
Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/30883a-16d7-4212-9199-09d0aa28e551/1/7XyvXiTqII1ZIlEK-7sTJeNBiPQ.roa
File: 7XyvXiTqII1ZIlEK-7sTJeNBiPQ.roa (raw, json)
Hash identifier: lnmlNIZecV3WhKQwyi71HSGkQCCNqR/A9D0SvoU5qTo=
Subject key identifier: ED:7C:AF:5E:24:EA:20:8D:59:22:51:0A:FB:BB:13:25:E3:41:88:F4
Certificate issuer: /CN=798f7b1fd802b3dc6abd7a5cda786a6311e1d63d
Certificate serial: 018988F4BABFE4840CA2A7991CD17948B234
Authority key identifier: 79:8F:7B:1F:D8:02:B3:DC:6A:BD:7A:5C:DA:78:6A:63:11:E1:D6:3D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eY97H9gCs9xqvXpc2nhqYxHh1j0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/30883a-16d7-4212-9199-09d0aa28e551/1/7XyvXiTqII1ZIlEK-7sTJeNBiPQ.roa
Signing time: Mon 24 Jul 2023 17:31:27 +0000
ROA not before: Mon 24 Jul 2023 17:31:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 210000
IP address blocks: 31.41.34.0/24 maxlen: 24
176.119.223.0/24 maxlen: 24
194.156.188.0/24 maxlen: 24
2a12:3fc1:1001::/48 maxlen: 48
2a12:3fc1:2001::/48 maxlen: 48
2a12:3fc1:1002::/48 maxlen: 48
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:88:f4:ba:bf:e4:84:0c:a2:a7:99:1c:d1:79:48:b2:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=798f7b1fd802b3dc6abd7a5cda786a6311e1d63d
Validity
Not Before: Jul 24 17:31:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ed7caf5e24ea208d5922510afbbb1325e34188f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:55:95:a4:c5:16:3c:96:16:0f:26:6d:8c:4e:
88:b5:73:91:4b:99:c8:af:b2:b6:10:63:f6:be:ba:
b7:61:46:57:16:c8:db:8b:f7:41:c9:d6:27:45:07:
d9:d0:14:91:0e:2f:7a:4e:f3:c4:a0:71:01:60:f8:
f3:c9:23:49:b0:7e:81:2e:f9:49:0f:91:c1:73:1c:
45:c2:0b:4b:42:46:8f:80:bc:13:d2:52:c8:b9:da:
5f:c2:dd:77:6e:71:19:75:34:d4:23:34:09:53:60:
b2:2d:ff:32:01:a0:ee:ac:ea:8b:36:3c:c6:30:8f:
f8:12:ee:16:b5:67:ce:4f:98:74:7d:2b:86:9a:ea:
86:e6:3c:b3:67:00:1b:40:a9:ee:49:28:38:5b:9e:
4e:cb:20:d8:c6:c9:a7:69:d2:3c:3f:a8:04:63:af:
62:b6:51:93:12:c6:7b:0b:5d:f5:a2:03:48:2d:77:
5c:80:9e:18:49:db:92:14:c3:1e:57:3e:33:38:4b:
79:0b:d9:3d:3f:6d:e3:e6:fd:8c:c6:18:be:cd:22:
8f:57:b9:ac:5d:8a:fd:fb:36:04:d1:f7:5a:e0:a3:
aa:aa:6f:e8:cd:2e:2b:c7:ab:b1:b5:6a:e6:99:00:
34:d8:ae:1a:6b:cf:b5:9b:fa:43:d2:5a:0d:cd:ac:
53:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:7C:AF:5E:24:EA:20:8D:59:22:51:0A:FB:BB:13:25:E3:41:88:F4
X509v3 Authority Key Identifier:
keyid:79:8F:7B:1F:D8:02:B3:DC:6A:BD:7A:5C:DA:78:6A:63:11:E1:D6:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eY97H9gCs9xqvXpc2nhqYxHh1j0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/30883a-16d7-4212-9199-09d0aa28e551/1/7XyvXiTqII1ZIlEK-7sTJeNBiPQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/30883a-16d7-4212-9199-09d0aa28e551/1/eY97H9gCs9xqvXpc2nhqYxHh1j0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.41.34.0/24
176.119.223.0/24
194.156.188.0/24
IPv6:
2a12:3fc1:1001::-2a12:3fc1:1002:ffff:ffff:ffff:ffff:ffff
2a12:3fc1:2001::/48
Signature Algorithm: sha256WithRSAEncryption
b3:44:f3:6c:98:7f:1c:8c:28:c1:e2:6a:5b:0c:b6:c1:a3:2a:
12:25:d9:b2:9d:c1:9e:e6:61:10:97:ad:49:12:fc:1b:f2:f8:
95:56:2a:52:1b:ad:e7:24:8f:45:2e:14:b3:2e:48:26:4f:3f:
c3:94:d3:b1:db:44:20:39:85:19:05:c7:b5:fb:0b:75:47:40:
36:d7:4a:b1:22:e7:c1:37:6e:d4:a7:28:57:0d:93:f0:06:08:
48:00:a5:fa:14:40:43:15:44:bc:52:7b:11:16:80:5f:a0:2f:
ca:08:3c:bc:77:b0:76:63:99:25:7a:c2:7e:16:85:03:c9:4b:
70:a8:7d:ee:f7:68:c1:d2:a4:ab:4d:4d:f6:cd:32:73:10:9b:
f8:1b:08:b0:ac:bd:af:6b:a3:8f:ae:44:29:f9:e0:25:c2:c7:
aa:a7:51:79:96:70:7f:e8:a9:3e:7b:45:36:6f:e5:93:80:7a:
aa:6b:09:b2:50:d7:79:ec:73:d5:f5:86:0a:24:3d:5c:80:b6:
e3:1b:6d:49:0d:95:93:c6:b6:72:4f:bf:fd:4f:f6:4d:40:54:
79:40:4d:de:2b:7a:71:c8:54:ae:0a:b3:34:fa:22:6a:43:b0:
88:76:dd:b1:98:c2:9f:ea:2e:6e:de:57:fd:d4:9f:18:db:cb:
31:35:00:1d
-----BEGIN CERTIFICATE-----
MIIFLjCCBBagAwIBAgISAYmI9Lq/5IQMoqeZHNF5SLI0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc5OGY3YjFmZDgwMmIzZGM2YWJkN2E1Y2RhNzg2YTYzMTFl
MWQ2M2QwHhcNMjMwNzI0MTczMTI3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlZDdjYWY1ZTI0ZWEyMDhkNTkyMjUxMGFmYmJiMTMyNWUzNDE4OGY0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkFWVpMUWPJYWDyZtjE6ItXORS5nI
r7K2EGP2vrq3YUZXFsjbi/dBydYnRQfZ0BSRDi96TvPEoHEBYPjzySNJsH6BLvlJ
D5HBcxxFwgtLQkaPgLwT0lLIudpfwt13bnEZdTTUIzQJU2CyLf8yAaDurOqLNjzG
MI/4Eu4WtWfOT5h0fSuGmuqG5jyzZwAbQKnuSSg4W55OyyDYxsmnadI8P6gEY69i
tlGTEsZ7C131ogNILXdcgJ4YSduSFMMeVz4zOEt5C9k9P23j5v2Mxhi+zSKPV7ms
XYr9+zYE0fda4KOqqm/ozS4rx6uxtWrmmQA02K4aa8+1m/pD0loNzaxTbwIDAQAB
o4ICOjCCAjYwHQYDVR0OBBYEFO18r14k6iCNWSJRCvu7EyXjQYj0MB8GA1UdIwQY
MBaAFHmPex/YArPcar16XNp4amMR4dY9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZVk5N0g5Z0NzOXhxdlhwYzJuaHFZeEhoMWowLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84My8zMDg4M2EtMTZkNy00MjEyLTkxOTkt
MDlkMGFhMjhlNTUxLzEvN1h5dlhpVHFJSTFaSWxFSy03c1RKZU5CaVBRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84My8zMDg4M2EtMTZkNy00MjEyLTkxOTktMDlkMGFhMjhlNTUx
LzEvZVk5N0g5Z0NzOXhxdlhwYzJuaHFZeEhoMWowLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMFAGCCsGAQUFBwEHAQH/BEEwPzAYBAIAATASAwQAHykiAwQA
sHffAwQAwpy8MCMEAgACMB0wEgMHACoSP8EQAQMHACoSP8EQAgMHACoSP8EgATAN
BgkqhkiG9w0BAQsFAAOCAQEAs0TzbJh/HIwoweJqWwy2waMqEiXZsp3BnuZhEJet
SRL8G/L4lVYqUhut5ySPRS4Usy5IJk8/w5TTsdtEIDmFGQXHtfsLdUdANtdKsSLn
wTdu1KcoVw2T8AYISACl+hRAQxVEvFJ7ERaAX6Avygg8vHewdmOZJXrCfhaFA8lL
cKh97vdowdKkq01N9s0ycxCb+BsIsKy9r2ujj65EKfngJcLHqqdReZZwf+ipPntF
Nm/lk4B6qmsJslDXeexz1fWGCiQ9XIC24xttSQ2Vk8a2ck+//U/2TUBUeUBN3it6
cchUrgqzNPoiakOwiHbdsZjCn+oubt5X/dSfGNvLMTUAHQ==
-----END CERTIFICATE-----
Generated at Wed Feb 19 22:04:15 2025 by rpki-client