Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/30ed3e-c4c4-4de8-b4f1-f11a39f26c3b/1/xlCDqf15cAbUfs8H7qlP0dDsAjQ.roa
File: xlCDqf15cAbUfs8H7qlP0dDsAjQ.roa (raw, json)
Hash identifier: zue00oqCDsWF1lQuUphr7upT3XqrtwVOgn7OIZ6kvYc=
Subject key identifier: C6:50:83:A9:FD:79:70:06:D4:7E:CF:07:EE:A9:4F:D1:D0:EC:02:34
Certificate issuer: /CN=5da3941c27cfe5c234c4bf221ecb2a579b2deaab
Certificate serial: 0183379FE7A707D1ADF95439120165B0EB5B
Authority key identifier: 5D:A3:94:1C:27:CF:E5:C2:34:C4:BF:22:1E:CB:2A:57:9B:2D:EA:AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XaOUHCfP5cI0xL8iHssqV5st6qs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/30ed3e-c4c4-4de8-b4f1-f11a39f26c3b/1/xlCDqf15cAbUfs8H7qlP0dDsAjQ.roa
Signing time: Tue 13 Sep 2022 16:12:49 +0000
ROA not before: Tue 13 Sep 2022 16:12:49 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 26548
IP address blocks: 94.231.216.0/24 maxlen: 24
94.231.217.0/24 maxlen: 24
94.231.218.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:37:9f:e7:a7:07:d1:ad:f9:54:39:12:01:65:b0:eb:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5da3941c27cfe5c234c4bf221ecb2a579b2deaab
Validity
Not Before: Sep 13 16:12:49 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c65083a9fd797006d47ecf07eea94fd1d0ec0234
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:9a:2d:29:c5:ec:95:86:5f:dd:80:7a:fc:f4:
13:dd:52:a4:cc:50:82:6d:37:64:70:80:c3:5c:2a:
9b:ab:89:ff:91:41:3a:14:ea:a2:71:4f:88:9b:56:
0b:e9:d3:03:eb:f6:8a:aa:19:93:ba:1d:d8:d5:6c:
6b:4f:69:9f:31:f8:03:58:37:d5:49:f1:e5:bb:a6:
5b:d7:2d:94:be:87:a3:69:c7:ab:f4:f1:86:ac:5c:
ca:07:64:d8:20:3f:00:73:9d:1e:21:86:35:3a:53:
7c:1a:be:c0:47:e9:6b:10:ea:fd:89:f4:9d:7f:18:
95:a8:14:5a:95:50:7f:7d:56:ce:94:a1:7f:39:2b:
8e:64:ae:9e:44:57:31:3f:6d:f2:2a:45:64:bb:81:
55:c4:a9:f6:73:fb:a7:58:e0:a1:51:17:75:64:f5:
8b:d2:c6:24:f1:2f:d1:66:a7:7d:c6:25:ef:d8:eb:
75:03:48:cd:6b:16:91:ad:3e:63:8c:ee:ee:1c:c1:
ca:1c:29:25:8b:4d:f9:a0:f7:96:cd:a0:cc:55:e7:
c3:9d:f4:25:72:ca:5c:03:92:dc:c2:67:5c:7a:9f:
41:d0:cf:b1:46:e0:4f:73:41:82:3f:01:49:3a:11:
a2:47:68:f6:d7:6a:2a:62:77:30:90:60:93:6c:1e:
d9:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:50:83:A9:FD:79:70:06:D4:7E:CF:07:EE:A9:4F:D1:D0:EC:02:34
X509v3 Authority Key Identifier:
keyid:5D:A3:94:1C:27:CF:E5:C2:34:C4:BF:22:1E:CB:2A:57:9B:2D:EA:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XaOUHCfP5cI0xL8iHssqV5st6qs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/30ed3e-c4c4-4de8-b4f1-f11a39f26c3b/1/xlCDqf15cAbUfs8H7qlP0dDsAjQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/30ed3e-c4c4-4de8-b4f1-f11a39f26c3b/1/XaOUHCfP5cI0xL8iHssqV5st6qs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.231.216.0-94.231.218.255
Signature Algorithm: sha256WithRSAEncryption
6a:92:69:0b:8f:c2:0d:6f:ad:14:bd:d0:0a:94:2e:30:15:95:
21:7f:f6:57:70:05:cb:81:4e:3c:b9:f4:1c:e0:8b:1e:a0:08:
d2:18:f7:53:23:1d:66:b0:8e:f9:4b:06:d5:24:e7:38:66:4e:
d8:73:b3:1f:1b:80:63:5e:c0:13:50:33:8f:99:90:69:ab:6c:
94:af:b8:a6:c7:62:85:10:28:2d:49:2d:45:38:1f:08:af:07:
5a:91:a0:c6:50:87:18:71:3d:78:01:02:87:7a:bd:ba:54:3e:
d2:b8:e5:65:57:de:f0:73:db:38:ef:b0:22:23:31:29:15:a6:
9e:f4:50:c6:77:aa:18:4c:48:2a:92:4a:a7:17:50:4b:03:5a:
60:3c:b6:07:60:b6:c5:81:f3:a1:bf:88:d9:9e:21:cd:d5:30:
b6:6d:24:25:f9:b3:7a:8b:21:a8:ab:17:81:1f:a8:d4:cf:7c:
03:6d:72:0c:ed:00:d6:60:5e:62:d1:ef:d7:8a:27:62:04:27:
82:5d:ce:a1:86:42:51:26:62:55:21:cd:8b:14:58:11:dd:ed:
f1:de:08:63:a1:8c:8d:ac:7d:38:70:ed:65:ad:a6:6b:ac:73:
da:8d:62:46:43:4c:8d:99:e1:c4:f3:6e:0c:70:6e:dc:24:ac:
a1:66:1d:8f
-----BEGIN CERTIFICATE-----
MIIFBTCCA+2gAwIBAgISAYM3n+enB9Gt+VQ5EgFlsOtbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVkYTM5NDFjMjdjZmU1YzIzNGM0YmYyMjFlY2IyYTU3OWIy
ZGVhYWIwHhcNMjIwOTEzMTYxMjQ5WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjNjUwODNhOWZkNzk3MDA2ZDQ3ZWNmMDdlZWE5NGZkMWQwZWMwMjM0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqZotKcXslYZf3YB6/PQT3VKkzFCC
bTdkcIDDXCqbq4n/kUE6FOqicU+Im1YL6dMD6/aKqhmTuh3Y1WxrT2mfMfgDWDfV
SfHlu6Zb1y2Uvoejacer9PGGrFzKB2TYID8Ac50eIYY1OlN8Gr7AR+lrEOr9ifSd
fxiVqBRalVB/fVbOlKF/OSuOZK6eRFcxP23yKkVku4FVxKn2c/unWOChURd1ZPWL
0sYk8S/RZqd9xiXv2Ot1A0jNaxaRrT5jjO7uHMHKHCkli035oPeWzaDMVefDnfQl
cspcA5Lcwmdcep9B0M+xRuBPc0GCPwFJOhGiR2j212oqYncwkGCTbB7ZlwIDAQAB
o4ICETCCAg0wHQYDVR0OBBYEFMZQg6n9eXAG1H7PB+6pT9HQ7AI0MB8GA1UdIwQY
MBaAFF2jlBwnz+XCNMS/Ih7LKlebLeqrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWGFPVUhDZlA1Y0kweEw4aUhzc3FWNXN0NnFzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MC8zMGVkM2UtYzRjNC00ZGU4LWI0ZjEt
ZjExYTM5ZjI2YzNiLzEveGxDRHFmMTVjQWJVZnM4SDdxbFAwZERzQWpRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84MC8zMGVkM2UtYzRjNC00ZGU4LWI0ZjEtZjExYTM5ZjI2YzNi
LzEvWGFPVUhDZlA1Y0kweEw4aUhzc3FWNXN0NnFzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBANe59gD
BABe59owDQYJKoZIhvcNAQELBQADggEBAGqSaQuPwg1vrRS90AqULjAVlSF/9ldw
BcuBTjy59Bzgix6gCNIY91MjHWawjvlLBtUk5zhmTthzsx8bgGNewBNQM4+ZkGmr
bJSvuKbHYoUQKC1JLUU4HwivB1qRoMZQhxhxPXgBAod6vbpUPtK45WVX3vBz2zjv
sCIjMSkVpp70UMZ3qhhMSCqSSqcXUEsDWmA8tgdgtsWB86G/iNmeIc3VMLZtJCX5
s3qLIairF4EfqNTPfANtcgztANZgXmLR79eKJ2IEJ4JdzqGGQlEmYlUhzYsUWBHd
7fHeCGOhjI2sfThw7WWtpmusc9qNYkZDTI2Z4cTzbgxwbtwkrKFmHY8=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:58:34 2023 by rpki-client on console-fra.rpki-client.org