Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/c61092-734a-4eef-9d67-4905243bc828/1/YTpCFFXbz8oVYXONANz8CwNyRSA.roa
File: YTpCFFXbz8oVYXONANz8CwNyRSA.roa (raw, json)
Hash identifier: wjjfGjOjsyDra71cn6N01Apk86B+Nb3ChceQrMJA8bk=
Subject key identifier: 61:3A:42:14:55:DB:CF:CA:15:61:73:8D:00:DC:FC:0B:03:72:45:20
Certificate issuer: /CN=05b1d13c2e26e12786246a5ec4c5bea69864b20f
Certificate serial: 116765E1
Authority key identifier: 05:B1:D1:3C:2E:26:E1:27:86:24:6A:5E:C4:C5:BE:A6:98:64:B2:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BbHRPC4m4SeGJGpexMW-pphksg8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/c61092-734a-4eef-9d67-4905243bc828/1/YTpCFFXbz8oVYXONANz8CwNyRSA.roa
Signing time: Sat 01 Jan 2022 05:57:08 +0000
ROA not before: Sat 01 Jan 2022 05:57:08 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 395800
IP address blocks: 85.92.109.0/24 maxlen: 24
194.5.92.0/24 maxlen: 24
89.191.232.0/24 maxlen: 24
5.44.47.0/24 maxlen: 24
109.236.58.0/24 maxlen: 24
46.16.14.0/24 maxlen: 24
46.16.15.0/24 maxlen: 24
91.107.116.0/24 maxlen: 24
194.31.174.0/24 maxlen: 24
194.31.173.0/24 maxlen: 24
91.107.124.0/23 maxlen: 23
91.107.127.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 291988961 (0x116765e1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05b1d13c2e26e12786246a5ec4c5bea69864b20f
Validity
Not Before: Jan 1 05:57:08 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=613a421455dbcfca1561738d00dcfc0b03724520
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:eb:8e:d9:91:f5:0c:f2:51:8e:12:cc:cf:a5:
e9:29:49:84:23:7c:ca:d2:dc:90:fd:55:db:f2:ac:
a0:d0:17:a2:37:7f:07:c0:de:b5:d6:ff:5b:65:58:
c2:c4:52:0b:a2:91:ff:fb:d7:da:42:8d:8d:29:a5:
b5:e9:98:80:54:0b:3a:39:d7:8a:07:75:02:3a:47:
5a:08:98:26:48:61:46:3d:c1:43:4b:97:46:a1:69:
c8:63:7a:80:c7:27:85:3f:28:66:f8:1a:24:f2:de:
a7:c1:53:3a:b6:d2:ff:9e:28:7d:d8:e2:29:6e:ce:
dd:cf:4a:4c:7c:ba:e2:44:d4:e5:cb:4b:0e:f9:11:
11:b6:a3:2c:e8:b5:ad:6c:50:e5:cc:5d:00:db:ba:
c0:0a:b7:6b:46:e6:02:79:c8:46:4a:bc:9b:f2:78:
b6:a6:aa:35:8b:13:8f:89:4f:b9:7d:46:a9:96:1c:
9c:4e:5f:03:e8:b4:e4:56:ce:c3:d6:3e:a0:f6:81:
dd:c7:20:cd:fd:52:3d:94:ec:71:58:b6:2e:82:21:
34:3e:3d:ac:33:80:21:3a:d1:1c:7e:52:3d:02:3b:
4b:19:72:6c:70:41:48:dd:62:ff:a3:46:31:aa:dd:
f6:a1:bb:58:60:b0:6c:34:1d:9c:a0:77:bf:6f:9e:
d4:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:3A:42:14:55:DB:CF:CA:15:61:73:8D:00:DC:FC:0B:03:72:45:20
X509v3 Authority Key Identifier:
keyid:05:B1:D1:3C:2E:26:E1:27:86:24:6A:5E:C4:C5:BE:A6:98:64:B2:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BbHRPC4m4SeGJGpexMW-pphksg8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/c61092-734a-4eef-9d67-4905243bc828/1/YTpCFFXbz8oVYXONANz8CwNyRSA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/c61092-734a-4eef-9d67-4905243bc828/1/BbHRPC4m4SeGJGpexMW-pphksg8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.44.47.0/24
46.16.14.0/23
85.92.109.0/24
89.191.232.0/24
91.107.116.0/24
91.107.124.0/23
91.107.127.0/24
109.236.58.0/24
194.5.92.0/24
194.31.173.0-194.31.174.255
Signature Algorithm: sha256WithRSAEncryption
4e:c3:82:32:76:0e:82:95:b4:0d:98:91:47:2d:4a:2a:30:51:
64:eb:16:6f:03:b2:6b:5a:25:d5:2e:40:85:74:9a:1e:e8:28:
2e:92:4c:c5:76:09:43:e2:bd:95:d3:b5:1b:b8:a5:1e:8f:6d:
15:77:e8:f6:48:7a:9b:c8:4f:a4:6d:1e:1a:08:47:b5:86:d0:
7d:cb:4a:f6:2f:66:2c:35:09:29:ab:12:b6:4c:21:f5:b7:47:
df:a7:a6:e6:aa:ad:2b:30:57:0a:e8:a8:bb:3b:02:85:06:31:
3a:da:53:36:cf:4a:d1:9d:c5:aa:86:25:3f:20:7d:5a:c7:2a:
7e:b5:78:90:3a:dd:62:3a:ee:e7:d5:f2:e7:62:52:ef:c4:6a:
77:bf:25:fd:23:ea:f6:a1:a0:79:90:2b:72:f3:81:57:47:b8:
de:75:a2:1b:2d:f6:8c:11:14:9d:8f:2b:21:97:90:59:79:08:
b2:c4:5a:66:ee:c5:42:91:21:d7:8a:1d:db:a0:41:8c:ff:7a:
a8:9f:f5:38:2b:d1:68:a2:d9:07:b6:3e:70:5b:50:eb:ac:00:
e6:7b:df:96:5a:64:2c:3c:c7:60:38:9c:a0:21:59:c8:9b:45:
d4:01:1a:79:64:72:59:2f:21:de:0a:9b:bc:3d:f2:be:23:2f:
b0:0f:47:b1
-----BEGIN CERTIFICATE-----
MIIFLTCCBBWgAwIBAgIEEWdl4TANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygw
NWIxZDEzYzJlMjZlMTI3ODYyNDZhNWVjNGM1YmVhNjk4NjRiMjBmMB4XDTIyMDEw
MTA1NTcwOFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoNjEzYTQyMTQ1NWRi
Y2ZjYTE1NjE3MzhkMDBkY2ZjMGIwMzcyNDUyMDCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAKvrjtmR9QzyUY4SzM+l6SlJhCN8ytLckP1V2/KsoNAXojd/
B8Detdb/W2VYwsRSC6KR//vX2kKNjSmltemYgFQLOjnXigd1AjpHWgiYJkhhRj3B
Q0uXRqFpyGN6gMcnhT8oZvgaJPLep8FTOrbS/54ofdjiKW7O3c9KTHy64kTU5ctL
DvkREbajLOi1rWxQ5cxdANu6wAq3a0bmAnnIRkq8m/J4tqaqNYsTj4lPuX1GqZYc
nE5fA+i05FbOw9Y+oPaB3ccgzf1SPZTscVi2LoIhND49rDOAITrRHH5SPQI7Sxly
bHBBSN1i/6NGMard9qG7WGCwbDQdnKB3v2+e1N0CAwEAAaOCAkcwggJDMB0GA1Ud
DgQWBBRhOkIUVdvPyhVhc40A3PwLA3JFIDAfBgNVHSMEGDAWgBQFsdE8LibhJ4Yk
al7Exb6mmGSyDzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L0JiSFJQQzRtNFNlR0pHcGV4TVctcHBoa3NnOC5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvYTgvYzYxMDkyLTczNGEtNGVlZi05ZDY3LTQ5MDUyNDNiYzgyOC8x
L1lUcENGRlhiejhvVllYT05BTno4Q3dOeVJTQS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYTgv
YzYxMDkyLTczNGEtNGVlZi05ZDY3LTQ5MDUyNDNiYzgyOC8xL0JiSFJQQzRtNFNl
R0pHcGV4TVctcHBoa3NnOC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBd
BggrBgEFBQcBBwEB/wROMEwwSgQCAAEwRAMEAAUsLwMEAS4QDgMEAFVcbQMEAFm/
6AMEAFtrdAMEAVtrfAMEAFtrfwMEAG3sOgMEAMIFXDAMAwQAwh+tAwQAwh+uMA0G
CSqGSIb3DQEBCwUAA4IBAQBOw4Iydg6ClbQNmJFHLUoqMFFk6xZvA7JrWiXVLkCF
dJoe6CgukkzFdglD4r2V07UbuKUej20Vd+j2SHqbyE+kbR4aCEe1htB9y0r2L2Ys
NQkpqxK2TCH1t0ffp6bmqq0rMFcK6Ki7OwKFBjE62lM2z0rRncWqhiU/IH1axyp+
tXiQOt1iOu7n1fLnYlLvxGp3vyX9I+r2oaB5kCty84FXR7jedaIbLfaMERSdjysh
l5BZeQiyxFpm7sVCkSHXih3boEGM/3qon/U4K9FootkHtj5wW1DrrADme9+WWmQs
PMdgOJygIVnIm0XUARp5ZHJZLyHeCpu8PfK+Iy+wD0ex
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:05:47 2023 by rpki-client on console-ams.rpki-client.org