Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/7282b4-7f11-4ee0-abea-e13e5579c5dc/1/3iwqKFlmRX8RusqrlUxvtri2dME.roa
File: 3iwqKFlmRX8RusqrlUxvtri2dME.roa (raw, json)
Hash identifier: U6FHyUzk16ARShIbkWna06qEs9Bz3fXNMkXHXlw6B/I=
Subject key identifier: DE:2C:2A:28:59:66:45:7F:11:BA:CA:AB:95:4C:6F:B6:B8:B6:74:C1
Certificate issuer: /CN=43d5ba0815c9f5193f80989ee893acacc4ba8849
Certificate serial: 12B3F81E
Authority key identifier: 43:D5:BA:08:15:C9:F5:19:3F:80:98:9E:E8:93:AC:AC:C4:BA:88:49
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q9W6CBXJ9Rk_gJie6JOsrMS6iEk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/7282b4-7f11-4ee0-abea-e13e5579c5dc/1/3iwqKFlmRX8RusqrlUxvtri2dME.roa
Signing time: Sat 01 Jan 2022 12:59:23 +0000
ROA not before: Sat 01 Jan 2022 12:59:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 0
IP address blocks: 57.12.65.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 313784350 (0x12b3f81e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43d5ba0815c9f5193f80989ee893acacc4ba8849
Validity
Not Before: Jan 1 12:59:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=de2c2a285966457f11bacaab954c6fb6b8b674c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:d7:df:f4:56:1d:b9:27:8b:67:e2:ae:3e:20:
a5:14:74:05:5c:55:8d:0f:9d:38:9a:42:2f:10:c7:
60:84:43:ae:24:09:b5:72:a7:33:b3:59:fd:51:6d:
0f:33:19:38:88:3d:cc:49:ca:aa:9b:46:59:d4:ff:
d8:ee:fd:fb:7b:a7:c6:b1:f0:2e:85:60:13:d2:91:
bb:7e:51:f4:c1:af:7a:1f:6d:26:53:99:51:08:7f:
60:1c:21:a6:f9:43:85:32:7d:c0:ea:35:b6:eb:07:
90:15:a0:6a:34:2b:6a:74:e8:c7:20:c4:94:9d:3f:
89:d0:21:ae:27:d0:66:de:4a:fb:9d:cb:5b:aa:81:
be:39:22:ba:ca:74:5f:c9:12:7e:10:25:99:4b:db:
bf:03:f6:ed:59:06:ad:4d:a9:c7:d3:f3:05:94:0b:
a5:49:fa:3f:f4:43:85:14:3c:4b:43:43:63:f1:fb:
c1:f1:30:a1:f0:26:9a:5f:21:ca:14:1b:60:74:33:
60:13:1e:6c:e0:84:0e:c6:06:ac:aa:3a:73:54:07:
25:93:dc:cb:51:75:a7:26:5b:f3:1c:8a:c5:52:2c:
f0:b5:8c:6c:ba:d6:df:07:c4:41:54:ba:45:40:fb:
65:cf:27:de:ef:95:6a:75:c1:9a:0a:5e:60:71:49:
c5:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:2C:2A:28:59:66:45:7F:11:BA:CA:AB:95:4C:6F:B6:B8:B6:74:C1
X509v3 Authority Key Identifier:
keyid:43:D5:BA:08:15:C9:F5:19:3F:80:98:9E:E8:93:AC:AC:C4:BA:88:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q9W6CBXJ9Rk_gJie6JOsrMS6iEk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/7282b4-7f11-4ee0-abea-e13e5579c5dc/1/3iwqKFlmRX8RusqrlUxvtri2dME.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/7282b4-7f11-4ee0-abea-e13e5579c5dc/1/Q9W6CBXJ9Rk_gJie6JOsrMS6iEk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
57.12.65.0/24
Signature Algorithm: sha256WithRSAEncryption
3c:f4:08:ea:04:4f:e8:a6:ba:be:ea:55:f2:1f:b3:73:d5:7a:
17:b7:e5:74:6f:ff:64:ce:fc:2a:9d:b1:3e:6e:0c:b2:43:16:
fe:d6:f0:0e:82:d9:c6:7a:1b:b8:63:af:f6:31:0d:00:c6:42:
fc:9c:a4:45:cf:81:ea:5a:a5:83:68:9f:28:0f:be:da:56:4a:
5a:b9:a1:a0:96:6b:2b:30:31:8c:7d:77:b4:fc:4e:8d:e3:54:
10:c9:81:98:28:84:67:da:25:61:18:09:37:eb:9f:a2:17:07:
32:f6:48:ba:3f:60:41:cb:97:c1:19:2d:1a:f2:2e:89:03:00:
8d:5c:23:87:da:22:9b:98:a3:d1:c9:ce:b5:80:cc:a3:7f:11:
55:63:d7:34:0d:9e:f6:6c:90:3d:c9:eb:c8:ed:8c:bd:a7:f4:
05:db:bb:27:72:0d:7a:51:33:44:99:f4:7d:43:0b:f1:c9:2c:
43:20:7c:c4:90:f9:63:f5:a5:dd:17:a5:02:1a:17:8a:a1:09:
be:41:8b:8d:d3:d1:f9:74:de:2e:74:9c:fa:fa:6d:b0:72:b1:
56:11:cd:fd:26:5e:5d:a9:f8:67:9c:4b:a9:b9:b0:2c:85:35:
09:26:01:bf:15:23:8c:fd:44:5d:4e:c8:3e:70:70:cb:1f:92:
20:a9:53:29
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEErP4HjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg0
M2Q1YmEwODE1YzlmNTE5M2Y4MDk4OWVlODkzYWNhY2M0YmE4ODQ5MB4XDTIyMDEw
MTEyNTkyM1oXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoZGUyYzJhMjg1OTY2
NDU3ZjExYmFjYWFiOTU0YzZmYjZiOGI2NzRjMTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAJTX3/RWHbkni2firj4gpRR0BVxVjQ+dOJpCLxDHYIRDriQJ
tXKnM7NZ/VFtDzMZOIg9zEnKqptGWdT/2O79+3unxrHwLoVgE9KRu35R9MGveh9t
JlOZUQh/YBwhpvlDhTJ9wOo1tusHkBWgajQranToxyDElJ0/idAhrifQZt5K+53L
W6qBvjkiusp0X8kSfhAlmUvbvwP27VkGrU2px9PzBZQLpUn6P/RDhRQ8S0NDY/H7
wfEwofAmml8hyhQbYHQzYBMebOCEDsYGrKo6c1QHJZPcy1F1pyZb8xyKxVIs8LWM
bLrW3wfEQVS6RUD7Zc8n3u+VanXBmgpeYHFJxQkCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBTeLCooWWZFfxG6yquVTG+2uLZ0wTAfBgNVHSMEGDAWgBRD1boIFcn1GT+A
mJ7ok6ysxLqISTAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L1E5VzZDQlhKOVJrX2dKaWU2Sk9zck1TNmlFay5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvYWIvNzI4MmI0LTdmMTEtNGVlMC1hYmVhLWUxM2U1NTc5YzVkYy8x
LzNpd3FLRmxtUlg4UnVzcXJsVXh2dHJpMmRNRS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYWIv
NzI4MmI0LTdmMTEtNGVlMC1hYmVhLWUxM2U1NTc5YzVkYy8xL1E5VzZDQlhKOVJr
X2dKaWU2Sk9zck1TNmlFay5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEADkMQTANBgkqhkiG9w0BAQsFAAOC
AQEAPPQI6gRP6Ka6vupV8h+zc9V6F7fldG//ZM78Kp2xPm4MskMW/tbwDoLZxnob
uGOv9jENAMZC/JykRc+B6lqlg2ifKA++2lZKWrmhoJZrKzAxjH13tPxOjeNUEMmB
mCiEZ9olYRgJN+ufohcHMvZIuj9gQcuXwRktGvIuiQMAjVwjh9oim5ij0cnOtYDM
o38RVWPXNA2e9myQPcnryO2Mvaf0Bdu7J3INelEzRJn0fUML8cksQyB8xJD5Y/Wl
3RelAhoXiqEJvkGLjdPR+XTeLnSc+vptsHKxVhHN/SZeXan4Z5xLqbmwLIU1CSYB
vxUjjP1EXU7IPnBwyx+SIKlTKQ==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:49:17 2024 by rpki-client on console-fra.rpki-client.org