Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/a1ae70-7996-4687-a0d7-5e0f4ab809bb/1/jjPKCqjfxgdYFdevIp22HXHPreY.roa
File: jjPKCqjfxgdYFdevIp22HXHPreY.roa (raw, json)
Hash identifier: UvUO4ghtfP1cXfIRm8OwGzHul7m0+R+PuMJpq1J+7V8=
Subject key identifier: 8E:33:CA:0A:A8:DF:C6:07:58:15:D7:AF:22:9D:B6:1D:71:CF:AD:E6
Certificate issuer: /CN=743e447edb8a5e0e1b1d7f5cdc287c364a5fb0b5
Certificate serial: 018A2AD07789FEAFBBD55DC1B34F44069A00
Authority key identifier: 74:3E:44:7E:DB:8A:5E:0E:1B:1D:7F:5C:DC:28:7C:36:4A:5F:B0:B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dD5EftuKXg4bHX9c3Ch8NkpfsLU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/a1ae70-7996-4687-a0d7-5e0f4ab809bb/1/jjPKCqjfxgdYFdevIp22HXHPreY.roa
Signing time: Fri 25 Aug 2023 03:50:19 +0000
ROA not before: Fri 25 Aug 2023 03:50:19 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 64249
IP address blocks: 198.151.96.0/20 maxlen: 20
198.151.112.0/20 maxlen: 20
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:2a:d0:77:89:fe:af:bb:d5:5d:c1:b3:4f:44:06:9a:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=743e447edb8a5e0e1b1d7f5cdc287c364a5fb0b5
Validity
Not Before: Aug 25 03:50:19 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8e33ca0aa8dfc6075815d7af229db61d71cfade6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:af:62:3d:d0:84:74:e4:7b:4b:6a:60:0a:28:
7f:76:8d:9d:5d:87:0d:f3:cb:46:9a:5d:bc:54:c5:
c3:27:be:95:9f:30:39:ec:af:3f:8f:db:b6:be:d1:
4a:a4:10:a3:06:4c:92:6c:4d:a1:d3:8a:40:b9:d0:
df:a5:e0:50:c2:a9:99:7e:ed:76:35:e0:09:2c:26:
08:ad:f6:a9:15:58:0f:f9:e2:8c:7b:7d:48:bf:1f:
f1:1e:cb:66:af:9d:79:2b:e1:29:9d:04:d8:36:30:
21:cc:fa:58:04:c4:fd:9d:90:60:b8:b4:0f:d7:3d:
43:0e:de:f8:8c:31:a0:e1:dc:08:0e:8e:a3:91:fa:
e0:d8:d3:86:c1:2e:b6:93:75:1d:15:f8:af:23:a7:
d4:79:04:5e:93:ea:4c:f7:13:77:81:02:d2:f3:37:
6b:31:c4:95:7d:5c:52:c3:18:6a:74:f3:3e:54:8d:
82:e0:6e:49:9d:2e:e6:d6:f8:36:45:84:ef:af:e8:
ae:2a:27:62:34:89:f2:22:72:20:ec:df:fe:75:2d:
96:8f:e2:ab:b6:48:33:2e:2d:0f:a4:47:74:a8:de:
bf:f1:76:f5:44:60:1f:ef:7f:62:93:64:b7:b5:a1:
86:37:9e:5f:3b:d2:83:d7:4c:97:a0:16:18:83:cd:
3a:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:33:CA:0A:A8:DF:C6:07:58:15:D7:AF:22:9D:B6:1D:71:CF:AD:E6
X509v3 Authority Key Identifier:
keyid:74:3E:44:7E:DB:8A:5E:0E:1B:1D:7F:5C:DC:28:7C:36:4A:5F:B0:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dD5EftuKXg4bHX9c3Ch8NkpfsLU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/a1ae70-7996-4687-a0d7-5e0f4ab809bb/1/jjPKCqjfxgdYFdevIp22HXHPreY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/a1ae70-7996-4687-a0d7-5e0f4ab809bb/1/dD5EftuKXg4bHX9c3Ch8NkpfsLU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
198.151.96.0/19
Signature Algorithm: sha256WithRSAEncryption
ab:16:82:1e:9c:a8:dd:b9:58:a0:62:f9:38:2f:36:ad:3a:39:
97:24:a6:8b:10:8e:a0:58:55:d8:d0:66:0c:8d:6f:dc:0e:2f:
ac:1b:04:53:f4:c9:ca:ce:d2:15:3e:ec:c4:90:38:ab:ce:47:
34:f5:e4:a1:66:2d:71:5e:f5:1d:a3:0a:9c:ee:3d:29:fc:cc:
8d:c0:b8:31:3c:11:a4:54:7b:19:6b:e6:5a:5e:53:c8:44:bd:
51:ef:ce:d8:26:9b:3b:95:a7:82:14:95:c5:d5:8c:cf:bf:f5:
f9:e0:6b:ea:94:99:d4:a0:d1:42:f8:30:b8:a2:c6:ab:2d:dd:
31:8a:e4:22:47:4f:c7:ac:10:b3:8b:df:d5:52:ae:94:48:35:
b3:07:df:d7:3a:e0:44:a4:10:c3:26:3f:66:33:18:44:34:a8:
7f:12:b9:e2:1c:8d:b3:34:47:85:72:59:61:f9:10:25:26:38:
88:f5:1d:a6:1a:93:04:72:34:e5:d9:be:d6:69:51:78:96:06:
32:69:ea:3e:3f:80:20:d7:e4:85:8b:30:46:ce:ad:d4:e8:63:
e7:00:ee:95:0c:30:d3:e0:44:17:d0:70:e1:e6:8e:0c:2d:72:
3b:82:57:c9:e0:49:53:e8:76:9d:92:b4:2a:44:a1:2f:70:ab:
ca:3c:29:c2
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYoq0HeJ/q+71V3Bs09EBpoAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc0M2U0NDdlZGI4YTVlMGUxYjFkN2Y1Y2RjMjg3YzM2NGE1
ZmIwYjUwHhcNMjMwODI1MDM1MDE5WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4ZTMzY2EwYWE4ZGZjNjA3NTgxNWQ3YWYyMjlkYjYxZDcxY2ZhZGU2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg69iPdCEdOR7S2pgCih/do2dXYcN
88tGml28VMXDJ76VnzA57K8/j9u2vtFKpBCjBkySbE2h04pAudDfpeBQwqmZfu12
NeAJLCYIrfapFVgP+eKMe31Ivx/xHstmr515K+EpnQTYNjAhzPpYBMT9nZBguLQP
1z1DDt74jDGg4dwIDo6jkfrg2NOGwS62k3UdFfivI6fUeQRek+pM9xN3gQLS8zdr
McSVfVxSwxhqdPM+VI2C4G5JnS7m1vg2RYTvr+iuKidiNInyInIg7N/+dS2Wj+Kr
tkgzLi0PpEd0qN6/8Xb1RGAf739ik2S3taGGN55fO9KD10yXoBYYg806QwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFI4zygqo38YHWBXXryKdth1xz63mMB8GA1UdIwQY
MBaAFHQ+RH7bil4OGx1/XNwofDZKX7C1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZEQ1RWZ0dUtYZzRiSFg5YzNDaDhOa3Bmc0xVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NS9hMWFlNzAtNzk5Ni00Njg3LWEwZDct
NWUwZjRhYjgwOWJiLzEvampQS0NxamZ4Z2RZRmRldklwMjJIWEhQcmVZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83NS9hMWFlNzAtNzk5Ni00Njg3LWEwZDctNWUwZjRhYjgwOWJi
LzEvZEQ1RWZ0dUtYZzRiSFg5YzNDaDhOa3Bmc0xVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFxpdgMA0G
CSqGSIb3DQEBCwUAA4IBAQCrFoIenKjduVigYvk4LzatOjmXJKaLEI6gWFXY0GYM
jW/cDi+sGwRT9MnKztIVPuzEkDirzkc09eShZi1xXvUdowqc7j0p/MyNwLgxPBGk
VHsZa+ZaXlPIRL1R787YJps7laeCFJXF1YzPv/X54GvqlJnUoNFC+DC4osarLd0x
iuQiR0/HrBCzi9/VUq6USDWzB9/XOuBEpBDDJj9mMxhENKh/ErniHI2zNEeFcllh
+RAlJjiI9R2mGpMEcjTl2b7WaVF4lgYyaeo+P4Ag1+SFizBGzq3U6GPnAO6VDDDT
4EQX0HDh5o4MLXI7glfJ4ElT6HadkrQqRKEvcKvKPCnC
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:18:17 2024 by rpki-client on console-ams.rpki-client.org