Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/0e651e-90c7-4acd-97b9-a54f8e4813e7/1/m7EYO8CWXgcCtfKtm5r9zBXLN1w.roa
File: m7EYO8CWXgcCtfKtm5r9zBXLN1w.roa (raw, json)
Hash identifier: Si1JmC15O9gqf0OaujI/BHfbDSxsA0Gh7sFCFgPAHo8=
Subject key identifier: 9B:B1:18:3B:C0:96:5E:07:02:B5:F2:AD:9B:9A:FD:CC:15:CB:37:5C
Certificate issuer: /CN=9cd0758825dd89cfee5fdecc7dcb651f0a5d1018
Certificate serial: 05724B57
Authority key identifier: 9C:D0:75:88:25:DD:89:CF:EE:5F:DE:CC:7D:CB:65:1F:0A:5D:10:18
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nNB1iCXdic_uX97MfctlHwpdEBg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/0e651e-90c7-4acd-97b9-a54f8e4813e7/1/m7EYO8CWXgcCtfKtm5r9zBXLN1w.roa
Signing time: Sat 01 Jan 2022 07:02:23 +0000
ROA not before: Sat 01 Jan 2022 07:02:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 48678
IP address blocks: 45.11.98.0/24 maxlen: 24
45.11.97.0/24 maxlen: 24
45.11.96.0/24 maxlen: 24
45.11.99.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 91376471 (0x5724b57)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9cd0758825dd89cfee5fdecc7dcb651f0a5d1018
Validity
Not Before: Jan 1 07:02:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=9bb1183bc0965e0702b5f2ad9b9afdcc15cb375c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:b4:fa:de:1e:4f:60:83:24:4d:50:b5:bb:c1:
70:81:42:64:be:39:8d:72:78:be:1d:ed:b7:7a:1f:
c6:f7:7b:36:5f:bf:0a:cd:10:c7:11:02:93:dd:4b:
17:5f:dd:08:3d:3d:9f:83:bc:89:da:22:e5:d3:de:
6d:f9:ae:91:78:a4:40:7c:2b:ca:07:c5:4e:fd:46:
c3:52:b8:ed:32:f5:c4:ef:47:4c:2a:95:a0:d4:ad:
58:af:bd:7f:6f:9d:55:73:c3:12:b3:f0:62:b9:81:
25:13:1e:f9:1a:73:30:30:37:9c:fd:c3:2d:2f:c5:
4d:80:2a:9c:55:2f:0f:ae:4a:c4:db:66:52:ce:49:
da:a1:4e:3c:b3:94:31:b7:08:ae:ae:40:cc:06:38:
8e:01:61:2c:16:67:64:5b:f9:dc:72:0c:fc:1e:41:
61:fc:de:8b:69:5f:2d:54:06:17:ba:8c:89:dc:29:
f5:8b:7a:9b:25:18:01:4f:d4:64:b3:23:33:05:ca:
a8:e5:b9:7c:54:fe:e4:c5:84:41:0a:a1:d3:80:f0:
4e:ed:e7:97:7b:29:34:7c:1f:fe:2c:e0:1b:f9:04:
4a:5b:8a:d4:92:00:49:89:05:15:0f:51:9b:de:89:
75:63:ad:e1:6d:8f:b9:9d:79:f0:9a:af:c1:c2:dc:
e3:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:B1:18:3B:C0:96:5E:07:02:B5:F2:AD:9B:9A:FD:CC:15:CB:37:5C
X509v3 Authority Key Identifier:
keyid:9C:D0:75:88:25:DD:89:CF:EE:5F:DE:CC:7D:CB:65:1F:0A:5D:10:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nNB1iCXdic_uX97MfctlHwpdEBg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/0e651e-90c7-4acd-97b9-a54f8e4813e7/1/m7EYO8CWXgcCtfKtm5r9zBXLN1w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/0e651e-90c7-4acd-97b9-a54f8e4813e7/1/nNB1iCXdic_uX97MfctlHwpdEBg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.11.96.0/22
Signature Algorithm: sha256WithRSAEncryption
90:64:66:30:bf:a7:f1:1e:bd:72:34:60:3d:3a:97:6d:02:a8:
02:cd:e3:0a:b8:3a:dd:9d:c4:9c:7b:65:ac:b6:f0:93:1f:9e:
04:8a:d8:87:4e:6f:18:93:b4:44:42:c2:fc:49:12:c4:e6:c7:
d8:6d:a3:57:85:d8:6f:07:a1:73:88:31:14:17:3e:d5:11:c7:
6c:f2:6d:fb:20:1a:89:01:c8:af:2f:f2:0a:d9:d0:7f:da:6e:
ff:1a:bf:72:93:f6:c9:3f:60:bb:83:c0:e1:d9:48:0e:ed:69:
69:66:69:9c:f1:65:a2:1f:ab:a6:93:46:2d:2b:b9:83:d6:32:
27:ea:f2:6f:b8:00:bb:09:d9:04:da:ac:8b:b2:87:aa:9b:ca:
7d:1c:0f:3b:f4:5e:e2:fe:2d:17:67:b9:4b:89:51:c1:24:87:
06:2f:11:6f:8e:dc:2c:43:f3:ec:4e:d4:35:d1:83:02:ed:19:
61:c8:66:84:9f:b5:22:52:af:db:cf:1c:75:ec:f0:06:56:e6:
c5:09:53:23:e6:87:14:bf:73:90:51:13:4e:bf:eb:87:eb:e1:
d9:4d:46:51:c2:80:b0:20:a9:58:c6:92:bb:8b:ad:c0:7e:69:
69:0d:49:c4:1e:9a:8c:90:1f:36:3b:41:de:36:bb:e7:39:f4:
79:80:1e:68
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEBXJLVzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg5
Y2QwNzU4ODI1ZGQ4OWNmZWU1ZmRlY2M3ZGNiNjUxZjBhNWQxMDE4MB4XDTIyMDEw
MTA3MDIyM1oXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoOWJiMTE4M2JjMDk2
NWUwNzAyYjVmMmFkOWI5YWZkY2MxNWNiMzc1YzCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAMS0+t4eT2CDJE1QtbvBcIFCZL45jXJ4vh3tt3ofxvd7Nl+/
Cs0QxxECk91LF1/dCD09n4O8idoi5dPebfmukXikQHwrygfFTv1Gw1K47TL1xO9H
TCqVoNStWK+9f2+dVXPDErPwYrmBJRMe+RpzMDA3nP3DLS/FTYAqnFUvD65KxNtm
Us5J2qFOPLOUMbcIrq5AzAY4jgFhLBZnZFv53HIM/B5BYfzei2lfLVQGF7qMidwp
9Yt6myUYAU/UZLMjMwXKqOW5fFT+5MWEQQqh04DwTu3nl3spNHwf/izgG/kESluK
1JIASYkFFQ9Rm96JdWOt4W2PuZ158JqvwcLc4/0CAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBSbsRg7wJZeBwK18q2bmv3MFcs3XDAfBgNVHSMEGDAWgBSc0HWIJd2Jz+5f
3sx9y2UfCl0QGDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L25OQjFpQ1hkaWNfdVg5N01mY3RsSHdwZEVCZy5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvYWEvMGU2NTFlLTkwYzctNGFjZC05N2I5LWE1NGY4ZTQ4MTNlNy8x
L203RVlPOENXWGdjQ3RmS3RtNXI5ekJYTE4xdy5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYWEv
MGU2NTFlLTkwYzctNGFjZC05N2I5LWE1NGY4ZTQ4MTNlNy8xL25OQjFpQ1hkaWNf
dVg5N01mY3RsSHdwZEVCZy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAi0LYDANBgkqhkiG9w0BAQsFAAOC
AQEAkGRmML+n8R69cjRgPTqXbQKoAs3jCrg63Z3EnHtlrLbwkx+eBIrYh05vGJO0
RELC/EkSxObH2G2jV4XYbwehc4gxFBc+1RHHbPJt+yAaiQHIry/yCtnQf9pu/xq/
cpP2yT9gu4PA4dlIDu1paWZpnPFloh+rppNGLSu5g9YyJ+ryb7gAuwnZBNqsi7KH
qpvKfRwPO/Re4v4tF2e5S4lRwSSHBi8Rb47cLEPz7E7UNdGDAu0ZYchmhJ+1IlKv
288cdezwBlbmxQlTI+aHFL9zkFETTr/rh+vh2U1GUcKAsCCpWMaSu4utwH5paQ1J
xB6ajJAfNjtB3ja75zn0eYAeaA==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:49:09 2024 by rpki-client on console-fra.rpki-client.org