Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/1bb45a-551c-4967-95ca-77344bcc9191/1/JAaCmW-AM9TNmWmSqxqk4t5_9xo.roa
File: JAaCmW-AM9TNmWmSqxqk4t5_9xo.roa (raw, json)
Hash identifier: RvIyRGV1AWsOhq7asIzwW5n46N8Qhvk4aQ/raiDaWbo=
Subject key identifier: 24:06:82:99:6F:80:33:D4:CD:99:69:92:AB:1A:A4:E2:DE:7F:F7:1A
Certificate issuer: /CN=3c4ed942e5c742e77bfb9beb954f872534f52848
Certificate serial: 0184A8A8A972821CBDE5997F8C3554A2C42B
Authority key identifier: 3C:4E:D9:42:E5:C7:42:E7:7B:FB:9B:EB:95:4F:87:25:34:F5:28:48
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PE7ZQuXHQud7-5vrlU-HJTT1KEg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/1bb45a-551c-4967-95ca-77344bcc9191/1/JAaCmW-AM9TNmWmSqxqk4t5_9xo.roa
Signing time: Thu 24 Nov 2022 08:02:16 +0000
ROA not before: Thu 24 Nov 2022 08:02:16 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 211936
IP address blocks: 62.182.168.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:a8:a8:a9:72:82:1c:bd:e5:99:7f:8c:35:54:a2:c4:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c4ed942e5c742e77bfb9beb954f872534f52848
Validity
Not Before: Nov 24 08:02:16 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=240682996f8033d4cd996992ab1aa4e2de7ff71a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:85:c3:75:3e:d7:d4:91:c3:f3:eb:db:a3:19:
e3:b6:64:ed:61:1d:16:3b:59:06:5a:e7:ef:06:56:
e4:67:11:ce:79:50:8a:1f:b4:0e:d3:7d:2e:1b:bc:
6e:22:79:a2:f2:4f:c9:ab:f8:11:dd:67:6b:ed:49:
ab:b9:4a:64:20:f8:bc:69:c3:8b:0a:8b:e0:7a:21:
31:79:1f:1a:a9:a2:87:b0:36:8c:c0:34:1c:bb:8f:
f6:a2:a8:4c:7b:73:f6:a0:b9:c1:74:d5:a1:51:1a:
2c:c3:88:ec:ab:5c:c8:5c:3f:e4:7d:5c:56:c5:38:
06:b0:d9:57:7f:ab:57:fa:66:12:12:3b:e3:e0:71:
24:5e:f9:e4:07:84:9d:d8:9e:62:54:04:82:0a:57:
2d:11:c5:1b:ea:0c:0f:c1:34:9f:95:fc:19:c5:65:
31:09:ad:4a:84:26:f8:e0:3a:90:ea:0e:d2:72:23:
5c:88:24:bf:89:50:ed:2e:4d:ef:ab:6a:3a:7c:10:
bc:5f:e3:12:8b:f7:3b:d4:53:c9:ff:07:14:eb:a6:
46:7f:2f:7f:bc:59:7e:4d:b0:63:c7:e3:09:16:7a:
f2:24:42:0f:84:ea:43:88:fa:01:d5:09:3d:ba:4f:
e8:54:c8:04:d5:f5:b5:a6:4b:db:24:ad:02:20:0d:
3f:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:06:82:99:6F:80:33:D4:CD:99:69:92:AB:1A:A4:E2:DE:7F:F7:1A
X509v3 Authority Key Identifier:
keyid:3C:4E:D9:42:E5:C7:42:E7:7B:FB:9B:EB:95:4F:87:25:34:F5:28:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PE7ZQuXHQud7-5vrlU-HJTT1KEg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/1bb45a-551c-4967-95ca-77344bcc9191/1/JAaCmW-AM9TNmWmSqxqk4t5_9xo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/1bb45a-551c-4967-95ca-77344bcc9191/1/PE7ZQuXHQud7-5vrlU-HJTT1KEg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.182.168.0/24
Signature Algorithm: sha256WithRSAEncryption
30:ec:35:cd:58:af:39:0d:9c:04:70:96:e9:b4:63:c8:cc:d4:
a5:c7:ef:1b:ae:c9:2b:29:65:19:e0:df:dc:4a:d1:c8:d0:35:
3f:9d:1b:b3:98:53:70:39:d9:ea:4e:9a:0e:e1:3e:f0:26:12:
5a:f1:e5:34:4a:44:6c:9d:04:c7:96:e9:a4:75:0a:3d:42:a2:
14:f4:91:4c:ca:d5:ed:41:ce:94:81:09:34:51:d4:81:c6:be:
e5:1e:4c:d1:48:d6:be:33:16:47:76:f9:14:4b:20:d9:2f:2a:
56:27:73:c4:b4:85:a7:3b:89:ad:e4:33:a6:0f:36:37:7b:9a:
25:f5:6d:18:b7:56:d6:f7:3e:db:19:39:9e:69:b6:65:f5:a8:
8c:5c:f1:ac:2c:f7:61:48:41:f1:38:5b:a0:73:df:39:44:c6:
6b:a1:ef:31:f1:65:b1:f7:b6:d8:e8:4f:7e:b9:5a:66:12:47:
2c:09:94:f0:db:05:48:d6:a9:77:69:97:3a:f6:40:ad:93:54:
5e:45:53:8b:25:65:04:ee:5f:a6:41:f0:8a:66:a9:34:f0:cc:
f6:c5:f9:f1:61:02:87:d0:b0:9e:92:eb:3a:f8:ae:a3:59:03:
42:55:be:08:27:a4:ac:65:98:dc:ec:fd:70:3b:50:42:49:5f:
8a:ef:42:d6
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYSoqKlyghy95Zl/jDVUosQrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNjNGVkOTQyZTVjNzQyZTc3YmZiOWJlYjk1NGY4NzI1MzRm
NTI4NDgwHhcNMjIxMTI0MDgwMjE2WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyNDA2ODI5OTZmODAzM2Q0Y2Q5OTY5OTJhYjFhYTRlMmRlN2ZmNzFhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0YXDdT7X1JHD8+vboxnjtmTtYR0W
O1kGWufvBlbkZxHOeVCKH7QO030uG7xuInmi8k/Jq/gR3Wdr7UmruUpkIPi8acOL
CovgeiExeR8aqaKHsDaMwDQcu4/2oqhMe3P2oLnBdNWhURosw4jsq1zIXD/kfVxW
xTgGsNlXf6tX+mYSEjvj4HEkXvnkB4Sd2J5iVASCClctEcUb6gwPwTSflfwZxWUx
Ca1KhCb44DqQ6g7SciNciCS/iVDtLk3vq2o6fBC8X+MSi/c71FPJ/wcU66ZGfy9/
vFl+TbBjx+MJFnryJEIPhOpDiPoB1Qk9uk/oVMgE1fW1pkvbJK0CIA0//QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFCQGgplvgDPUzZlpkqsapOLef/caMB8GA1UdIwQY
MBaAFDxO2ULlx0Lne/ub65VPhyU09ShIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUEU3WlF1WEhRdWQ3LTV2cmxVLUhKVFQxS0VnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni8xYmI0NWEtNTUxYy00OTY3LTk1Y2Et
NzczNDRiY2M5MTkxLzEvSkFhQ21XLUFNOVRObVdtU3F4cWs0dDVfOXhvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Ni8xYmI0NWEtNTUxYy00OTY3LTk1Y2EtNzczNDRiY2M5MTkx
LzEvUEU3WlF1WEhRdWQ3LTV2cmxVLUhKVFQxS0VnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAPraoMA0G
CSqGSIb3DQEBCwUAA4IBAQAw7DXNWK85DZwEcJbptGPIzNSlx+8brskrKWUZ4N/c
StHI0DU/nRuzmFNwOdnqTpoO4T7wJhJa8eU0SkRsnQTHlumkdQo9QqIU9JFMytXt
Qc6UgQk0UdSBxr7lHkzRSNa+MxZHdvkUSyDZLypWJ3PEtIWnO4mt5DOmDzY3e5ol
9W0Yt1bW9z7bGTmeabZl9aiMXPGsLPdhSEHxOFugc985RMZroe8x8WWx97bY6E9+
uVpmEkcsCZTw2wVI1ql3aZc69kCtk1ReRVOLJWUE7l+mQfCKZqk08Mz2xfnxYQKH
0LCekus6+K6jWQNCVb4IJ6SsZZjc7P1wO1BCSV+K70LW
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:15:54 2025 by rpki-client