Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/f34254-0e9d-4dc5-a418-1b711aec1fbc/1/CEbUkdHdHRyxoLkK4-FhfuqyYOU.roa
File: CEbUkdHdHRyxoLkK4-FhfuqyYOU.roa (raw, json)
Hash identifier: XxwOj/hTQ/ZVUwv3fiM+fdgJbQ9bi7moAyyg24O3EO8=
Subject key identifier: 08:46:D4:91:D1:DD:1D:1C:B1:A0:B9:0A:E3:E1:61:7E:EA:B2:60:E5
Certificate issuer: /CN=86ee1268fe0aadf317ab44fd816d10fe54ddfc0c
Certificate serial: 0188F97B222935C2CF312F115075141920C5
Authority key identifier: 86:EE:12:68:FE:0A:AD:F3:17:AB:44:FD:81:6D:10:FE:54:DD:FC:0C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hu4SaP4KrfMXq0T9gW0Q_lTd_Aw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/f34254-0e9d-4dc5-a418-1b711aec1fbc/1/CEbUkdHdHRyxoLkK4-FhfuqyYOU.roa
Signing time: Mon 26 Jun 2023 20:52:56 +0000
ROA not before: Mon 26 Jun 2023 20:52:56 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 44929
IP address blocks: 91.203.29.0/24 maxlen: 24
91.203.28.0/23 maxlen: 23
91.203.28.0/22 maxlen: 22
91.203.28.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:f9:7b:22:29:35:c2:cf:31:2f:11:50:75:14:19:20:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86ee1268fe0aadf317ab44fd816d10fe54ddfc0c
Validity
Not Before: Jun 26 20:52:56 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0846d491d1dd1d1cb1a0b90ae3e1617eeab260e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:1d:35:e4:cf:32:2c:ee:62:98:30:59:64:fc:
81:7b:1b:ed:4a:68:54:e8:f5:d1:49:64:b6:c4:4a:
c9:9a:d7:5b:49:d7:55:fc:ee:ee:59:d3:cd:5e:a4:
c4:c9:83:bd:8c:17:cb:46:e5:82:f0:4b:3e:03:fb:
b5:1e:47:9d:ee:fc:38:da:ff:94:03:a3:91:eb:1f:
79:4c:3d:65:3c:d7:7a:0f:76:5b:1f:86:41:b5:bf:
db:7b:ae:ac:ce:be:7f:af:bb:76:60:d4:29:73:e8:
59:ae:ef:2d:e2:35:ea:2d:f0:34:df:a5:eb:06:2f:
40:83:68:76:a9:ea:c4:49:de:a8:df:1c:67:7a:ff:
04:bc:4d:e7:7f:29:ac:a7:04:c2:3c:cf:eb:e1:89:
3d:9a:42:4d:ec:35:d5:e5:51:8f:f2:7c:e3:6f:59:
a5:c1:69:88:e0:d8:dc:4b:a4:8b:91:1e:cb:a4:f5:
73:8b:2d:b2:ef:64:46:24:30:fb:13:41:99:10:10:
cf:28:11:c1:52:d2:0d:5f:12:fd:6a:42:cb:a1:9d:
60:92:5c:d8:c3:5a:80:b6:e1:3b:e2:8c:7b:ac:91:
04:38:2c:94:d7:8a:70:3d:80:ab:91:2b:c6:37:24:
36:d2:6a:5a:89:dd:47:26:b4:24:ff:85:19:9b:0a:
0e:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:46:D4:91:D1:DD:1D:1C:B1:A0:B9:0A:E3:E1:61:7E:EA:B2:60:E5
X509v3 Authority Key Identifier:
keyid:86:EE:12:68:FE:0A:AD:F3:17:AB:44:FD:81:6D:10:FE:54:DD:FC:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hu4SaP4KrfMXq0T9gW0Q_lTd_Aw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/f34254-0e9d-4dc5-a418-1b711aec1fbc/1/CEbUkdHdHRyxoLkK4-FhfuqyYOU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/f34254-0e9d-4dc5-a418-1b711aec1fbc/1/hu4SaP4KrfMXq0T9gW0Q_lTd_Aw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.203.28.0/22
Signature Algorithm: sha256WithRSAEncryption
52:92:51:e1:e4:b6:29:97:9f:47:e7:91:7f:da:3d:82:05:77:
c6:17:54:81:1a:bd:be:66:5e:2b:53:60:04:7d:00:aa:7b:cd:
2f:6a:48:80:d2:c5:3f:d4:4b:95:d1:09:a7:06:99:35:88:76:
2f:6f:6c:1e:0b:7b:6c:5e:3b:f7:41:96:76:00:81:cb:ee:78:
62:4d:78:e2:bf:24:91:ff:bb:1b:73:b6:1c:f5:5e:9e:b7:5c:
2f:84:f9:c9:b6:ec:48:3e:2c:30:56:f0:d9:76:d8:91:b2:6c:
a0:27:b6:4f:cd:48:0b:61:b3:32:6c:42:ea:3c:f2:60:e8:97:
79:4a:e2:64:3c:a2:9d:8b:e9:34:9f:a6:5b:f9:5b:1f:73:e4:
7c:57:9d:dd:36:97:bf:d9:a1:71:a8:bc:ea:e1:2e:7c:ce:b9:
14:57:e7:41:b4:0e:a5:6d:b3:ec:c2:8b:da:d3:d2:ff:49:af:
64:37:0c:a4:4a:a2:6c:27:ed:ce:0d:fd:a2:b8:b2:69:7d:8e:
5d:8a:bf:aa:a6:3e:c4:cf:6a:7e:ae:95:b7:91:54:7e:7c:07:
0e:14:97:c0:2c:7d:f7:1b:fc:fa:74:ab:8b:e8:e1:7d:0e:c0:
66:96:30:c7:67:43:a5:28:9c:87:6d:40:d3:f6:b0:e8:62:db:
af:34:fe:e1
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYj5eyIpNcLPMS8RUHUUGSDFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg2ZWUxMjY4ZmUwYWFkZjMxN2FiNDRmZDgxNmQxMGZlNTRk
ZGZjMGMwHhcNMjMwNjI2MjA1MjU2WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwODQ2ZDQ5MWQxZGQxZDFjYjFhMGI5MGFlM2UxNjE3ZWVhYjI2MGU1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuh015M8yLO5imDBZZPyBexvtSmhU
6PXRSWS2xErJmtdbSddV/O7uWdPNXqTEyYO9jBfLRuWC8Es+A/u1Hked7vw42v+U
A6OR6x95TD1lPNd6D3ZbH4ZBtb/be66szr5/r7t2YNQpc+hZru8t4jXqLfA036Xr
Bi9Ag2h2qerESd6o3xxnev8EvE3nfymspwTCPM/r4Yk9mkJN7DXV5VGP8nzjb1ml
wWmI4NjcS6SLkR7LpPVziy2y72RGJDD7E0GZEBDPKBHBUtINXxL9akLLoZ1gklzY
w1qAtuE74ox7rJEEOCyU14pwPYCrkSvGNyQ20mpaid1HJrQk/4UZmwoOxQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFAhG1JHR3R0csaC5CuPhYX7qsmDlMB8GA1UdIwQY
MBaAFIbuEmj+Cq3zF6tE/YFtEP5U3fwMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaHU0U2FQNEtyZk1YcTBUOWdXMFFfbFRkX0F3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85ZS9mMzQyNTQtMGU5ZC00ZGM1LWE0MTgt
MWI3MTFhZWMxZmJjLzEvQ0ViVWtkSGRIUnl4b0xrSzQtRmhmdXF5WU9VLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85ZS9mMzQyNTQtMGU5ZC00ZGM1LWE0MTgtMWI3MTFhZWMxZmJj
LzEvaHU0U2FQNEtyZk1YcTBUOWdXMFFfbFRkX0F3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCW8scMA0G
CSqGSIb3DQEBCwUAA4IBAQBSklHh5LYpl59H55F/2j2CBXfGF1SBGr2+Zl4rU2AE
fQCqe80vakiA0sU/1EuV0QmnBpk1iHYvb2weC3tsXjv3QZZ2AIHL7nhiTXjivySR
/7sbc7Yc9V6et1wvhPnJtuxIPiwwVvDZdtiRsmygJ7ZPzUgLYbMybELqPPJg6Jd5
SuJkPKKdi+k0n6Zb+Vsfc+R8V53dNpe/2aFxqLzq4S58zrkUV+dBtA6lbbPswova
09L/Sa9kNwykSqJsJ+3ODf2iuLJpfY5dir+qpj7Ez2p+rpW3kVR+fAcOFJfALH33
G/z6dKuL6OF9DsBmljDHZ0OlKJyHbUDT9rDoYtuvNP7h
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:44:50 2025 by rpki-client