Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/6dbc99-bfa9-4ef7-a798-a3032615660c/1/8j-T8GsGt-1JIVAonpAdHfYwxCM.roa
File: 8j-T8GsGt-1JIVAonpAdHfYwxCM.roa (raw, json)
Hash identifier: aFjyL2OBOmsgBi8gzd2XWFU9tzpovYCqushFzWMhTIY=
Subject key identifier: F2:3F:93:F0:6B:06:B7:ED:49:21:50:28:9E:90:1D:1D:F6:30:C4:23
Certificate issuer: /CN=d98247d3f81472dbba06dbea9bd19c785d18babe
Certificate serial: 0404D474
Authority key identifier: D9:82:47:D3:F8:14:72:DB:BA:06:DB:EA:9B:D1:9C:78:5D:18:BA:BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2YJH0_gUctu6Btvqm9GceF0Yur4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/6dbc99-bfa9-4ef7-a798-a3032615660c/1/8j-T8GsGt-1JIVAonpAdHfYwxCM.roa
Signing time: Sat 01 Jan 2022 13:54:45 +0000
ROA not before: Sat 01 Jan 2022 13:54:45 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 211237
IP address blocks: 45.153.90.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 67425396 (0x404d474)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d98247d3f81472dbba06dbea9bd19c785d18babe
Validity
Not Before: Jan 1 13:54:45 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f23f93f06b06b7ed492150289e901d1df630c423
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:f3:5d:f9:49:0a:ae:66:a7:2b:99:cf:41:ae:
5d:9d:10:98:44:0f:1d:4e:4e:2d:b5:90:c8:41:93:
5f:8c:ca:6c:4c:bf:37:4f:20:da:63:6c:d9:ac:47:
af:48:d4:d1:1d:32:5a:cc:95:6b:5e:e4:13:82:8f:
f5:b3:44:2e:c3:0b:6c:ad:7b:b7:75:9b:1e:cc:f6:
42:7d:ae:b2:90:b9:eb:99:dd:4f:f4:61:64:b8:c9:
d1:52:9f:e3:ea:9d:73:e2:85:77:88:09:bb:21:4d:
ae:75:6b:7f:41:ef:c0:d7:04:32:59:ff:ab:68:80:
30:57:a5:48:f9:be:24:75:c3:bc:b7:09:62:67:5b:
9f:c9:1d:b4:eb:2b:f6:cc:e2:44:70:3b:88:20:f0:
af:5f:7e:f0:b7:3c:8b:38:e5:3e:76:5e:83:5c:2d:
29:68:51:f4:d2:87:8d:6f:bb:65:e5:74:bc:4b:60:
2e:4d:e4:0e:bc:d9:61:81:8b:67:ca:85:dc:2d:22:
a8:dd:49:6f:5d:d7:32:20:06:6d:ed:f3:9e:e2:4e:
c7:12:ec:c2:6a:d1:34:22:d8:aa:83:ca:56:b1:85:
ca:76:ed:4a:02:7b:76:f9:d5:4f:49:2d:fc:d9:ea:
3b:39:2b:77:30:dc:2d:22:3e:c3:2a:75:d7:fc:5c:
69:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:3F:93:F0:6B:06:B7:ED:49:21:50:28:9E:90:1D:1D:F6:30:C4:23
X509v3 Authority Key Identifier:
keyid:D9:82:47:D3:F8:14:72:DB:BA:06:DB:EA:9B:D1:9C:78:5D:18:BA:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2YJH0_gUctu6Btvqm9GceF0Yur4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/6dbc99-bfa9-4ef7-a798-a3032615660c/1/8j-T8GsGt-1JIVAonpAdHfYwxCM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/6dbc99-bfa9-4ef7-a798-a3032615660c/1/2YJH0_gUctu6Btvqm9GceF0Yur4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.153.90.0/24
Signature Algorithm: sha256WithRSAEncryption
93:8d:11:0a:bb:c8:7c:1e:75:f5:4b:4b:90:f6:62:7b:43:ee:
7d:54:3b:8a:f8:d6:1e:8e:30:1a:43:5d:26:1c:47:db:fa:03:
04:b9:ae:55:5a:c1:70:a5:1b:dc:92:7c:c6:66:12:7e:fb:b6:
6c:16:ef:e7:6a:69:bf:22:36:76:f3:06:08:06:07:5c:5c:b5:
8a:46:b9:ae:e4:9f:61:1a:8f:fb:ce:a5:ae:a7:47:20:c0:1c:
df:38:6b:f9:d4:de:9c:6b:e5:c3:b1:04:95:ed:31:8a:04:a1:
55:11:ed:e4:e8:1a:03:08:a7:14:21:b3:26:64:9f:fb:bc:51:
f8:ee:e2:a4:43:de:31:be:b8:d4:12:bb:a1:16:07:53:a4:8d:
fe:88:af:84:47:60:c4:26:de:33:b7:f9:d6:17:ae:a0:25:a3:
dd:ce:22:55:2f:dd:40:85:6e:1b:99:1e:0c:d6:a5:fa:6a:a7:
27:54:f1:95:17:b7:5a:d2:70:80:3a:d4:75:23:8a:49:72:49:
c6:29:34:d6:bd:28:c7:b8:62:a1:34:23:62:d4:5a:96:38:64:
c9:ae:ac:f3:fc:fe:04:61:cf:07:83:b6:72:96:a1:6f:c4:4e:
5e:16:e9:fd:a8:ee:f4:b7:34:cc:05:ec:34:64:8c:2b:d7:da:
a7:05:d7:49
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEBATUdDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhk
OTgyNDdkM2Y4MTQ3MmRiYmEwNmRiZWE5YmQxOWM3ODVkMThiYWJlMB4XDTIyMDEw
MTEzNTQ0NVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoZjIzZjkzZjA2YjA2
YjdlZDQ5MjE1MDI4OWU5MDFkMWRmNjMwYzQyMzCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBALfzXflJCq5mpyuZz0GuXZ0QmEQPHU5OLbWQyEGTX4zKbEy/
N08g2mNs2axHr0jU0R0yWsyVa17kE4KP9bNELsMLbK17t3WbHsz2Qn2uspC565nd
T/RhZLjJ0VKf4+qdc+KFd4gJuyFNrnVrf0HvwNcEMln/q2iAMFelSPm+JHXDvLcJ
Ymdbn8kdtOsr9sziRHA7iCDwr19+8Lc8izjlPnZeg1wtKWhR9NKHjW+7ZeV0vEtg
Lk3kDrzZYYGLZ8qF3C0iqN1Jb13XMiAGbe3znuJOxxLswmrRNCLYqoPKVrGFynbt
SgJ7dvnVT0kt/NnqOzkrdzDcLSI+wyp11/xcaQ8CAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBTyP5Pwawa37UkhUCiekB0d9jDEIzAfBgNVHSMEGDAWgBTZgkfT+BRy27oG
2+qb0Zx4XRi6vjAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
LzJZSkgwX2dVY3R1NkJ0dnFtOUdjZUYwWXVyNC5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNjgvNmRiYzk5LWJmYTktNGVmNy1hNzk4LWEzMDMyNjE1NjYwYy8x
LzhqLVQ4R3NHdC0xSklWQW9ucEFkSGZZd3hDTS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNjgv
NmRiYzk5LWJmYTktNGVmNy1hNzk4LWEzMDMyNjE1NjYwYy8xLzJZSkgwX2dVY3R1
NkJ0dnFtOUdjZUYwWXVyNC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAC2ZWjANBgkqhkiG9w0BAQsFAAOC
AQEAk40RCrvIfB519UtLkPZie0PufVQ7ivjWHo4wGkNdJhxH2/oDBLmuVVrBcKUb
3JJ8xmYSfvu2bBbv52ppvyI2dvMGCAYHXFy1ika5ruSfYRqP+86lrqdHIMAc3zhr
+dTenGvlw7EEle0xigShVRHt5OgaAwinFCGzJmSf+7xR+O7ipEPeMb641BK7oRYH
U6SN/oivhEdgxCbeM7f51heuoCWj3c4iVS/dQIVuG5keDNal+mqnJ1TxlRe3WtJw
gDrUdSOKSXJJxik01r0ox7hioTQjYtRaljhkya6s8/z+BGHPB4O2cpahb8ROXhbp
/aju9Lc0zAXsNGSMK9fapwXXSQ==
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:01:00 2023 by rpki-client on console-ams.rpki-client.org