Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/43ff8f-cd54-4cf1-8aaf-4be18ef128b4/1/8LYJ-4Jk9_dlN3jjgpoW9YfkyNQ.roa
File: 8LYJ-4Jk9_dlN3jjgpoW9YfkyNQ.roa (raw, json)
Hash identifier: utxMgl867mD+6wenrEFOY93EyWLjgkR5c5WLdurxtaY=
Subject key identifier: F0:B6:09:FB:82:64:F7:F7:65:37:78:E3:82:9A:16:F5:87:E4:C8:D4
Certificate issuer: /CN=94166b704843d3d9754095c83a91b493828200a2
Certificate serial: 09A54607
Authority key identifier: 94:16:6B:70:48:43:D3:D9:75:40:95:C8:3A:91:B4:93:82:82:00:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lBZrcEhD09l1QJXIOpG0k4KCAKI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/43ff8f-cd54-4cf1-8aaf-4be18ef128b4/1/8LYJ-4Jk9_dlN3jjgpoW9YfkyNQ.roa
Signing time: Sat 01 Jan 2022 09:56:51 +0000
ROA not before: Sat 01 Jan 2022 09:56:51 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 834
IP address blocks: 171.22.146.0/24 maxlen: 24
91.103.120.0/21 maxlen: 24
185.235.71.0/24 maxlen: 24
185.149.12.0/22 maxlen: 24
89.46.96.0/22 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 161826311 (0x9a54607)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=94166b704843d3d9754095c83a91b493828200a2
Validity
Not Before: Jan 1 09:56:51 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f0b609fb8264f7f7653778e3829a16f587e4c8d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:05:2f:31:27:2e:31:26:ce:d4:c0:87:47:6d:
52:f5:ac:2c:54:b4:24:6d:80:d0:03:2d:d4:62:f8:
55:48:97:9c:1c:e9:0a:e9:a0:b9:5d:27:5d:a6:2d:
30:1c:47:07:44:a6:f2:f4:b9:d7:ef:8d:d9:c9:52:
f4:7f:5f:63:dd:74:3f:d6:66:d5:cd:80:fc:fd:d0:
9a:f7:8c:aa:65:67:22:5b:47:d8:bd:45:cc:fa:e4:
c4:e0:e9:26:2c:5f:e9:0b:c0:d5:ad:50:b3:52:6d:
02:3d:e2:a7:90:fa:70:d0:1c:bc:cc:a7:b6:52:f3:
15:5c:28:ed:18:54:a0:a7:cd:44:b0:17:2f:fd:1b:
43:a1:f3:0f:81:32:9d:2c:04:af:2f:ff:98:1a:0b:
c7:71:cb:a2:60:01:73:b5:e5:d6:91:ae:bb:ed:a8:
05:fb:ce:1a:4a:f2:00:8f:c8:6f:8b:cd:a2:f3:b8:
22:71:d1:1b:fc:35:e6:c7:9e:57:7c:0d:8e:9a:63:
98:a6:29:31:58:74:c6:3c:4a:bf:65:65:b3:6e:7c:
9e:78:cc:b1:60:c7:90:73:fc:ec:95:45:07:c8:ba:
dc:1e:2f:b7:04:44:b3:a1:a7:04:50:df:84:da:25:
7f:aa:ff:e4:4a:d8:24:6e:35:66:43:5a:de:ba:37:
16:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:B6:09:FB:82:64:F7:F7:65:37:78:E3:82:9A:16:F5:87:E4:C8:D4
X509v3 Authority Key Identifier:
keyid:94:16:6B:70:48:43:D3:D9:75:40:95:C8:3A:91:B4:93:82:82:00:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lBZrcEhD09l1QJXIOpG0k4KCAKI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/43ff8f-cd54-4cf1-8aaf-4be18ef128b4/1/8LYJ-4Jk9_dlN3jjgpoW9YfkyNQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/43ff8f-cd54-4cf1-8aaf-4be18ef128b4/1/lBZrcEhD09l1QJXIOpG0k4KCAKI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.46.96.0/22
91.103.120.0/21
171.22.146.0/24
185.149.12.0/22
185.235.71.0/24
Signature Algorithm: sha256WithRSAEncryption
25:e6:4e:ab:c3:3c:0d:38:be:82:02:16:92:5f:c6:a7:e4:80:
3d:14:cc:4a:e7:61:2e:a7:cf:78:13:cf:ee:df:7f:0c:c4:e0:
26:c5:00:4f:67:ec:10:95:53:b6:16:bd:be:24:c2:6e:d8:e5:
95:f1:c9:b4:5c:f6:f3:0e:e1:b0:cc:ed:fc:5c:16:65:61:bc:
46:eb:ca:11:c3:44:ef:8a:6b:8d:70:9c:72:a6:b6:bc:18:cf:
4b:a3:82:51:20:f3:a8:3c:f2:db:7b:87:9b:65:f2:0f:b0:e6:
60:fc:94:57:a4:32:6d:80:a4:97:46:97:7d:73:3a:de:03:d6:
06:1a:bb:cf:4f:da:15:27:12:97:4b:95:15:05:4c:0d:4a:13:
b5:a0:9e:55:3e:42:94:47:91:c7:7a:47:65:ac:7b:53:f0:e4:
6f:ca:34:80:60:ea:41:0f:ae:c9:6a:eb:a8:f9:90:0f:85:b1:
06:92:42:2c:f9:fc:96:6c:c2:53:45:de:dd:b4:8e:47:b7:0c:
6e:37:f5:65:10:16:50:12:2c:cc:23:24:63:19:fd:6d:d7:8b:
0f:56:bf:25:14:6a:b6:ff:f0:d2:0b:96:d1:fa:49:bc:8d:36:
e1:89:0c:79:74:16:ab:e7:f8:c1:bd:36:43:6f:41:5b:88:85:
db:7d:b8:7c
-----BEGIN CERTIFICATE-----
MIIFBzCCA++gAwIBAgIECaVGBzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg5
NDE2NmI3MDQ4NDNkM2Q5NzU0MDk1YzgzYTkxYjQ5MzgyODIwMGEyMB4XDTIyMDEw
MTA5NTY1MVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoZjBiNjA5ZmI4MjY0
ZjdmNzY1Mzc3OGUzODI5YTE2ZjU4N2U0YzhkNDCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAMUFLzEnLjEmztTAh0dtUvWsLFS0JG2A0AMt1GL4VUiXnBzp
CumguV0nXaYtMBxHB0Sm8vS51++N2clS9H9fY910P9Zm1c2A/P3QmveMqmVnIltH
2L1FzPrkxODpJixf6QvA1a1Qs1JtAj3ip5D6cNAcvMyntlLzFVwo7RhUoKfNRLAX
L/0bQ6HzD4EynSwEry//mBoLx3HLomABc7Xl1pGuu+2oBfvOGkryAI/Ib4vNovO4
InHRG/w15seeV3wNjppjmKYpMVh0xjxKv2Vls258nnjMsWDHkHP87JVFB8i63B4v
twREs6GnBFDfhNolf6r/5ErYJG41ZkNa3ro3FicCAwEAAaOCAiEwggIdMB0GA1Ud
DgQWBBTwtgn7gmT392U3eOOCmhb1h+TI1DAfBgNVHSMEGDAWgBSUFmtwSEPT2XVA
lcg6kbSTgoIAojAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L2xCWnJjRWhEMDlsMVFKWElPcEcwazRLQ0FLSS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNjIvNDNmZjhmLWNkNTQtNGNmMS04YWFmLTRiZTE4ZWYxMjhiNC8x
LzhMWUotNEprOV9kbE4zampncG9XOVlma3lOUS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNjIv
NDNmZjhmLWNkNTQtNGNmMS04YWFmLTRiZTE4ZWYxMjhiNC8xL2xCWnJjRWhEMDls
MVFKWElPcEcwazRLQ0FLSS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjA3
BggrBgEFBQcBBwEB/wQoMCYwJAQCAAEwHgMEAlkuYAMEA1tneAMEAKsWkgMEArmV
DAMEALnrRzANBgkqhkiG9w0BAQsFAAOCAQEAJeZOq8M8DTi+ggIWkl/Gp+SAPRTM
SudhLqfPeBPP7t9/DMTgJsUAT2fsEJVTtha9viTCbtjllfHJtFz28w7hsMzt/FwW
ZWG8RuvKEcNE74prjXCccqa2vBjPS6OCUSDzqDzy23uHm2XyD7DmYPyUV6QybYCk
l0aXfXM63gPWBhq7z0/aFScSl0uVFQVMDUoTtaCeVT5ClEeRx3pHZax7U/Dkb8o0
gGDqQQ+uyWrrqPmQD4WxBpJCLPn8lmzCU0Xe3bSOR7cMbjf1ZRAWUBIszCMkYxn9
bdeLD1a/JRRqtv/w0guW0fpJvI024YkMeXQWq+f4wb02Q29BW4iF2324fA==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:57:01 2023 by rpki-client on console-fra.rpki-client.org