Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/0e18d2-d80b-4aa0-aaef-069661675106/1/t7bzyrfd7PN8P_qO3QFHaSiFQ-U.roa
File: t7bzyrfd7PN8P_qO3QFHaSiFQ-U.roa (raw, json)
Hash identifier: trlmzaYM+BmEufhNdDwT/jrUNLDP1kYUiVqeckVslhc=
Subject key identifier: B7:B6:F3:CA:B7:DD:EC:F3:7C:3F:FA:8E:DD:01:47:69:28:85:43:E5
Certificate issuer: /CN=b0f619ef200840dfa8fd43567c7a978c15312d7f
Certificate serial: 018D3BDFFE2F2F012D7CBA7E619AD25A2003
Authority key identifier: B0:F6:19:EF:20:08:40:DF:A8:FD:43:56:7C:7A:97:8C:15:31:2D:7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sPYZ7yAIQN-o_UNWfHqXjBUxLX8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/0e18d2-d80b-4aa0-aaef-069661675106/1/t7bzyrfd7PN8P_qO3QFHaSiFQ-U.roa
Signing time: Wed 24 Jan 2024 14:29:11 +0000
ROA not before: Wed 24 Jan 2024 14:29:11 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 43201
IP address blocks: 91.247.79.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:3b:df:fe:2f:2f:01:2d:7c:ba:7e:61:9a:d2:5a:20:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b0f619ef200840dfa8fd43567c7a978c15312d7f
Validity
Not Before: Jan 24 14:29:11 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b7b6f3cab7ddecf37c3ffa8edd014769288543e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:f7:18:b6:dd:4c:88:2e:fa:69:ce:30:c8:04:
ba:90:7b:87:9b:c4:9b:ca:c8:73:02:e4:29:77:1e:
f4:b0:9d:14:d3:b5:5a:4b:d4:49:7b:97:d1:88:88:
4b:aa:f9:cf:3a:52:96:02:c2:b3:ab:f4:60:42:7c:
b7:94:3a:4e:00:fc:89:94:99:04:8a:1f:6d:73:57:
ed:1a:45:42:b7:b3:59:a1:13:a8:d2:0e:59:9d:af:
a7:bd:0a:08:11:b5:cb:87:7c:34:18:32:bf:54:38:
e2:05:9b:32:28:17:52:48:cb:a6:d5:12:23:56:6c:
c7:f2:da:64:66:ab:8e:fb:60:9b:8f:b7:28:bf:b4:
6d:b6:c6:19:93:1d:ee:4f:10:75:1a:1d:19:7e:a4:
ed:2b:19:5e:16:b6:69:8d:0d:cd:13:1c:db:31:72:
82:8d:54:6c:3c:e8:65:48:8a:99:7d:82:3e:c9:2b:
60:5f:2d:4e:d2:fc:c1:c5:d3:29:e5:c3:c7:5e:70:
6d:1d:1b:61:0c:1e:4e:98:95:99:dd:97:96:a1:62:
53:d2:43:87:39:d6:fd:e1:72:be:11:c6:a4:e2:48:
c5:45:ac:8a:7b:1f:0b:99:0b:5b:fe:16:47:2c:e7:
ff:3e:90:ac:1d:95:e9:f3:1a:71:7b:c8:d4:5d:34:
ba:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:B6:F3:CA:B7:DD:EC:F3:7C:3F:FA:8E:DD:01:47:69:28:85:43:E5
X509v3 Authority Key Identifier:
keyid:B0:F6:19:EF:20:08:40:DF:A8:FD:43:56:7C:7A:97:8C:15:31:2D:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sPYZ7yAIQN-o_UNWfHqXjBUxLX8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/0e18d2-d80b-4aa0-aaef-069661675106/1/t7bzyrfd7PN8P_qO3QFHaSiFQ-U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/0e18d2-d80b-4aa0-aaef-069661675106/1/sPYZ7yAIQN-o_UNWfHqXjBUxLX8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.247.79.0/24
Signature Algorithm: sha256WithRSAEncryption
a3:3e:85:d2:0e:8d:df:6b:c5:f5:32:34:80:a5:a5:b3:64:2e:
1e:ca:bd:62:79:09:d3:f1:28:d9:dd:2d:01:5f:5f:2e:bc:0f:
45:cc:f2:96:21:7a:11:90:1b:13:9a:fe:10:14:3a:ca:f8:6c:
87:69:fa:d5:e3:35:dd:b7:99:55:4c:9d:da:db:15:68:bb:6a:
63:8d:93:03:e9:81:f7:2c:3e:e2:2e:6f:54:61:0b:14:ea:b9:
47:ec:5b:6f:b1:21:fa:53:e9:54:7e:66:58:d9:cc:11:2b:93:
31:f0:d2:b4:ef:be:0d:df:b6:e9:2c:90:13:bd:98:a9:b1:86:
c3:68:4e:f7:79:cc:98:5b:89:48:95:e0:25:0e:42:42:8d:6f:
fb:cb:3e:97:b9:d4:d9:d1:37:b5:d5:57:5c:a1:b4:7f:0a:82:
ee:fe:af:b9:7e:75:a4:9f:e1:3c:66:5f:71:be:a5:ee:69:6f:
2c:9a:35:6a:67:8e:30:7c:cb:ad:56:15:7c:15:f4:2f:3d:2c:
7b:78:42:3a:87:c1:34:8f:dd:a4:9d:ed:7a:1e:30:e6:da:a6:
09:51:c4:1f:af:8e:fd:42:30:14:be:e2:08:d2:43:e8:54:7e:
99:01:74:7e:c1:5e:58:4f:5f:03:77:6d:d8:47:6e:38:c9:22:
43:98:62:b3
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAY073/4vLwEtfLp+YZrSWiADMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIwZjYxOWVmMjAwODQwZGZhOGZkNDM1NjdjN2E5NzhjMTUz
MTJkN2YwHhcNMjQwMTI0MTQyOTExWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiN2I2ZjNjYWI3ZGRlY2YzN2MzZmZhOGVkZDAxNDc2OTI4ODU0M2U1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs/cYtt1MiC76ac4wyAS6kHuHm8Sb
yshzAuQpdx70sJ0U07VaS9RJe5fRiIhLqvnPOlKWAsKzq/RgQny3lDpOAPyJlJkE
ih9tc1ftGkVCt7NZoROo0g5Zna+nvQoIEbXLh3w0GDK/VDjiBZsyKBdSSMum1RIj
VmzH8tpkZquO+2Cbj7cov7RttsYZkx3uTxB1Gh0ZfqTtKxleFrZpjQ3NExzbMXKC
jVRsPOhlSIqZfYI+yStgXy1O0vzBxdMp5cPHXnBtHRthDB5OmJWZ3ZeWoWJT0kOH
Odb94XK+Ecak4kjFRayKex8LmQtb/hZHLOf/PpCsHZXp8xpxe8jUXTS6vQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFLe288q33ezzfD/6jt0BR2kohUPlMB8GA1UdIwQY
MBaAFLD2Ge8gCEDfqP1DVnx6l4wVMS1/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc1BZWjd5QUlRTi1vX1VOV2ZIcVhqQlV4TFg4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yi8wZTE4ZDItZDgwYi00YWEwLWFhZWYt
MDY5NjYxNjc1MTA2LzEvdDdienlyZmQ3UE44UF9xTzNRRkhhU2lGUS1VLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Yi8wZTE4ZDItZDgwYi00YWEwLWFhZWYtMDY5NjYxNjc1MTA2
LzEvc1BZWjd5QUlRTi1vX1VOV2ZIcVhqQlV4TFg4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW/dPMA0G
CSqGSIb3DQEBCwUAA4IBAQCjPoXSDo3fa8X1MjSApaWzZC4eyr1ieQnT8SjZ3S0B
X18uvA9FzPKWIXoRkBsTmv4QFDrK+GyHafrV4zXdt5lVTJ3a2xVou2pjjZMD6YH3
LD7iLm9UYQsU6rlH7FtvsSH6U+lUfmZY2cwRK5Mx8NK0774N37bpLJATvZipsYbD
aE73ecyYW4lIleAlDkJCjW/7yz6XudTZ0Te11VdcobR/CoLu/q+5fnWkn+E8Zl9x
vqXuaW8smjVqZ44wfMutVhV8FfQvPSx7eEI6h8E0j92kne16HjDm2qYJUcQfr479
QjAUvuII0kPoVH6ZAXR+wV5YT18Dd23YR244ySJDmGKz
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:33:51 2024 by rpki-client on console-fra.rpki-client.org