Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/aWzU8JPutfjH3hfyLf4OTJnGoW4.roa
File: aWzU8JPutfjH3hfyLf4OTJnGoW4.roa (raw, json)
Hash identifier: HCYXTLqSLsiuH81IH+J+RlJNuWyctc4sVjbz1mStv14=
Subject key identifier: 69:6C:D4:F0:93:EE:B5:F8:C7:DE:17:F2:2D:FE:0E:4C:99:C6:A1:6E
Certificate issuer: /CN=f8e62634e1bd5133a9de4512ae98cad1b2219b59
Certificate serial: 0191FB38CB4FFB8AC899F3CB98351318D269
Authority key identifier: F8:E6:26:34:E1:BD:51:33:A9:DE:45:12:AE:98:CA:D1:B2:21:9B:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/aWzU8JPutfjH3hfyLf4OTJnGoW4.roa
Signing time: Mon 16 Sep 2024 14:24:48 +0000
ROA not before: Mon 16 Sep 2024 14:24:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 39531
IP address blocks: 93.115.174.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:fb:38:cb:4f:fb:8a:c8:99:f3:cb:98:35:13:18:d2:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8e62634e1bd5133a9de4512ae98cad1b2219b59
Validity
Not Before: Sep 16 14:24:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=696cd4f093eeb5f8c7de17f22dfe0e4c99c6a16e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:80:19:42:68:66:c3:63:9b:17:e3:c0:65:c7:
af:1d:65:4e:72:28:38:a6:d3:b4:80:af:91:66:23:
28:f2:d1:ce:52:8b:3f:da:ea:ed:e3:47:46:d6:e8:
2c:d1:da:d9:7a:3f:4d:61:57:0e:6f:bf:2d:7d:6b:
71:ce:3a:9f:ab:b4:dd:97:0d:10:ff:ff:4b:db:6f:
7b:c8:ce:58:b5:27:b6:6e:ef:c7:ef:fc:cf:ca:27:
de:9a:c8:3f:bd:52:dd:4b:ff:4d:30:05:b3:e6:47:
60:02:8b:d3:2e:4d:23:16:e9:b2:d8:3e:82:1f:71:
77:b8:68:20:28:04:37:08:ae:59:7b:3f:dd:a9:57:
da:d4:d8:b7:b4:1f:b8:61:97:db:8d:48:5a:23:7e:
05:b5:4b:8b:39:2e:6a:c6:76:c5:bf:89:b4:fb:42:
f2:82:83:41:6b:68:7e:ad:13:eb:01:bb:c6:2a:ba:
25:81:ef:98:19:9d:c9:b7:12:4f:87:51:98:6a:3e:
40:fe:02:0b:81:7f:5d:cc:46:d2:ba:f8:ea:ec:f7:
1b:54:77:ea:94:ca:4f:76:ce:8a:10:73:7e:b0:ff:
60:0a:0e:a6:2d:8d:94:28:85:4a:9b:7d:81:72:c6:
ca:3e:61:a0:ff:4d:a1:9f:58:f9:24:b1:85:69:2e:
9b:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:6C:D4:F0:93:EE:B5:F8:C7:DE:17:F2:2D:FE:0E:4C:99:C6:A1:6E
X509v3 Authority Key Identifier:
keyid:F8:E6:26:34:E1:BD:51:33:A9:DE:45:12:AE:98:CA:D1:B2:21:9B:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/aWzU8JPutfjH3hfyLf4OTJnGoW4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.115.174.0/24
Signature Algorithm: sha256WithRSAEncryption
5e:58:5a:86:55:7b:c7:ac:dd:a9:55:16:2e:f1:57:35:ed:46:
78:38:ee:a4:b9:4a:b2:85:a0:19:c5:aa:31:48:7c:69:63:93:
67:b7:7c:4d:d9:7b:ac:71:b2:81:84:54:b1:fe:2d:fe:0b:3a:
e9:df:13:54:fe:aa:44:fd:aa:64:61:b7:c4:81:ae:51:c6:e1:
de:75:b1:77:f7:57:21:e2:e9:5d:d6:bd:31:c0:ee:fb:b6:5a:
f9:ee:fe:62:4a:11:4f:cf:d0:c2:27:bb:e2:8c:b3:54:ca:a2:
81:e7:6f:5a:eb:b5:4c:40:27:14:85:9d:4f:d6:30:99:2f:8d:
39:88:54:63:32:14:b2:88:0b:99:d8:2f:9f:22:7f:45:fa:74:
4a:b2:a9:c4:e7:f0:45:6f:b4:55:22:59:34:94:09:ec:ee:3a:
4a:e5:67:65:37:59:62:31:5b:21:80:5a:e9:66:b2:68:a2:42:
0c:58:a4:b8:9e:e3:51:d8:15:d8:88:06:fb:87:90:d8:c2:cb:
01:4b:9d:c6:3d:36:14:f7:cc:ca:05:37:29:da:5a:aa:55:7c:
12:2c:22:f6:ae:23:3f:d4:2a:25:45:07:bb:4e:3d:80:56:9c:
03:49:2b:ba:8b:0f:f0:b2:6c:9a:9f:e3:7e:3a:d8:fd:93:f0:
0b:5c:05:fc
-----BEGIN CERTIFICATE-----
MIIE/zCCA+egAwIBAgISAZH7OMtP+4rImfPLmDUTGNJpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY4ZTYyNjM0ZTFiZDUxMzNhOWRlNDUxMmFlOThjYWQxYjIy
MTliNTkwHhcNMjQwOTE2MTQyNDQ4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2OTZjZDRmMDkzZWViNWY4YzdkZTE3ZjIyZGZlMGU0Yzk5YzZhMTZlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArYAZQmhmw2ObF+PAZcevHWVOcig4
ptO0gK+RZiMo8tHOUos/2urt40dG1ugs0drZej9NYVcOb78tfWtxzjqfq7Tdlw0Q
//9L2297yM5YtSe2bu/H7/zPyifemsg/vVLdS/9NMAWz5kdgAovTLk0jFumy2D6C
H3F3uGggKAQ3CK5Zez/dqVfa1Ni3tB+4YZfbjUhaI34FtUuLOS5qxnbFv4m0+0Ly
goNBa2h+rRPrAbvGKrolge+YGZ3JtxJPh1GYaj5A/gILgX9dzEbSuvjq7PcbVHfq
lMpPds6KEHN+sP9gCg6mLY2UKIVKm32BcsbKPmGg/02hn1j5JLGFaS6bdQIDAQAB
o4ICCzCCAgcwHQYDVR0OBBYEFGls1PCT7rX4x94X8i3+DkyZxqFuMB8GA1UdIwQY
MBaAFPjmJjThvVEzqd5FEq6YytGyIZtZMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1PWW1OT0c5VVRPcDNrVVNycGpLMGJJaG0xay5jZXIw
gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNzgvZGEzMzk4LTY2OTgtNDVmMi1iYWFl
LTkyZTI1ZmUxNjMzMS8xL2FXelU4SlB1dGZqSDNoZnlMZjRPVEpuR29XNC5yb2Ew
gYIGA1UdHwR7MHkwd6B1oHOGcXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvNzgvZGEzMzk4LTY2OTgtNDVmMi1iYWFlLTkyZTI1ZmUxNjMz
MS8xLzEtT1ltTk9HOVVUT3Aza1VTcnBqSzBiSWhtMWsuY3JsMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABdc64w
DQYJKoZIhvcNAQELBQADggEBAF5YWoZVe8es3alVFi7xVzXtRng47qS5SrKFoBnF
qjFIfGljk2e3fE3Ze6xxsoGEVLH+Lf4LOunfE1T+qkT9qmRht8SBrlHG4d51sXf3
VyHi6V3WvTHA7vu2Wvnu/mJKEU/P0MInu+KMs1TKooHnb1rrtUxAJxSFnU/WMJkv
jTmIVGMyFLKIC5nYL58if0X6dEqyqcTn8EVvtFUiWTSUCezuOkrlZ2U3WWIxWyGA
WulmsmiiQgxYpLie41HYFdiIBvuHkNjCywFLncY9NhT3zMoFNynaWqpVfBIsIvau
Iz/UKiVFB7tOPYBWnANJK7qLD/CybJqf43462P2T8AtcBfw=
-----END CERTIFICATE-----
Generated at Wed Feb 19 22:33:31 2025 by rpki-client