Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/aeae95-40bd-4aad-ab14-e3eecf9dfaad/1/oGaUr1Xrty8WE7Iw-JDnFGf6fOQ.roa
File: oGaUr1Xrty8WE7Iw-JDnFGf6fOQ.roa (raw, json)
Hash identifier: 9Vt8Tcuh/Mwvk9u7y2FMXHcq0Ryid+INokuUeo2g0FY=
Subject key identifier: A0:66:94:AF:55:EB:B7:2F:16:13:B2:30:F8:90:E7:14:67:FA:7C:E4
Certificate issuer: /CN=41f282cc1c07697ff5b5190c714393d542406d43
Certificate serial: 060EA0B8
Authority key identifier: 41:F2:82:CC:1C:07:69:7F:F5:B5:19:0C:71:43:93:D5:42:40:6D:43
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QfKCzBwHaX_1tRkMcUOT1UJAbUM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/aeae95-40bd-4aad-ab14-e3eecf9dfaad/1/oGaUr1Xrty8WE7Iw-JDnFGf6fOQ.roa
Signing time: Sat 01 Jan 2022 04:58:10 +0000
ROA not before: Sat 01 Jan 2022 04:58:10 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 208449
IP address blocks: 45.90.168.0/22 maxlen: 24
2a0d:f100::/29 maxlen: 32
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 101621944 (0x60ea0b8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=41f282cc1c07697ff5b5190c714393d542406d43
Validity
Not Before: Jan 1 04:58:10 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a06694af55ebb72f1613b230f890e71467fa7ce4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:8c:70:7a:16:ff:1c:ee:9c:c3:2a:f0:df:21:
53:e9:c7:06:76:fb:25:d2:5b:4f:8d:84:3c:8a:75:
df:a7:eb:4b:fd:64:5e:4b:be:ee:60:5c:46:83:22:
ca:60:5d:5f:7c:be:e3:ce:30:4b:d2:ef:f7:ff:7d:
5d:24:dc:c3:46:9f:cf:ee:5d:68:da:06:e5:53:32:
bf:ba:fa:14:69:95:23:d6:9d:4e:bc:8c:35:c5:8e:
c9:f3:99:7f:d5:0b:7a:29:34:a0:c7:c9:a0:80:14:
4e:55:a6:fe:90:fb:30:63:27:23:de:4c:78:98:e3:
70:d1:bf:52:c6:29:ab:da:af:29:3c:55:7d:dd:8c:
cb:7b:00:ca:ff:ec:f4:90:03:18:e3:7c:3e:4b:48:
31:12:e8:a4:5f:e5:e5:20:13:f8:29:75:a6:95:23:
3d:12:a8:50:6e:02:35:04:3e:e7:37:a1:d5:bc:43:
98:17:aa:16:5a:f9:76:2f:22:79:57:42:c8:a1:0a:
66:1d:36:64:e6:47:3c:18:54:48:76:88:b8:80:cc:
b0:4f:0b:75:f8:8e:f4:9a:8f:61:bd:8d:32:08:89:
d7:16:55:fc:21:70:7b:46:9f:c3:95:97:69:33:e2:
75:a8:df:5b:10:df:d1:18:ff:2b:4a:df:ff:90:02:
49:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:66:94:AF:55:EB:B7:2F:16:13:B2:30:F8:90:E7:14:67:FA:7C:E4
X509v3 Authority Key Identifier:
keyid:41:F2:82:CC:1C:07:69:7F:F5:B5:19:0C:71:43:93:D5:42:40:6D:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QfKCzBwHaX_1tRkMcUOT1UJAbUM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/aeae95-40bd-4aad-ab14-e3eecf9dfaad/1/oGaUr1Xrty8WE7Iw-JDnFGf6fOQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/aeae95-40bd-4aad-ab14-e3eecf9dfaad/1/QfKCzBwHaX_1tRkMcUOT1UJAbUM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.90.168.0/22
IPv6:
2a0d:f100::/29
Signature Algorithm: sha256WithRSAEncryption
08:a1:aa:30:0a:73:77:2c:16:5c:6c:a1:34:ab:fa:58:31:cc:
54:24:84:5c:aa:9b:90:1b:54:e9:fb:03:fa:5f:d4:bf:d5:0f:
cd:51:3b:03:2f:75:38:44:56:e3:e7:c8:57:84:6c:b4:43:20:
3f:a4:4f:89:05:27:d3:43:c0:fc:b6:b1:92:e9:27:73:30:80:
85:f6:00:c5:b5:87:24:0e:7e:96:5b:16:c3:00:ae:e1:f9:0c:
5e:4a:2a:69:e9:0d:35:c8:43:d1:b9:2d:7b:27:6a:79:66:9d:
f1:0d:0b:16:1a:ce:05:6a:ce:0f:cb:f5:22:67:8c:da:a6:0f:
bc:fc:3d:91:7f:73:27:13:74:98:cf:6a:11:63:23:dd:a5:02:
2b:c4:36:ec:76:9b:08:17:31:5b:e4:2f:16:be:09:0a:09:0a:
61:49:92:03:18:01:f5:cf:06:07:97:4d:05:09:eb:74:65:33:
fb:77:06:a1:e4:c7:a7:94:fb:ec:97:67:32:3e:c6:6d:5f:87:
12:70:7e:1a:45:cd:01:98:5b:cd:46:e7:e3:dc:db:12:2e:a5:
27:c5:70:73:a4:2d:38:2c:50:e6:5a:0b:d1:b4:96:c7:49:6f:
72:b2:01:3b:3c:37:7a:74:18:e3:ca:91:83:8b:39:d1:b8:35:
49:7d:a6:34
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgIEBg6guDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg0
MWYyODJjYzFjMDc2OTdmZjViNTE5MGM3MTQzOTNkNTQyNDA2ZDQzMB4XDTIyMDEw
MTA0NTgxMFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoYTA2Njk0YWY1NWVi
YjcyZjE2MTNiMjMwZjg5MGU3MTQ2N2ZhN2NlNDCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAJSMcHoW/xzunMMq8N8hU+nHBnb7JdJbT42EPIp136frS/1k
Xku+7mBcRoMiymBdX3y+484wS9Lv9/99XSTcw0afz+5daNoG5VMyv7r6FGmVI9ad
TryMNcWOyfOZf9ULeik0oMfJoIAUTlWm/pD7MGMnI95MeJjjcNG/UsYpq9qvKTxV
fd2My3sAyv/s9JADGON8PktIMRLopF/l5SAT+Cl1ppUjPRKoUG4CNQQ+5zeh1bxD
mBeqFlr5di8ieVdCyKEKZh02ZOZHPBhUSHaIuIDMsE8LdfiO9JqPYb2NMgiJ1xZV
/CFwe0afw5WXaTPidajfWxDf0Rj/K0rf/5ACSaUCAwEAAaOCAhgwggIUMB0GA1Ud
DgQWBBSgZpSvVeu3LxYTsjD4kOcUZ/p85DAfBgNVHSMEGDAWgBRB8oLMHAdpf/W1
GQxxQ5PVQkBtQzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L1FmS0N6QndIYVhfMXRSa01jVU9UMVVKQWJVTS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNWYvYWVhZTk1LTQwYmQtNGFhZC1hYjE0LWUzZWVjZjlkZmFhZC8x
L29HYVVyMVhydHk4V0U3SXctSkRuRkdmNmZPUS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNWYv
YWVhZTk1LTQwYmQtNGFhZC1hYjE0LWUzZWVjZjlkZmFhZC8xL1FmS0N6QndIYVhf
MXRSa01jVU9UMVVKQWJVTS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAu
BggrBgEFBQcBBwEB/wQfMB0wDAQCAAEwBgMEAi1aqDANBAIAAjAHAwUDKg3xADAN
BgkqhkiG9w0BAQsFAAOCAQEACKGqMApzdywWXGyhNKv6WDHMVCSEXKqbkBtU6fsD
+l/Uv9UPzVE7Ay91OERW4+fIV4RstEMgP6RPiQUn00PA/LaxkuknczCAhfYAxbWH
JA5+llsWwwCu4fkMXkoqaekNNchD0bkteydqeWad8Q0LFhrOBWrOD8v1ImeM2qYP
vPw9kX9zJxN0mM9qEWMj3aUCK8Q27HabCBcxW+QvFr4JCgkKYUmSAxgB9c8GB5dN
BQnrdGUz+3cGoeTHp5T77JdnMj7GbV+HEnB+GkXNAZhbzUbn49zbEi6lJ8Vwc6Qt
OCxQ5loL0bSWx0lvcrIBOzw3enQY48qRg4s50bg1SX2mNA==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:32:07 2024 by rpki-client on console-fra.rpki-client.org