Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/b54ca3-73d5-4984-8782-9e0aed2fb8ec/1/7NTewl5afZpKeqsuoyowIgBayc8.roa
File: 7NTewl5afZpKeqsuoyowIgBayc8.roa (raw, json)
Hash identifier: qB0e4bvBo17uEl9u620B+38AvLP6TSgmZkhggP7/g4Y=
Subject key identifier: EC:D4:DE:C2:5E:5A:7D:9A:4A:7A:AB:2E:A3:2A:30:22:00:5A:C9:CF
Certificate issuer: /CN=c8d5e37178d8524c72660a1d796165999e586622
Certificate serial: 018CB54BB8131A25409E2FA141C9287514F5
Authority key identifier: C8:D5:E3:71:78:D8:52:4C:72:66:0A:1D:79:61:65:99:9E:58:66:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yNXjcXjYUkxyZgodeWFlmZ5YZiI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/b54ca3-73d5-4984-8782-9e0aed2fb8ec/1/7NTewl5afZpKeqsuoyowIgBayc8.roa
Signing time: Fri 29 Dec 2023 11:18:07 +0000
ROA not before: Fri 29 Dec 2023 11:18:07 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 0
IP address blocks: 45.151.204.0/22 maxlen: 24
193.3.158.0/24 maxlen: 24
45.130.204.0/22 maxlen: 24
185.39.11.0/24 maxlen: 24
94.142.164.0/22 maxlen: 22
45.12.44.0/22 maxlen: 24
45.95.140.0/22 maxlen: 24
45.86.192.0/22 maxlen: 22
45.15.52.0/22 maxlen: 22
45.145.192.0/22 maxlen: 24
91.225.0.0/24 maxlen: 24
45.67.44.0/22 maxlen: 22
45.136.60.0/22 maxlen: 24
195.244.14.0/23 maxlen: 23
91.239.24.0/24 maxlen: 24
185.232.89.0/24 maxlen: 24
185.57.176.0/22 maxlen: 22
2.57.180.0/22 maxlen: 24
2.59.116.0/24 maxlen: 24
91.238.217.0/24 maxlen: 24
91.227.240.0/23 maxlen: 23
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:b5:4b:b8:13:1a:25:40:9e:2f:a1:41:c9:28:75:14:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c8d5e37178d8524c72660a1d796165999e586622
Validity
Not Before: Dec 29 11:18:07 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ecd4dec25e5a7d9a4a7aab2ea32a3022005ac9cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:d6:07:e6:03:3a:cd:99:d9:e7:52:6a:17:80:
7b:54:23:f1:a8:83:72:ef:0e:27:a9:e4:29:cc:b5:
c4:77:cb:06:9c:08:23:4a:88:0c:a2:75:40:8f:df:
9f:72:90:38:35:e1:e4:bd:35:e9:0e:14:6f:2a:ef:
2f:95:80:eb:1e:b5:ab:6f:52:f6:56:60:bf:dd:cd:
18:63:af:59:5e:75:f0:32:3b:90:91:c8:8b:4c:64:
1b:f5:4e:ba:da:0c:fa:d4:51:bd:1f:32:98:7b:68:
60:0b:74:e3:0e:f1:38:09:6f:e8:96:4d:a4:d1:31:
ba:6d:32:f9:85:bd:b9:07:21:5c:da:ad:00:f5:b1:
cc:56:8d:09:d9:fa:0a:1d:59:77:7d:d6:13:1e:88:
ba:28:66:b3:72:38:f4:95:0b:92:0a:fc:cb:fc:1d:
e2:0f:e5:d9:7d:b4:1f:e4:d3:5c:9d:7c:c7:08:b8:
a3:d8:f2:6e:5a:c4:05:66:1c:4f:f6:8d:c8:01:05:
ec:42:85:10:ee:c4:88:e1:f4:4e:07:bc:6a:21:ff:
c6:d2:20:9d:7f:67:cf:e8:54:3b:94:4c:79:ce:97:
fc:65:a3:99:42:93:f5:00:67:c4:8f:21:77:b1:84:
52:05:23:dd:24:d3:cf:51:3b:5c:bc:4c:8a:19:15:
5a:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:D4:DE:C2:5E:5A:7D:9A:4A:7A:AB:2E:A3:2A:30:22:00:5A:C9:CF
X509v3 Authority Key Identifier:
keyid:C8:D5:E3:71:78:D8:52:4C:72:66:0A:1D:79:61:65:99:9E:58:66:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yNXjcXjYUkxyZgodeWFlmZ5YZiI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/b54ca3-73d5-4984-8782-9e0aed2fb8ec/1/7NTewl5afZpKeqsuoyowIgBayc8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/b54ca3-73d5-4984-8782-9e0aed2fb8ec/1/yNXjcXjYUkxyZgodeWFlmZ5YZiI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.57.180.0/22
2.59.116.0/24
45.12.44.0/22
45.15.52.0/22
45.67.44.0/22
45.86.192.0/22
45.95.140.0/22
45.130.204.0/22
45.136.60.0/22
45.145.192.0/22
45.151.204.0/22
91.225.0.0/24
91.227.240.0/23
91.238.217.0/24
91.239.24.0/24
94.142.164.0/22
185.39.11.0/24
185.57.176.0/22
185.232.89.0/24
193.3.158.0/24
195.244.14.0/23
Signature Algorithm: sha256WithRSAEncryption
5b:43:14:47:12:b9:d6:53:48:07:01:25:ad:b8:62:0c:c4:b4:
73:c7:31:20:6f:95:5b:6e:4c:dd:90:5c:c7:df:1f:21:f9:b0:
c8:17:58:00:5c:89:ed:6e:b1:02:ac:2b:eb:6e:61:1f:e5:c6:
a4:79:1b:1f:35:01:f9:90:24:77:31:65:79:0f:11:a3:46:80:
95:ba:6d:e9:0b:63:65:64:ec:ac:b3:7e:b1:e6:1f:d3:ef:7e:
9b:94:cc:f3:60:08:5d:d5:44:c4:83:30:2b:e5:8e:2a:09:e6:
73:f1:36:a8:09:1d:e0:90:36:7e:2c:3d:05:60:d3:61:f7:b4:
b9:2c:9a:ea:67:26:4b:15:e8:f2:0d:b3:a0:f9:28:2b:0a:7f:
56:7c:41:22:81:4d:cc:91:d0:9f:86:8d:7d:58:5e:4e:b3:88:
af:5f:46:8c:54:65:f2:db:8b:a4:12:ec:cd:30:c7:ee:43:5e:
a1:45:09:82:08:b2:1a:df:eb:40:c0:fc:14:ea:6f:a7:f7:c7:
e7:0f:75:56:c6:01:c9:c5:c3:9a:d1:48:51:e3:f5:70:82:2a:
0f:48:b9:0d:ea:43:9d:bd:a8:e2:14:73:ac:fc:f0:ed:72:1a:
53:dd:40:52:ee:31:96:58:ad:2e:e7:14:b5:c4:8a:8d:d7:4f:
50:f9:82:6b
-----BEGIN CERTIFICATE-----
MIIFeTCCBGGgAwIBAgISAYy1S7gTGiVAni+hQckodRT1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM4ZDVlMzcxNzhkODUyNGM3MjY2MGExZDc5NjE2NTk5OWU1
ODY2MjIwHhcNMjMxMjI5MTExODA3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlY2Q0ZGVjMjVlNWE3ZDlhNGE3YWFiMmVhMzJhMzAyMjAwNWFjOWNmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA19YH5gM6zZnZ51JqF4B7VCPxqINy
7w4nqeQpzLXEd8sGnAgjSogMonVAj9+fcpA4NeHkvTXpDhRvKu8vlYDrHrWrb1L2
VmC/3c0YY69ZXnXwMjuQkciLTGQb9U662gz61FG9HzKYe2hgC3TjDvE4CW/olk2k
0TG6bTL5hb25ByFc2q0A9bHMVo0J2foKHVl3fdYTHoi6KGazcjj0lQuSCvzL/B3i
D+XZfbQf5NNcnXzHCLij2PJuWsQFZhxP9o3IAQXsQoUQ7sSI4fROB7xqIf/G0iCd
f2fP6FQ7lEx5zpf8ZaOZQpP1AGfEjyF3sYRSBSPdJNPPUTtcvEyKGRVafwIDAQAB
o4IChTCCAoEwHQYDVR0OBBYEFOzU3sJeWn2aSnqrLqMqMCIAWsnPMB8GA1UdIwQY
MBaAFMjV43F42FJMcmYKHXlhZZmeWGYiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveU5YamNYallVa3h5WmdvZGVXRmxtWjVZWmlJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZS9iNTRjYTMtNzNkNS00OTg0LTg3ODIt
OWUwYWVkMmZiOGVjLzEvN05UZXdsNWFmWnBLZXFzdW95b3dJZ0JheWM4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83ZS9iNTRjYTMtNzNkNS00OTg0LTg3ODItOWUwYWVkMmZiOGVj
LzEveU5YamNYallVa3h5WmdvZGVXRmxtWjVZWmlJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIGaBggrBgEFBQcBBwEB/wSBijCBhzCBhAQCAAEwfgMEAgI5
tAMEAAI7dAMEAi0MLAMEAi0PNAMEAi1DLAMEAi1WwAMEAi1fjAMEAi2CzAMEAi2I
PAMEAi2RwAMEAi2XzAMEAFvhAAMEAVvj8AMEAFvu2QMEAFvvGAMEAl6OpAMEALkn
CwMEArk5sAMEALnoWQMEAMEDngMEAcP0DjANBgkqhkiG9w0BAQsFAAOCAQEAW0MU
RxK51lNIBwElrbhiDMS0c8cxIG+VW25M3ZBcx98fIfmwyBdYAFyJ7W6xAqwr625h
H+XGpHkbHzUB+ZAkdzFleQ8Ro0aAlbpt6QtjZWTsrLN+seYf0+9+m5TM82AIXdVE
xIMwK+WOKgnmc/E2qAkd4JA2fiw9BWDTYfe0uSya6mcmSxXo8g2zoPkoKwp/VnxB
IoFNzJHQn4aNfVheTrOIr19GjFRl8tuLpBLszTDH7kNeoUUJggiyGt/rQMD8FOpv
p/fH5w91VsYBycXDmtFIUeP1cIIqD0i5DepDnb2o4hRzrPzw7XIaU91AUu4xllit
LucUtcSKjddPUPmCaw==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:31 2024 by rpki-client on console-fra.rpki-client.org