Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/43ff8f-cd54-4cf1-8aaf-4be18ef128b4/1/Ih5fQSGyLw6uUIFRrfqA3EfUlzY.roa
File: Ih5fQSGyLw6uUIFRrfqA3EfUlzY.roa (raw, json)
Hash identifier: TOpapRIgokHTtWGPbYPabBy3X9U4oRO2xNhVVE9Hseg=
Subject key identifier: 22:1E:5F:41:21:B2:2F:0E:AE:50:81:51:AD:FA:80:DC:47:D4:97:36
Certificate issuer: /CN=94166b704843d3d9754095c83a91b493828200a2
Certificate serial: 018B627C9DC45DEF78AB5780424214D5C040
Authority key identifier: 94:16:6B:70:48:43:D3:D9:75:40:95:C8:3A:91:B4:93:82:82:00:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lBZrcEhD09l1QJXIOpG0k4KCAKI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/43ff8f-cd54-4cf1-8aaf-4be18ef128b4/1/Ih5fQSGyLw6uUIFRrfqA3EfUlzY.roa
Signing time: Tue 24 Oct 2023 16:20:15 +0000
ROA not before: Tue 24 Oct 2023 16:20:15 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 171.22.144.0/24 maxlen: 24
91.103.120.0/21 maxlen: 24
31.43.174.0/24 maxlen: 24
185.235.71.0/24 maxlen: 24
95.111.128.0/20 maxlen: 20
95.111.144.0/20 maxlen: 20
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:62:7c:9d:c4:5d:ef:78:ab:57:80:42:42:14:d5:c0:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=94166b704843d3d9754095c83a91b493828200a2
Validity
Not Before: Oct 24 16:20:15 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=221e5f4121b22f0eae508151adfa80dc47d49736
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:87:c8:58:d9:fe:ee:7e:6b:86:38:7d:d0:93:
4e:5f:63:1e:73:b3:85:54:a3:b0:e0:a8:59:c1:10:
8e:9e:4a:50:3e:8e:78:c6:56:c6:19:d8:07:5e:e1:
23:e4:3d:91:ed:dd:fc:11:03:38:a5:44:c7:6f:67:
d0:53:00:88:fd:f4:ba:ab:b0:2a:8c:40:88:81:47:
3e:8d:b8:56:c5:4a:8c:d6:cd:6f:95:70:54:ec:00:
bc:5c:13:8c:c0:a5:aa:a2:0f:f6:12:b3:65:a1:a9:
49:eb:e7:c1:d1:13:2d:8e:2a:54:98:09:21:28:e5:
6b:20:2b:c1:52:74:3b:f5:f0:d1:92:a5:92:8a:00:
92:b1:4d:e9:bc:53:9b:ff:4b:c3:1e:0b:62:e7:3d:
47:db:a5:20:2f:cb:80:c6:e1:2a:07:6e:8f:54:0b:
60:2c:e2:d0:37:65:35:f2:e2:f7:7e:6d:ee:35:c2:
d8:85:5f:78:2c:19:f1:56:dc:d9:58:a6:0c:4d:a5:
c3:24:61:d3:2a:6a:29:26:0e:05:c8:9e:ce:89:5f:
49:a0:bf:22:6f:5f:f6:2a:ab:2f:f6:f4:85:af:e7:
a9:12:ea:5e:25:28:f6:7f:b9:e6:4a:1b:d9:3f:64:
4a:e0:c2:34:76:37:69:c7:da:e3:1f:a7:76:0c:16:
f2:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:1E:5F:41:21:B2:2F:0E:AE:50:81:51:AD:FA:80:DC:47:D4:97:36
X509v3 Authority Key Identifier:
keyid:94:16:6B:70:48:43:D3:D9:75:40:95:C8:3A:91:B4:93:82:82:00:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lBZrcEhD09l1QJXIOpG0k4KCAKI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/43ff8f-cd54-4cf1-8aaf-4be18ef128b4/1/Ih5fQSGyLw6uUIFRrfqA3EfUlzY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/43ff8f-cd54-4cf1-8aaf-4be18ef128b4/1/lBZrcEhD09l1QJXIOpG0k4KCAKI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.43.174.0/24
91.103.120.0/21
95.111.128.0/19
171.22.144.0/24
185.235.71.0/24
Signature Algorithm: sha256WithRSAEncryption
3e:ee:88:f1:6c:8f:47:f1:d7:7f:d6:58:f0:e3:2f:dc:72:95:
60:fe:30:d0:30:14:53:f2:6c:7d:a9:ac:08:77:e6:24:c2:96:
76:4e:31:8c:10:21:07:53:53:ab:e7:96:38:9f:d3:03:eb:e3:
24:83:54:67:40:c1:dd:7f:87:86:7d:85:8e:50:59:21:21:fb:
6f:f3:47:98:3c:29:54:ed:04:1d:fd:f8:3f:ce:d4:c1:3d:e9:
92:5f:78:ad:05:6e:b1:22:dd:6f:b9:f3:45:df:7f:a6:dc:95:
f7:17:fb:77:98:aa:8d:7c:c3:2f:72:1b:37:2d:cd:61:e1:c4:
11:f2:14:8d:fb:61:d9:62:71:1c:b2:17:c2:5a:23:c6:21:7d:
63:66:e2:1f:3c:c1:cf:0b:00:1b:9c:ee:73:59:a6:7b:aa:a8:
f7:ec:67:ae:32:85:8d:56:d2:ab:a8:29:f3:0e:ba:f1:35:9b:
28:33:cb:39:a8:8a:27:a7:7a:d7:f5:42:6e:4f:90:de:04:f1:
f4:f8:ba:ab:79:ce:fa:f0:04:3e:ff:c6:72:a7:cd:62:a8:cd:
27:0a:a0:c7:5a:41:8d:6e:02:4e:c6:55:16:d6:df:92:a3:40:
90:09:43:30:f3:21:fa:36:f2:7c:4c:76:44:2d:dc:5b:f9:0b:
5e:1e:d2:12
-----BEGIN CERTIFICATE-----
MIIFFTCCA/2gAwIBAgISAYtifJ3EXe94q1eAQkIU1cBAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk0MTY2YjcwNDg0M2QzZDk3NTQwOTVjODNhOTFiNDkzODI4
MjAwYTIwHhcNMjMxMDI0MTYyMDE1WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyMjFlNWY0MTIxYjIyZjBlYWU1MDgxNTFhZGZhODBkYzQ3ZDQ5NzM2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk4fIWNn+7n5rhjh90JNOX2Mec7OF
VKOw4KhZwRCOnkpQPo54xlbGGdgHXuEj5D2R7d38EQM4pUTHb2fQUwCI/fS6q7Aq
jECIgUc+jbhWxUqM1s1vlXBU7AC8XBOMwKWqog/2ErNloalJ6+fB0RMtjipUmAkh
KOVrICvBUnQ79fDRkqWSigCSsU3pvFOb/0vDHgti5z1H26UgL8uAxuEqB26PVAtg
LOLQN2U18uL3fm3uNcLYhV94LBnxVtzZWKYMTaXDJGHTKmopJg4FyJ7OiV9JoL8i
b1/2Kqsv9vSFr+epEupeJSj2f7nmShvZP2RK4MI0djdpx9rjH6d2DBbymwIDAQAB
o4ICITCCAh0wHQYDVR0OBBYEFCIeX0Ehsi8OrlCBUa36gNxH1Jc2MB8GA1UdIwQY
MBaAFJQWa3BIQ9PZdUCVyDqRtJOCggCiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbEJacmNFaEQwOWwxUUpYSU9wRzBrNEtDQUtJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Mi80M2ZmOGYtY2Q1NC00Y2YxLThhYWYt
NGJlMThlZjEyOGI0LzEvSWg1ZlFTR3lMdzZ1VUlGUnJmcUEzRWZVbHpZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Mi80M2ZmOGYtY2Q1NC00Y2YxLThhYWYtNGJlMThlZjEyOGI0
LzEvbEJacmNFaEQwOWwxUUpYSU9wRzBrNEtDQUtJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDcGCCsGAQUFBwEHAQH/BCgwJjAkBAIAATAeAwQAHyuuAwQD
W2d4AwQFX2+AAwQAqxaQAwQAuetHMA0GCSqGSIb3DQEBCwUAA4IBAQA+7ojxbI9H
8dd/1ljw4y/ccpVg/jDQMBRT8mx9qawId+YkwpZ2TjGMECEHU1Or55Y4n9MD6+Mk
g1RnQMHdf4eGfYWOUFkhIftv80eYPClU7QQd/fg/ztTBPemSX3itBW6xIt1vufNF
33+m3JX3F/t3mKqNfMMvchs3Lc1h4cQR8hSN+2HZYnEcshfCWiPGIX1jZuIfPMHP
CwAbnO5zWaZ7qqj37GeuMoWNVtKrqCnzDrrxNZsoM8s5qIonp3rX9UJuT5DeBPH0
+Lqrec768AQ+/8Zyp81iqM0nCqDHWkGNbgJOxlUW1t+So0CQCUMw8yH6NvJ8THZE
Ldxb+QteHtIS
-----END CERTIFICATE-----
Generated at Tue Dec 12 15:09:48 2023 by rpki-client on console-ams.rpki-client.org