Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/8897fd-1862-4393-aa4b-447617a4a744/1/fGlP-kF4066amcbIrUFjNy7aEs8.roa
File: fGlP-kF4066amcbIrUFjNy7aEs8.roa (raw, json)
Hash identifier: v2F9VzkljtGHEeyssqdxVUW2Bx59SlygKGARSMusOEk=
Subject key identifier: 7C:69:4F:FA:41:78:D3:AE:9A:99:C6:C8:AD:41:63:37:2E:DA:12:CF
Certificate issuer: /CN=7d7b4bcabeb29605ea511de973e4675c4b8a29df
Certificate serial: 043A99F2
Authority key identifier: 7D:7B:4B:CA:BE:B2:96:05:EA:51:1D:E9:73:E4:67:5C:4B:8A:29:DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fXtLyr6ylgXqUR3pc-RnXEuKKd8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/8897fd-1862-4393-aa4b-447617a4a744/1/fGlP-kF4066amcbIrUFjNy7aEs8.roa
Signing time: Sat 01 Jan 2022 07:00:14 +0000
ROA not before: Sat 01 Jan 2022 07:00:14 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 35621
IP address blocks: 151.237.94.0/23 maxlen: 23
151.237.0.0/20 maxlen: 20
151.237.7.0/24 maxlen: 24
85.187.221.0/24 maxlen: 24
85.187.220.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 70949362 (0x43a99f2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d7b4bcabeb29605ea511de973e4675c4b8a29df
Validity
Not Before: Jan 1 07:00:14 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=7c694ffa4178d3ae9a99c6c8ad4163372eda12cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:5a:d6:27:1d:9d:27:1a:73:fd:ee:13:06:ce:
77:05:6f:13:2d:51:4a:16:e6:28:6e:bf:6b:59:61:
de:0b:a0:a1:d5:37:e9:6b:b2:4f:31:79:80:bf:32:
a5:04:fb:2a:66:45:f5:46:b6:ad:62:f9:70:6f:6d:
5e:91:80:bf:df:be:ca:b8:f7:dc:91:df:0f:31:61:
b5:2c:4d:15:bf:04:d6:d0:c1:cd:4f:90:47:f4:bb:
1f:f7:ba:51:50:6d:21:70:b2:f0:c5:2b:fb:10:86:
8b:1d:7e:d2:2f:08:e5:b1:35:fe:c5:ac:24:54:f0:
64:eb:a1:83:0b:f5:86:7b:0d:c7:b2:98:8d:80:cb:
e5:c0:09:59:03:ef:6b:83:69:e9:b4:b2:98:1e:a4:
22:e9:9c:08:22:ed:f2:36:cf:de:e5:5c:89:35:f3:
13:fd:d5:53:76:b4:c2:09:3f:0a:40:14:08:bb:61:
b1:0a:e0:c5:8e:c6:bc:4a:ee:b8:00:7e:06:03:ca:
9b:99:ff:c8:56:b1:8c:7d:21:f0:6c:d0:4d:8a:de:
e3:02:e9:a5:43:20:7e:c3:97:09:3a:f6:23:e8:0b:
18:0d:fe:3a:e6:6c:1a:07:8e:25:32:16:a8:89:09:
1f:c3:f2:f0:a7:c6:21:39:4d:08:4b:20:6d:36:59:
8d:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:69:4F:FA:41:78:D3:AE:9A:99:C6:C8:AD:41:63:37:2E:DA:12:CF
X509v3 Authority Key Identifier:
keyid:7D:7B:4B:CA:BE:B2:96:05:EA:51:1D:E9:73:E4:67:5C:4B:8A:29:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fXtLyr6ylgXqUR3pc-RnXEuKKd8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/8897fd-1862-4393-aa4b-447617a4a744/1/fGlP-kF4066amcbIrUFjNy7aEs8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/8897fd-1862-4393-aa4b-447617a4a744/1/fXtLyr6ylgXqUR3pc-RnXEuKKd8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.187.220.0/23
151.237.0.0/20
151.237.94.0/23
Signature Algorithm: sha256WithRSAEncryption
a0:da:fa:2d:60:b4:b8:bf:d9:a7:59:70:9b:eb:aa:3c:51:cb:
80:81:ca:1d:c2:04:2c:25:60:a4:16:b5:e5:72:35:82:f3:1c:
72:07:86:48:93:43:46:3f:f1:af:ad:3c:c9:77:53:71:c9:26:
25:4d:ee:bc:a1:e1:c5:91:e4:d6:36:40:2e:2a:83:5c:fc:26:
83:1d:c1:6e:ff:08:fb:d6:4b:55:a7:24:c9:2d:c5:47:1d:d4:
ce:13:cd:ed:1d:7b:f2:63:1f:4c:60:4e:9f:6c:f4:b6:05:43:
f8:b5:f7:63:5d:03:ec:c5:0f:f7:ee:df:c4:cc:53:2d:a5:2a:
9c:28:24:a0:a4:51:a5:4b:9a:64:3e:d0:bc:41:27:48:40:83:
ef:ee:03:06:7a:0a:88:49:d1:33:d6:81:c1:1b:9e:ed:af:8a:
68:ad:0d:c4:35:a9:3e:0e:c8:d5:10:16:d0:da:c1:c0:83:25:
2a:84:0b:28:8b:c0:b1:fa:cb:27:64:2d:44:39:2d:6d:f4:92:
9c:02:eb:79:9b:1e:5d:e2:0e:08:36:1d:fb:4d:aa:32:85:dc:
7c:a1:b5:ce:ae:fc:e0:ca:46:3b:cc:44:b8:ab:f7:12:ce:c0:
94:64:c0:e5:9a:bf:71:9d:25:cb:d7:83:9d:8f:be:9e:7e:d6:
64:5f:4a:cb
-----BEGIN CERTIFICATE-----
MIIE+zCCA+OgAwIBAgIEBDqZ8jANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg3
ZDdiNGJjYWJlYjI5NjA1ZWE1MTFkZTk3M2U0Njc1YzRiOGEyOWRmMB4XDTIyMDEw
MTA3MDAxNFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoN2M2OTRmZmE0MTc4
ZDNhZTlhOTljNmM4YWQ0MTYzMzcyZWRhMTJjZjCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAJha1icdnScac/3uEwbOdwVvEy1RShbmKG6/a1lh3gugodU3
6WuyTzF5gL8ypQT7KmZF9Ua2rWL5cG9tXpGAv9++yrj33JHfDzFhtSxNFb8E1tDB
zU+QR/S7H/e6UVBtIXCy8MUr+xCGix1+0i8I5bE1/sWsJFTwZOuhgwv1hnsNx7KY
jYDL5cAJWQPva4Np6bSymB6kIumcCCLt8jbP3uVciTXzE/3VU3a0wgk/CkAUCLth
sQrgxY7GvEruuAB+BgPKm5n/yFaxjH0h8GzQTYre4wLppUMgfsOXCTr2I+gLGA3+
OuZsGgeOJTIWqIkJH8Py8KfGITlNCEsgbTZZjUkCAwEAAaOCAhUwggIRMB0GA1Ud
DgQWBBR8aU/6QXjTrpqZxsitQWM3LtoSzzAfBgNVHSMEGDAWgBR9e0vKvrKWBepR
Helz5GdcS4op3zAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L2ZYdEx5cjZ5bGdYcVVSM3BjLVJuWEV1S0tkOC5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNTcvODg5N2ZkLTE4NjItNDM5My1hYTRiLTQ0NzYxN2E0YTc0NC8x
L2ZHbFAta0Y0MDY2YW1jYklyVUZqTnk3YUVzOC5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNTcv
ODg5N2ZkLTE4NjItNDM5My1hYTRiLTQ0NzYxN2E0YTc0NC8xL2ZYdEx5cjZ5bGdY
cVVSM3BjLVJuWEV1S0tkOC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAr
BggrBgEFBQcBBwEB/wQcMBowGAQCAAEwEgMEAVW73AMEBJftAAMEAZftXjANBgkq
hkiG9w0BAQsFAAOCAQEAoNr6LWC0uL/Zp1lwm+uqPFHLgIHKHcIELCVgpBa15XI1
gvMccgeGSJNDRj/xr608yXdTcckmJU3uvKHhxZHk1jZALiqDXPwmgx3Bbv8I+9ZL
VackyS3FRx3UzhPN7R178mMfTGBOn2z0tgVD+LX3Y10D7MUP9+7fxMxTLaUqnCgk
oKRRpUuaZD7QvEEnSECD7+4DBnoKiEnRM9aBwRue7a+KaK0NxDWpPg7I1RAW0NrB
wIMlKoQLKIvAsfrLJ2QtRDktbfSSnALreZseXeIOCDYd+02qMoXcfKG1zq784MpG
O8xEuKv3Es7AlGTA5Zq/cZ0ly9eDnY++nn7WZF9Kyw==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:30:31 2024 by rpki-client on console-fra.rpki-client.org