Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/30ed3e-c4c4-4de8-b4f1-f11a39f26c3b/1/O0896IoSi9zDYHXKlo5fw-Vzaqw.roa
File: O0896IoSi9zDYHXKlo5fw-Vzaqw.roa (raw, json)
Hash identifier: rtrL/5OcS2fejQZT/PdtrTOyQb6bFFBSrkauAecgpS0=
Subject key identifier: 3B:4F:3D:E8:8A:12:8B:DC:C3:60:75:CA:96:8E:5F:C3:E5:73:6A:AC
Certificate issuer: /CN=5da3941c27cfe5c234c4bf221ecb2a579b2deaab
Certificate serial: 01856F1DCE3F3C99DA0360C1DF915C9F0D59
Authority key identifier: 5D:A3:94:1C:27:CF:E5:C2:34:C4:BF:22:1E:CB:2A:57:9B:2D:EA:AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XaOUHCfP5cI0xL8iHssqV5st6qs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/30ed3e-c4c4-4de8-b4f1-f11a39f26c3b/1/O0896IoSi9zDYHXKlo5fw-Vzaqw.roa
Signing time: Sun 01 Jan 2023 20:55:02 +0000
ROA not before: Sun 01 Jan 2023 20:55:02 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 203936
IP address blocks: 193.160.209.0/24 maxlen: 24
193.160.208.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:1d:ce:3f:3c:99:da:03:60:c1:df:91:5c:9f:0d:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5da3941c27cfe5c234c4bf221ecb2a579b2deaab
Validity
Not Before: Jan 1 20:55:02 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3b4f3de88a128bdcc36075ca968e5fc3e5736aac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:ca:88:cb:4a:13:b4:b5:ce:f6:fd:7e:f5:f7:
e5:06:0d:de:56:54:72:4e:2f:6a:b1:de:d5:f4:cf:
a2:f6:d1:b7:27:b1:5d:f2:98:61:08:1a:f1:93:79:
74:e2:27:2b:68:72:c3:02:ac:70:46:80:a0:94:93:
da:ed:67:65:3c:85:6e:ef:dd:ea:0b:7b:c2:54:5c:
7e:06:ed:71:fa:ce:c8:ae:67:8d:3c:95:68:34:3b:
54:69:55:3d:e4:90:f7:9b:aa:54:00:38:12:cd:83:
3b:0d:8f:40:7b:ed:95:04:50:3e:53:c2:5e:8f:03:
d9:f5:b9:64:3a:38:30:af:44:6b:15:0b:d8:b1:67:
f7:f6:a6:0d:49:cd:ca:c4:e8:e3:32:fb:ed:ee:1e:
46:26:7a:7d:98:46:b9:95:2c:80:ed:a0:9c:0e:30:
77:b3:05:8f:07:4f:b1:01:db:a1:72:80:a1:dd:7e:
d6:1b:10:8a:9c:27:47:a2:ad:f1:bc:20:19:b5:fd:
d8:36:4a:45:a4:3f:1f:e7:24:d4:73:5e:2f:e9:f3:
79:6d:9a:ae:d9:76:72:97:6c:b2:39:ca:b9:7f:1d:
04:f9:7a:d4:9e:e6:8f:13:3f:e9:50:e0:fe:10:5e:
35:71:2e:8b:37:f8:4b:a9:d2:f8:33:9d:ed:1b:e0:
c9:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:4F:3D:E8:8A:12:8B:DC:C3:60:75:CA:96:8E:5F:C3:E5:73:6A:AC
X509v3 Authority Key Identifier:
keyid:5D:A3:94:1C:27:CF:E5:C2:34:C4:BF:22:1E:CB:2A:57:9B:2D:EA:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XaOUHCfP5cI0xL8iHssqV5st6qs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/30ed3e-c4c4-4de8-b4f1-f11a39f26c3b/1/O0896IoSi9zDYHXKlo5fw-Vzaqw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/30ed3e-c4c4-4de8-b4f1-f11a39f26c3b/1/XaOUHCfP5cI0xL8iHssqV5st6qs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.160.208.0/23
Signature Algorithm: sha256WithRSAEncryption
3a:e4:91:6c:62:61:e9:14:cf:9a:fb:b7:70:d0:5d:ed:68:02:
d4:63:ea:e6:18:b8:27:eb:6f:e9:2a:97:95:ea:3f:6f:fc:7b:
40:b8:74:f3:79:09:7e:e3:42:60:d9:fe:51:ec:3a:10:d6:70:
9a:18:98:3a:35:cb:01:04:1b:3e:46:81:61:d8:13:bb:92:80:
a4:b6:49:29:b0:ba:3a:a9:a7:89:a8:ac:5f:71:5a:3a:be:2a:
ca:53:87:26:ed:14:ec:66:85:71:bc:84:99:0e:f1:7c:b7:23:
34:6e:59:11:cf:77:42:9f:c4:5f:63:2b:f9:5c:c0:03:b8:64:
eb:9f:c7:c9:9e:25:65:35:a7:ae:20:64:95:b3:2d:18:da:b1:
ad:61:22:32:07:6b:5e:82:57:86:30:ac:8a:c3:d8:03:a4:86:
61:b1:b9:4e:42:9f:00:fb:d2:d0:66:ae:d8:d0:b6:bf:94:34:
97:9c:6d:78:a7:a8:07:c5:d4:3c:af:7d:10:63:e8:14:44:77:
72:de:75:ec:88:e7:4d:c1:af:1c:56:ed:0c:e7:f1:ce:22:66:
91:ef:b1:74:f1:b2:91:30:80:17:14:cb:23:81:0c:0d:49:9e:
da:79:7f:75:78:73:1f:0a:f6:4f:0a:f6:76:8e:a3:3c:95:77:
27:31:9a:c4
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVvHc4/PJnaA2DB35Fcnw1ZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVkYTM5NDFjMjdjZmU1YzIzNGM0YmYyMjFlY2IyYTU3OWIy
ZGVhYWIwHhcNMjMwMTAxMjA1NTAyWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzYjRmM2RlODhhMTI4YmRjYzM2MDc1Y2E5NjhlNWZjM2U1NzM2YWFjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAosqIy0oTtLXO9v1+9fflBg3eVlRy
Ti9qsd7V9M+i9tG3J7Fd8phhCBrxk3l04icraHLDAqxwRoCglJPa7WdlPIVu793q
C3vCVFx+Bu1x+s7IrmeNPJVoNDtUaVU95JD3m6pUADgSzYM7DY9Ae+2VBFA+U8Je
jwPZ9blkOjgwr0RrFQvYsWf39qYNSc3KxOjjMvvt7h5GJnp9mEa5lSyA7aCcDjB3
swWPB0+xAduhcoCh3X7WGxCKnCdHoq3xvCAZtf3YNkpFpD8f5yTUc14v6fN5bZqu
2XZyl2yyOcq5fx0E+XrUnuaPEz/pUOD+EF41cS6LN/hLqdL4M53tG+DJUwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFDtPPeiKEovcw2B1ypaOX8Plc2qsMB8GA1UdIwQY
MBaAFF2jlBwnz+XCNMS/Ih7LKlebLeqrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWGFPVUhDZlA1Y0kweEw4aUhzc3FWNXN0NnFzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MC8zMGVkM2UtYzRjNC00ZGU4LWI0ZjEt
ZjExYTM5ZjI2YzNiLzEvTzA4OTZJb1NpOXpEWUhYS2xvNWZ3LVZ6YXF3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84MC8zMGVkM2UtYzRjNC00ZGU4LWI0ZjEtZjExYTM5ZjI2YzNi
LzEvWGFPVUhDZlA1Y0kweEw4aUhzc3FWNXN0NnFzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBwaDQMA0G
CSqGSIb3DQEBCwUAA4IBAQA65JFsYmHpFM+a+7dw0F3taALUY+rmGLgn62/pKpeV
6j9v/HtAuHTzeQl+40Jg2f5R7DoQ1nCaGJg6NcsBBBs+RoFh2BO7koCktkkpsLo6
qaeJqKxfcVo6virKU4cm7RTsZoVxvISZDvF8tyM0blkRz3dCn8RfYyv5XMADuGTr
n8fJniVlNaeuIGSVsy0Y2rGtYSIyB2tegleGMKyKw9gDpIZhsblOQp8A+9LQZq7Y
0La/lDSXnG14p6gHxdQ8r30QY+gURHdy3nXsiOdNwa8cVu0M5/HOImaR77F08bKR
MIAXFMsjgQwNSZ7aeX91eHMfCvZPCvZ2jqM8lXcnMZrE
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:47 2024 by rpki-client on console-fra.rpki-client.org