Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/N5nEjhRMosuvnTqJPjy4IdSriok.roa
File: N5nEjhRMosuvnTqJPjy4IdSriok.roa (raw, json)
Hash identifier: T6+CGRtXzuH+dcHusyfSBhdMBX2LDV9t3/6tqD5fZuU=
Subject key identifier: 37:99:C4:8E:14:4C:A2:CB:AF:9D:3A:89:3E:3C:B8:21:D4:AB:8A:89
Certificate issuer: /CN=f8e62634e1bd5133a9de4512ae98cad1b2219b59
Certificate serial: 4333C803
Authority key identifier: F8:E6:26:34:E1:BD:51:33:A9:DE:45:12:AE:98:CA:D1:B2:21:9B:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/N5nEjhRMosuvnTqJPjy4IdSriok.roa
Signing time: Fri 27 May 2022 04:51:13 +0000
ROA not before: Fri 27 May 2022 04:51:13 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 39312
IP address blocks: 77.81.122.0/24 maxlen: 24
188.241.244.0/23 maxlen: 23
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1127467011 (0x4333c803)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8e62634e1bd5133a9de4512ae98cad1b2219b59
Validity
Not Before: May 27 04:51:13 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=3799c48e144ca2cbaf9d3a893e3cb821d4ab8a89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:cc:f3:88:24:90:8e:92:84:71:48:84:8d:e9:
ff:8b:01:62:20:ba:5f:48:55:5a:d6:8d:1f:44:44:
48:60:20:43:12:c7:e9:25:81:06:55:84:e0:dd:3c:
14:a8:64:91:37:8a:42:51:85:8c:56:39:34:be:b8:
04:e5:14:0f:56:4b:81:62:e2:60:15:cd:09:55:6f:
cc:87:93:1a:44:83:1b:79:ad:8a:6c:bd:a9:14:a9:
74:79:39:6f:68:d4:c7:77:f2:19:44:3f:73:fe:3d:
4a:9b:80:e9:e3:56:ac:19:9e:8e:ff:0b:fc:22:2c:
7a:d8:6e:70:1f:3c:1b:1f:83:05:d9:75:1b:85:38:
b9:65:03:2e:b4:07:7c:7b:25:51:c1:b5:e3:53:3e:
2e:fc:5d:8d:7b:27:76:4d:c4:00:b9:e6:60:a7:ab:
cd:4c:7d:6b:b7:24:f7:52:0d:d3:85:04:62:c1:0b:
59:73:94:c1:7e:11:0c:d8:7d:b3:69:2c:81:d9:60:
6c:3d:0c:f9:25:13:3a:03:81:b4:14:94:f2:eb:2b:
b0:a1:12:bc:00:6a:c8:2b:b6:57:2b:63:ec:46:fe:
28:89:31:7a:fc:d2:67:73:d4:b7:92:91:82:3a:9a:
06:6f:19:ca:ac:c7:77:17:6f:1f:49:db:cc:8c:51:
53:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:99:C4:8E:14:4C:A2:CB:AF:9D:3A:89:3E:3C:B8:21:D4:AB:8A:89
X509v3 Authority Key Identifier:
keyid:F8:E6:26:34:E1:BD:51:33:A9:DE:45:12:AE:98:CA:D1:B2:21:9B:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/N5nEjhRMosuvnTqJPjy4IdSriok.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.81.122.0/24
188.241.244.0/23
Signature Algorithm: sha256WithRSAEncryption
15:11:f4:56:d7:bb:86:a5:5e:c5:3e:f3:01:d8:c5:97:95:00:
14:0f:8b:ae:77:76:47:04:e4:8b:79:df:9e:d3:7a:1f:52:3c:
7a:e0:6b:be:21:81:8f:d7:2a:b4:f9:0f:60:63:67:75:9c:48:
bd:46:51:8b:cc:1c:c0:b1:4b:e6:f4:a4:6c:fd:24:a1:6e:48:
81:6f:88:44:a4:11:a1:d0:bf:0d:38:9c:02:a2:19:30:9f:b9:
66:61:c7:50:f8:d7:06:ce:ec:15:87:f7:e4:20:98:ac:36:af:
0a:3b:61:54:90:89:49:b3:ca:65:b5:20:ec:5a:f4:23:16:ef:
38:d2:db:90:8c:0f:1e:ab:76:47:c8:fb:2c:e9:bf:5c:6b:bf:
a8:2d:47:32:04:7a:61:13:96:06:fb:3c:57:0d:20:9d:65:7b:
73:78:2e:be:4e:5f:11:04:57:01:15:3f:6b:d1:09:a6:fe:3b:
b3:94:b3:44:02:c2:44:f1:7a:e6:16:44:04:3a:51:50:f2:44:
14:8f:40:76:32:f0:28:73:bd:c9:8f:9b:fb:8a:da:f8:a8:0d:
0e:b1:39:d1:1b:af:18:01:ad:8c:11:84:cc:76:e0:06:16:d3:
d5:11:0f:51:29:0f:2e:00:d7:8f:46:d6:99:5a:a8:3f:ca:d9:
fb:32:c4:36
-----BEGIN CERTIFICATE-----
MIIE9zCCA9+gAwIBAgIEQzPIAzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhm
OGU2MjYzNGUxYmQ1MTMzYTlkZTQ1MTJhZTk4Y2FkMWIyMjE5YjU5MB4XDTIyMDUy
NzA0NTExM1oXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoMzc5OWM0OGUxNDRj
YTJjYmFmOWQzYTg5M2UzY2I4MjFkNGFiOGE4OTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBALjM84gkkI6ShHFIhI3p/4sBYiC6X0hVWtaNH0RESGAgQxLH
6SWBBlWE4N08FKhkkTeKQlGFjFY5NL64BOUUD1ZLgWLiYBXNCVVvzIeTGkSDG3mt
imy9qRSpdHk5b2jUx3fyGUQ/c/49SpuA6eNWrBmejv8L/CIsethucB88Gx+DBdl1
G4U4uWUDLrQHfHslUcG141M+LvxdjXsndk3EALnmYKerzUx9a7ck91IN04UEYsEL
WXOUwX4RDNh9s2ksgdlgbD0M+SUTOgOBtBSU8usrsKESvABqyCu2Vytj7Eb+KIkx
evzSZ3PUt5KRgjqaBm8ZyqzHdxdvH0nbzIxRU0MCAwEAAaOCAhEwggINMB0GA1Ud
DgQWBBQ3mcSOFEyiy6+dOok+PLgh1KuKiTAfBgNVHSMEGDAWgBT45iY04b1RM6ne
RRKumMrRsiGbWTAOBgNVHQ8BAf8EBAMCB4AwZQYIKwYBBQUHAQEEWTBXMFUGCCsG
AQUFBzAChklyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
LzEtT1ltTk9HOVVUT3Aza1VTcnBqSzBiSWhtMWsuY2VyMIGNBggrBgEFBQcBCwSB
gDB+MHwGCCsGAQUFBzALhnByc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9y
eS9ERUZBVUxULzc4L2RhMzM5OC02Njk4LTQ1ZjItYmFhZS05MmUyNWZlMTYzMzEv
MS9ONW5FamhSTW9zdXZuVHFKUGp5NElkU3Jpb2sucm9hMIGCBgNVHR8EezB5MHeg
daBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzc4
L2RhMzM5OC02Njk4LTQ1ZjItYmFhZS05MmUyNWZlMTYzMzEvMS8xLU9ZbU5PRzlV
VE9wM2tVU3JwakswYklobTFrLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4C
MCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQATVF6AwQBvPH0MA0GCSqGSIb3
DQEBCwUAA4IBAQAVEfRW17uGpV7FPvMB2MWXlQAUD4uud3ZHBOSLed+e03ofUjx6
4Gu+IYGP1yq0+Q9gY2d1nEi9RlGLzBzAsUvm9KRs/SShbkiBb4hEpBGh0L8NOJwC
ohkwn7lmYcdQ+NcGzuwVh/fkIJisNq8KO2FUkIlJs8pltSDsWvQjFu840tuQjA8e
q3ZHyPss6b9ca7+oLUcyBHphE5YG+zxXDSCdZXtzeC6+Tl8RBFcBFT9r0Qmm/juz
lLNEAsJE8XrmFkQEOlFQ8kQUj0B2MvAoc73Jj5v7itr4qA0OsTnRG68YAa2MEYTM
duAGFtPVEQ9RKQ8uANePRtaZWqg/ytn7MsQ2
-----END CERTIFICATE-----
Generated at Wed Feb 19 22:31:50 2025 by rpki-client