Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/d2gsYXFwt0UHlBuiTA-0ll9yqYs.roa
File: d2gsYXFwt0UHlBuiTA-0ll9yqYs.roa (raw, json)
Hash identifier: 0X+BXs1xHVg4cVUysTUptqKc2qGIYJMmyj/Dh4rp9H4=
Subject key identifier: 77:68:2C:61:71:70:B7:45:07:94:1B:A2:4C:0F:B4:96:5F:72:A9:8B
Certificate issuer: /CN=b155009c3de421cc4e67b9a9ae423bb35de0b926
Certificate serial: 018A973DE477C4BF4D2F078650EC2AFF6F3C
Authority key identifier: B1:55:00:9C:3D:E4:21:CC:4E:67:B9:A9:AE:42:3B:B3:5D:E0:B9:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sVUAnD3kIcxOZ7mprkI7s13guSY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/d2gsYXFwt0UHlBuiTA-0ll9yqYs.roa
Signing time: Fri 15 Sep 2023 05:08:50 +0000
ROA not before: Fri 15 Sep 2023 05:08:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 45.149.74.0/23 maxlen: 24
45.149.75.0/24 maxlen: 24
45.149.72.0/24 maxlen: 24
45.149.73.0/24 maxlen: 24
45.149.74.0/24 maxlen: 24
45.133.89.0/24 maxlen: 24
45.133.90.0/24 maxlen: 24
45.133.91.0/24 maxlen: 24
45.133.88.0/24 maxlen: 24
45.132.136.0/24 maxlen: 24
45.132.137.0/24 maxlen: 24
45.132.138.0/24 maxlen: 24
45.132.139.0/24 maxlen: 24
45.132.143.0/24 maxlen: 24
45.132.140.0/24 maxlen: 24
45.132.141.0/24 maxlen: 24
45.132.142.0/24 maxlen: 24
193.37.248.0/24 maxlen: 24
45.148.254.0/23 maxlen: 24
45.148.254.0/24 maxlen: 24
45.148.255.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:97:3d:e4:77:c4:bf:4d:2f:07:86:50:ec:2a:ff:6f:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b155009c3de421cc4e67b9a9ae423bb35de0b926
Validity
Not Before: Sep 15 05:08:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=77682c617170b74507941ba24c0fb4965f72a98b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:9d:53:1b:84:52:3b:05:30:fe:a2:7f:ba:1d:
f6:46:fa:05:dc:38:ef:3a:e0:9a:4f:77:3d:58:e8:
36:bf:1b:c8:a4:43:c9:5b:6d:04:71:6f:3d:5b:1b:
17:02:15:43:5f:dc:5f:80:7d:3b:e5:89:e3:06:67:
a7:e6:23:83:db:b4:ca:08:59:24:d1:03:ff:39:a7:
3d:b2:b1:88:ba:bd:c9:03:0e:22:76:de:d8:d1:13:
93:8b:5c:87:8e:6b:84:b8:4d:b8:2b:09:15:a8:a9:
ab:33:c0:67:c0:35:fd:82:c3:1c:75:93:ed:28:dd:
51:af:44:e2:7e:67:31:52:4b:62:dd:c6:86:a3:8a:
fb:12:0c:dc:b0:54:e5:49:a6:9f:ae:e5:63:8c:33:
12:26:9b:00:7a:6c:9a:8f:62:bb:c8:1f:96:15:63:
0e:c8:57:fd:fc:f9:df:a4:c8:2a:ca:08:30:82:b5:
86:bc:d4:8e:dd:63:9f:64:a0:66:f6:34:63:ee:4d:
eb:61:0b:c7:6e:5b:3c:55:5f:da:b3:8e:e9:55:f6:
b6:03:d2:13:a0:dc:e5:f2:b5:74:3f:49:76:e9:11:
e2:8f:25:f6:2b:3b:fb:92:45:db:75:92:f4:31:18:
19:4b:2e:cf:74:cb:76:50:89:bd:8f:72:31:18:a9:
71:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:68:2C:61:71:70:B7:45:07:94:1B:A2:4C:0F:B4:96:5F:72:A9:8B
X509v3 Authority Key Identifier:
keyid:B1:55:00:9C:3D:E4:21:CC:4E:67:B9:A9:AE:42:3B:B3:5D:E0:B9:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sVUAnD3kIcxOZ7mprkI7s13guSY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/d2gsYXFwt0UHlBuiTA-0ll9yqYs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/sVUAnD3kIcxOZ7mprkI7s13guSY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.132.136.0/21
45.133.88.0/22
45.148.254.0/23
45.149.72.0/22
193.37.248.0/24
Signature Algorithm: sha256WithRSAEncryption
b8:33:77:a0:51:67:b1:a6:25:88:f0:bf:57:fb:d9:1b:35:be:
15:c0:a2:29:a8:b7:b7:3a:04:49:c3:77:b0:43:ed:e8:33:2d:
33:63:a7:1f:66:5b:e9:ca:63:7a:2f:55:18:f2:b1:a8:bc:58:
0d:20:23:1f:70:a3:0b:ea:51:9b:3a:9f:43:05:16:3d:07:fe:
c0:7a:92:74:21:92:27:2b:7e:b9:86:9f:78:19:2f:5f:b1:e3:
c9:4a:ea:4b:8a:e5:ff:d8:ce:ab:55:9c:47:cb:4c:6a:08:10:
52:24:2d:2d:96:b2:de:a2:30:02:a4:f9:65:55:6e:a3:30:8c:
a4:2f:c8:18:85:b6:de:c1:14:92:20:ba:48:c3:1c:a3:96:50:
90:20:a9:7c:25:96:8f:8e:b8:c0:bd:65:d6:5e:ba:a8:d6:7a:
e0:09:b2:19:01:c5:de:7a:fc:6a:83:17:f0:1a:ed:65:f0:44:
6a:f9:10:70:0d:3b:fb:85:13:97:06:29:66:c7:56:eb:08:55:
cb:d8:e6:55:4c:d5:a0:cd:88:bb:66:f4:62:90:56:eb:a5:ab:
8f:32:34:95:a0:63:0f:d5:66:b6:d6:74:01:b6:bd:b2:b5:f7:
ad:15:8f:f3:5a:7a:a7:3d:5b:88:5f:cc:36:fc:a9:68:a6:ee:
87:c6:8a:de
-----BEGIN CERTIFICATE-----
MIIFFTCCA/2gAwIBAgISAYqXPeR3xL9NLweGUOwq/288MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIxNTUwMDljM2RlNDIxY2M0ZTY3YjlhOWFlNDIzYmIzNWRl
MGI5MjYwHhcNMjMwOTE1MDUwODUwWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3NzY4MmM2MTcxNzBiNzQ1MDc5NDFiYTI0YzBmYjQ5NjVmNzJhOThiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt51TG4RSOwUw/qJ/uh32RvoF3Djv
OuCaT3c9WOg2vxvIpEPJW20EcW89WxsXAhVDX9xfgH075YnjBmen5iOD27TKCFkk
0QP/Oac9srGIur3JAw4idt7Y0ROTi1yHjmuEuE24KwkVqKmrM8BnwDX9gsMcdZPt
KN1Rr0TifmcxUkti3caGo4r7EgzcsFTlSaafruVjjDMSJpsAemyaj2K7yB+WFWMO
yFf9/PnfpMgqyggwgrWGvNSO3WOfZKBm9jRj7k3rYQvHbls8VV/as47pVfa2A9IT
oNzl8rV0P0l26RHijyX2Kzv7kkXbdZL0MRgZSy7PdMt2UIm9j3IxGKlxbwIDAQAB
o4ICITCCAh0wHQYDVR0OBBYEFHdoLGFxcLdFB5QbokwPtJZfcqmLMB8GA1UdIwQY
MBaAFLFVAJw95CHMTme5qa5CO7Nd4LkmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc1ZVQW5EM2tJY3hPWjdtcHJrSTdzMTNndVNZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMC9kZTkwMmMtM2QxMy00N2QxLWE1ZTYt
NzM4NTZhZjQ5ZjNlLzEvZDJnc1lYRnd0MFVIbEJ1aVRBLTBsbDl5cVlzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMC9kZTkwMmMtM2QxMy00N2QxLWE1ZTYtNzM4NTZhZjQ5ZjNl
LzEvc1ZVQW5EM2tJY3hPWjdtcHJrSTdzMTNndVNZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDcGCCsGAQUFBwEHAQH/BCgwJjAkBAIAATAeAwQDLYSIAwQC
LYVYAwQBLZT+AwQCLZVIAwQAwSX4MA0GCSqGSIb3DQEBCwUAA4IBAQC4M3egUWex
piWI8L9X+9kbNb4VwKIpqLe3OgRJw3ewQ+3oMy0zY6cfZlvpymN6L1UY8rGovFgN
ICMfcKML6lGbOp9DBRY9B/7AepJ0IZInK365hp94GS9fsePJSupLiuX/2M6rVZxH
y0xqCBBSJC0tlrLeojACpPllVW6jMIykL8gYhbbewRSSILpIwxyjllCQIKl8JZaP
jrjAvWXWXrqo1nrgCbIZAcXeevxqgxfwGu1l8ERq+RBwDTv7hROXBilmx1brCFXL
2OZVTNWgzYi7ZvRikFbrpauPMjSVoGMP1Wa21nQBtr2ytfetFY/zWnqnPVuIX8w2
/Klopu6Hxore
-----END CERTIFICATE-----
Generated at Mon Oct 2 07:29:15 2023 by rpki-client on console-ams.rpki-client.org