Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/43ff8f-cd54-4cf1-8aaf-4be18ef128b4/1/HjwEdvqz2lDQIY6YALAUIF-gCco.roa
File: HjwEdvqz2lDQIY6YALAUIF-gCco.roa (raw, json)
Hash identifier: ptR1f4m/vx/g/AmKKcshMnt2D5y5XAwj7hHshXzSJ4Q=
Subject key identifier: 1E:3C:04:76:FA:B3:DA:50:D0:21:8E:98:00:B0:14:20:5F:A0:09:CA
Certificate issuer: /CN=94166b704843d3d9754095c83a91b493828200a2
Certificate serial: 018572B426B534191917BD411B08AC3E1F92
Authority key identifier: 94:16:6B:70:48:43:D3:D9:75:40:95:C8:3A:91:B4:93:82:82:00:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lBZrcEhD09l1QJXIOpG0k4KCAKI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/43ff8f-cd54-4cf1-8aaf-4be18ef128b4/1/HjwEdvqz2lDQIY6YALAUIF-gCco.roa
Signing time: Mon 02 Jan 2023 13:38:07 +0000
ROA not before: Mon 02 Jan 2023 13:38:07 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 210122
IP address blocks: 89.46.98.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:b4:26:b5:34:19:19:17:bd:41:1b:08:ac:3e:1f:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=94166b704843d3d9754095c83a91b493828200a2
Validity
Not Before: Jan 2 13:38:07 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1e3c0476fab3da50d0218e9800b014205fa009ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:2e:f4:86:95:d7:4a:81:b1:7f:ec:03:1b:df:
72:97:58:30:10:0b:3b:4a:55:5b:99:d8:fb:20:00:
5f:14:1a:5c:a4:82:c9:64:22:c6:e7:53:99:4b:d3:
ec:f2:ba:e4:6e:47:5c:fa:fe:27:a6:27:73:37:c1:
6a:03:2d:66:40:b8:e5:e2:3f:af:b3:10:86:f3:9a:
1e:9e:c7:6b:de:f5:75:a4:ff:f4:5e:6b:02:b8:52:
e1:0e:13:1d:f9:59:07:95:be:1f:f5:a5:a8:fc:b3:
76:b9:fc:fd:aa:c8:ba:14:62:c7:c3:b5:c1:b1:b9:
e9:98:bf:08:7c:d2:6b:b4:8c:cf:b4:0d:53:d2:51:
05:ed:90:69:94:1f:b1:16:5b:57:8d:5a:62:c0:08:
8f:5f:0a:6e:c9:80:3b:48:85:ee:eb:ad:3e:d6:15:
87:c8:e8:82:a3:8a:59:2c:eb:24:63:67:c1:ad:a6:
f1:b1:73:6f:d9:dc:1a:9e:10:61:4e:7a:37:80:7b:
13:c4:4b:b5:c4:19:3a:61:7d:e1:9f:e4:61:e2:75:
14:fa:12:bd:f5:5d:0f:30:5e:c2:b9:d5:cf:21:9f:
e6:1d:4b:81:7d:88:f5:0f:ea:93:d9:ac:7c:6b:a7:
91:20:04:4f:12:3a:45:e0:a4:5c:db:f9:3d:58:47:
bc:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:3C:04:76:FA:B3:DA:50:D0:21:8E:98:00:B0:14:20:5F:A0:09:CA
X509v3 Authority Key Identifier:
keyid:94:16:6B:70:48:43:D3:D9:75:40:95:C8:3A:91:B4:93:82:82:00:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lBZrcEhD09l1QJXIOpG0k4KCAKI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/43ff8f-cd54-4cf1-8aaf-4be18ef128b4/1/HjwEdvqz2lDQIY6YALAUIF-gCco.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/43ff8f-cd54-4cf1-8aaf-4be18ef128b4/1/lBZrcEhD09l1QJXIOpG0k4KCAKI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.46.98.0/24
Signature Algorithm: sha256WithRSAEncryption
95:e9:db:41:62:d1:02:62:ee:d5:00:27:90:c7:d8:2e:1b:d1:
02:6d:91:93:fe:16:71:d9:a3:af:5d:b3:8f:c4:3b:88:b0:25:
6d:ba:d1:17:68:c3:9b:bf:e6:68:ed:b7:49:8a:82:e0:d8:f3:
2d:43:f0:6f:cf:a3:42:6d:7b:71:c1:66:71:16:78:1a:9c:d6:
9c:3a:03:d7:c2:b5:5b:cf:06:69:89:7a:16:ac:c8:0b:92:75:
57:09:96:35:5b:f0:c7:29:8b:8d:84:6e:8a:ad:8a:61:6f:86:
c8:fe:1f:7a:97:c8:45:e4:60:fb:7f:58:67:52:7e:b4:04:ee:
f2:50:79:d4:92:f7:08:6f:87:2b:65:a5:b6:31:fc:b8:26:77:
ae:b9:c4:85:5b:d7:44:4b:5b:fb:66:e8:ef:dd:a9:11:a4:27:
39:74:97:70:a4:28:52:50:c5:85:1f:27:6a:fc:c1:25:33:28:
22:5c:4f:af:82:74:35:c0:29:8c:7e:90:cb:69:f4:88:ae:7b:
dc:29:55:16:b7:45:d0:fc:43:74:10:c4:1a:88:cc:f2:b7:12:
cd:9f:ad:aa:0b:bf:9c:51:52:2f:b5:23:8f:f4:94:94:9b:6a:
a7:20:be:86:48:43:76:96:15:9e:41:df:8c:2a:95:ca:0f:24:
0a:40:00:16
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVytCa1NBkZF71BGwisPh+SMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk0MTY2YjcwNDg0M2QzZDk3NTQwOTVjODNhOTFiNDkzODI4
MjAwYTIwHhcNMjMwMTAyMTMzODA3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxZTNjMDQ3NmZhYjNkYTUwZDAyMThlOTgwMGIwMTQyMDVmYTAwOWNhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0C70hpXXSoGxf+wDG99yl1gwEAs7
SlVbmdj7IABfFBpcpILJZCLG51OZS9Ps8rrkbkdc+v4npidzN8FqAy1mQLjl4j+v
sxCG85oensdr3vV1pP/0XmsCuFLhDhMd+VkHlb4f9aWo/LN2ufz9qsi6FGLHw7XB
sbnpmL8IfNJrtIzPtA1T0lEF7ZBplB+xFltXjVpiwAiPXwpuyYA7SIXu660+1hWH
yOiCo4pZLOskY2fBrabxsXNv2dwanhBhTno3gHsTxEu1xBk6YX3hn+Rh4nUU+hK9
9V0PMF7CudXPIZ/mHUuBfYj1D+qT2ax8a6eRIARPEjpF4KRc2/k9WEe8NQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFB48BHb6s9pQ0CGOmACwFCBfoAnKMB8GA1UdIwQY
MBaAFJQWa3BIQ9PZdUCVyDqRtJOCggCiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbEJacmNFaEQwOWwxUUpYSU9wRzBrNEtDQUtJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Mi80M2ZmOGYtY2Q1NC00Y2YxLThhYWYt
NGJlMThlZjEyOGI0LzEvSGp3RWR2cXoybERRSVk2WUFMQVVJRi1nQ2NvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Mi80M2ZmOGYtY2Q1NC00Y2YxLThhYWYtNGJlMThlZjEyOGI0
LzEvbEJacmNFaEQwOWwxUUpYSU9wRzBrNEtDQUtJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAWS5iMA0G
CSqGSIb3DQEBCwUAA4IBAQCV6dtBYtECYu7VACeQx9guG9ECbZGT/hZx2aOvXbOP
xDuIsCVtutEXaMObv+Zo7bdJioLg2PMtQ/Bvz6NCbXtxwWZxFnganNacOgPXwrVb
zwZpiXoWrMgLknVXCZY1W/DHKYuNhG6KrYphb4bI/h96l8hF5GD7f1hnUn60BO7y
UHnUkvcIb4crZaW2Mfy4JneuucSFW9dES1v7Zujv3akRpCc5dJdwpChSUMWFHydq
/MElMygiXE+vgnQ1wCmMfpDLafSIrnvcKVUWt0XQ/EN0EMQaiMzytxLNn62qC7+c
UVIvtSOP9JSUm2qnIL6GSEN2lhWeQd+MKpXKDyQKQAAW
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:00:42 2023 by rpki-client on console-ams.rpki-client.org