Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/4bba7c-a81f-40e1-8814-65daad632957/1/JxQAPL9QObbVLybT1cvKA08ByJU.roa
File: JxQAPL9QObbVLybT1cvKA08ByJU.roa (raw, json)
Hash identifier: rKpVSqtkhcqbgn9l4BYWS6TybDs8bg/BE6R79D8FIZw=
Subject key identifier: 27:14:00:3C:BF:50:39:B6:D5:2F:26:D3:D5:CB:CA:03:4F:01:C8:95
Certificate issuer: /CN=942588b91da9cca81b49e603a988e2b1eabddc98
Certificate serial: 018F9013721BF4443FB5E658DAEFC151D480
Authority key identifier: 94:25:88:B9:1D:A9:CC:A8:1B:49:E6:03:A9:88:E2:B1:EA:BD:DC:98
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lCWIuR2pzKgbSeYDqYjiseq93Jg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/4bba7c-a81f-40e1-8814-65daad632957/1/JxQAPL9QObbVLybT1cvKA08ByJU.roa
Signing time: Sun 19 May 2024 08:59:04 +0000
ROA not before: Sun 19 May 2024 08:59:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 6886
IP address blocks: 185.23.167.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:90:13:72:1b:f4:44:3f:b5:e6:58:da:ef:c1:51:d4:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=942588b91da9cca81b49e603a988e2b1eabddc98
Validity
Not Before: May 19 08:59:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2714003cbf5039b6d52f26d3d5cbca034f01c895
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:5a:d3:bc:c7:bc:92:b0:97:d2:fd:89:aa:18:
36:67:77:36:8f:e6:b7:b3:03:44:95:d3:27:ae:52:
a2:79:9c:dc:e1:22:d4:74:16:fb:f0:e2:dc:eb:d2:
ec:4e:7e:dc:61:cc:f3:66:b6:9d:c1:f3:4c:b1:ad:
03:fc:50:21:73:af:d6:44:a5:eb:2f:04:74:2b:2a:
a3:6a:d8:16:1b:49:7f:3c:e1:0f:2a:b1:cd:ad:b3:
9e:b5:c6:2f:9c:53:23:c6:35:e0:9b:24:ac:5d:f2:
10:21:8e:ea:92:a0:a0:eb:5d:b3:7b:75:43:bf:14:
4c:61:86:b0:a9:b9:f2:8a:8a:7f:6e:74:33:50:3f:
50:af:48:dc:58:0a:72:31:7e:d7:43:be:d9:6b:3c:
89:ea:55:65:1d:59:b9:70:13:6e:c2:5f:89:3b:62:
08:96:db:cb:6f:21:c5:1e:94:fa:c9:f8:3f:fc:4d:
99:de:37:53:dc:7c:42:27:d2:17:d6:0f:ba:61:8c:
7e:ad:23:f4:49:08:6c:b2:6c:1a:d6:9f:53:a8:7f:
a5:5c:27:aa:d8:e2:8e:ce:ff:60:01:9b:fc:54:11:
6b:11:c3:35:4c:8d:cd:8f:0b:bd:10:0e:f3:67:bd:
af:76:c4:1f:44:89:48:e4:d3:26:83:0c:a0:8e:e2:
b3:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:14:00:3C:BF:50:39:B6:D5:2F:26:D3:D5:CB:CA:03:4F:01:C8:95
X509v3 Authority Key Identifier:
keyid:94:25:88:B9:1D:A9:CC:A8:1B:49:E6:03:A9:88:E2:B1:EA:BD:DC:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lCWIuR2pzKgbSeYDqYjiseq93Jg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/4bba7c-a81f-40e1-8814-65daad632957/1/JxQAPL9QObbVLybT1cvKA08ByJU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/4bba7c-a81f-40e1-8814-65daad632957/1/lCWIuR2pzKgbSeYDqYjiseq93Jg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.23.167.0/24
Signature Algorithm: sha256WithRSAEncryption
29:aa:79:ee:24:12:42:1e:fc:66:8d:cc:57:cb:0c:6b:53:d3:
4c:47:9f:b1:b2:f8:00:83:5e:cd:07:cf:4a:1c:df:c8:a8:eb:
2b:5a:8f:c6:5c:de:57:ea:7e:24:2b:1c:89:91:db:a2:e6:b5:
10:15:a7:83:cd:d3:d9:b1:fa:88:1e:d3:48:cd:9e:8e:3d:c2:
b7:23:07:e4:79:3d:6c:21:5b:4c:c1:59:19:92:36:31:56:0f:
48:7a:e1:82:01:5b:b8:68:64:37:fc:5e:74:d2:62:f7:c1:4e:
49:40:9e:4a:d5:6c:0b:91:ff:f2:d7:63:1c:f0:25:f0:f0:d1:
8d:92:1c:e2:f5:57:f6:d0:08:22:2a:c4:e8:82:95:81:9f:ae:
25:88:c9:27:70:a0:6a:17:0e:15:56:00:ef:83:af:e9:63:bc:
2f:1a:15:78:9e:b4:09:a3:a7:f3:e6:8f:28:b4:e2:0d:29:3d:
22:7e:f5:73:5a:27:65:99:21:34:a7:79:7c:be:ba:9b:a6:3b:
a5:1a:ed:1d:b7:bc:ed:71:e7:ab:1e:db:44:c4:6f:c2:38:45:
77:63:54:ef:19:8b:f7:01:50:84:6b:83:39:a0:e7:23:9a:55:
26:69:84:a6:12:80:44:c4:f0:13:84:2b:e6:c1:cf:df:37:ba:
46:e8:08:44
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAY+QE3Ib9EQ/teZY2u/BUdSAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk0MjU4OGI5MWRhOWNjYTgxYjQ5ZTYwM2E5ODhlMmIxZWFi
ZGRjOTgwHhcNMjQwNTE5MDg1OTA0WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyNzE0MDAzY2JmNTAzOWI2ZDUyZjI2ZDNkNWNiY2EwMzRmMDFjODk1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1FrTvMe8krCX0v2Jqhg2Z3c2j+a3
swNEldMnrlKieZzc4SLUdBb78OLc69LsTn7cYczzZradwfNMsa0D/FAhc6/WRKXr
LwR0KyqjatgWG0l/POEPKrHNrbOetcYvnFMjxjXgmySsXfIQIY7qkqCg612ze3VD
vxRMYYawqbnyiop/bnQzUD9Qr0jcWApyMX7XQ77ZazyJ6lVlHVm5cBNuwl+JO2II
ltvLbyHFHpT6yfg//E2Z3jdT3HxCJ9IX1g+6YYx+rSP0SQhssmwa1p9TqH+lXCeq
2OKOzv9gAZv8VBFrEcM1TI3Njwu9EA7zZ72vdsQfRIlI5NMmgwygjuKzmwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFCcUADy/UDm21S8m09XLygNPAciVMB8GA1UdIwQY
MBaAFJQliLkdqcyoG0nmA6mI4rHqvdyYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbENXSXVSMnB6S2diU2VZRHFZamlzZXE5M0pnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZC80YmJhN2MtYTgxZi00MGUxLTg4MTQt
NjVkYWFkNjMyOTU3LzEvSnhRQVBMOVFPYmJWTHliVDFjdktBMDhCeUpVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83ZC80YmJhN2MtYTgxZi00MGUxLTg4MTQtNjVkYWFkNjMyOTU3
LzEvbENXSXVSMnB6S2diU2VZRHFZamlzZXE5M0pnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuRenMA0G
CSqGSIb3DQEBCwUAA4IBAQApqnnuJBJCHvxmjcxXywxrU9NMR5+xsvgAg17NB89K
HN/IqOsrWo/GXN5X6n4kKxyJkdui5rUQFaeDzdPZsfqIHtNIzZ6OPcK3IwfkeT1s
IVtMwVkZkjYxVg9IeuGCAVu4aGQ3/F500mL3wU5JQJ5K1WwLkf/y12Mc8CXw8NGN
khzi9Vf20AgiKsTogpWBn64liMkncKBqFw4VVgDvg6/pY7wvGhV4nrQJo6fz5o8o
tOINKT0ifvVzWidlmSE0p3l8vrqbpjulGu0dt7ztceerHttExG/COEV3Y1TvGYv3
AVCEa4M5oOcjmlUmaYSmEoBExPAThCvmwc/fN7pG6AhE
-----END CERTIFICATE-----
Generated at Fri Apr 18 23:30:42 2025 by rpki-client