Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/c4b647-53fa-49ba-9c60-d1301bc05144/1/1-e05OZqcpxFl8kQfKDveexA0K4.roa
File: 1-e05OZqcpxFl8kQfKDveexA0K4.roa (raw, json)
Hash identifier: ogoetKjC1LQpHikVoMltL6hnSEYmANov7SQlgJlPmVY=
Subject key identifier: D7:E7:B4:E4:E6:6A:72:9C:45:97:C9:10:7C:A0:EF:79:EC:40:D0:AE
Certificate issuer: /CN=34f5de738c51a935428efff8800bcf9b267edc14
Certificate serial: 018CC6B843C95ED56026E37D707931D24B68
Authority key identifier: 34:F5:DE:73:8C:51:A9:35:42:8E:FF:F8:80:0B:CF:9B:26:7E:DC:14
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NPXec4xRqTVCjv_4gAvPmyZ-3BQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/c4b647-53fa-49ba-9c60-d1301bc05144/1/1-e05OZqcpxFl8kQfKDveexA0K4.roa
Signing time: Mon 01 Jan 2024 20:30:13 +0000
ROA not before: Mon 01 Jan 2024 20:30:13 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 57605
IP address blocks: 91.233.110.0/23 maxlen: 23
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:b8:43:c9:5e:d5:60:26:e3:7d:70:79:31:d2:4b:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=34f5de738c51a935428efff8800bcf9b267edc14
Validity
Not Before: Jan 1 20:30:13 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d7e7b4e4e66a729c4597c9107ca0ef79ec40d0ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:2b:9b:94:68:97:80:3b:13:80:36:09:0e:5a:
99:37:24:e7:04:00:d3:a1:35:52:86:4c:55:79:db:
db:b4:44:0e:24:93:3d:6b:11:34:15:00:54:df:cd:
5f:6c:e2:eb:24:b1:cd:a0:9f:c5:b1:37:34:48:cd:
47:83:17:dd:d3:8e:9c:6a:d3:82:06:27:11:9b:1f:
af:cf:0e:b7:99:d6:b1:41:c8:ef:16:c5:26:a5:7b:
54:46:bd:51:42:ca:34:41:1b:99:15:2c:c4:b9:b2:
88:03:b9:12:05:32:21:cd:8d:3e:82:31:cb:69:29:
bc:d0:6e:04:e6:b1:36:2c:a9:e3:ef:b8:dd:36:0a:
a8:d5:af:2a:c6:34:01:c7:b6:01:47:2c:cf:ee:b7:
03:f4:07:b7:70:51:19:56:dc:52:d9:e5:00:60:87:
0c:31:14:35:df:b6:36:6f:d9:c1:d8:9d:af:f7:f6:
5c:d1:30:74:ed:d3:d8:17:ee:ac:3e:3f:34:1c:eb:
e8:4b:2e:3f:9f:00:dc:09:47:50:fa:2b:34:d5:0f:
a4:47:1b:3b:50:a1:a2:0e:39:15:d2:c6:fa:68:06:
f5:cf:c5:49:9c:98:64:ee:bc:ce:3d:27:a3:be:25:
84:8e:c6:5d:32:b1:87:3a:bd:5c:a1:ff:1b:1d:33:
48:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:E7:B4:E4:E6:6A:72:9C:45:97:C9:10:7C:A0:EF:79:EC:40:D0:AE
X509v3 Authority Key Identifier:
keyid:34:F5:DE:73:8C:51:A9:35:42:8E:FF:F8:80:0B:CF:9B:26:7E:DC:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NPXec4xRqTVCjv_4gAvPmyZ-3BQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/c4b647-53fa-49ba-9c60-d1301bc05144/1/1-e05OZqcpxFl8kQfKDveexA0K4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/c4b647-53fa-49ba-9c60-d1301bc05144/1/NPXec4xRqTVCjv_4gAvPmyZ-3BQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.233.110.0/23
Signature Algorithm: sha256WithRSAEncryption
a9:c5:92:0c:0b:b7:58:48:42:bf:9a:61:f5:81:68:e3:f8:02:
7a:2f:30:6f:87:94:6b:57:1e:1d:ac:64:b8:6b:45:c9:f0:75:
5c:46:22:58:ea:8b:d0:19:8e:e0:e6:29:a7:a9:2e:1f:34:20:
84:2b:fb:58:21:47:d2:8c:10:d0:c6:d8:ed:3a:cb:80:e8:cd:
15:8f:86:69:81:8c:3a:b0:c5:cb:bb:a3:f9:48:62:dd:46:fa:
23:51:37:42:c3:c3:ae:b1:5d:c3:07:63:8f:8a:24:73:49:ad:
f3:58:db:07:cb:40:93:dd:e4:a5:2c:3d:99:c0:ef:59:8c:a6:
49:9f:69:73:f7:7c:04:73:4b:bd:23:62:6e:05:e9:87:20:25:
79:2d:7a:1a:23:2c:28:92:93:21:2a:ed:4a:7e:96:e4:5c:6e:
4f:5e:a9:a0:45:d7:4e:2e:ba:ed:00:27:38:5b:5d:a6:5a:a0:
0e:4e:0b:55:4f:14:bb:e6:f8:77:a1:bf:58:2e:41:ed:83:c6:
64:b9:8b:af:bb:ba:99:7c:73:32:90:1c:09:f3:38:5c:7f:a3:
a1:9a:1a:d9:d5:ea:80:a2:2c:23:c4:fb:ac:42:19:33:dd:59:
6b:52:e5:d9:d9:82:b4:44:38:80:80:f3:b2:bc:f0:32:41:45:
2b:8b:da:b1
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzGuEPJXtVgJuN9cHkx0ktoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM0ZjVkZTczOGM1MWE5MzU0MjhlZmZmODgwMGJjZjliMjY3
ZWRjMTQwHhcNMjQwMTAxMjAzMDEzWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkN2U3YjRlNGU2NmE3MjljNDU5N2M5MTA3Y2EwZWY3OWVjNDBkMGFlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvSublGiXgDsTgDYJDlqZNyTnBADT
oTVShkxVedvbtEQOJJM9axE0FQBU381fbOLrJLHNoJ/FsTc0SM1Hgxfd046catOC
BicRmx+vzw63mdaxQcjvFsUmpXtURr1RQso0QRuZFSzEubKIA7kSBTIhzY0+gjHL
aSm80G4E5rE2LKnj77jdNgqo1a8qxjQBx7YBRyzP7rcD9Ae3cFEZVtxS2eUAYIcM
MRQ137Y2b9nB2J2v9/Zc0TB07dPYF+6sPj80HOvoSy4/nwDcCUdQ+is01Q+kRxs7
UKGiDjkV0sb6aAb1z8VJnJhk7rzOPSejviWEjsZdMrGHOr1cof8bHTNI6QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFNfntOTmanKcRZfJEHyg73nsQNCuMB8GA1UdIwQY
MBaAFDT13nOMUak1Qo7/+IALz5smftwUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTlBYZWM0eFJxVFZDanZfNGdBdlBteVotM0JRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yi9jNGI2NDctNTNmYS00OWJhLTljNjAt
ZDEzMDFiYzA1MTQ0LzEvMS1lMDVPWnFjcHhGbDhrUWZLRHZlZXhBMEs0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Yi9jNGI2NDctNTNmYS00OWJhLTljNjAtZDEzMDFiYzA1MTQ0
LzEvTlBYZWM0eFJxVFZDanZfNGdBdlBteVotM0JRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBW+luMA0G
CSqGSIb3DQEBCwUAA4IBAQCpxZIMC7dYSEK/mmH1gWjj+AJ6LzBvh5RrVx4drGS4
a0XJ8HVcRiJY6ovQGY7g5imnqS4fNCCEK/tYIUfSjBDQxtjtOsuA6M0Vj4ZpgYw6
sMXLu6P5SGLdRvojUTdCw8OusV3DB2OPiiRzSa3zWNsHy0CT3eSlLD2ZwO9ZjKZJ
n2lz93wEc0u9I2JuBemHICV5LXoaIywokpMhKu1KfpbkXG5PXqmgRddOLrrtACc4
W12mWqAOTgtVTxS75vh3ob9YLkHtg8ZkuYuvu7qZfHMykBwJ8zhcf6OhmhrZ1eqA
oiwjxPusQhkz3VlrUuXZ2YK0RDiAgPOyvPAyQUUri9qx
-----END CERTIFICATE-----
Generated at Wed Nov 13 19:27:06 2024 by rpki-client on console-ams.rpki-client.org