Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/32d7ad-8bf9-4274-95f8-9c953594d6b1/1/lD4A02pP8tpsLYpHQ_CPa7aXzuQ.roa
File: lD4A02pP8tpsLYpHQ_CPa7aXzuQ.roa (raw, json)
Hash identifier: aZAcSwwt//38tUR5Qgo3tjwa30YvZVxJOxSWBMtZjJ8=
Subject key identifier: 94:3E:00:D3:6A:4F:F2:DA:6C:2D:8A:47:43:F0:8F:6B:B6:97:CE:E4
Certificate issuer: /CN=6987d47935e1137d544426db5288e12a9c025ac2
Certificate serial: 02DCF8
Authority key identifier: 69:87:D4:79:35:E1:13:7D:54:44:26:DB:52:88:E1:2A:9C:02:5A:C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aYfUeTXhE31URCbbUojhKpwCWsI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/32d7ad-8bf9-4274-95f8-9c953594d6b1/1/lD4A02pP8tpsLYpHQ_CPa7aXzuQ.roa
Signing time: Fri 11 Feb 2022 10:24:44 +0000
ROA not before: Fri 11 Feb 2022 10:24:44 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 16509
IP address blocks: 185.44.176.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 187640 (0x2dcf8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6987d47935e1137d544426db5288e12a9c025ac2
Validity
Not Before: Feb 11 10:24:44 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=943e00d36a4ff2da6c2d8a4743f08f6bb697cee4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:ae:b9:35:9f:c6:3f:a7:ae:2c:b5:f3:b0:da:
01:24:45:82:3d:9b:51:38:6c:b8:03:f9:f5:17:10:
fa:23:62:05:4d:80:5a:d9:f9:11:77:70:3e:7e:0d:
31:04:35:b5:a3:4c:78:c7:b8:9f:04:0b:f2:73:09:
f4:b2:41:0e:b5:05:75:fa:1b:2e:cb:93:95:d3:a6:
61:27:72:bf:fb:07:d1:34:81:8e:69:4e:eb:8e:59:
db:36:a2:73:3a:d1:b4:02:07:f4:a0:3c:df:05:ae:
a3:03:cd:18:9a:cb:6f:ef:ab:f7:6b:bb:71:49:ad:
75:af:21:62:71:b0:af:12:07:47:0d:ff:53:12:32:
b9:04:5d:19:33:fe:15:2b:07:bd:8e:cd:a8:4b:af:
a4:1c:b7:11:09:8d:26:4f:6d:d5:e2:d9:d6:e4:1c:
ae:8a:5d:b6:68:e8:db:6e:1c:14:4c:dd:e5:89:b5:
26:e6:96:b0:a8:1a:01:13:b4:c5:4d:8e:d8:45:66:
7f:cd:8e:fa:46:d3:e9:94:17:49:fe:5b:f9:07:d5:
0c:59:09:b9:e3:93:09:9a:7e:13:0d:e6:f7:33:15:
24:f4:c2:29:25:c4:3c:23:01:cd:dd:3c:a6:be:29:
81:12:b7:e7:92:8a:6d:b2:c4:b5:ba:3f:c2:2d:a8:
02:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:3E:00:D3:6A:4F:F2:DA:6C:2D:8A:47:43:F0:8F:6B:B6:97:CE:E4
X509v3 Authority Key Identifier:
keyid:69:87:D4:79:35:E1:13:7D:54:44:26:DB:52:88:E1:2A:9C:02:5A:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aYfUeTXhE31URCbbUojhKpwCWsI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/32d7ad-8bf9-4274-95f8-9c953594d6b1/1/lD4A02pP8tpsLYpHQ_CPa7aXzuQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/32d7ad-8bf9-4274-95f8-9c953594d6b1/1/aYfUeTXhE31URCbbUojhKpwCWsI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.44.176.0/24
Signature Algorithm: sha256WithRSAEncryption
1d:7c:af:b5:4a:06:71:cd:4e:35:ac:7a:6e:05:ad:91:58:e4:
30:23:36:4f:79:b3:16:33:08:73:04:c2:e1:b8:be:02:43:e1:
05:e9:1b:51:1e:10:c4:21:ab:0e:6f:12:94:9d:00:30:4f:b8:
9b:dd:d5:5f:5e:3a:4c:2e:34:2d:34:b1:3a:31:5e:14:83:6f:
41:65:37:49:da:5f:2c:c6:8f:61:18:ec:4a:22:a7:55:8c:c6:
17:db:b8:59:99:a4:75:50:07:14:1e:c5:78:e6:b4:7f:52:e5:
03:44:cb:26:5b:6d:d3:a6:7b:fe:f9:26:99:3b:f7:e7:17:31:
89:05:06:63:9e:5f:69:06:e2:18:81:56:d0:fc:80:f6:e2:af:
ce:e0:f8:95:e7:c6:4c:50:10:14:20:bc:1c:26:4d:91:f0:a0:
8f:a8:a8:59:fa:a6:69:cb:8e:07:d0:da:74:3c:f0:5a:29:f6:
70:8c:ba:0b:6e:10:06:32:cf:bd:c6:f6:90:94:7f:40:2c:a6:
6e:6c:f5:19:c7:41:4f:49:7a:f7:19:b5:fc:1f:78:4a:4e:6f:
bc:ea:1c:78:29:d1:a4:56:38:5e:18:ff:51:a9:30:1f:1c:11:
7a:51:6c:ac:2f:a5:1e:f5:86:6d:cc:9d:62:96:63:04:ff:69:
b3:98:1e:ed
-----BEGIN CERTIFICATE-----
MIIE7jCCA9agAwIBAgIDAtz4MA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDY5
ODdkNDc5MzVlMTEzN2Q1NDQ0MjZkYjUyODhlMTJhOWMwMjVhYzIwHhcNMjIwMjEx
MTAyNDQ0WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQDEyg5NDNlMDBkMzZhNGZm
MmRhNmMyZDhhNDc0M2YwOGY2YmI2OTdjZWU0MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAn665NZ/GP6euLLXzsNoBJEWCPZtROGy4A/n1FxD6I2IFTYBa
2fkRd3A+fg0xBDW1o0x4x7ifBAvycwn0skEOtQV1+hsuy5OV06ZhJ3K/+wfRNIGO
aU7rjlnbNqJzOtG0Agf0oDzfBa6jA80Ymstv76v3a7txSa11ryFicbCvEgdHDf9T
EjK5BF0ZM/4VKwe9js2oS6+kHLcRCY0mT23V4tnW5Byuil22aOjbbhwUTN3libUm
5pawqBoBE7TFTY7YRWZ/zY76RtPplBdJ/lv5B9UMWQm545MJmn4TDeb3MxUk9MIp
JcQ8IwHN3TymvimBErfnkoptssS1uj/CLagCVQIDAQABo4ICCTCCAgUwHQYDVR0O
BBYEFJQ+ANNqT/LabC2KR0Pwj2u2l87kMB8GA1UdIwQYMBaAFGmH1Hk14RN9VEQm
21KI4SqcAlrCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEFBQcBAQRYMFYwVAYIKwYB
BQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQv
YVlmVWVUWGhFMzFVUkNiYlVvamhLcHdDV3NJLmNlcjCBjQYIKwYBBQUHAQsEgYAw
fjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkv
REVGQVVMVC9hMC8zMmQ3YWQtOGJmOS00Mjc0LTk1ZjgtOWM5NTM1OTRkNmIxLzEv
bEQ0QTAycFA4dHBzTFlwSFFfQ1BhN2FYenVRLnJvYTCBgQYDVR0fBHoweDB2oHSg
coZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMC8z
MmQ3YWQtOGJmOS00Mjc0LTk1ZjgtOWM5NTM1OTRkNmIxLzEvYVlmVWVUWGhFMzFV
UkNiYlVvamhLcHdDV3NJLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8G
CCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuSywMA0GCSqGSIb3DQEBCwUAA4IB
AQAdfK+1SgZxzU41rHpuBa2RWOQwIzZPebMWMwhzBMLhuL4CQ+EF6RtRHhDEIasO
bxKUnQAwT7ib3dVfXjpMLjQtNLE6MV4Ug29BZTdJ2l8sxo9hGOxKIqdVjMYX27hZ
maR1UAcUHsV45rR/UuUDRMsmW23Tpnv++SaZO/fnFzGJBQZjnl9pBuIYgVbQ/ID2
4q/O4PiV58ZMUBAUILwcJk2R8KCPqKhZ+qZpy44H0Np0PPBaKfZwjLoLbhAGMs+9
xvaQlH9ALKZubPUZx0FPSXr3GbX8H3hKTm+86hx4KdGkVjheGP9RqTAfHBF6UWys
L6Ue9YZtzJ1ilmME/2mzmB7t
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:47:46 2024 by rpki-client on console-fra.rpki-client.org