Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/c12a7b-5caf-4e7c-970d-5c476e3325f5/1/0GUh7n0HP2UgF1VfGzm0uVzVTxw.roa
File: 0GUh7n0HP2UgF1VfGzm0uVzVTxw.roa (raw, json)
Hash identifier: Hd6yKOpzz5j7DSuyaLnGhBp24iSddJhbD0SaESVGWRo=
Subject key identifier: D0:65:21:EE:7D:07:3F:65:20:17:55:5F:1B:39:B4:B9:5C:D5:4F:1C
Certificate issuer: /CN=465eba5c1a80f86a4589278edd9304b3f5169f83
Certificate serial: 01853D5E1856797B81A0A845225E352388C4
Authority key identifier: 46:5E:BA:5C:1A:80:F8:6A:45:89:27:8E:DD:93:04:B3:F5:16:9F:83
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Rl66XBqA-GpFiSeO3ZMEs_UWn4M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/c12a7b-5caf-4e7c-970d-5c476e3325f5/1/0GUh7n0HP2UgF1VfGzm0uVzVTxw.roa
Signing time: Fri 23 Dec 2022 05:04:14 +0000
ROA not before: Fri 23 Dec 2022 05:04:14 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 41789
IP address blocks: 185.244.51.0/24 maxlen: 24
185.250.44.0/23 maxlen: 23
185.250.46.0/23 maxlen: 23
193.39.171.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:3d:5e:18:56:79:7b:81:a0:a8:45:22:5e:35:23:88:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=465eba5c1a80f86a4589278edd9304b3f5169f83
Validity
Not Before: Dec 23 05:04:14 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d06521ee7d073f652017555f1b39b4b95cd54f1c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:87:ae:23:b9:95:d9:e1:c4:ca:9d:9a:17:c9:
43:09:31:0c:72:13:1d:54:20:5a:34:35:7a:23:2b:
79:e5:eb:91:20:eb:df:ca:57:e8:1e:af:7e:42:05:
84:da:e0:1d:d5:62:64:7b:b9:33:51:68:20:cf:68:
93:e1:16:c3:00:e5:0d:1b:e4:6d:3e:3d:88:44:f2:
dd:b9:c2:0e:57:c0:c9:d0:d1:fb:20:e9:b2:37:a3:
ba:98:05:18:0a:a9:33:33:37:4e:c9:e5:7d:5a:3e:
08:f5:ff:29:50:6f:43:0a:35:08:d9:b9:2d:10:18:
8a:45:1e:b7:18:77:49:82:ef:9f:d5:9c:81:7e:b7:
e2:0c:f7:27:48:48:da:a6:70:47:40:00:b4:4e:92:
c5:08:47:48:fd:22:61:65:ea:5e:3e:fc:3d:5f:bd:
7e:4c:90:d6:b6:bc:4b:f3:d4:67:4b:9c:40:33:62:
79:1c:b4:08:0f:1e:f5:18:66:a6:c7:6b:a9:73:8b:
cb:af:c0:03:f9:02:d2:57:56:76:26:ca:2e:07:e1:
68:9a:f0:ec:75:f4:f4:83:12:f4:97:c0:34:60:8d:
35:81:cf:ad:41:fc:78:3f:38:fc:dc:5c:62:08:59:
71:cc:29:a8:8e:68:f9:97:19:cf:a8:3f:f6:9b:09:
d5:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:65:21:EE:7D:07:3F:65:20:17:55:5F:1B:39:B4:B9:5C:D5:4F:1C
X509v3 Authority Key Identifier:
keyid:46:5E:BA:5C:1A:80:F8:6A:45:89:27:8E:DD:93:04:B3:F5:16:9F:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Rl66XBqA-GpFiSeO3ZMEs_UWn4M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/c12a7b-5caf-4e7c-970d-5c476e3325f5/1/0GUh7n0HP2UgF1VfGzm0uVzVTxw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/c12a7b-5caf-4e7c-970d-5c476e3325f5/1/Rl66XBqA-GpFiSeO3ZMEs_UWn4M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.244.51.0/24
185.250.44.0/22
193.39.171.0/24
Signature Algorithm: sha256WithRSAEncryption
b3:4e:00:9b:82:8d:4b:8a:b6:c5:19:e9:ca:23:c4:37:ba:98:
5e:f7:9a:51:0f:9b:dc:1c:be:cb:81:70:53:47:71:c3:0e:23:
52:4e:43:5e:a1:7f:19:c4:d6:71:01:db:f6:80:2d:88:b9:7c:
c9:2b:54:7a:66:26:88:64:5b:58:2d:d6:32:df:60:1b:e3:93:
90:56:74:0b:9b:e5:1e:f4:85:6a:0d:93:7f:34:3d:53:e6:81:
63:9a:e5:e0:20:0d:58:4b:47:1c:80:bd:6d:83:fd:70:a5:82:
d3:4b:a9:14:bc:d6:9e:5b:03:47:54:20:78:fa:f8:76:1c:62:
dd:39:9e:b6:ec:e2:29:4e:e4:47:d2:3d:24:0b:dc:ef:92:01:
bb:4f:b6:74:d0:af:39:01:9a:39:08:8d:61:7e:21:32:91:0f:
04:53:5c:67:71:a1:88:b7:cd:dd:7d:9b:05:fd:5f:6b:55:60:
0f:e3:46:50:ab:87:91:89:52:00:50:87:a6:f0:64:50:b6:f6:
eb:c9:65:fe:4a:34:c8:44:1c:63:7d:88:fa:d5:5e:ee:13:7d:
6e:66:9c:e3:f1:19:8a:3b:c2:c8:ec:58:2c:68:d2:7d:b1:67:
f3:54:20:73:94:e3:ed:d1:78:27:12:86:85:de:41:1e:64:cd:
dc:06:10:82
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAYU9XhhWeXuBoKhFIl41I4jEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ2NWViYTVjMWE4MGY4NmE0NTg5Mjc4ZWRkOTMwNGIzZjUx
NjlmODMwHhcNMjIxMjIzMDUwNDE0WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkMDY1MjFlZTdkMDczZjY1MjAxNzU1NWYxYjM5YjRiOTVjZDU0ZjFjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA04euI7mV2eHEyp2aF8lDCTEMchMd
VCBaNDV6Iyt55euRIOvfylfoHq9+QgWE2uAd1WJke7kzUWggz2iT4RbDAOUNG+Rt
Pj2IRPLducIOV8DJ0NH7IOmyN6O6mAUYCqkzMzdOyeV9Wj4I9f8pUG9DCjUI2bkt
EBiKRR63GHdJgu+f1ZyBfrfiDPcnSEjapnBHQAC0TpLFCEdI/SJhZepePvw9X71+
TJDWtrxL89RnS5xAM2J5HLQIDx71GGamx2upc4vLr8AD+QLSV1Z2JsouB+FomvDs
dfT0gxL0l8A0YI01gc+tQfx4Pzj83FxiCFlxzCmojmj5lxnPqD/2mwnV2wIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFNBlIe59Bz9lIBdVXxs5tLlc1U8cMB8GA1UdIwQY
MBaAFEZeulwagPhqRYknjt2TBLP1Fp+DMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUmw2NlhCcUEtR3BGaVNlTzNaTUVzX1VXbjRNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi9jMTJhN2ItNWNhZi00ZTdjLTk3MGQt
NWM0NzZlMzMyNWY1LzEvMEdVaDduMEhQMlVnRjFWZkd6bTB1VnpWVHh3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Mi9jMTJhN2ItNWNhZi00ZTdjLTk3MGQtNWM0NzZlMzMyNWY1
LzEvUmw2NlhCcUEtR3BGaVNlTzNaTUVzX1VXbjRNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAufQzAwQC
ufosAwQAwSerMA0GCSqGSIb3DQEBCwUAA4IBAQCzTgCbgo1LirbFGenKI8Q3uphe
95pRD5vcHL7LgXBTR3HDDiNSTkNeoX8ZxNZxAdv2gC2IuXzJK1R6ZiaIZFtYLdYy
32Ab45OQVnQLm+Ue9IVqDZN/ND1T5oFjmuXgIA1YS0ccgL1tg/1wpYLTS6kUvNae
WwNHVCB4+vh2HGLdOZ627OIpTuRH0j0kC9zvkgG7T7Z00K85AZo5CI1hfiEykQ8E
U1xncaGIt83dfZsF/V9rVWAP40ZQq4eRiVIAUIem8GRQtvbryWX+SjTIRBxjfYj6
1V7uE31uZpzj8RmKO8LI7FgsaNJ9sWfzVCBzlOPt0XgnEoaF3kEeZM3cBhCC
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:18:23 2025 by rpki-client