Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/7z-MJD1npiZztHHwKLPE7kIc_Pw.roa
File: 7z-MJD1npiZztHHwKLPE7kIc_Pw.roa (raw, json)
Hash identifier: Z3U3kWUS24tbdO0p/7mSRi3MLSwCqYvaUTbWaWSCZqo=
Subject key identifier: EF:3F:8C:24:3D:67:A6:26:73:B4:71:F0:28:B3:C4:EE:42:1C:FC:FC
Certificate issuer: /CN=2ac3daa1b14850f2e61c592b2191915a5e65a478
Certificate serial: 01823DF02006A57E907900769ECCBB5886E1
Authority key identifier: 2A:C3:DA:A1:B1:48:50:F2:E6:1C:59:2B:21:91:91:5A:5E:65:A4:78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/7z-MJD1npiZztHHwKLPE7kIc_Pw.roa
Signing time: Wed 27 Jul 2022 04:35:23 +0000
ROA not before: Wed 27 Jul 2022 04:35:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 61317
IP address blocks: 85.8.164.0/22 maxlen: 24
185.220.236.0/22 maxlen: 24
188.253.0.0/23 maxlen: 24
185.234.144.0/22 maxlen: 24
91.132.59.0/24 maxlen: 24
193.36.85.0/24 maxlen: 24
82.115.24.0/22 maxlen: 24
185.129.108.0/23 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:3d:f0:20:06:a5:7e:90:79:00:76:9e:cc:bb:58:86:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ac3daa1b14850f2e61c592b2191915a5e65a478
Validity
Not Before: Jul 27 04:35:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ef3f8c243d67a62673b471f028b3c4ee421cfcfc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:40:c9:51:96:39:fc:09:dd:28:17:b0:ae:17:
01:cc:07:52:68:e1:95:d8:ed:fe:b8:4d:7b:6b:5e:
7b:26:b0:f3:d3:b5:d4:15:a5:6e:11:6b:b2:b1:37:
4a:7d:41:c3:e0:ab:4e:d4:d3:58:37:38:2f:ab:f2:
d4:72:85:93:a2:cd:94:35:49:1e:9f:63:28:41:0f:
4b:3b:ad:24:f5:10:82:dd:ab:c4:1f:4c:75:c0:f1:
59:7b:a9:7a:20:7c:a5:d4:cb:8e:54:0e:c2:a2:e0:
7f:40:65:e4:ee:b1:39:14:da:fc:df:71:64:ec:c1:
7c:9b:93:85:ef:d6:6d:90:2e:00:b6:db:6b:7d:57:
cc:0e:48:c4:af:45:8a:3e:9f:34:eb:01:05:28:41:
cf:84:f5:61:cd:59:0a:34:a7:a8:81:95:13:d6:41:
a8:21:5c:a0:53:4d:e0:ea:20:a2:92:fd:2f:d6:86:
6d:cf:ca:8c:54:77:52:f2:5b:3b:b3:d3:14:d2:0a:
62:da:a5:fd:24:42:ce:31:ed:99:4d:ce:13:0d:9d:
50:51:4e:cb:4f:79:02:c1:51:a1:be:7d:6f:6e:30:
ea:5d:0e:01:bf:71:49:3e:5d:24:b4:31:f4:1b:27:
20:6a:2f:be:96:7e:81:8f:75:1f:7a:ba:fa:21:4e:
2d:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:3F:8C:24:3D:67:A6:26:73:B4:71:F0:28:B3:C4:EE:42:1C:FC:FC
X509v3 Authority Key Identifier:
keyid:2A:C3:DA:A1:B1:48:50:F2:E6:1C:59:2B:21:91:91:5A:5E:65:A4:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/7z-MJD1npiZztHHwKLPE7kIc_Pw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/KsPaobFIUPLmHFkrIZGRWl5lpHg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.115.24.0/22
85.8.164.0/22
91.132.59.0/24
185.129.108.0/23
185.220.236.0/22
185.234.144.0/22
188.253.0.0/23
193.36.85.0/24
Signature Algorithm: sha256WithRSAEncryption
4e:8d:6d:fb:6f:40:08:74:42:5d:6c:7b:42:f1:2a:36:39:22:
84:25:6c:40:b1:dc:09:38:1d:e4:67:24:d1:bd:a1:58:33:8e:
ee:f6:b5:ff:2a:34:cc:b8:5b:a9:4f:73:0b:05:3b:7c:08:88:
14:9c:10:05:76:90:a6:b4:d6:e5:04:97:1a:e2:cc:b2:c8:8e:
4a:68:97:37:6a:19:b2:d4:0a:63:98:41:2d:3a:12:59:b8:dd:
d3:71:e2:40:8e:c9:6b:e7:09:84:e9:95:7c:53:01:ae:46:2f:
27:e3:9e:9d:dd:51:10:2b:d2:6f:a0:d2:e0:5f:5d:0d:f8:59:
15:0d:79:0a:26:be:e0:c7:99:32:65:44:71:33:aa:7e:c3:d8:
76:76:3e:70:ee:52:35:e9:75:00:e7:cb:cb:0f:58:7f:28:bd:
b0:fd:fe:ac:50:83:59:e0:1a:27:7a:33:9b:6a:d3:53:69:1f:
22:75:89:11:5d:c7:97:6d:53:29:b9:94:aa:19:1d:ec:43:2d:
59:67:eb:07:dd:ff:e2:94:79:01:7e:ac:f1:02:42:b3:f1:2e:
fd:bc:e9:41:14:2a:67:67:a7:2b:07:1f:34:7e:bc:cd:39:ad:
cf:2b:3f:ce:11:24:03:e5:22:04:49:03:aa:21:6b:d3:d2:fc:
f7:66:68:72
-----BEGIN CERTIFICATE-----
MIIFJzCCBA+gAwIBAgISAYI98CAGpX6QeQB2nsy7WIbhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhYzNkYWExYjE0ODUwZjJlNjFjNTkyYjIxOTE5MTVhNWU2
NWE0NzgwHhcNMjIwNzI3MDQzNTIzWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlZjNmOGMyNDNkNjdhNjI2NzNiNDcxZjAyOGIzYzRlZTQyMWNmY2ZjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg0DJUZY5/AndKBewrhcBzAdSaOGV
2O3+uE17a157JrDz07XUFaVuEWuysTdKfUHD4KtO1NNYNzgvq/LUcoWTos2UNUke
n2MoQQ9LO60k9RCC3avEH0x1wPFZe6l6IHyl1MuOVA7CouB/QGXk7rE5FNr833Fk
7MF8m5OF79ZtkC4AtttrfVfMDkjEr0WKPp806wEFKEHPhPVhzVkKNKeogZUT1kGo
IVygU03g6iCikv0v1oZtz8qMVHdS8ls7s9MU0gpi2qX9JELOMe2ZTc4TDZ1QUU7L
T3kCwVGhvn1vbjDqXQ4Bv3FJPl0ktDH0Gycgai++ln6Bj3Uferr6IU4tVwIDAQAB
o4ICMzCCAi8wHQYDVR0OBBYEFO8/jCQ9Z6Ymc7Rx8CizxO5CHPz8MB8GA1UdIwQY
MBaAFCrD2qGxSFDy5hxZKyGRkVpeZaR4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS3NQYW9iRklVUExtSEZrcklaR1JXbDVscEhnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MC80MDViYmQtNTkxMy00ZTk1LThlNzUt
ZmUwNjU5MTc2YTU2LzEvN3otTUpEMW5waVp6dEhId0tMUEU3a0ljX1B3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83MC80MDViYmQtNTkxMy00ZTk1LThlNzUtZmUwNjU5MTc2YTU2
LzEvS3NQYW9iRklVUExtSEZrcklaR1JXbDVscEhnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEkGCCsGAQUFBwEHAQH/BDowODA2BAIAATAwAwQCUnMYAwQC
VQikAwQAW4Q7AwQBuYFsAwQCudzsAwQCueqQAwQBvP0AAwQAwSRVMA0GCSqGSIb3
DQEBCwUAA4IBAQBOjW37b0AIdEJdbHtC8So2OSKEJWxAsdwJOB3kZyTRvaFYM47u
9rX/KjTMuFupT3MLBTt8CIgUnBAFdpCmtNblBJca4syyyI5KaJc3ahmy1ApjmEEt
OhJZuN3TceJAjslr5wmE6ZV8UwGuRi8n456d3VEQK9JvoNLgX10N+FkVDXkKJr7g
x5kyZURxM6p+w9h2dj5w7lI16XUA58vLD1h/KL2w/f6sUINZ4BonejObatNTaR8i
dYkRXceXbVMpuZSqGR3sQy1ZZ+sH3f/ilHkBfqzxAkKz8S79vOlBFCpnZ6crBx80
frzNOa3PKz/OESQD5SIESQOqIWvT0vz3Zmhy
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:57:42 2023 by rpki-client on console-fra.rpki-client.org