwsgtxx//tJG8l8TtMmZGFfX3ou+0vdirdQDnvM
+AXm5zGnXrI/PIMVAVxcle/23G58xTjWwemlVqhBWQuNOhNhzqDfDgMcjqWO5t/P
eJSvhBlJfzwd241q/Otuo0LZTMSRfuHrfk+E5xECAwEAAaOCAhswggIXMB0GA1Ud
DgQWBBSkUx0Pam1Hof0vnILRGzGaZ03lnzAfBgNVHSMEGDAWgBTM12FZv9njN1I+
6TDz3xEda65zBjAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L3pOZGhXYl9aNHpkU1B1a3c4OThSSFd1dWN3WS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNTAvZjZhZGExLTdlOGEtNGIzZS1iN2U4LWY4NTg5ZjY4MjY5MS8x
L3BGTWREMnB0UjZIOUw1eUMwUnN4bW1kTjVaOC5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNTAv
ZjZhZGExLTdlOGEtNGIzZS1iN2U4LWY4NTg5ZjY4MjY5MS8xL3pOZGhXYl9aNHpk
U1B1a3c4OThSSFd1dWN3WS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAx
BggrBgEFBQcBBwEB/wQiMCAwHgQCAAEwGAMEAE1TwQMEAMKTWAMEAMKpVgMEANWL
yzANBgkqhkiG9w0BAQsFAAOCAQEAXTo3QnwHa1LTxMcb/F5/1ZCkMciUDuecDkew
wsxuSHJYlRLdu1wQNAiHE6GWLTt27lSN6bwCk6qzgNc6mCFnU4lXCih0J9gcMflT
aZKLr+IN7v2vxtHRYfFEPo8fYh2UJGDSldaBRlPix262PweFua5UnX/jbUMUcEfQ
bYZxVlqNWy2WbwVjeo/PZgiaThCLPtU3BbF38i6RwDvo9RwvoSTjh8dkiBIqrQTS
DS131IwmgQCuOEYHGrE/X2fCwSskfWe9roWgTDLtaN7Vn20sWeVcTCrdGV5LZFl8
sXgsG/NYkOjf8+L8SA0YKTGS1e/MLX3AOXJ3lRkJ/4EE98UN5w==
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:08:46 2024 by rpki-client on console-ams.rpki-client.org