Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/866b6b-f56c-4a2f-902d-fbc36e4348f5/1/KaMz6j_FE19_5PD4fu5QoERASks.roa
File: KaMz6j_FE19_5PD4fu5QoERASks.roa (raw, json)
Hash identifier: su5gJ/Kbp6NvqSUlrKhOoU3g4oRC96XaXaYiNCisBBk=
Subject key identifier: 29:A3:33:EA:3F:C5:13:5F:7F:E4:F0:F8:7E:EE:50:A0:44:40:4A:4B
Certificate issuer: /CN=002fa6e19056838905bc32b53ab0d1047d78e4d4
Certificate serial: 06DB5367
Authority key identifier: 00:2F:A6:E1:90:56:83:89:05:BC:32:B5:3A:B0:D1:04:7D:78:E4:D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AC-m4ZBWg4kFvDK1OrDRBH145NQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/866b6b-f56c-4a2f-902d-fbc36e4348f5/1/KaMz6j_FE19_5PD4fu5QoERASks.roa
Signing time: Tue 03 May 2022 10:41:21 +0000
ROA not before: Tue 03 May 2022 10:41:21 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 39049
IP address blocks: 94.231.36.0/22 maxlen: 22
94.231.32.0/21 maxlen: 21
94.231.32.0/22 maxlen: 22
195.66.136.0/24 maxlen: 24
195.66.136.0/23 maxlen: 23
195.66.137.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 115037031 (0x6db5367)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=002fa6e19056838905bc32b53ab0d1047d78e4d4
Validity
Not Before: May 3 10:41:21 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=29a333ea3fc5135f7fe4f0f87eee50a044404a4b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:d8:cf:4c:fb:f4:98:67:5b:10:c8:15:13:22:
5f:a3:7c:58:ab:ad:39:6e:9f:75:5d:ac:c9:de:e7:
5b:90:6e:ab:0b:42:48:bb:70:7d:b4:5a:d6:90:53:
76:99:37:c7:79:4a:2e:dc:8c:49:b7:9d:cf:ea:63:
33:c7:36:94:81:dc:b0:40:6b:3b:34:9f:6c:2b:20:
c0:2e:4c:31:16:d5:57:cc:8a:ea:b6:2a:ff:66:4b:
ae:5c:c5:22:eb:81:24:d3:ea:e7:9b:62:8a:07:a1:
21:78:f4:2e:8c:c6:8a:b9:58:fc:01:60:07:50:8b:
48:18:4e:96:35:c5:ad:01:c4:d4:87:f5:e7:54:ff:
3d:43:7a:35:a1:d4:86:24:1a:82:a5:fa:da:04:09:
66:80:85:b3:fd:4c:3b:9b:b3:51:3a:77:14:95:dd:
98:5a:da:ac:91:f9:00:ff:be:8d:81:32:e9:4a:e8:
ec:ac:3f:96:8c:1e:1a:25:34:6a:73:f7:b2:d2:33:
a8:69:fc:d8:6e:cd:53:aa:fd:07:e5:09:45:e3:5c:
c3:8f:0b:c3:e8:a8:c9:a2:de:04:7f:54:18:9a:b7:
b0:7c:36:7a:09:15:a9:bc:d2:6b:9c:86:11:70:60:
4e:88:fe:7a:28:b4:27:9f:9e:d3:1f:a5:59:69:35:
5e:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:A3:33:EA:3F:C5:13:5F:7F:E4:F0:F8:7E:EE:50:A0:44:40:4A:4B
X509v3 Authority Key Identifier:
keyid:00:2F:A6:E1:90:56:83:89:05:BC:32:B5:3A:B0:D1:04:7D:78:E4:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AC-m4ZBWg4kFvDK1OrDRBH145NQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/866b6b-f56c-4a2f-902d-fbc36e4348f5/1/KaMz6j_FE19_5PD4fu5QoERASks.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/866b6b-f56c-4a2f-902d-fbc36e4348f5/1/AC-m4ZBWg4kFvDK1OrDRBH145NQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.231.32.0/21
195.66.136.0/23
Signature Algorithm: sha256WithRSAEncryption
71:7e:a3:4e:d5:b0:6f:6a:8e:20:a6:0b:27:30:f9:65:bc:62:
63:fb:9d:f1:07:23:b3:e0:f2:0a:64:ee:a5:2b:1c:4d:cf:56:
67:a9:27:9c:fd:d3:97:33:0d:c0:e4:aa:54:d8:29:3a:8a:0e:
87:cf:d7:8a:5b:53:49:dc:c0:c5:43:dd:72:23:44:c3:b7:46:
a5:2e:48:98:ee:03:3c:fc:c1:29:03:74:f5:4c:71:ee:e4:15:
5e:ae:67:0a:81:36:27:d3:1b:a6:20:99:4c:9f:a5:7e:84:40:
97:1a:bf:47:5c:db:b4:1d:7b:43:12:cf:c4:af:9f:8e:c0:0c:
fc:ea:c2:0b:01:cb:5c:e9:97:c6:fd:62:2c:4c:f9:b3:e4:1c:
24:0e:21:56:bf:c7:b1:f6:87:da:d4:98:90:8d:4b:6e:7d:bd:
ed:83:91:e2:fe:2f:ef:72:1d:00:39:c9:4e:ef:22:77:a0:df:
f8:56:1f:2e:a9:aa:71:93:99:a6:74:c3:79:6b:d7:34:b2:19:
52:ab:48:6f:f2:f2:41:08:44:93:ce:4b:1a:15:44:78:59:03:
87:37:01:c7:18:4c:a7:b1:dd:d3:46:07:99:5c:21:04:ea:87:
de:2c:41:b6:8c:1c:7c:3d:6a:be:1a:40:73:ed:fb:59:33:80:
5c:78:89:fc
-----BEGIN CERTIFICATE-----
MIIE9TCCA92gAwIBAgIEBttTZzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygw
MDJmYTZlMTkwNTY4Mzg5MDViYzMyYjUzYWIwZDEwNDdkNzhlNGQ0MB4XDTIyMDUw
MzEwNDEyMVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoMjlhMzMzZWEzZmM1
MTM1ZjdmZTRmMGY4N2VlZTUwYTA0NDQwNGE0YjCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAKXYz0z79JhnWxDIFRMiX6N8WKutOW6fdV2syd7nW5BuqwtC
SLtwfbRa1pBTdpk3x3lKLtyMSbedz+pjM8c2lIHcsEBrOzSfbCsgwC5MMRbVV8yK
6rYq/2ZLrlzFIuuBJNPq55tiigehIXj0LozGirlY/AFgB1CLSBhOljXFrQHE1If1
51T/PUN6NaHUhiQagqX62gQJZoCFs/1MO5uzUTp3FJXdmFrarJH5AP++jYEy6Uro
7Kw/loweGiU0anP3stIzqGn82G7NU6r9B+UJReNcw48Lw+ioyaLeBH9UGJq3sHw2
egkVqbzSa5yGEXBgToj+eii0J5+e0x+lWWk1Xi8CAwEAAaOCAg8wggILMB0GA1Ud
DgQWBBQpozPqP8UTX3/k8Ph+7lCgREBKSzAfBgNVHSMEGDAWgBQAL6bhkFaDiQW8
MrU6sNEEfXjk1DAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L0FDLW00WkJXZzRrRnZESzFPckRSQkgxNDVOUS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNjcvODY2YjZiLWY1NmMtNGEyZi05MDJkLWZiYzM2ZTQzNDhmNS8x
L0thTXo2al9GRTE5XzVQRDRmdTVRb0VSQVNrcy5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNjcv
ODY2YjZiLWY1NmMtNGEyZi05MDJkLWZiYzM2ZTQzNDhmNS8xL0FDLW00WkJXZzRr
RnZESzFPckRSQkgxNDVOUS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAl
BggrBgEFBQcBBwEB/wQWMBQwEgQCAAEwDAMEA17nIAMEAcNCiDANBgkqhkiG9w0B
AQsFAAOCAQEAcX6jTtWwb2qOIKYLJzD5ZbxiY/ud8Qcjs+DyCmTupSscTc9WZ6kn
nP3TlzMNwOSqVNgpOooOh8/XiltTSdzAxUPdciNEw7dGpS5ImO4DPPzBKQN09Uxx
7uQVXq5nCoE2J9MbpiCZTJ+lfoRAlxq/R1zbtB17QxLPxK+fjsAM/OrCCwHLXOmX
xv1iLEz5s+QcJA4hVr/HsfaH2tSYkI1Lbn297YOR4v4v73IdADnJTu8id6Df+FYf
LqmqcZOZpnTDeWvXNLIZUqtIb/LyQQhEk85LGhVEeFkDhzcBxxhMp7Hd00YHmVwh
BOqH3ixBtowcfD1qvhpAc+37WTOAXHiJ/A==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:57:17 2023 by rpki-client on console-fra.rpki-client.org