Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/792200-2da0-41bf-8587-a92934cb1de8/1/iy70eT6Se6uYFslKc-6wnYOB5Eo.roa
File: iy70eT6Se6uYFslKc-6wnYOB5Eo.roa (raw, json)
Hash identifier: MbEXKA9CDLAUEblM/+O0JI90WITsg5llWt0HqgEOBog=
Subject key identifier: 8B:2E:F4:79:3E:92:7B:AB:98:16:C9:4A:73:EE:B0:9D:83:81:E4:4A
Certificate issuer: /CN=de9572fcbd665f72e00e5ffdb8db802d1cbec894
Certificate serial: 3780579C
Authority key identifier: DE:95:72:FC:BD:66:5F:72:E0:0E:5F:FD:B8:DB:80:2D:1C:BE:C8:94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3pVy_L1mX3LgDl_9uNuALRy-yJQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/792200-2da0-41bf-8587-a92934cb1de8/1/iy70eT6Se6uYFslKc-6wnYOB5Eo.roa
Signing time: Sat 01 Jan 2022 14:04:33 +0000
ROA not before: Sat 01 Jan 2022 14:04:33 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 43070
IP address blocks: 89.187.192.0/21 maxlen: 23
77.95.40.0/21 maxlen: 21
185.45.136.0/22 maxlen: 22
2a02:910::/32 maxlen: 32
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 931157916 (0x3780579c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de9572fcbd665f72e00e5ffdb8db802d1cbec894
Validity
Not Before: Jan 1 14:04:33 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=8b2ef4793e927bab9816c94a73eeb09d8381e44a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:44:b9:b9:f2:a6:4d:14:cf:14:8f:65:89:0c:
d5:54:3a:08:ea:4f:30:00:1b:fc:69:15:09:05:d8:
e2:2c:d2:b4:a8:48:d3:65:1e:c4:45:e7:46:80:13:
f2:4f:75:b1:ac:d4:7c:2b:7b:d2:0d:59:43:ed:5c:
82:6b:a8:d4:5c:62:a3:66:85:5b:a3:2e:64:e8:60:
00:92:d1:a2:b3:79:e2:2c:aa:23:fe:1d:1d:4c:79:
2c:ec:8e:cf:82:a3:cb:02:fa:98:4a:ab:03:fb:62:
55:30:fe:eb:a7:36:a9:04:f8:23:6b:6d:5e:45:2c:
82:04:97:a5:00:81:39:1a:c7:f3:07:20:f4:2d:d0:
c6:3d:63:fd:28:85:56:7a:57:52:51:de:07:fa:aa:
69:95:61:85:45:4c:98:c8:18:37:b4:13:f2:0d:fc:
6b:eb:e9:29:04:ad:c8:1c:e5:d1:ac:54:ca:36:b3:
cd:b6:cf:13:d6:60:06:b8:5e:ae:89:3f:9b:0d:77:
b4:5f:ab:ea:3a:67:05:4d:ef:6e:1d:5a:bc:1f:42:
89:ca:1f:4f:f5:21:88:6a:72:a3:31:50:58:20:d5:
ad:e7:3d:c7:c9:83:39:2b:44:3f:10:2c:90:db:4e:
4a:fa:e3:ac:3e:8b:9c:f3:06:e9:68:04:1c:9c:57:
a1:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:2E:F4:79:3E:92:7B:AB:98:16:C9:4A:73:EE:B0:9D:83:81:E4:4A
X509v3 Authority Key Identifier:
keyid:DE:95:72:FC:BD:66:5F:72:E0:0E:5F:FD:B8:DB:80:2D:1C:BE:C8:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3pVy_L1mX3LgDl_9uNuALRy-yJQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/792200-2da0-41bf-8587-a92934cb1de8/1/iy70eT6Se6uYFslKc-6wnYOB5Eo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/792200-2da0-41bf-8587-a92934cb1de8/1/3pVy_L1mX3LgDl_9uNuALRy-yJQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.95.40.0/21
89.187.192.0/21
185.45.136.0/22
IPv6:
2a02:910::/32
Signature Algorithm: sha256WithRSAEncryption
8a:5f:82:78:72:32:9a:c7:9a:27:ab:05:fb:91:57:bd:17:51:
49:2d:d0:d0:52:02:8f:80:51:ef:57:89:c9:f4:da:02:d1:8a:
4b:1f:a0:7f:db:ab:19:bb:b9:02:b2:74:2d:ef:4b:ad:95:28:
d0:c4:da:ed:e7:0e:48:39:b1:f2:8f:2e:d5:69:09:8e:ad:21:
2e:fb:17:d1:d9:68:e9:40:77:40:1d:70:db:77:8b:a5:63:4e:
b6:d9:f8:88:05:48:ce:60:f6:f9:1d:99:11:22:39:00:bc:58:
c1:37:81:92:66:09:22:20:a4:a3:dc:37:0b:32:68:3f:9e:77:
97:12:a5:11:6f:72:2a:c4:61:86:ea:6e:3d:07:7b:c6:e2:35:
87:8b:37:7d:e9:d2:1f:3e:af:40:66:ba:11:4a:2e:07:e8:bf:
3f:aa:64:f6:96:fd:44:d0:63:b1:73:bf:0f:ae:f6:18:a5:d3:
4c:e3:7e:d3:2a:c2:f4:13:81:19:cc:71:49:1b:75:ad:27:5c:
49:48:68:c9:aa:ab:1b:fe:ad:92:33:2a:0b:e3:6c:5e:5e:31:
48:c2:70:30:f7:fd:9e:95:31:1e:7a:17:cf:c8:ca:3e:eb:9b:
78:22:23:eb:ac:42:7e:1c:86:28:2e:aa:25:58:98:d3:17:1b:
f6:0b:d1:bc
-----BEGIN CERTIFICATE-----
MIIFCjCCA/KgAwIBAgIEN4BXnDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhk
ZTk1NzJmY2JkNjY1ZjcyZTAwZTVmZmRiOGRiODAyZDFjYmVjODk0MB4XDTIyMDEw
MTE0MDQzM1oXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoOGIyZWY0NzkzZTky
N2JhYjk4MTZjOTRhNzNlZWIwOWQ4MzgxZTQ0YTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBALpEubnypk0UzxSPZYkM1VQ6COpPMAAb/GkVCQXY4izStKhI
02UexEXnRoAT8k91sazUfCt70g1ZQ+1cgmuo1Fxio2aFW6MuZOhgAJLRorN54iyq
I/4dHUx5LOyOz4KjywL6mEqrA/tiVTD+66c2qQT4I2ttXkUsggSXpQCBORrH8wcg
9C3Qxj1j/SiFVnpXUlHeB/qqaZVhhUVMmMgYN7QT8g38a+vpKQStyBzl0axUyjaz
zbbPE9ZgBrherok/mw13tF+r6jpnBU3vbh1avB9CicofT/UhiGpyozFQWCDVrec9
x8mDOStEPxAskNtOSvrjrD6LnPMG6WgEHJxXoTcCAwEAAaOCAiQwggIgMB0GA1Ud
DgQWBBSLLvR5PpJ7q5gWyUpz7rCdg4HkSjAfBgNVHSMEGDAWgBTelXL8vWZfcuAO
X/2424AtHL7IlDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
LzNwVnlfTDFtWDNMZ0RsXzl1TnVBTFJ5LXlKUS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvYTUvNzkyMjAwLTJkYTAtNDFiZi04NTg3LWE5MjkzNGNiMWRlOC8x
L2l5NzBlVDZTZTZ1WUZzbEtjLTZ3bllPQjVFby5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYTUv
NzkyMjAwLTJkYTAtNDFiZi04NTg3LWE5MjkzNGNiMWRlOC8xLzNwVnlfTDFtWDNM
Z0RsXzl1TnVBTFJ5LXlKUS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjA6
BggrBgEFBQcBBwEB/wQrMCkwGAQCAAEwEgMEA01fKAMEA1m7wAMEArktiDANBAIA
AjAHAwUAKgIJEDANBgkqhkiG9w0BAQsFAAOCAQEAil+CeHIymseaJ6sF+5FXvRdR
SS3Q0FICj4BR71eJyfTaAtGKSx+gf9urGbu5ArJ0Le9LrZUo0MTa7ecOSDmx8o8u
1WkJjq0hLvsX0dlo6UB3QB1w23eLpWNOttn4iAVIzmD2+R2ZESI5ALxYwTeBkmYJ
IiCko9w3CzJoP553lxKlEW9yKsRhhupuPQd7xuI1h4s3fenSHz6vQGa6EUouB+i/
P6pk9pb9RNBjsXO/D672GKXTTON+0yrC9BOBGcxxSRt1rSdcSUhoyaqrG/6tkjMq
C+NsXl4xSMJwMPf9npUxHnoXz8jKPuubeCIj66xCfhyGKC6qJViY0xcb9gvRvA==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:48:26 2024 by rpki-client on console-fra.rpki-client.org