Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/913e12-f5ed-46f4-982c-52dedddee393/1/Fur1Gd7X2SI1iCexAaVvhju27qg.roa
File: Fur1Gd7X2SI1iCexAaVvhju27qg.roa (raw, json)
Hash identifier: qHKaoUFFie9CqHee3rxPNX+E/p7M4OLrw12yjpPH8U4=
Subject key identifier: 16:EA:F5:19:DE:D7:D9:22:35:88:27:B1:01:A5:6F:86:3B:B6:EE:A8
Certificate issuer: /CN=7a8746a76cda8369009d28941ef156239c6a63a1
Certificate serial: 0589F164
Authority key identifier: 7A:87:46:A7:6C:DA:83:69:00:9D:28:94:1E:F1:56:23:9C:6A:63:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eodGp2zag2kAnSiUHvFWI5xqY6E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/913e12-f5ed-46f4-982c-52dedddee393/1/Fur1Gd7X2SI1iCexAaVvhju27qg.roa
Signing time: Tue 15 Feb 2022 17:12:08 +0000
ROA not before: Tue 15 Feb 2022 17:12:08 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 1273
IP address blocks: 195.92.0.0/16 maxlen: 16
195.80.64.0/19 maxlen: 19
194.112.64.0/18 maxlen: 18
194.6.64.0/19 maxlen: 19
194.205.0.0/16 maxlen: 16
62.208.0.0/16 maxlen: 16
194.6.0.0/18 maxlen: 18
213.38.0.0/16 maxlen: 16
217.134.0.0/15 maxlen: 15
195.10.0.0/18 maxlen: 18
212.165.0.0/19 maxlen: 19
193.164.160.0/19 maxlen: 19
194.176.128.0/19 maxlen: 19
195.144.128.0/19 maxlen: 19
212.158.0.0/17 maxlen: 17
185.204.4.0/22 maxlen: 22
213.12.0.0/16 maxlen: 16
195.44.0.0/16 maxlen: 16
217.135.0.0/16 maxlen: 16
195.2.0.0/19 maxlen: 19
62.221.0.0/19 maxlen: 19
194.221.0.0/16 maxlen: 16
62.25.64.0/18 maxlen: 18
195.59.0.0/16 maxlen: 16
195.27.0.0/16 maxlen: 16
194.152.64.0/19 maxlen: 19
194.177.160.0/19 maxlen: 19
213.185.192.0/19 maxlen: 19
212.137.0.0/16 maxlen: 16
2001:5000::/21 maxlen: 21
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 92926308 (0x589f164)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7a8746a76cda8369009d28941ef156239c6a63a1
Validity
Not Before: Feb 15 17:12:08 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=16eaf519ded7d922358827b101a56f863bb6eea8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:f2:d4:d6:f6:2b:09:1e:fc:44:85:ed:71:1b:
bf:f0:1e:7a:37:74:77:4c:ec:d4:d6:85:38:e8:54:
81:93:63:8d:76:ee:a3:ef:5c:15:1d:ce:00:66:58:
cb:84:c3:13:f7:57:e4:f3:63:05:c2:ab:5a:f6:97:
16:1d:e9:6a:e8:61:91:2e:95:9a:8a:ab:26:9b:dd:
39:32:6b:98:aa:62:11:39:a1:c8:15:6a:11:85:f6:
df:8f:68:a5:1d:08:df:1f:68:45:d6:15:76:eb:06:
38:8d:c7:da:20:9f:e6:55:b9:f5:d2:f5:7e:95:e3:
37:c4:8e:ab:f6:13:17:7d:a2:09:77:66:3f:22:7c:
7c:ea:f3:ff:ed:75:7f:b3:d5:7b:e9:70:b8:cb:78:
c9:28:a6:4f:6b:e3:4e:5c:c5:50:76:6e:da:f1:16:
72:bf:0d:d4:a3:a6:15:86:19:a6:ed:a9:32:cc:06:
e8:cf:8a:98:43:a5:2a:2e:5a:43:0e:07:1c:b4:44:
63:da:c0:73:05:ac:bc:8a:e0:34:1c:4d:60:0c:db:
97:87:f6:ac:e1:7b:14:88:bf:40:5d:b3:44:77:80:
d3:6d:ff:1e:41:93:db:14:b7:e5:1d:79:05:fb:21:
01:95:93:b6:ed:00:df:9e:f2:b8:04:23:af:88:62:
8c:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:EA:F5:19:DE:D7:D9:22:35:88:27:B1:01:A5:6F:86:3B:B6:EE:A8
X509v3 Authority Key Identifier:
keyid:7A:87:46:A7:6C:DA:83:69:00:9D:28:94:1E:F1:56:23:9C:6A:63:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eodGp2zag2kAnSiUHvFWI5xqY6E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/913e12-f5ed-46f4-982c-52dedddee393/1/Fur1Gd7X2SI1iCexAaVvhju27qg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/913e12-f5ed-46f4-982c-52dedddee393/1/eodGp2zag2kAnSiUHvFWI5xqY6E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.25.64.0/18
62.208.0.0/16
62.221.0.0/19
185.204.4.0/22
193.164.160.0/19
194.6.0.0-194.6.95.255
194.112.64.0/18
194.152.64.0/19
194.176.128.0/19
194.177.160.0/19
194.205.0.0/16
194.221.0.0/16
195.2.0.0/19
195.10.0.0/18
195.27.0.0/16
195.44.0.0/16
195.59.0.0/16
195.80.64.0/19
195.92.0.0/16
195.144.128.0/19
212.137.0.0/16
212.158.0.0/17
212.165.0.0/19
213.12.0.0/16
213.38.0.0/16
213.185.192.0/19
217.134.0.0/15
IPv6:
2001:5000::/21
Signature Algorithm: sha256WithRSAEncryption
36:3d:13:7e:2c:e6:bd:08:98:45:de:93:bb:06:c6:61:4a:cc:
bf:76:75:42:e1:63:51:00:26:5c:a8:1d:43:f7:0e:24:50:dc:
ad:6e:78:8a:77:1a:e5:cc:1c:5a:68:ea:d3:cf:71:04:14:ed:
ac:b6:19:c4:8c:b7:8d:61:18:4c:bf:36:38:3c:7e:fb:5d:1c:
ce:7e:d0:e7:24:a6:f8:29:77:ac:7e:e1:38:cf:0e:b3:43:d4:
b0:14:75:b6:e4:0d:47:ce:0f:8b:85:c1:0b:04:f6:9e:82:22:
0d:85:f1:57:4b:a7:54:ba:65:3a:67:e1:31:3a:10:b5:ca:3e:
ab:d6:66:3d:45:81:9d:de:6a:47:7f:ce:f8:8c:a6:8f:aa:3e:
63:04:10:fe:6c:ce:b1:eb:24:59:46:af:ef:72:3e:de:05:fb:
e8:82:c5:de:e3:81:fb:38:3f:5e:6a:06:42:28:3f:30:3f:f1:
c0:a7:06:01:d1:e0:5b:9c:2e:4c:e4:48:7c:c6:d8:d2:63:15:
30:ce:2e:da:6a:cf:0b:0a:4b:c3:f2:cd:56:3e:29:9f:3b:25:
63:bc:b1:fc:cf:9a:2f:25:4c:af:78:46:ab:2d:2b:4e:cf:83:
67:41:6c:1a:42:8f:0f:d3:df:f9:d0:73:39:06:4c:5b:ee:ec:
85:7e:6e:eb
-----BEGIN CERTIFICATE-----
MIIFmjCCBIKgAwIBAgIEBYnxZDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg3
YTg3NDZhNzZjZGE4MzY5MDA5ZDI4OTQxZWYxNTYyMzljNmE2M2ExMB4XDTIyMDIx
NTE3MTIwOFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoMTZlYWY1MTlkZWQ3
ZDkyMjM1ODgyN2IxMDFhNTZmODYzYmI2ZWVhODCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBALzy1Nb2Kwke/ESF7XEbv/Aeejd0d0zs1NaFOOhUgZNjjXbu
o+9cFR3OAGZYy4TDE/dX5PNjBcKrWvaXFh3pauhhkS6VmoqrJpvdOTJrmKpiETmh
yBVqEYX2349opR0I3x9oRdYVdusGOI3H2iCf5lW59dL1fpXjN8SOq/YTF32iCXdm
PyJ8fOrz/+11f7PVe+lwuMt4ySimT2vjTlzFUHZu2vEWcr8N1KOmFYYZpu2pMswG
6M+KmEOlKi5aQw4HHLREY9rAcwWsvIrgNBxNYAzbl4f2rOF7FIi/QF2zRHeA023/
HkGT2xS35R15BfshAZWTtu0A357yuAQjr4hijBsCAwEAAaOCArQwggKwMB0GA1Ud
DgQWBBQW6vUZ3tfZIjWIJ7EBpW+GO7buqDAfBgNVHSMEGDAWgBR6h0anbNqDaQCd
KJQe8VYjnGpjoTAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L2VvZEdwMnphZzJrQW5TaVVIdkZXSTV4cVk2RS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNmIvOTEzZTEyLWY1ZWQtNDZmNC05ODJjLTUyZGVkZGRlZTM5My8x
L0Z1cjFHZDdYMlNJMWlDZXhBYVZ2aGp1MjdxZy5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNmIv
OTEzZTEyLWY1ZWQtNDZmNC05ODJjLTUyZGVkZGRlZTM5My8xL2VvZEdwMnphZzJr
QW5TaVVIdkZXSTV4cVk2RS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjCB
yQYIKwYBBQUHAQcBAf8EgbkwgbYwgaUEAgABMIGeAwQGPhlAAwMAPtADBAU+3QAD
BAK5zAQDBAXBpKAwCwMDAcIGAwQFwgZAAwQGwnBAAwQFwphAAwQFwrCAAwQFwrGg
AwMAws0DAwDC3QMEBcMCAAMEBsMKAAMDAMMbAwMAwywDAwDDOwMEBcNQQAMDAMNc
AwQFw5CAAwMA1IkDBAfUngADBAXUpQADAwDVDAMDANUmAwQF1bnAAwMB2YYwDAQC
AAIwBgMEAyABUDANBgkqhkiG9w0BAQsFAAOCAQEANj0TfizmvQiYRd6TuwbGYUrM
v3Z1QuFjUQAmXKgdQ/cOJFDcrW54inca5cwcWmjq089xBBTtrLYZxIy3jWEYTL82
ODx++10czn7Q5ySm+Cl3rH7hOM8Os0PUsBR1tuQNR84Pi4XBCwT2noIiDYXxV0un
VLplOmfhMToQtco+q9ZmPUWBnd5qR3/O+Iymj6o+YwQQ/mzOseskWUav73I+3gX7
6ILF3uOB+zg/XmoGQig/MD/xwKcGAdHgW5wuTORIfMbY0mMVMM4u2mrPCwpLw/LN
Vj4pnzslY7yx/M+aLyVMr3hGqy0rTs+DZ0FsGkKPD9Pf+dBzOQZMW+7shX5u6w==
-----END CERTIFICATE-----
Generated at Tue Apr 22 01:07:38 2025 by rpki-client