Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/f4f897-82a7-4a27-b1f1-784db9b1da2b/1/GQbGYYIIlGUKIqleFJP5_mfyVNQ.roa
File: GQbGYYIIlGUKIqleFJP5_mfyVNQ.roa (raw, json)
Hash identifier: SM9ipl345ekjMMHbHhXJIbDXfC94PmWU2aynvXtX+n8=
Subject key identifier: 19:06:C6:61:82:08:94:65:0A:22:A9:5E:14:93:F9:FE:67:F2:54:D4
Certificate issuer: /CN=6fedf0b7615290aefacc5f6aa6b41d9d1843f1b6
Certificate serial: 0A231039
Authority key identifier: 6F:ED:F0:B7:61:52:90:AE:FA:CC:5F:6A:A6:B4:1D:9D:18:43:F1:B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b-3wt2FSkK76zF9qprQdnRhD8bY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/f4f897-82a7-4a27-b1f1-784db9b1da2b/1/GQbGYYIIlGUKIqleFJP5_mfyVNQ.roa
Signing time: Sat 01 Jan 2022 12:54:49 +0000
ROA not before: Sat 01 Jan 2022 12:54:49 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 61146
IP address blocks: 62.108.216.0/21 maxlen: 21
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 170070073 (0xa231039)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6fedf0b7615290aefacc5f6aa6b41d9d1843f1b6
Validity
Not Before: Jan 1 12:54:49 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=1906c661820894650a22a95e1493f9fe67f254d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:ba:0a:c6:8e:69:12:28:f1:59:de:a2:57:a6:
ae:2e:91:6e:cc:c3:d3:df:98:3b:ad:95:43:41:e3:
43:43:d9:c4:a5:66:b0:2c:a6:0f:6e:99:af:59:8d:
01:70:23:bf:cb:88:60:7d:97:f7:83:0f:f2:80:27:
35:a9:e4:dc:71:e0:d2:b4:d4:d9:1a:e9:ee:e5:b6:
bd:4c:be:93:d4:f2:67:11:26:ca:55:17:08:8d:b3:
40:6d:31:06:b5:3c:0b:95:54:e6:4e:d1:c6:3e:e9:
f2:30:5f:60:83:59:24:5d:ee:3c:60:02:af:49:88:
a6:40:b2:62:db:99:df:d9:a0:d4:ea:4f:09:3c:13:
59:03:01:dc:0c:29:8c:7a:71:cc:a4:6c:cb:40:a8:
28:b6:cf:0c:7b:77:a2:7d:23:cb:0d:77:8d:aa:5c:
e7:8f:46:be:01:ed:c8:91:3a:96:dc:dd:aa:68:3f:
4b:ec:4c:0a:03:e1:0d:e7:32:9d:1a:03:41:16:2a:
4b:2b:37:44:39:3c:dc:85:de:57:54:b4:ea:6d:dc:
63:5c:42:5a:64:57:96:43:ea:4e:55:0e:e9:0a:0b:
c8:cc:da:10:17:44:c8:09:c2:64:48:db:02:d7:70:
2e:3e:22:df:11:83:a1:4a:97:35:06:6f:37:de:d3:
1a:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:06:C6:61:82:08:94:65:0A:22:A9:5E:14:93:F9:FE:67:F2:54:D4
X509v3 Authority Key Identifier:
keyid:6F:ED:F0:B7:61:52:90:AE:FA:CC:5F:6A:A6:B4:1D:9D:18:43:F1:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b-3wt2FSkK76zF9qprQdnRhD8bY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/f4f897-82a7-4a27-b1f1-784db9b1da2b/1/GQbGYYIIlGUKIqleFJP5_mfyVNQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/f4f897-82a7-4a27-b1f1-784db9b1da2b/1/b-3wt2FSkK76zF9qprQdnRhD8bY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.108.216.0/21
Signature Algorithm: sha256WithRSAEncryption
11:d3:ff:d2:00:ea:09:66:7b:58:1b:39:c1:15:2f:2f:8f:0d:
b0:3d:06:9c:ce:fa:68:ce:fa:1f:ca:34:11:96:26:2d:9d:80:
7a:0d:ee:cf:55:53:c0:c4:24:9c:bf:8c:50:2c:01:8b:12:b7:
ec:b6:b3:67:7b:92:de:3f:3b:aa:fc:e8:5e:a3:66:a0:ad:1e:
c8:38:91:9c:be:84:22:ba:8b:98:a1:29:0c:45:bd:60:eb:5e:
37:b5:cc:a9:ac:82:d1:36:56:61:d1:08:ce:6f:8a:06:7b:7b:
d9:a9:5d:a4:d5:a1:3a:a6:ca:00:c8:40:d9:01:dd:f6:83:f5:
e7:d8:53:09:90:8e:87:16:e8:5f:38:a0:7d:8f:86:f8:ef:1e:
64:57:2c:34:20:17:c6:e5:53:a0:ad:bd:66:3e:02:62:5d:aa:
c1:2a:bb:38:3a:4a:78:33:44:3b:d5:89:c4:55:7e:a7:d3:39:
07:c5:58:d8:a7:00:34:73:63:66:a2:52:5a:b6:24:ea:05:ff:
63:ba:7f:57:18:90:31:1c:36:b8:22:7a:5b:db:2d:58:75:c0:
77:2b:9e:9f:99:4e:ad:f0:13:a4:81:29:b5:ea:d9:67:89:32:
fa:0a:b0:5f:80:aa:8b:cf:16:16:5b:1a:b2:24:3d:53:0d:23:
22:c8:73:72
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIECiMQOTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg2
ZmVkZjBiNzYxNTI5MGFlZmFjYzVmNmFhNmI0MWQ5ZDE4NDNmMWI2MB4XDTIyMDEw
MTEyNTQ0OVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoMTkwNmM2NjE4MjA4
OTQ2NTBhMjJhOTVlMTQ5M2Y5ZmU2N2YyNTRkNDCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAMW6CsaOaRIo8Vneolemri6RbszD09+YO62VQ0HjQ0PZxKVm
sCymD26Zr1mNAXAjv8uIYH2X94MP8oAnNank3HHg0rTU2Rrp7uW2vUy+k9TyZxEm
ylUXCI2zQG0xBrU8C5VU5k7Rxj7p8jBfYINZJF3uPGACr0mIpkCyYtuZ39mg1OpP
CTwTWQMB3AwpjHpxzKRsy0CoKLbPDHt3on0jyw13japc549GvgHtyJE6ltzdqmg/
S+xMCgPhDecynRoDQRYqSys3RDk83IXeV1S06m3cY1xCWmRXlkPqTlUO6QoLyMza
EBdEyAnCZEjbAtdwLj4i3xGDoUqXNQZvN97TGrkCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBQZBsZhggiUZQoiqV4Uk/n+Z/JU1DAfBgNVHSMEGDAWgBRv7fC3YVKQrvrM
X2qmtB2dGEPxtjAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L2ItM3d0MkZTa0s3NnpGOXFwclFkblJoRDhiWS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNjIvZjRmODk3LTgyYTctNGEyNy1iMWYxLTc4NGRiOWIxZGEyYi8x
L0dRYkdZWUlJbEdVS0lxbGVGSlA1X21meVZOUS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNjIv
ZjRmODk3LTgyYTctNGEyNy1iMWYxLTc4NGRiOWIxZGEyYi8xL2ItM3d0MkZTa0s3
NnpGOXFwclFkblJoRDhiWS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAz5s2DANBgkqhkiG9w0BAQsFAAOC
AQEAEdP/0gDqCWZ7WBs5wRUvL48NsD0GnM76aM76H8o0EZYmLZ2Aeg3uz1VTwMQk
nL+MUCwBixK37LazZ3uS3j87qvzoXqNmoK0eyDiRnL6EIrqLmKEpDEW9YOteN7XM
qayC0TZWYdEIzm+KBnt72aldpNWhOqbKAMhA2QHd9oP159hTCZCOhxboXzigfY+G
+O8eZFcsNCAXxuVToK29Zj4CYl2qwSq7ODpKeDNEO9WJxFV+p9M5B8VY2KcANHNj
ZqJSWrYk6gX/Y7p/VxiQMRw2uCJ6W9stWHXAdyuen5lOrfATpIEpterZZ4ky+gqw
X4Cqi88WFlsasiQ9Uw0jIshzcg==
-----END CERTIFICATE-----
Generated at Tue Apr 8 10:06:36 2025 by rpki-client