Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/e45ad6-e5ae-4819-9f24-f577aa46de83/1/XNdyu1lgjJJbebuKPJQg3kPCkfw.roa
File: XNdyu1lgjJJbebuKPJQg3kPCkfw.roa (raw, json)
Hash identifier: 8xYsAHoRRS9zmtdsxCmSMndv0d14TMiv1j/KrleXQos=
Subject key identifier: 5C:D7:72:BB:59:60:8C:92:5B:79:BB:8A:3C:94:20:DE:43:C2:91:FC
Certificate issuer: /CN=813e051cb831d1989607bb76c0bc5693ff947b53
Certificate serial: 01856F9DD3B6A95F011BBA68F0B021A196EF
Authority key identifier: 81:3E:05:1C:B8:31:D1:98:96:07:BB:76:C0:BC:56:93:FF:94:7B:53
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gT4FHLgx0ZiWB7t2wLxWk_-Ue1M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/e45ad6-e5ae-4819-9f24-f577aa46de83/1/XNdyu1lgjJJbebuKPJQg3kPCkfw.roa
Signing time: Sun 01 Jan 2023 23:14:52 +0000
ROA not before: Sun 01 Jan 2023 23:14:52 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 48203
IP address blocks: 185.79.98.0/24 maxlen: 24
185.79.99.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:9d:d3:b6:a9:5f:01:1b:ba:68:f0:b0:21:a1:96:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=813e051cb831d1989607bb76c0bc5693ff947b53
Validity
Not Before: Jan 1 23:14:52 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5cd772bb59608c925b79bb8a3c9420de43c291fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:01:fe:7b:da:67:1e:c3:fe:58:ef:50:2c:44:
18:0c:09:ef:7b:b5:56:12:fe:1f:1d:d6:47:a0:bd:
39:f5:58:5f:97:07:1a:97:4d:80:51:7d:70:38:fa:
84:79:00:f1:6f:9c:f6:34:35:c0:31:84:eb:75:f3:
cd:3f:41:57:05:c9:c1:d4:f9:78:c5:74:32:4f:63:
73:6c:42:c1:d2:7d:a8:2b:34:35:f1:f5:c3:e3:a7:
c5:8a:53:f6:5c:6b:64:d8:6a:a7:f6:3e:50:7e:da:
cd:a5:26:a8:6a:5d:58:8d:3a:1d:f3:29:62:7e:05:
16:dd:47:ac:f4:a7:40:5e:63:56:ea:6c:87:cd:4d:
e7:87:19:99:2c:c4:19:76:b2:b6:09:b5:03:1b:0b:
f6:ca:71:58:1a:9a:3f:bb:60:60:16:1e:c4:68:e6:
37:28:03:5d:bd:f8:89:cd:4e:a6:64:20:75:d4:0f:
a8:fc:31:9c:d1:c8:33:9e:ec:7d:32:4d:69:93:14:
7f:d2:de:cb:d7:aa:b0:9a:9a:38:c0:5b:48:04:47:
ad:5e:ad:02:8f:b6:50:16:a5:94:bb:86:11:33:62:
55:2e:fb:8e:24:7b:4c:a1:1a:75:ca:65:98:d9:8d:
0e:0e:a4:22:55:65:41:6c:52:9a:64:67:4a:5c:b0:
8f:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:D7:72:BB:59:60:8C:92:5B:79:BB:8A:3C:94:20:DE:43:C2:91:FC
X509v3 Authority Key Identifier:
keyid:81:3E:05:1C:B8:31:D1:98:96:07:BB:76:C0:BC:56:93:FF:94:7B:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gT4FHLgx0ZiWB7t2wLxWk_-Ue1M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/e45ad6-e5ae-4819-9f24-f577aa46de83/1/XNdyu1lgjJJbebuKPJQg3kPCkfw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/e45ad6-e5ae-4819-9f24-f577aa46de83/1/gT4FHLgx0ZiWB7t2wLxWk_-Ue1M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.79.98.0/23
Signature Algorithm: sha256WithRSAEncryption
4f:60:32:d0:0b:01:58:4f:24:1e:8f:72:43:5f:26:ff:f3:9b:
3c:fa:c3:3c:58:e1:a8:63:f3:76:8c:1f:3e:ce:0c:cc:93:7d:
aa:b3:07:75:13:86:17:81:3b:1a:9a:f9:39:7b:a8:07:bc:c3:
fe:d1:09:22:e7:7b:bd:f0:bc:2c:fd:fd:35:2a:f3:a4:25:26:
90:1e:c1:3e:ae:63:f8:58:03:c5:ed:81:b7:fa:97:1a:7d:a7:
f5:71:82:bd:d9:e3:e6:e8:da:5f:6b:36:e6:29:f6:40:c4:bf:
c5:55:ff:48:c6:0c:08:0f:42:00:1c:03:f2:70:7f:df:f8:ce:
00:5b:62:a8:ea:81:a1:73:70:b9:36:f3:38:1d:61:53:0e:96:
8f:9c:29:8f:56:7e:27:c3:4d:16:ee:ab:90:2a:71:04:30:55:
c7:87:19:6e:09:9f:fb:08:fd:5c:30:20:9b:06:61:22:68:b4:
c8:6a:da:d4:d6:2b:bf:c5:2a:65:db:3c:78:2d:c4:47:29:af:
2d:aa:0d:44:02:ff:8c:96:c6:81:61:a8:7f:ef:31:2a:35:ec:
49:7a:35:8a:87:19:8d:40:26:70:10:a3:c0:e1:20:29:90:79:
14:66:59:1d:92:9f:41:52:c7:5d:74:ef:ec:bb:5b:52:99:34:
d5:30:9c:17
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVvndO2qV8BG7po8LAhoZbvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgxM2UwNTFjYjgzMWQxOTg5NjA3YmI3NmMwYmM1NjkzZmY5
NDdiNTMwHhcNMjMwMTAxMjMxNDUyWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1Y2Q3NzJiYjU5NjA4YzkyNWI3OWJiOGEzYzk0MjBkZTQzYzI5MWZjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgwH+e9pnHsP+WO9QLEQYDAnve7VW
Ev4fHdZHoL059Vhflwcal02AUX1wOPqEeQDxb5z2NDXAMYTrdfPNP0FXBcnB1Pl4
xXQyT2NzbELB0n2oKzQ18fXD46fFilP2XGtk2Gqn9j5QftrNpSaoal1YjTod8yli
fgUW3Ues9KdAXmNW6myHzU3nhxmZLMQZdrK2CbUDGwv2ynFYGpo/u2BgFh7EaOY3
KANdvfiJzU6mZCB11A+o/DGc0cgznux9Mk1pkxR/0t7L16qwmpo4wFtIBEetXq0C
j7ZQFqWUu4YRM2JVLvuOJHtMoRp1ymWY2Y0ODqQiVWVBbFKaZGdKXLCPPQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFFzXcrtZYIySW3m7ijyUIN5DwpH8MB8GA1UdIwQY
MBaAFIE+BRy4MdGYlge7dsC8VpP/lHtTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ1Q0RkhMZ3gwWmlXQjd0MndMeFdrXy1VZTFNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OS9lNDVhZDYtZTVhZS00ODE5LTlmMjQt
ZjU3N2FhNDZkZTgzLzEvWE5keXUxbGdqSkpiZWJ1S1BKUWcza1BDa2Z3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81OS9lNDVhZDYtZTVhZS00ODE5LTlmMjQtZjU3N2FhNDZkZTgz
LzEvZ1Q0RkhMZ3gwWmlXQjd0MndMeFdrXy1VZTFNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBuU9iMA0G
CSqGSIb3DQEBCwUAA4IBAQBPYDLQCwFYTyQej3JDXyb/85s8+sM8WOGoY/N2jB8+
zgzMk32qswd1E4YXgTsamvk5e6gHvMP+0Qki53u98Lws/f01KvOkJSaQHsE+rmP4
WAPF7YG3+pcafaf1cYK92ePm6NpfazbmKfZAxL/FVf9IxgwID0IAHAPycH/f+M4A
W2Ko6oGhc3C5NvM4HWFTDpaPnCmPVn4nw00W7quQKnEEMFXHhxluCZ/7CP1cMCCb
BmEiaLTIatrU1iu/xSpl2zx4LcRHKa8tqg1EAv+MlsaBYah/7zEqNexJejWKhxmN
QCZwEKPA4SApkHkUZlkdkp9BUsdddO/su1tSmTTVMJwX
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:30:50 2024 by rpki-client on console-fra.rpki-client.org