Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/SUOtNST_8VBMXouJuHpZatTryxk.roa
File: SUOtNST_8VBMXouJuHpZatTryxk.roa (raw, json)
Hash identifier: npp0KzRmeXzNX+4Vxp95CxC+qnwDs3FuHHXOyz4nHWk=
Subject key identifier: 49:43:AD:35:24:FF:F1:50:4C:5E:8B:89:B8:7A:59:6A:D4:EB:CB:19
Certificate issuer: /CN=7b5e37f6e3b9bd1cf3684b9c03c03ad1ca642497
Certificate serial: 08E1A201
Authority key identifier: 7B:5E:37:F6:E3:B9:BD:1C:F3:68:4B:9C:03:C0:3A:D1:CA:64:24:97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/SUOtNST_8VBMXouJuHpZatTryxk.roa
Signing time: Sat 01 Jan 2022 01:56:53 +0000
ROA not before: Sat 01 Jan 2022 01:56:53 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 61317
IP address blocks: 185.63.18.0/23 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 149004801 (0x8e1a201)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7b5e37f6e3b9bd1cf3684b9c03c03ad1ca642497
Validity
Not Before: Jan 1 01:56:53 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=4943ad3524fff1504c5e8b89b87a596ad4ebcb19
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:ce:11:63:f0:51:69:28:ff:9b:dd:62:33:6c:
1a:9a:58:35:0b:4e:89:a4:bd:e0:b1:24:a2:73:dd:
89:9e:ab:55:6c:a2:30:79:c6:98:41:cb:16:e2:dd:
f8:51:27:9c:ad:d6:42:15:06:bf:a9:a3:0c:e5:cd:
02:0f:cc:af:25:79:70:7d:71:80:c2:b1:0e:c0:d1:
41:c9:16:88:1c:d7:1c:67:c8:8c:f1:4e:a5:93:a3:
72:29:b5:ba:85:27:fb:7a:03:9f:a0:8a:af:1c:12:
db:70:45:4d:f8:2e:21:6b:24:5d:12:66:17:47:ab:
e8:a2:70:56:56:d3:9b:c2:c4:5b:d0:3d:84:36:ff:
93:65:33:0f:b4:5b:bf:35:71:92:5b:ae:57:e8:56:
7a:cd:25:9a:22:5c:2b:34:0b:80:66:8e:91:7e:0b:
b2:a2:7c:49:2b:86:49:ea:32:74:0a:61:39:8e:c6:
ac:7a:7b:7e:7b:79:c3:f8:17:85:19:8c:0d:58:b8:
46:e5:fd:e7:84:a9:5a:47:72:42:36:f8:65:cf:e9:
30:3f:2f:13:2f:e2:ae:32:15:de:ae:4c:cb:97:7e:
ac:f2:07:12:9e:e7:35:5e:a8:a0:32:de:72:14:99:
43:70:94:82:38:94:85:9f:83:73:59:fc:af:f5:aa:
28:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:43:AD:35:24:FF:F1:50:4C:5E:8B:89:B8:7A:59:6A:D4:EB:CB:19
X509v3 Authority Key Identifier:
keyid:7B:5E:37:F6:E3:B9:BD:1C:F3:68:4B:9C:03:C0:3A:D1:CA:64:24:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/SUOtNST_8VBMXouJuHpZatTryxk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e1439uO5vRzzaEucA8A60cpkJJc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.63.18.0/23
Signature Algorithm: sha256WithRSAEncryption
44:23:b0:42:38:af:ef:03:33:7c:29:e3:f2:d0:e3:16:68:0c:
4e:b5:fd:47:ea:6c:2d:fc:66:ab:8f:a7:d2:91:0e:cb:d1:40:
c2:76:7b:21:6f:7e:83:6d:5c:5d:21:26:4d:3b:76:2f:5e:9f:
b6:35:6c:b2:88:b7:a9:83:7c:79:98:2a:2e:30:f8:53:84:02:
ed:bf:da:bd:8d:35:4e:8a:a6:10:e3:b6:aa:71:61:54:c6:09:
7d:26:1c:80:f4:8f:83:d3:2c:21:ae:84:70:6b:d7:7f:ac:b1:
b1:3d:d2:b1:83:34:56:6d:27:61:55:b1:88:19:29:8a:fb:6a:
ef:31:73:a3:e1:ef:db:9c:41:b0:e5:5a:31:29:2d:3c:83:c1:
db:9b:3b:76:b4:e1:09:0b:b3:af:fb:25:da:26:00:11:66:91:
59:cc:d5:23:cc:b6:c0:5e:79:01:5a:0f:d1:a7:75:3f:dd:2b:
1c:ff:cf:4c:77:82:e1:ad:52:34:29:f0:a2:98:dc:86:cd:c5:
9e:a8:d0:9b:ff:da:5e:4b:a3:08:05:c8:c2:36:65:8f:0e:b8:
9d:16:7b:31:7e:09:18:d0:9a:0b:4b:80:99:68:5c:cb:53:7d:
ad:a8:b5:83:e4:d3:56:8e:3c:ee:28:5a:67:92:79:f4:f5:91:
24:c6:f8:35
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIECOGiATANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg3
YjVlMzdmNmUzYjliZDFjZjM2ODRiOWMwM2MwM2FkMWNhNjQyNDk3MB4XDTIyMDEw
MTAxNTY1M1oXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoNDk0M2FkMzUyNGZm
ZjE1MDRjNWU4Yjg5Yjg3YTU5NmFkNGViY2IxOTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBALDOEWPwUWko/5vdYjNsGppYNQtOiaS94LEkonPdiZ6rVWyi
MHnGmEHLFuLd+FEnnK3WQhUGv6mjDOXNAg/MryV5cH1xgMKxDsDRQckWiBzXHGfI
jPFOpZOjcim1uoUn+3oDn6CKrxwS23BFTfguIWskXRJmF0er6KJwVlbTm8LEW9A9
hDb/k2UzD7RbvzVxkluuV+hWes0lmiJcKzQLgGaOkX4LsqJ8SSuGSeoydAphOY7G
rHp7fnt5w/gXhRmMDVi4RuX954SpWkdyQjb4Zc/pMD8vEy/irjIV3q5My5d+rPIH
Ep7nNV6ooDLechSZQ3CUgjiUhZ+Dc1n8r/WqKJMCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBRJQ601JP/xUExei4m4ellq1OvLGTAfBgNVHSMEGDAWgBR7Xjf247m9HPNo
S5wDwDrRymQklzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L2UxNDM5dU81dlJ6emFFdWNBOEE2MGNwa0pKYy5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNTcvMjY3MjhlLWRkYzctNGIwZi05ZDFlLTk1OTNhNDg4YWZjYy8x
L1NVT3ROU1RfOFZCTVhvdUp1SHBaYXRUcnl4ay5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNTcv
MjY3MjhlLWRkYzctNGIwZi05ZDFlLTk1OTNhNDg4YWZjYy8xL2UxNDM5dU81dlJ6
emFFdWNBOEE2MGNwa0pKYy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAbk/EjANBgkqhkiG9w0BAQsFAAOC
AQEARCOwQjiv7wMzfCnj8tDjFmgMTrX9R+psLfxmq4+n0pEOy9FAwnZ7IW9+g21c
XSEmTTt2L16ftjVssoi3qYN8eZgqLjD4U4QC7b/avY01ToqmEOO2qnFhVMYJfSYc
gPSPg9MsIa6EcGvXf6yxsT3SsYM0Vm0nYVWxiBkpivtq7zFzo+Hv25xBsOVaMSkt
PIPB25s7drThCQuzr/sl2iYAEWaRWczVI8y2wF55AVoP0ad1P90rHP/PTHeC4a1S
NCnwopjchs3FnqjQm//aXkujCAXIwjZljw64nRZ7MX4JGNCaC0uAmWhcy1N9rai1
g+TTVo487ihaZ5J59PWRJMb4NQ==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:39 2023 by rpki-client on console-fra.rpki-client.org