Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/7282b4-7f11-4ee0-abea-e13e5579c5dc/1/0pWB7O1i3BjDchBiyLqVnrNGXNY.roa
File: 0pWB7O1i3BjDchBiyLqVnrNGXNY.roa (raw, json)
Hash identifier: tI8sKXuCTp+b0tr/HJpCLjDyv0fgyJ2pRK6XODBJYqU=
Subject key identifier: D2:95:81:EC:ED:62:DC:18:C3:72:10:62:C8:BA:95:9E:B3:46:5C:D6
Certificate issuer: /CN=43d5ba0815c9f5193f80989ee893acacc4ba8849
Certificate serial: 12B9DB7B
Authority key identifier: 43:D5:BA:08:15:C9:F5:19:3F:80:98:9E:E8:93:AC:AC:C4:BA:88:49
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q9W6CBXJ9Rk_gJie6JOsrMS6iEk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/7282b4-7f11-4ee0-abea-e13e5579c5dc/1/0pWB7O1i3BjDchBiyLqVnrNGXNY.roa
Signing time: Sat 01 Jan 2022 12:59:26 +0000
ROA not before: Sat 01 Jan 2022 12:59:26 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 51964
IP address blocks: 57.84.0.0/16 maxlen: 24
57.88.0.0/16 maxlen: 24
57.64.0.0/16 maxlen: 24
57.75.0.0/16 maxlen: 24
57.251.0.0/16 maxlen: 24
57.91.0.0/16 maxlen: 24
57.246.0.0/16 maxlen: 24
57.94.0.0/16 maxlen: 24
57.89.0.0/16 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 314170235 (0x12b9db7b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43d5ba0815c9f5193f80989ee893acacc4ba8849
Validity
Not Before: Jan 1 12:59:26 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d29581eced62dc18c3721062c8ba959eb3465cd6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:80:f2:08:c1:c3:8e:24:ef:4c:1e:71:4b:e0:
0e:7f:81:5c:c1:7d:cb:62:5c:e7:a2:56:a3:8f:4d:
08:48:35:43:3e:50:cd:85:8b:61:0f:51:df:49:5c:
54:07:e0:77:3b:9a:b3:d6:c0:13:44:d2:cf:9c:84:
3c:74:17:61:7c:f0:0b:8c:77:4b:6e:88:8b:af:c4:
7a:9f:10:a5:ed:88:be:df:84:20:9f:f3:d0:9e:99:
4d:9d:ad:75:c9:3b:db:9c:fc:be:b4:76:2f:30:84:
2f:9a:c3:27:70:d7:16:98:10:d2:e3:52:b4:82:86:
fb:e0:bf:84:67:be:d9:81:d7:34:ba:3c:1b:e6:cb:
0c:98:df:34:a7:4c:73:71:d3:40:6e:31:8c:22:90:
8a:13:85:a0:38:ad:44:20:14:e5:f9:3d:e5:35:41:
f6:21:4b:d2:51:a3:74:a1:df:3e:cb:c1:46:6e:53:
d8:b1:1e:d4:9f:a4:44:44:4c:7a:8c:24:83:4b:9a:
aa:5e:66:0e:74:1d:a6:32:77:1d:c9:1e:64:82:15:
34:21:b5:f5:4f:0a:da:8d:35:36:1b:95:2a:2c:cc:
d6:47:32:15:3e:7f:87:13:2a:67:9d:fa:5a:7a:90:
1b:ac:b1:de:06:f1:10:c2:22:3f:0f:ab:af:2f:7a:
21:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:95:81:EC:ED:62:DC:18:C3:72:10:62:C8:BA:95:9E:B3:46:5C:D6
X509v3 Authority Key Identifier:
keyid:43:D5:BA:08:15:C9:F5:19:3F:80:98:9E:E8:93:AC:AC:C4:BA:88:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q9W6CBXJ9Rk_gJie6JOsrMS6iEk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/7282b4-7f11-4ee0-abea-e13e5579c5dc/1/0pWB7O1i3BjDchBiyLqVnrNGXNY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/7282b4-7f11-4ee0-abea-e13e5579c5dc/1/Q9W6CBXJ9Rk_gJie6JOsrMS6iEk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
57.64.0.0/16
57.75.0.0/16
57.84.0.0/16
57.88.0.0/15
57.91.0.0/16
57.94.0.0/16
57.246.0.0/16
57.251.0.0/16
Signature Algorithm: sha256WithRSAEncryption
63:9f:7a:e6:4c:cd:fd:69:ab:e3:40:f8:54:7b:d7:b8:d3:f3:
da:44:57:6a:9b:4f:65:0c:92:6d:df:d8:e5:8a:88:fb:f1:6c:
04:44:f2:6f:75:17:e9:7d:27:a9:50:ae:3d:04:10:68:2a:1f:
1e:b6:04:e3:af:32:83:d6:b7:47:81:f1:55:1d:c8:21:7c:7c:
22:b3:b4:e5:d6:40:41:aa:a0:12:b1:9f:ff:81:99:1a:7a:b7:
a9:25:62:a4:07:9b:aa:49:79:0e:c8:8a:08:f7:da:63:9d:8e:
9e:eb:67:d1:04:53:01:92:07:ec:27:ce:6c:1e:13:c2:1f:d9:
fc:8e:a5:59:f9:bc:96:f3:3b:2f:6e:84:39:c8:24:8b:39:15:
8a:d2:e5:2c:9e:a4:ee:17:44:79:83:0f:7c:6e:e8:53:61:dc:
87:80:61:f5:8a:79:41:87:75:2f:6a:84:14:09:d9:77:2f:58:
d6:3f:2a:20:57:72:ae:45:1f:bb:a7:58:ed:fd:42:ab:66:52:
b6:7a:58:ad:b0:13:60:e9:ba:c8:02:5c:9c:5e:34:00:79:ee:
2c:a7:a5:a8:61:f2:e9:a9:eb:f1:cc:a2:14:62:7a:6f:b9:18:
81:c6:ec:c6:28:cc:04:8b:bb:dd:2b:88:4d:9d:5b:14:e1:b7:
84:ff:b6:e6
-----BEGIN CERTIFICATE-----
MIIFETCCA/mgAwIBAgIEErnbezANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg0
M2Q1YmEwODE1YzlmNTE5M2Y4MDk4OWVlODkzYWNhY2M0YmE4ODQ5MB4XDTIyMDEw
MTEyNTkyNloXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoZDI5NTgxZWNlZDYy
ZGMxOGMzNzIxMDYyYzhiYTk1OWViMzQ2NWNkNjCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAKSA8gjBw44k70wecUvgDn+BXMF9y2Jc56JWo49NCEg1Qz5Q
zYWLYQ9R30lcVAfgdzuas9bAE0TSz5yEPHQXYXzwC4x3S26Ii6/Eep8Qpe2Ivt+E
IJ/z0J6ZTZ2tdck725z8vrR2LzCEL5rDJ3DXFpgQ0uNStIKG++C/hGe+2YHXNLo8
G+bLDJjfNKdMc3HTQG4xjCKQihOFoDitRCAU5fk95TVB9iFL0lGjdKHfPsvBRm5T
2LEe1J+kRERMeowkg0uaql5mDnQdpjJ3HckeZIIVNCG19U8K2o01NhuVKizM1kcy
FT5/hxMqZ536WnqQG6yx3gbxEMIiPw+rry96IbcCAwEAAaOCAiswggInMB0GA1Ud
DgQWBBTSlYHs7WLcGMNyEGLIupWes0Zc1jAfBgNVHSMEGDAWgBRD1boIFcn1GT+A
mJ7ok6ysxLqISTAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L1E5VzZDQlhKOVJrX2dKaWU2Sk9zck1TNmlFay5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvYWIvNzI4MmI0LTdmMTEtNGVlMC1hYmVhLWUxM2U1NTc5YzVkYy8x
LzBwV0I3TzFpM0JqRGNoQml5THFWbnJOR1hOWS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYWIv
NzI4MmI0LTdmMTEtNGVlMC1hYmVhLWUxM2U1NTc5YzVkYy8xL1E5VzZDQlhKOVJr
X2dKaWU2Sk9zck1TNmlFay5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBB
BggrBgEFBQcBBwEB/wQyMDAwLgQCAAEwKAMDADlAAwMAOUsDAwA5VAMDATlYAwMA
OVsDAwA5XgMDADn2AwMAOfswDQYJKoZIhvcNAQELBQADggEBAGOfeuZMzf1pq+NA
+FR717jT89pEV2qbT2UMkm3f2OWKiPvxbARE8m91F+l9J6lQrj0EEGgqHx62BOOv
MoPWt0eB8VUdyCF8fCKztOXWQEGqoBKxn/+BmRp6t6klYqQHm6pJeQ7Iigj32mOd
jp7rZ9EEUwGSB+wnzmweE8If2fyOpVn5vJbzOy9uhDnIJIs5FYrS5SyepO4XRHmD
D3xu6FNh3IeAYfWKeUGHdS9qhBQJ2XcvWNY/KiBXcq5FH7unWO39QqtmUrZ6WK2w
E2DpusgCXJxeNAB57iynpahh8ump6/HMohRiem+5GIHG7MYozASLu90riE2dWxTh
t4T/tuY=
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:37:48 2024 by rpki-client on console-ams.rpki-client.org