Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/ea4455-7836-44c4-b2a3-2ece04e185c2/1/Ev9bjPQ-1wjA1UQ9zQWnuaQ5GL0.roa
File: Ev9bjPQ-1wjA1UQ9zQWnuaQ5GL0.roa (raw, json)
Hash identifier: 9gQyYP21jlmTbRIreOdD5lEhBTTUwbc/+1WnWbVyemc=
Subject key identifier: 12:FF:5B:8C:F4:3E:D7:08:C0:D5:44:3D:CD:05:A7:B9:A4:39:18:BD
Certificate issuer: /CN=dcef58d4cfa35543f8488a2756e6924e647b4589
Certificate serial: 059746E8
Authority key identifier: DC:EF:58:D4:CF:A3:55:43:F8:48:8A:27:56:E6:92:4E:64:7B:45:89
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3O9Y1M-jVUP4SIonVuaSTmR7RYk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/ea4455-7836-44c4-b2a3-2ece04e185c2/1/Ev9bjPQ-1wjA1UQ9zQWnuaQ5GL0.roa
Signing time: Sat 01 Jan 2022 07:03:57 +0000
ROA not before: Sat 01 Jan 2022 07:03:57 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 9050
IP address blocks: 89.39.1.0/24 maxlen: 24
89.39.2.0/24 maxlen: 24
89.39.0.0/24 maxlen: 24
89.39.4.0/24 maxlen: 24
89.39.3.0/24 maxlen: 24
89.34.101.0/24 maxlen: 24
89.39.5.0/24 maxlen: 24
89.34.238.0/24 maxlen: 24
188.241.72.0/24 maxlen: 24
89.40.226.0/24 maxlen: 24
185.248.138.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 93800168 (0x59746e8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dcef58d4cfa35543f8488a2756e6924e647b4589
Validity
Not Before: Jan 1 07:03:57 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=12ff5b8cf43ed708c0d5443dcd05a7b9a43918bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:b0:a8:d2:88:39:75:f5:64:8e:11:41:26:dd:
4f:b1:f4:5a:49:f3:20:2a:23:d2:ee:c7:c4:83:02:
75:a2:a1:32:59:b4:fb:36:31:ee:c3:17:58:61:d3:
50:e6:ac:7b:fc:d2:44:b4:5e:9c:03:71:e5:89:a7:
eb:21:e1:dd:79:b0:96:4e:7c:58:ff:81:33:53:b5:
2d:d8:db:58:de:c8:04:78:0b:f6:7a:e3:4a:8a:05:
f3:71:e0:dd:db:88:d8:39:10:d6:55:69:f6:6a:70:
cc:1d:1e:a5:43:22:c9:62:67:65:5c:d1:ed:a7:4a:
2f:84:b5:67:a0:78:55:28:ba:ba:76:50:3a:a9:1c:
7c:0f:0f:13:c2:17:e3:e2:79:0a:bd:bf:1f:21:86:
ca:6e:39:49:14:0c:86:93:3c:50:a4:df:9f:98:a5:
36:4c:c5:2c:21:93:2f:5d:3e:2b:7d:3f:46:e8:7e:
ff:4b:14:45:70:36:8f:51:ef:e4:00:70:75:0e:c7:
c9:08:62:a1:e7:14:2b:33:04:38:07:23:ac:93:58:
22:14:9e:3f:8b:92:a5:9b:f3:e4:1b:07:45:d7:e6:
7a:a5:26:8c:09:52:43:15:05:d4:96:00:cc:d2:10:
2e:3a:7a:5f:a1:95:4a:04:93:5f:65:d3:ba:55:74:
02:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:FF:5B:8C:F4:3E:D7:08:C0:D5:44:3D:CD:05:A7:B9:A4:39:18:BD
X509v3 Authority Key Identifier:
keyid:DC:EF:58:D4:CF:A3:55:43:F8:48:8A:27:56:E6:92:4E:64:7B:45:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3O9Y1M-jVUP4SIonVuaSTmR7RYk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/ea4455-7836-44c4-b2a3-2ece04e185c2/1/Ev9bjPQ-1wjA1UQ9zQWnuaQ5GL0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/ea4455-7836-44c4-b2a3-2ece04e185c2/1/3O9Y1M-jVUP4SIonVuaSTmR7RYk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.34.101.0/24
89.34.238.0/24
89.39.0.0-89.39.5.255
89.40.226.0/24
185.248.138.0/24
188.241.72.0/24
Signature Algorithm: sha256WithRSAEncryption
2f:d4:3b:30:21:54:4f:43:8a:cc:2e:b8:bf:f3:d1:36:62:36:
c9:b8:3a:3a:bf:e9:51:a3:3e:dc:57:0b:4a:c8:1e:87:f5:82:
d6:aa:89:b2:14:37:29:19:7a:d0:21:83:3e:95:f9:91:ab:3f:
e5:de:b4:1d:60:50:61:bb:fe:28:f6:42:9d:76:b5:67:26:09:
52:ca:8e:5d:14:26:56:7a:49:4b:35:82:13:bc:8b:f7:16:8f:
fa:0a:fa:1d:f6:ee:29:17:88:1e:49:23:2d:2e:f0:77:f6:b6:
b1:16:18:dd:0c:54:b2:86:47:ba:be:be:6a:70:18:b3:8c:b5:
08:15:4e:7c:9c:98:99:ca:d2:b2:73:bb:3b:58:48:20:6b:56:
f2:e6:1f:47:74:8f:06:76:cd:cf:88:9f:7c:b1:ba:8c:92:97:
fc:9c:36:eb:dd:a0:d9:8b:af:0c:10:d1:06:80:d3:5b:a1:d8:
19:c0:e2:27:ec:1f:d6:d5:11:9e:f3:60:d4:53:5b:c1:6a:70:
17:87:63:de:41:77:a6:e0:a1:ef:2a:ef:75:eb:3f:43:4d:5f:
4c:44:69:d9:f3:99:1a:f8:1d:3f:82:a4:1a:ac:95:ac:20:44:
49:55:2b:85:f9:aa:04:db:f4:76:15:bf:72:da:40:b7:4e:3d:
35:dd:df:c7
-----BEGIN CERTIFICATE-----
MIIFFDCCA/ygAwIBAgIEBZdG6DANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhk
Y2VmNThkNGNmYTM1NTQzZjg0ODhhMjc1NmU2OTI0ZTY0N2I0NTg5MB4XDTIyMDEw
MTA3MDM1N1oXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoMTJmZjViOGNmNDNl
ZDcwOGMwZDU0NDNkY2QwNWE3YjlhNDM5MThiZDCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAMuwqNKIOXX1ZI4RQSbdT7H0WknzICoj0u7HxIMCdaKhMlm0
+zYx7sMXWGHTUOase/zSRLRenANx5Ymn6yHh3Xmwlk58WP+BM1O1LdjbWN7IBHgL
9nrjSooF83Hg3duI2DkQ1lVp9mpwzB0epUMiyWJnZVzR7adKL4S1Z6B4VSi6unZQ
OqkcfA8PE8IX4+J5Cr2/HyGGym45SRQMhpM8UKTfn5ilNkzFLCGTL10+K30/Ruh+
/0sURXA2j1Hv5ABwdQ7HyQhioecUKzMEOAcjrJNYIhSeP4uSpZvz5BsHRdfmeqUm
jAlSQxUF1JYAzNIQLjp6X6GVSgSTX2XTulV0AosCAwEAAaOCAi4wggIqMB0GA1Ud
DgQWBBQS/1uM9D7XCMDVRD3NBae5pDkYvTAfBgNVHSMEGDAWgBTc71jUz6NVQ/hI
iidW5pJOZHtFiTAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
LzNPOVkxTS1qVlVQNFNJb25WdWFTVG1SN1JZay5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvYWEvZWE0NDU1LTc4MzYtNDRjNC1iMmEzLTJlY2UwNGUxODVjMi8x
L0V2OWJqUFEtMXdqQTFVUTl6UVdudWFRNUdMMC5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYWEv
ZWE0NDU1LTc4MzYtNDRjNC1iMmEzLTJlY2UwNGUxODVjMi8xLzNPOVkxTS1qVlVQ
NFNJb25WdWFTVG1SN1JZay5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBE
BggrBgEFBQcBBwEB/wQ1MDMwMQQCAAEwKwMEAFkiZQMEAFki7jALAwMAWScDBAFZ
JwQDBABZKOIDBAC5+IoDBAC88UgwDQYJKoZIhvcNAQELBQADggEBAC/UOzAhVE9D
iswuuL/z0TZiNsm4Ojq/6VGjPtxXC0rIHof1gtaqibIUNykZetAhgz6V+ZGrP+Xe
tB1gUGG7/ij2Qp12tWcmCVLKjl0UJlZ6SUs1ghO8i/cWj/oK+h327ikXiB5JIy0u
8Hf2trEWGN0MVLKGR7q+vmpwGLOMtQgVTnycmJnK0rJzuztYSCBrVvLmH0d0jwZ2
zc+In3yxuoySl/ycNuvdoNmLrwwQ0QaA01uh2BnA4ifsH9bVEZ7zYNRTW8FqcBeH
Y95Bd6bgoe8q73XrP0NNX0xEadnzmRr4HT+CpBqslawgRElVK4X5qgTb9HYVv3La
QLdOPTXd38c=
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:02:01 2023 by rpki-client on console-fra.rpki-client.org