Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/jSpIbPTYELnxARiHl2txxjQAsrI.roa
File: jSpIbPTYELnxARiHl2txxjQAsrI.roa (raw, json)
Hash identifier: 2dAaWCBhm4vZZobc+7pK3JD6mgHllTWQOTyYWX+Nz5g=
Subject key identifier: 8D:2A:48:6C:F4:D8:10:B9:F1:01:18:87:97:6B:71:C6:34:00:B2:B2
Certificate issuer: /CN=f8e62634e1bd5133a9de4512ae98cad1b2219b59
Certificate serial: 01856FD52C628149CA6640D2337E6F341EF4
Authority key identifier: F8:E6:26:34:E1:BD:51:33:A9:DE:45:12:AE:98:CA:D1:B2:21:9B:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/jSpIbPTYELnxARiHl2txxjQAsrI.roa
Signing time: Mon 02 Jan 2023 00:15:19 +0000
ROA not before: Mon 02 Jan 2023 00:15:19 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 50939
IP address blocks: 89.36.140.0/24 maxlen: 24
93.115.203.0/24 maxlen: 24
176.223.66.0/24 maxlen: 24
89.40.36.0/24 maxlen: 24
128.0.41.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:d5:2c:62:81:49:ca:66:40:d2:33:7e:6f:34:1e:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8e62634e1bd5133a9de4512ae98cad1b2219b59
Validity
Not Before: Jan 2 00:15:19 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8d2a486cf4d810b9f1011887976b71c63400b2b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:24:d5:9f:cf:ea:04:fb:a4:fb:56:46:54:58:
ad:10:37:29:8d:50:a9:3f:0f:94:0d:c9:ac:f0:f6:
66:16:9b:56:a3:85:84:56:44:75:3d:fe:ed:a6:b1:
5b:b8:12:8f:89:f4:ad:ed:68:c3:db:bb:9c:30:5b:
2c:35:9f:ac:56:2b:42:1d:f6:21:f7:1e:6b:1d:b5:
b9:f2:e1:66:b9:be:15:f4:f6:a6:08:bd:24:ae:9f:
b5:06:1c:e7:95:88:d3:c2:1d:74:f3:af:ac:83:3b:
1e:c0:c4:e8:c8:2c:15:2e:0b:6e:8a:ef:94:83:15:
c3:5f:84:c0:59:3f:f8:d4:d6:b5:be:24:ab:6d:12:
cd:49:97:90:95:4b:34:6a:5d:48:fc:e8:36:32:5d:
49:07:5c:31:24:6f:b0:c0:da:15:f2:2b:17:96:9b:
1a:37:53:50:b3:50:ab:80:7b:a3:16:e1:76:4b:23:
dd:94:25:1c:43:40:d8:6a:85:a6:1f:42:06:6c:e2:
19:6f:d2:92:ca:a3:8e:a2:3b:b0:f1:f7:9a:8e:ff:
e3:25:b4:a1:44:9c:ba:75:0b:60:16:cb:9a:3a:4a:
1c:29:f0:d5:76:b8:ac:36:da:e5:71:5d:81:81:50:
9a:95:bb:14:38:a6:c3:9a:74:a2:80:00:6c:6c:59:
f1:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:2A:48:6C:F4:D8:10:B9:F1:01:18:87:97:6B:71:C6:34:00:B2:B2
X509v3 Authority Key Identifier:
keyid:F8:E6:26:34:E1:BD:51:33:A9:DE:45:12:AE:98:CA:D1:B2:21:9B:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/jSpIbPTYELnxARiHl2txxjQAsrI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.36.140.0/24
89.40.36.0/24
93.115.203.0/24
128.0.41.0/24
176.223.66.0/24
Signature Algorithm: sha256WithRSAEncryption
67:72:e8:d6:48:f5:c2:67:4b:5c:eb:1e:39:8d:80:29:ca:e8:
2d:ab:81:37:96:0c:a7:be:f7:ac:3e:0b:ad:fe:ed:09:2b:8a:
84:d4:62:8b:d6:49:7a:b2:6f:32:2b:54:8a:f7:c9:6f:08:87:
f7:54:a8:f6:75:2d:a6:84:c2:b6:e2:02:11:80:7f:b4:43:50:
8b:76:56:c3:4d:b7:cc:22:01:ed:85:c0:8f:14:32:bd:6b:b4:
a8:0a:09:33:d8:b9:fd:ea:65:39:af:62:6d:27:c2:cf:1c:f9:
a0:fe:75:d9:e1:ca:cf:98:e5:e0:0a:76:19:69:1e:42:c4:bf:
70:cc:fa:e1:44:f8:24:57:47:49:92:34:fa:50:bc:9a:4a:7f:
a3:cb:1b:aa:2b:cd:13:0a:30:4c:23:71:31:5e:ec:b5:9d:66:
df:8a:46:bf:69:eb:4d:fb:49:fb:c1:d3:2c:25:df:eb:ad:60:
bd:1b:a4:d2:12:77:f6:7a:59:f5:98:45:6e:d4:29:fb:10:52:
ff:e2:ea:c5:e2:cc:dd:2c:50:34:09:1d:e6:cb:b4:5e:93:e8:
3f:22:de:85:c0:07:b9:04:c7:03:41:81:45:9a:c3:ca:70:e1:
81:43:57:42:34:de:f7:ff:58:3a:1b:c3:85:9c:42:d9:ec:7b:
ac:e5:a3:dd
-----BEGIN CERTIFICATE-----
MIIFFzCCA/+gAwIBAgISAYVv1SxigUnKZkDSM35vNB70MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY4ZTYyNjM0ZTFiZDUxMzNhOWRlNDUxMmFlOThjYWQxYjIy
MTliNTkwHhcNMjMwMTAyMDAxNTE5WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4ZDJhNDg2Y2Y0ZDgxMGI5ZjEwMTE4ODc5NzZiNzFjNjM0MDBiMmIyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApiTVn8/qBPuk+1ZGVFitEDcpjVCp
Pw+UDcms8PZmFptWo4WEVkR1Pf7tprFbuBKPifSt7WjD27ucMFssNZ+sVitCHfYh
9x5rHbW58uFmub4V9PamCL0krp+1BhznlYjTwh1086+sgzsewMToyCwVLgtuiu+U
gxXDX4TAWT/41Na1viSrbRLNSZeQlUs0al1I/Og2Ml1JB1wxJG+wwNoV8isXlpsa
N1NQs1CrgHujFuF2SyPdlCUcQ0DYaoWmH0IGbOIZb9KSyqOOojuw8feajv/jJbSh
RJy6dQtgFsuaOkocKfDVdrisNtrlcV2BgVCalbsUOKbDmnSigABsbFnxzQIDAQAB
o4ICIzCCAh8wHQYDVR0OBBYEFI0qSGz02BC58QEYh5drccY0ALKyMB8GA1UdIwQY
MBaAFPjmJjThvVEzqd5FEq6YytGyIZtZMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1PWW1OT0c5VVRPcDNrVVNycGpLMGJJaG0xay5jZXIw
gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNzgvZGEzMzk4LTY2OTgtNDVmMi1iYWFl
LTkyZTI1ZmUxNjMzMS8xL2pTcEliUFRZRUxueEFSaUhsMnR4eGpRQXNySS5yb2Ew
gYIGA1UdHwR7MHkwd6B1oHOGcXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvNzgvZGEzMzk4LTY2OTgtNDVmMi1iYWFlLTkyZTI1ZmUxNjMz
MS8xLzEtT1ltTk9HOVVUT3Aza1VTcnBqSzBiSWhtMWsuY3JsMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwNwYIKwYBBQUHAQcBAf8EKDAmMCQEAgABMB4DBABZJIwD
BABZKCQDBABdc8sDBACAACkDBACw30IwDQYJKoZIhvcNAQELBQADggEBAGdy6NZI
9cJnS1zrHjmNgCnK6C2rgTeWDKe+96w+C63+7QkrioTUYovWSXqybzIrVIr3yW8I
h/dUqPZ1LaaEwrbiAhGAf7RDUIt2VsNNt8wiAe2FwI8UMr1rtKgKCTPYuf3qZTmv
Ym0nws8c+aD+ddnhys+Y5eAKdhlpHkLEv3DM+uFE+CRXR0mSNPpQvJpKf6PLG6or
zRMKMEwjcTFe7LWdZt+KRr9p6037SfvB0ywl3+utYL0bpNISd/Z6WfWYRW7UKfsQ
Uv/i6sXizN0sUDQJHebLtF6T6D8i3oXAB7kExwNBgUWaw8pw4YFDV0I03vf/WDob
w4WcQtnse6zlo90=
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:01:49 2023 by rpki-client on console-ams.rpki-client.org