Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/81bc95-1444-408a-92f1-392e05a84277/1/Mq609E_c-H7Iz0kNbAcMftve3QY.roa
File: Mq609E_c-H7Iz0kNbAcMftve3QY.roa (raw, json)
Hash identifier: DoPaC1/X3wsEq+4mnrFby7IsvGK2AqA8r2u8TzrT17A=
Subject key identifier: 32:AE:B4:F4:4F:DC:F8:7E:C8:CF:49:0D:6C:07:0C:7E:DB:DE:DD:06
Certificate issuer: /CN=1f739d213a438f678b322a8f8f84e2d8c7814aca
Certificate serial: 07573D53
Authority key identifier: 1F:73:9D:21:3A:43:8F:67:8B:32:2A:8F:8F:84:E2:D8:C7:81:4A:CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H3OdITpDj2eLMiqPj4Ti2MeBSso.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/81bc95-1444-408a-92f1-392e05a84277/1/Mq609E_c-H7Iz0kNbAcMftve3QY.roa
Signing time: Mon 07 Feb 2022 10:04:30 +0000
ROA not before: Mon 07 Feb 2022 10:04:30 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 12350
IP address blocks: 83.228.128.0/17 maxlen: 17
213.162.0.0/19 maxlen: 19
194.38.64.0/21 maxlen: 21
194.38.72.0/23 maxlen: 23
185.133.28.0/22 maxlen: 22
212.232.128.0/17 maxlen: 17
194.148.0.0/16 maxlen: 16
195.15.0.0/17 maxlen: 17
212.28.128.0/19 maxlen: 19
194.38.160.0/19 maxlen: 19
212.147.79.0/24 maxlen: 24
212.40.0.0/19 maxlen: 19
194.38.91.0/24 maxlen: 24
194.38.92.0/22 maxlen: 22
212.147.0.0/17 maxlen: 17
213.5.152.0/21 maxlen: 21
212.254.0.0/16 maxlen: 16
212.109.64.0/19 maxlen: 19
2a03:a360::/32 maxlen: 32
2001:4c78::/32 maxlen: 32
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 123157843 (0x7573d53)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f739d213a438f678b322a8f8f84e2d8c7814aca
Validity
Not Before: Feb 7 10:04:30 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=32aeb4f44fdcf87ec8cf490d6c070c7edbdedd06
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:7f:4a:99:c8:85:34:e5:eb:4a:76:98:b8:b3:
7b:6c:7f:6e:34:e4:3c:d9:f4:5e:6e:f3:0d:51:74:
2d:76:d6:7b:3d:c3:c0:ff:ec:c0:eb:a2:0c:53:10:
53:fb:4c:1e:93:1a:50:f2:fa:d2:84:50:9b:8e:2a:
bd:16:00:84:7e:ae:9b:19:3f:61:54:87:00:37:60:
8b:fd:e7:03:61:1a:d5:d6:1f:89:d8:ea:54:b2:4c:
6c:c3:33:71:75:a9:e5:e5:f0:a8:05:ce:ff:02:d0:
c7:e1:74:32:59:5a:4f:45:93:86:0f:87:d3:31:96:
dc:1b:b6:01:d6:1e:59:ec:68:5d:45:58:8d:25:96:
c4:3d:8e:5c:12:e8:3c:22:65:30:ba:e0:22:cd:ff:
36:09:17:e9:4c:1c:b3:a0:ac:81:3f:0a:d8:c6:06:
93:99:b1:67:1b:a8:8f:3d:89:09:26:8f:dd:79:69:
90:10:cb:67:1a:fd:25:0d:b1:ca:15:af:9d:04:29:
ab:01:f4:7c:15:6a:ce:c8:e5:c3:8c:4b:62:08:c6:
d8:e3:f6:0a:b8:30:17:ad:1e:db:d1:ce:e4:f4:c5:
d1:03:72:1f:63:50:75:cb:0d:c0:ec:77:29:23:e2:
36:45:c6:22:6d:4f:f6:b3:c9:89:32:db:b0:62:d1:
c6:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:AE:B4:F4:4F:DC:F8:7E:C8:CF:49:0D:6C:07:0C:7E:DB:DE:DD:06
X509v3 Authority Key Identifier:
keyid:1F:73:9D:21:3A:43:8F:67:8B:32:2A:8F:8F:84:E2:D8:C7:81:4A:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H3OdITpDj2eLMiqPj4Ti2MeBSso.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/81bc95-1444-408a-92f1-392e05a84277/1/Mq609E_c-H7Iz0kNbAcMftve3QY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/81bc95-1444-408a-92f1-392e05a84277/1/H3OdITpDj2eLMiqPj4Ti2MeBSso.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.228.128.0/17
185.133.28.0/22
194.38.64.0-194.38.73.255
194.38.91.0-194.38.95.255
194.38.160.0/19
194.148.0.0/16
195.15.0.0/17
212.28.128.0/19
212.40.0.0/19
212.109.64.0/19
212.147.0.0/17
212.232.128.0/17
212.254.0.0/16
213.5.152.0/21
213.162.0.0/19
IPv6:
2001:4c78::/32
2a03:a360::/32
Signature Algorithm: sha256WithRSAEncryption
0c:23:df:a3:15:98:ea:3d:77:2f:83:2f:67:b0:43:02:29:4b:
55:31:8c:b0:9b:9e:1e:25:86:43:ae:19:03:21:8b:e2:3a:bd:
44:81:4b:2f:cf:e4:ee:f8:dd:ce:15:e5:6c:65:d6:1a:ba:06:
16:04:45:9a:e5:67:0e:bc:40:a8:7f:60:13:53:ab:ae:61:5c:
02:79:01:a8:11:c1:35:29:34:c6:78:90:14:1f:a5:57:2a:79:
72:f6:60:f3:cc:13:08:a6:b4:64:38:1b:a0:d8:79:65:f5:27:
bb:7e:c2:e4:c9:0c:67:0a:89:dc:df:d3:56:31:02:24:b9:fd:
d4:69:f3:84:f4:c0:49:7a:01:35:4c:b2:a7:39:be:ea:3e:78:
bd:1c:a1:88:e6:07:ef:7c:48:af:9d:96:87:4f:33:f5:34:c8:
8d:32:6f:39:f5:79:5e:8b:da:0a:67:7d:ab:75:ba:ae:d8:8c:
bb:7d:89:b2:65:f1:f3:54:72:8b:12:15:3d:ba:73:d5:77:c8:
21:58:22:8a:71:1d:32:47:82:4b:2a:54:30:e9:bb:5a:b0:86:
5f:a9:ee:63:9d:84:74:69:64:2a:fb:fe:79:ad:31:26:d8:4a:
44:7a:d4:8e:c0:0b:3d:01:a6:81:26:58:82:f9:53:86:56:88:
b2:97:be:31
-----BEGIN CERTIFICATE-----
MIIFajCCBFKgAwIBAgIEB1c9UzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygx
ZjczOWQyMTNhNDM4ZjY3OGIzMjJhOGY4Zjg0ZTJkOGM3ODE0YWNhMB4XDTIyMDIw
NzEwMDQzMFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoMzJhZWI0ZjQ0ZmRj
Zjg3ZWM4Y2Y0OTBkNmMwNzBjN2VkYmRlZGQwNjCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBALl/SpnIhTTl60p2mLize2x/bjTkPNn0Xm7zDVF0LXbWez3D
wP/swOuiDFMQU/tMHpMaUPL60oRQm44qvRYAhH6umxk/YVSHADdgi/3nA2Ea1dYf
idjqVLJMbMMzcXWp5eXwqAXO/wLQx+F0MllaT0WThg+H0zGW3Bu2AdYeWexoXUVY
jSWWxD2OXBLoPCJlMLrgIs3/NgkX6Uwcs6CsgT8K2MYGk5mxZxuojz2JCSaP3Xlp
kBDLZxr9JQ2xyhWvnQQpqwH0fBVqzsjlw4xLYgjG2OP2CrgwF60e29HO5PTF0QNy
H2NQdcsNwOx3KSPiNkXGIm1P9rPJiTLbsGLRxtkCAwEAAaOCAoQwggKAMB0GA1Ud
DgQWBBQyrrT0T9z4fsjPSQ1sBwx+297dBjAfBgNVHSMEGDAWgBQfc50hOkOPZ4sy
Ko+PhOLYx4FKyjAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L0gzT2RJVHBEajJlTE1pcVBqNFRpMk1lQlNzby5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNTYvODFiYzk1LTE0NDQtNDA4YS05MmYxLTM5MmUwNWE4NDI3Ny8x
L01xNjA5RV9jLUg3SXowa05iQWNNZnR2ZTNRWS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNTYv
ODFiYzk1LTE0NDQtNDA4YS05MmYxLTM5MmUwNWE4NDI3Ny8xL0gzT2RJVHBEajJl
TE1pcVBqNFRpMk1lQlNzby5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjCB
mQYIKwYBBQUHAQcBAf8EgYkwgYYwbgQCAAEwaAMEB1PkgAMEArmFHDAMAwQGwiZA
AwQBwiZIMAwDBADCJlsDBAXCJkADBAXCJqADAwDClAMEB8MPAAMEBdQcgAMEBdQo
AAMEBdRtQAMEB9STAAMEB9TogAMDANT+AwQD1QWYAwQF1aIAMBQEAgACMA4DBQAg
AUx4AwUAKgOjYDANBgkqhkiG9w0BAQsFAAOCAQEADCPfoxWY6j13L4MvZ7BDAilL
VTGMsJueHiWGQ64ZAyGL4jq9RIFLL8/k7vjdzhXlbGXWGroGFgRFmuVnDrxAqH9g
E1OrrmFcAnkBqBHBNSk0xniQFB+lVyp5cvZg88wTCKa0ZDgboNh5ZfUnu37C5MkM
ZwqJ3N/TVjECJLn91GnzhPTASXoBNUyypzm+6j54vRyhiOYH73xIr52Wh08z9TTI
jTJvOfV5XovaCmd9q3W6rtiMu32JsmXx81RyixIVPbpz1XfIIVgiinEdMkeCSypU
MOm7WrCGX6nuY52EdGlkKvv+ea0xJthKRHrUjsALPQGmgSZYgvlThlaIspe+MQ==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:52:19 2023 by rpki-client on console-ams.rpki-client.org