Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/43ff8f-cd54-4cf1-8aaf-4be18ef128b4/1/EC6G6gcL5EeXDKkt-25BYzdQfIQ.roa
File: EC6G6gcL5EeXDKkt-25BYzdQfIQ.roa (raw, json)
Hash identifier: yA3Abj3JQ15AWCYEGQqBL3x5x3CbZaWJK6KYvUj+gzM=
Subject key identifier: 10:2E:86:EA:07:0B:E4:47:97:0C:A9:2D:FB:6E:41:63:37:50:7C:84
Certificate issuer: /CN=94166b704843d3d9754095c83a91b493828200a2
Certificate serial: 01889AEEA9A2DC0E9135B067A9CEEC36CD17
Authority key identifier: 94:16:6B:70:48:43:D3:D9:75:40:95:C8:3A:91:B4:93:82:82:00:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lBZrcEhD09l1QJXIOpG0k4KCAKI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/43ff8f-cd54-4cf1-8aaf-4be18ef128b4/1/EC6G6gcL5EeXDKkt-25BYzdQfIQ.roa
Signing time: Thu 08 Jun 2023 12:15:12 +0000
ROA not before: Thu 08 Jun 2023 12:15:12 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 171.22.146.0/24 maxlen: 24
91.103.120.0/21 maxlen: 24
185.235.71.0/24 maxlen: 24
185.149.12.0/23 maxlen: 24
185.149.12.0/24 maxlen: 24
185.149.13.0/24 maxlen: 24
185.149.14.0/23 maxlen: 24
89.46.96.0/24 maxlen: 24
89.46.96.0/22 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:9a:ee:a9:a2:dc:0e:91:35:b0:67:a9:ce:ec:36:cd:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=94166b704843d3d9754095c83a91b493828200a2
Validity
Not Before: Jun 8 12:15:12 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=102e86ea070be447970ca92dfb6e416337507c84
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:ce:44:66:c6:f6:07:bd:3a:70:e8:65:ad:7a:
a6:71:4b:e8:54:6e:18:6d:71:d0:1e:c3:3d:1c:4d:
2d:39:cb:5b:72:89:f6:f1:6c:de:0b:ca:2c:e9:2f:
f1:06:e2:09:1b:27:9b:e1:45:d4:73:bb:dd:45:d5:
f0:62:58:d5:b1:6e:7b:41:ab:82:bb:85:97:42:59:
ce:72:53:42:55:62:f2:bc:4c:c6:03:0e:68:7e:4f:
f7:82:ef:25:6e:78:53:d1:0b:70:4a:8f:7c:ba:0b:
ee:ee:09:38:19:65:fd:53:79:4b:98:47:e7:33:a5:
a2:69:2e:db:1d:95:d4:6e:88:41:c7:9c:e1:88:ab:
04:32:ca:83:c0:f2:8d:63:c6:3b:cc:f7:d9:f6:c7:
f5:3f:a0:3b:a4:62:7f:b3:c6:e1:60:c6:29:20:81:
99:51:f4:24:00:a4:0e:bc:4f:26:c0:60:48:0f:4b:
c2:24:a2:39:79:6c:de:6d:50:d7:e5:b8:70:7c:d3:
60:51:58:e0:12:31:57:c1:bc:8b:60:2a:f7:76:9f:
6b:51:22:32:8f:2c:95:85:04:d3:22:65:d2:fd:e5:
93:b3:75:11:b3:ba:3a:f2:10:b1:16:63:ea:5a:6d:
ac:83:5c:9b:9e:74:37:6b:86:06:bb:9c:b9:da:9e:
2e:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:2E:86:EA:07:0B:E4:47:97:0C:A9:2D:FB:6E:41:63:37:50:7C:84
X509v3 Authority Key Identifier:
keyid:94:16:6B:70:48:43:D3:D9:75:40:95:C8:3A:91:B4:93:82:82:00:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lBZrcEhD09l1QJXIOpG0k4KCAKI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/43ff8f-cd54-4cf1-8aaf-4be18ef128b4/1/EC6G6gcL5EeXDKkt-25BYzdQfIQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/43ff8f-cd54-4cf1-8aaf-4be18ef128b4/1/lBZrcEhD09l1QJXIOpG0k4KCAKI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.46.96.0/22
91.103.120.0/21
171.22.146.0/24
185.149.12.0/22
185.235.71.0/24
Signature Algorithm: sha256WithRSAEncryption
29:d2:12:7e:f6:24:2e:d9:db:26:e6:18:f3:6f:8d:b2:da:0f:
bf:82:47:28:5e:e8:7c:6b:54:34:67:c5:21:86:a7:2c:70:2e:
53:4e:87:33:7a:1b:6b:c7:61:23:1e:0c:84:59:eb:f9:ed:51:
40:75:96:60:ae:3d:11:ee:e2:30:fd:b4:74:99:00:84:94:18:
c2:3b:81:e1:97:69:b7:db:cd:cc:3d:07:e7:1b:a5:07:e8:79:
72:f8:6d:88:32:32:bf:eb:f4:36:cd:a1:d9:a6:1e:e8:2a:cb:
04:70:14:4b:c2:c7:90:eb:fb:15:2b:7e:28:00:29:48:aa:4e:
37:7c:f2:ec:f3:be:ee:6c:b6:56:eb:6d:ea:61:20:df:81:0b:
b1:74:d1:ed:f8:68:22:ac:6e:2c:8c:c6:9b:67:a6:73:da:3a:
bc:c7:a6:2d:18:7d:19:b2:b6:cb:e2:f9:50:00:f1:40:39:2f:
3d:c7:ba:47:9b:1d:99:1e:e8:61:50:ef:bb:a9:f4:57:c3:d0:
d5:3f:3b:99:d6:76:75:e1:f6:9b:f0:58:16:b5:c0:6c:12:3c:
da:da:20:38:13:1c:c3:e5:30:98:13:f7:02:d3:5c:98:92:8a:
dc:e8:e3:9c:95:90:ec:55:33:ff:79:05:52:0b:7c:e4:bd:40:
81:67:77:18
-----BEGIN CERTIFICATE-----
MIIFFTCCA/2gAwIBAgISAYia7qmi3A6RNbBnqc7sNs0XMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk0MTY2YjcwNDg0M2QzZDk3NTQwOTVjODNhOTFiNDkzODI4
MjAwYTIwHhcNMjMwNjA4MTIxNTEyWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxMDJlODZlYTA3MGJlNDQ3OTcwY2E5MmRmYjZlNDE2MzM3NTA3Yzg0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg85EZsb2B706cOhlrXqmcUvoVG4Y
bXHQHsM9HE0tOctbcon28WzeC8os6S/xBuIJGyeb4UXUc7vdRdXwYljVsW57QauC
u4WXQlnOclNCVWLyvEzGAw5ofk/3gu8lbnhT0QtwSo98ugvu7gk4GWX9U3lLmEfn
M6WiaS7bHZXUbohBx5zhiKsEMsqDwPKNY8Y7zPfZ9sf1P6A7pGJ/s8bhYMYpIIGZ
UfQkAKQOvE8mwGBID0vCJKI5eWzebVDX5bhwfNNgUVjgEjFXwbyLYCr3dp9rUSIy
jyyVhQTTImXS/eWTs3URs7o68hCxFmPqWm2sg1ybnnQ3a4YGu5y52p4uJQIDAQAB
o4ICITCCAh0wHQYDVR0OBBYEFBAuhuoHC+RHlwypLftuQWM3UHyEMB8GA1UdIwQY
MBaAFJQWa3BIQ9PZdUCVyDqRtJOCggCiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbEJacmNFaEQwOWwxUUpYSU9wRzBrNEtDQUtJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Mi80M2ZmOGYtY2Q1NC00Y2YxLThhYWYt
NGJlMThlZjEyOGI0LzEvRUM2RzZnY0w1RWVYREtrdC0yNUJZemRRZklRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Mi80M2ZmOGYtY2Q1NC00Y2YxLThhYWYtNGJlMThlZjEyOGI0
LzEvbEJacmNFaEQwOWwxUUpYSU9wRzBrNEtDQUtJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDcGCCsGAQUFBwEHAQH/BCgwJjAkBAIAATAeAwQCWS5gAwQD
W2d4AwQAqxaSAwQCuZUMAwQAuetHMA0GCSqGSIb3DQEBCwUAA4IBAQAp0hJ+9iQu
2dsm5hjzb42y2g+/gkcoXuh8a1Q0Z8UhhqcscC5TToczehtrx2EjHgyEWev57VFA
dZZgrj0R7uIw/bR0mQCElBjCO4Hhl2m3283MPQfnG6UH6Hly+G2IMjK/6/Q2zaHZ
ph7oKssEcBRLwseQ6/sVK34oAClIqk43fPLs877ubLZW623qYSDfgQuxdNHt+Ggi
rG4sjMabZ6Zz2jq8x6YtGH0ZsrbL4vlQAPFAOS89x7pHmx2ZHuhhUO+7qfRXw9DV
PzuZ1nZ14fab8FgWtcBsEjza2iA4ExzD5TCYE/cC01yYkorc6OOclZDsVTP/eQVS
C3zkvUCBZ3cY
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:14:25 2024 by rpki-client on console-ams.rpki-client.org