Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/956db9-c8f7-4b9f-a56e-bc6db7248add/1/yrGSMJxPqaidcuM0NH_58T0QPsE.roa
File: yrGSMJxPqaidcuM0NH_58T0QPsE.roa (raw, json)
Hash identifier: /NIb9MWLSI0Z4/Xsalz5AuYGgk6B2GAhAvACC+SmlYA=
Subject key identifier: CA:B1:92:30:9C:4F:A9:A8:9D:72:E3:34:34:7F:F9:F1:3D:10:3E:C1
Certificate issuer: /CN=70f9b16adf2fd31988859922b4457481dd7eef40
Certificate serial: 01838CB8DBC953644FE32D801E1EA456FDD7
Authority key identifier: 70:F9:B1:6A:DF:2F:D3:19:88:85:99:22:B4:45:74:81:DD:7E:EF:40
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cPmxat8v0xmIhZkitEV0gd1-70A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/956db9-c8f7-4b9f-a56e-bc6db7248add/1/yrGSMJxPqaidcuM0NH_58T0QPsE.roa
Signing time: Fri 30 Sep 2022 04:47:48 +0000
ROA not before: Fri 30 Sep 2022 04:47:48 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 201076
IP address blocks: 141.226.248.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:8c:b8:db:c9:53:64:4f:e3:2d:80:1e:1e:a4:56:fd:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70f9b16adf2fd31988859922b4457481dd7eef40
Validity
Not Before: Sep 30 04:47:48 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=cab192309c4fa9a89d72e334347ff9f13d103ec1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:0c:ed:4e:f3:d4:8b:8e:d7:79:00:b5:c4:e8:
73:e1:5e:20:42:9f:fc:74:f5:19:27:2a:13:71:1f:
41:cc:f2:39:b6:77:5e:d7:6a:21:06:5f:3e:1f:06:
a4:9a:1f:13:3d:e5:7a:4d:26:73:6b:0c:68:0b:d4:
91:8b:bb:e6:c8:a8:04:6d:f2:90:09:9e:de:e1:54:
37:cd:61:61:37:d8:0f:86:b6:99:63:1f:d5:02:36:
bf:41:75:4c:b0:41:8a:78:a2:97:14:0a:79:82:e9:
e8:eb:8b:f4:69:ff:10:1d:c7:ad:05:52:fc:79:42:
bc:be:26:80:46:73:60:e4:fa:a1:4c:5e:13:4c:67:
cb:39:52:b2:a4:b2:5d:ca:09:12:79:b1:14:db:5e:
47:ea:4c:07:22:c5:a1:2a:12:b2:3f:7c:bf:c8:df:
bb:e8:5d:ef:e9:dc:9e:2c:ce:f2:0a:2c:ce:d2:46:
43:06:72:ad:e7:61:c7:26:7b:27:e3:d0:f1:63:53:
1a:1f:f7:f0:15:09:55:39:19:00:dc:fd:15:ad:db:
4a:d8:86:1b:1a:34:8c:dc:2e:3e:fb:54:00:5a:48:
ce:8f:09:66:f1:d9:6a:b5:07:22:6f:cb:a9:f3:0c:
38:c3:a0:2b:ed:80:3a:d9:4c:6a:06:df:b6:7a:34:
bb:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:B1:92:30:9C:4F:A9:A8:9D:72:E3:34:34:7F:F9:F1:3D:10:3E:C1
X509v3 Authority Key Identifier:
keyid:70:F9:B1:6A:DF:2F:D3:19:88:85:99:22:B4:45:74:81:DD:7E:EF:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cPmxat8v0xmIhZkitEV0gd1-70A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/956db9-c8f7-4b9f-a56e-bc6db7248add/1/yrGSMJxPqaidcuM0NH_58T0QPsE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/956db9-c8f7-4b9f-a56e-bc6db7248add/1/cPmxat8v0xmIhZkitEV0gd1-70A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.226.248.0/24
Signature Algorithm: sha256WithRSAEncryption
0a:cb:ff:c4:9c:0d:d9:71:ad:5c:a5:d6:f4:d2:60:d8:e3:8b:
c5:a6:34:94:6f:e2:2d:f1:b2:c0:a0:45:c3:ca:6e:5b:81:dd:
c7:5e:b4:9f:81:c5:e5:81:52:4b:77:7b:3b:99:93:23:2f:a7:
41:b9:75:d3:dc:5a:d0:b4:f6:13:f6:9d:a2:18:49:f2:76:55:
63:38:1e:dd:09:54:05:42:17:92:e0:8a:b8:6d:bf:ef:f5:97:
d5:f8:1b:57:05:69:9e:e4:b6:61:13:da:53:2a:4f:33:cd:f9:
17:58:2d:a0:67:7c:1c:f1:be:5d:c4:13:ed:0b:fe:34:aa:3d:
63:05:2b:22:53:a6:36:f1:45:99:07:06:58:9a:3d:e2:f1:22:
09:10:35:eb:65:45:2b:b1:9d:00:27:bb:96:e6:25:28:d4:f7:
5a:56:15:d7:b8:5f:b1:73:2c:49:1a:b8:4e:9c:aa:80:b9:c3:
74:b1:ae:e3:c2:fd:96:ca:1f:e2:26:30:6d:69:98:36:23:cd:
7d:1f:a1:a8:9f:3c:aa:ee:54:6f:e4:c5:10:38:30:b7:8c:24:
4e:ee:45:55:a6:15:ea:07:b7:e2:fc:08:bd:0f:cf:c7:fb:cc:
bf:64:8c:76:29:2e:60:65:78:ac:5d:d7:20:26:b9:ed:1b:5b:
eb:92:88:11
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYOMuNvJU2RP4y2AHh6kVv3XMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcwZjliMTZhZGYyZmQzMTk4ODg1OTkyMmI0NDU3NDgxZGQ3
ZWVmNDAwHhcNMjIwOTMwMDQ0NzQ4WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjYWIxOTIzMDljNGZhOWE4OWQ3MmUzMzQzNDdmZjlmMTNkMTAzZWMxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtAztTvPUi47XeQC1xOhz4V4gQp/8
dPUZJyoTcR9BzPI5tnde12ohBl8+Hwakmh8TPeV6TSZzawxoC9SRi7vmyKgEbfKQ
CZ7e4VQ3zWFhN9gPhraZYx/VAja/QXVMsEGKeKKXFAp5guno64v0af8QHcetBVL8
eUK8viaARnNg5PqhTF4TTGfLOVKypLJdygkSebEU215H6kwHIsWhKhKyP3y/yN+7
6F3v6dyeLM7yCizO0kZDBnKt52HHJnsn49DxY1MaH/fwFQlVORkA3P0VrdtK2IYb
GjSM3C4++1QAWkjOjwlm8dlqtQcib8up8ww4w6Ar7YA62UxqBt+2ejS7WQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFMqxkjCcT6monXLjNDR/+fE9ED7BMB8GA1UdIwQY
MBaAFHD5sWrfL9MZiIWZIrRFdIHdfu9AMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY1BteGF0OHYweG1JaFpraXRFVjBnZDEtNzBBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Zi85NTZkYjktYzhmNy00YjlmLWE1NmUt
YmM2ZGI3MjQ4YWRkLzEveXJHU01KeFBxYWlkY3VNME5IXzU4VDBRUHNFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Zi85NTZkYjktYzhmNy00YjlmLWE1NmUtYmM2ZGI3MjQ4YWRk
LzEvY1BteGF0OHYweG1JaFpraXRFVjBnZDEtNzBBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjeL4MA0G
CSqGSIb3DQEBCwUAA4IBAQAKy//EnA3Zca1cpdb00mDY44vFpjSUb+It8bLAoEXD
ym5bgd3HXrSfgcXlgVJLd3s7mZMjL6dBuXXT3FrQtPYT9p2iGEnydlVjOB7dCVQF
QheS4Iq4bb/v9ZfV+BtXBWme5LZhE9pTKk8zzfkXWC2gZ3wc8b5dxBPtC/40qj1j
BSsiU6Y28UWZBwZYmj3i8SIJEDXrZUUrsZ0AJ7uW5iUo1PdaVhXXuF+xcyxJGrhO
nKqAucN0sa7jwv2Wyh/iJjBtaZg2I819H6Gonzyq7lRv5MUQODC3jCRO7kVVphXq
B7fi/Ai9D8/H+8y/ZIx2KS5gZXisXdcgJrntG1vrkogR
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:56:50 2023 by rpki-client on console-fra.rpki-client.org