Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/1zxSYaO2tvJB1Wi3Zt2c7Y-Fy_I.roa
File: 1zxSYaO2tvJB1Wi3Zt2c7Y-Fy_I.roa (raw, json)
Hash identifier: Y5B5qLi2y5OkUCuzZbDv7H2Z/Nc+JJfVdeq8AI53Pfc=
Subject key identifier: D7:3C:52:61:A3:B6:B6:F2:41:D5:68:B7:66:DD:9C:ED:8F:85:CB:F2
Certificate issuer: /CN=2ac3daa1b14850f2e61c592b2191915a5e65a478
Certificate serial: 13D37E26
Authority key identifier: 2A:C3:DA:A1:B1:48:50:F2:E6:1C:59:2B:21:91:91:5A:5E:65:A4:78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/1zxSYaO2tvJB1Wi3Zt2c7Y-Fy_I.roa
Signing time: Sat 19 Feb 2022 06:37:23 +0000
ROA not before: Sat 19 Feb 2022 06:37:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 31732
IP address blocks: 212.90.100.0/22 maxlen: 24
185.220.236.0/22 maxlen: 24
188.209.155.0/24 maxlen: 24
193.36.72.0/23 maxlen: 23
185.59.114.0/23 maxlen: 24
46.249.97.0/24 maxlen: 24
46.249.98.0/23 maxlen: 23
46.249.104.0/21 maxlen: 21
46.249.100.0/22 maxlen: 22
185.129.108.0/22 maxlen: 24
46.249.112.0/21 maxlen: 21
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 332627494 (0x13d37e26)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ac3daa1b14850f2e61c592b2191915a5e65a478
Validity
Not Before: Feb 19 06:37:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d73c5261a3b6b6f241d568b766dd9ced8f85cbf2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:e4:9f:2b:86:cc:d7:c7:0a:b8:23:4b:80:e4:
39:a3:f5:9f:ec:b3:53:65:d2:47:83:20:a6:56:fd:
bd:fd:8c:cb:2a:bc:3c:1d:95:02:c8:fb:1b:15:41:
19:0c:b5:14:ff:65:c9:98:85:8f:6d:0d:2d:ae:03:
d5:19:f5:df:d9:49:25:70:45:13:36:44:f1:b6:dc:
b8:82:52:d7:f7:dd:89:3e:44:0e:8c:ec:6c:d8:21:
d6:dd:57:3a:6a:f9:ff:bd:96:fa:75:5a:c1:4a:77:
5a:c9:ba:51:37:61:b9:fd:f5:0d:74:b1:99:a5:e4:
84:e6:34:6e:38:6b:1d:01:de:3c:25:2b:00:19:ec:
84:72:aa:e0:68:f7:e7:7c:e4:43:a9:39:db:d9:7c:
4e:d5:68:6b:63:50:d3:4c:6c:2c:c2:a6:50:c5:26:
1b:85:f5:58:a4:25:6c:5e:08:0b:17:b9:0b:18:f2:
c9:93:94:6a:cb:13:26:ca:64:d6:bf:19:ef:a5:3e:
6d:b0:92:cb:b2:bd:cf:7a:e3:9a:de:82:8d:7a:61:
fe:7d:15:46:16:6a:ef:13:55:04:0d:6c:c1:49:d9:
84:f4:ad:aa:f3:06:22:ce:aa:6b:e1:26:ed:d8:32:
b6:a1:8f:28:22:17:03:9d:71:28:f5:70:9d:2a:3a:
52:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:3C:52:61:A3:B6:B6:F2:41:D5:68:B7:66:DD:9C:ED:8F:85:CB:F2
X509v3 Authority Key Identifier:
keyid:2A:C3:DA:A1:B1:48:50:F2:E6:1C:59:2B:21:91:91:5A:5E:65:A4:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/1zxSYaO2tvJB1Wi3Zt2c7Y-Fy_I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/KsPaobFIUPLmHFkrIZGRWl5lpHg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.249.97.0-46.249.119.255
185.59.114.0/23
185.129.108.0/22
185.220.236.0/22
188.209.155.0/24
193.36.72.0/23
212.90.100.0/22
Signature Algorithm: sha256WithRSAEncryption
a9:38:9f:09:0a:d5:68:7d:3e:31:14:c9:89:8f:bd:b2:86:71:
2b:35:04:bc:88:6b:6f:2d:6b:a0:19:d1:39:85:73:e6:bc:f3:
da:53:cc:1a:be:29:ff:27:4e:58:1b:ff:13:ae:d5:10:57:3a:
85:f2:a5:b8:99:a0:ec:99:22:88:5c:ca:74:eb:a0:31:ac:a3:
64:a0:1e:bb:05:ea:53:de:ad:39:25:9d:f7:0b:96:60:9d:a7:
77:da:2e:30:9d:ba:cf:9f:c4:16:dc:70:6f:2a:07:ed:86:0e:
2b:64:ff:29:62:64:f5:67:82:d6:4e:0a:07:c6:ee:45:76:cc:
a0:98:b9:f0:c6:04:10:17:0d:60:62:1b:cd:e4:6c:d2:e5:3e:
97:41:c0:6d:77:e5:fb:20:b1:01:c7:35:48:d4:59:65:13:84:
f2:61:f5:70:4e:37:4e:1a:ee:a5:1d:e4:92:dd:da:f1:5d:0b:
3b:db:1c:ec:a7:d7:d7:87:4b:9a:5b:07:2b:ae:88:07:c8:18:
e6:9f:de:66:b9:10:3c:a8:ea:ce:d4:ab:50:6c:6b:ed:3d:73:
a6:e2:1f:0e:60:b7:d6:e8:71:33:34:df:74:ce:1e:7c:f8:bd:
ed:eb:97:b5:8d:0b:dc:3b:84:38:f2:72:ca:c5:e2:b2:32:82:
17:98:2b:7c
-----BEGIN CERTIFICATE-----
MIIFGzCCBAOgAwIBAgIEE9N+JjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygy
YWMzZGFhMWIxNDg1MGYyZTYxYzU5MmIyMTkxOTE1YTVlNjVhNDc4MB4XDTIyMDIx
OTA2MzcyM1oXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoZDczYzUyNjFhM2I2
YjZmMjQxZDU2OGI3NjZkZDljZWQ4Zjg1Y2JmMjCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBALnknyuGzNfHCrgjS4DkOaP1n+yzU2XSR4Mgplb9vf2Myyq8
PB2VAsj7GxVBGQy1FP9lyZiFj20NLa4D1Rn139lJJXBFEzZE8bbcuIJS1/fdiT5E
DozsbNgh1t1XOmr5/72W+nVawUp3Wsm6UTdhuf31DXSxmaXkhOY0bjhrHQHePCUr
ABnshHKq4Gj353zkQ6k529l8TtVoa2NQ00xsLMKmUMUmG4X1WKQlbF4ICxe5Cxjy
yZOUassTJspk1r8Z76U+bbCSy7K9z3rjmt6CjXph/n0VRhZq7xNVBA1swUnZhPSt
qvMGIs6qa+Em7dgytqGPKCIXA51xKPVwnSo6UvkCAwEAAaOCAjUwggIxMB0GA1Ud
DgQWBBTXPFJho7a28kHVaLdm3Zztj4XL8jAfBgNVHSMEGDAWgBQqw9qhsUhQ8uYc
WSshkZFaXmWkeDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L0tzUGFvYkZJVVBMbUhGa3JJWkdSV2w1bHBIZy5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNzAvNDA1YmJkLTU5MTMtNGU5NS04ZTc1LWZlMDY1OTE3NmE1Ni8x
LzF6eFNZYU8ydHZKQjFXaTNadDJjN1ktRnlfSS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNzAv
NDA1YmJkLTU5MTMtNGU5NS04ZTc1LWZlMDY1OTE3NmE1Ni8xL0tzUGFvYkZJVVBM
bUhGa3JJWkdSV2w1bHBIZy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBL
BggrBgEFBQcBBwEB/wQ8MDowOAQCAAEwMjAMAwQALvlhAwQDLvlwAwQBuTtyAwQC
uYFsAwQCudzsAwQAvNGbAwQBwSRIAwQC1FpkMA0GCSqGSIb3DQEBCwUAA4IBAQCp
OJ8JCtVofT4xFMmJj72yhnErNQS8iGtvLWugGdE5hXPmvPPaU8wavin/J05YG/8T
rtUQVzqF8qW4maDsmSKIXMp066AxrKNkoB67BepT3q05JZ33C5Zgnad32i4wnbrP
n8QW3HBvKgfthg4rZP8pYmT1Z4LWTgoHxu5FdsygmLnwxgQQFw1gYhvN5GzS5T6X
QcBtd+X7ILEBxzVI1FllE4TyYfVwTjdOGu6lHeSS3drxXQs72xzsp9fXh0uaWwcr
rogHyBjmn95muRA8qOrO1KtQbGvtPXOm4h8OYLfW6HEzNN90zh58+L3t65e1jQvc
O4Q48nLKxeKyMoIXmCt8
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:01:24 2023 by rpki-client on console-ams.rpki-client.org