Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/6dbc99-bfa9-4ef7-a798-a3032615660c/1/wYEyboisJEBmBwDahf3bGXVqSMc.roa
File: wYEyboisJEBmBwDahf3bGXVqSMc.roa (raw, json)
Hash identifier: FsJdGHo6vbHMABTibs8cq2t9tgaSOeO3++OVjtzyUEU=
Subject key identifier: C1:81:32:6E:88:AC:24:40:66:07:00:DA:85:FD:DB:19:75:6A:48:C7
Certificate issuer: /CN=d98247d3f81472dbba06dbea9bd19c785d18babe
Certificate serial: 04A12E77
Authority key identifier: D9:82:47:D3:F8:14:72:DB:BA:06:DB:EA:9B:D1:9C:78:5D:18:BA:BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2YJH0_gUctu6Btvqm9GceF0Yur4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/6dbc99-bfa9-4ef7-a798-a3032615660c/1/wYEyboisJEBmBwDahf3bGXVqSMc.roa
Signing time: Thu 10 Mar 2022 16:50:20 +0000
ROA not before: Thu 10 Mar 2022 16:50:20 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 61317
IP address blocks: 194.169.48.0/24 maxlen: 24
194.169.49.0/24 maxlen: 24
45.153.90.0/24 maxlen: 24
45.153.89.0/24 maxlen: 24
45.153.91.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 77672055 (0x4a12e77)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d98247d3f81472dbba06dbea9bd19c785d18babe
Validity
Not Before: Mar 10 16:50:20 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c181326e88ac2440660700da85fddb19756a48c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:ba:c5:48:b1:ea:e9:c0:81:9e:9f:60:bf:16:
a6:4c:1f:90:f2:29:64:83:69:37:d8:71:30:1b:97:
e1:16:99:a2:07:04:b2:5e:e2:46:8a:6b:22:ba:4d:
eb:e2:fc:b4:d5:d0:3e:36:61:bb:47:44:2c:61:fc:
b0:af:6c:d9:58:51:59:7e:75:40:48:30:23:a4:77:
bd:17:54:bf:b5:c6:ac:41:5c:af:81:bb:68:22:68:
0e:32:ad:8c:b0:05:7a:f3:8a:f0:2f:1f:b2:54:b1:
e2:56:3a:c9:9d:4a:cd:44:7a:74:71:00:be:ce:11:
ba:bd:5d:21:53:de:35:31:b3:b5:90:1a:53:f7:d8:
0a:a2:a2:49:67:52:e2:a3:fb:e7:ec:1f:3e:d9:f1:
18:67:99:0e:6d:fd:7d:d0:96:f6:81:6c:5f:f7:34:
36:ef:7b:c2:98:38:11:89:90:09:5f:09:87:95:92:
a4:33:c7:82:f5:14:56:e1:e6:6d:68:25:1a:23:32:
b8:db:07:93:65:1f:5f:eb:0f:a3:bc:ab:1b:23:4f:
c0:2a:50:9c:d8:6d:b8:f1:66:33:cf:59:fd:da:78:
c4:80:f1:2a:c2:0a:9e:98:32:f2:84:42:83:d8:08:
69:b8:7a:d0:8d:75:23:8d:4e:be:5e:8c:0f:3f:18:
8d:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:81:32:6E:88:AC:24:40:66:07:00:DA:85:FD:DB:19:75:6A:48:C7
X509v3 Authority Key Identifier:
keyid:D9:82:47:D3:F8:14:72:DB:BA:06:DB:EA:9B:D1:9C:78:5D:18:BA:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2YJH0_gUctu6Btvqm9GceF0Yur4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/6dbc99-bfa9-4ef7-a798-a3032615660c/1/wYEyboisJEBmBwDahf3bGXVqSMc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/6dbc99-bfa9-4ef7-a798-a3032615660c/1/2YJH0_gUctu6Btvqm9GceF0Yur4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.153.89.0-45.153.91.255
194.169.48.0/23
Signature Algorithm: sha256WithRSAEncryption
76:14:f6:d9:6a:1f:b7:84:ba:3b:dc:37:6a:e3:8d:bf:98:b3:
8f:8f:78:30:9f:1c:ba:8f:df:55:b8:9e:12:5d:0c:31:c7:88:
bf:f9:62:a6:bb:c8:9a:a2:b5:1e:54:ea:7d:77:85:23:de:cf:
4e:d5:81:f9:c0:c8:da:74:8d:a0:34:cf:1e:70:3b:e8:b9:91:
ac:68:92:5b:4c:aa:a8:38:f6:09:98:eb:2a:28:15:fb:f1:55:
6a:26:1f:8f:16:fc:6d:ae:f7:5b:54:9a:7d:83:1f:19:08:de:
5e:34:00:30:2c:18:58:8f:c1:f6:ee:ed:2c:b1:56:26:72:f3:
78:37:9b:9b:6a:86:f5:f8:e6:52:e1:aa:64:3f:ac:c3:b2:28:
cf:3d:45:60:bb:36:dd:ba:4e:67:4a:34:a7:93:91:4b:d0:4d:
e4:35:86:8b:ab:c2:84:ea:2d:75:b7:6e:85:e7:de:93:6a:ac:
e0:d3:85:27:e0:5a:84:b0:36:68:ca:c1:a8:46:8e:7b:72:03:
0a:96:e0:67:26:c2:65:d9:04:b2:06:94:e9:d9:d2:9a:c0:e8:
fb:6c:07:35:34:8a:23:ce:4c:67:df:96:bd:7b:71:61:1c:a3:
de:2c:86:a9:bf:b9:81:cf:25:6f:db:53:ea:01:3a:7d:bc:0a:
48:a9:49:fa
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgIEBKEudzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhk
OTgyNDdkM2Y4MTQ3MmRiYmEwNmRiZWE5YmQxOWM3ODVkMThiYWJlMB4XDTIyMDMx
MDE2NTAyMFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoYzE4MTMyNmU4OGFj
MjQ0MDY2MDcwMGRhODVmZGRiMTk3NTZhNDhjNzCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAMO6xUix6unAgZ6fYL8WpkwfkPIpZINpN9hxMBuX4RaZogcE
sl7iRoprIrpN6+L8tNXQPjZhu0dELGH8sK9s2VhRWX51QEgwI6R3vRdUv7XGrEFc
r4G7aCJoDjKtjLAFevOK8C8fslSx4lY6yZ1KzUR6dHEAvs4Rur1dIVPeNTGztZAa
U/fYCqKiSWdS4qP75+wfPtnxGGeZDm39fdCW9oFsX/c0Nu97wpg4EYmQCV8Jh5WS
pDPHgvUUVuHmbWglGiMyuNsHk2UfX+sPo7yrGyNPwCpQnNhtuPFmM89Z/dp4xIDx
KsIKnpgy8oRCg9gIabh60I11I41Ovl6MDz8YjX8CAwEAAaOCAhcwggITMB0GA1Ud
DgQWBBTBgTJuiKwkQGYHANqF/dsZdWpIxzAfBgNVHSMEGDAWgBTZgkfT+BRy27oG
2+qb0Zx4XRi6vjAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
LzJZSkgwX2dVY3R1NkJ0dnFtOUdjZUYwWXVyNC5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNjgvNmRiYzk5LWJmYTktNGVmNy1hNzk4LWEzMDMyNjE1NjYwYy8x
L3dZRXlib2lzSkVCbUJ3RGFoZjNiR1hWcVNNYy5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNjgv
NmRiYzk5LWJmYTktNGVmNy1hNzk4LWEzMDMyNjE1NjYwYy8xLzJZSkgwX2dVY3R1
NkJ0dnFtOUdjZUYwWXVyNC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAt
BggrBgEFBQcBBwEB/wQeMBwwGgQCAAEwFDAMAwQALZlZAwQCLZlYAwQBwqkwMA0G
CSqGSIb3DQEBCwUAA4IBAQB2FPbZah+3hLo73Ddq442/mLOPj3gwnxy6j99VuJ4S
XQwxx4i/+WKmu8iaorUeVOp9d4Uj3s9O1YH5wMjadI2gNM8ecDvouZGsaJJbTKqo
OPYJmOsqKBX78VVqJh+PFvxtrvdbVJp9gx8ZCN5eNAAwLBhYj8H27u0ssVYmcvN4
N5ubaob1+OZS4apkP6zDsijPPUVguzbduk5nSjSnk5FL0E3kNYaLq8KE6i11t26F
596Taqzg04Un4FqEsDZoysGoRo57cgMKluBnJsJl2QSyBpTp2dKawOj7bAc1NIoj
zkxn35a9e3FhHKPeLIapv7mBzyVv21PqATp9vApIqUn6
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:01:00 2023 by rpki-client on console-ams.rpki-client.org