Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/TBPwY2drcCg5-0SAysIZknCCpj0.roa
File: TBPwY2drcCg5-0SAysIZknCCpj0.roa (raw, json)
Hash identifier: UlDBiC3wvhMUCd7/7nzn0I4dZa2JNw0uomc+xRsO140=
Subject key identifier: 4C:13:F0:63:67:6B:70:28:39:FB:44:80:CA:C2:19:92:70:82:A6:3D
Certificate issuer: /CN=9b0c0d04225566db95e9ad3b2ef605014975aaa2
Certificate serial: 0182CBB0C4CA2F783AA0C3D936FB651C33C4
Authority key identifier: 9B:0C:0D:04:22:55:66:DB:95:E9:AD:3B:2E:F6:05:01:49:75:AA:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mwwNBCJVZtuV6a07LvYFAUl1qqI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/TBPwY2drcCg5-0SAysIZknCCpj0.roa
Signing time: Tue 23 Aug 2022 17:12:15 +0000
ROA not before: Tue 23 Aug 2022 17:12:15 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 61317
IP address blocks: 176.105.228.0/24 maxlen: 24
45.137.18.0/24 maxlen: 24
81.28.254.0/23 maxlen: 24
45.132.80.0/22 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:cb:b0:c4:ca:2f:78:3a:a0:c3:d9:36:fb:65:1c:33:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9b0c0d04225566db95e9ad3b2ef605014975aaa2
Validity
Not Before: Aug 23 17:12:15 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=4c13f063676b702839fb4480cac219927082a63d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:0b:fd:5f:f4:a2:11:31:e1:b6:08:7a:ce:ea:
d2:e9:43:ec:3a:04:d4:5d:34:55:df:6b:9e:59:39:
df:52:8b:66:08:59:54:0c:40:e9:91:f7:0d:21:47:
19:f2:a4:c2:e1:06:88:af:45:e8:52:70:81:7a:50:
cd:b5:12:b4:60:33:97:16:7c:65:82:ba:ca:7b:33:
8f:b8:52:4a:65:7a:45:90:43:a3:52:9a:4e:99:02:
bb:0d:5e:3c:a5:59:82:34:72:a1:f7:1f:39:04:f5:
5e:06:bd:ca:77:55:bd:aa:b6:25:d0:4f:60:42:ba:
de:3a:a7:db:5d:03:83:e5:ff:7c:dc:92:b5:4c:7d:
f3:95:ca:73:82:1c:07:a5:f6:1b:96:5d:0b:8a:2d:
01:c3:0f:03:30:63:35:86:85:33:f3:23:d9:fc:b0:
76:72:92:b9:ce:94:9d:fe:80:e7:90:63:bb:c2:72:
63:62:7e:5a:94:65:2e:b0:d3:1c:4e:f6:b0:f7:80:
60:62:62:81:88:f2:fe:5e:90:d2:bd:c7:9a:0e:b5:
fe:10:f7:57:90:70:48:61:ee:c7:4c:5b:68:3d:9f:
87:ba:d6:b3:99:69:cd:0c:f2:cf:85:24:a6:a4:c3:
ff:40:53:4f:7a:cc:2d:48:7f:c3:5d:eb:40:18:b6:
b1:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:13:F0:63:67:6B:70:28:39:FB:44:80:CA:C2:19:92:70:82:A6:3D
X509v3 Authority Key Identifier:
keyid:9B:0C:0D:04:22:55:66:DB:95:E9:AD:3B:2E:F6:05:01:49:75:AA:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mwwNBCJVZtuV6a07LvYFAUl1qqI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/TBPwY2drcCg5-0SAysIZknCCpj0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/mwwNBCJVZtuV6a07LvYFAUl1qqI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.132.80.0/22
45.137.18.0/24
81.28.254.0/23
176.105.228.0/24
Signature Algorithm: sha256WithRSAEncryption
5f:9f:b5:c2:1d:74:86:82:51:b6:40:64:fa:3d:71:53:09:54:
69:38:b8:56:ae:3e:fe:18:a1:e2:09:87:67:5f:94:9e:f0:f6:
b5:ef:24:96:d2:82:77:ed:3d:9a:8d:a0:ed:24:fe:40:dc:44:
36:ca:1c:17:78:63:22:8f:6d:08:0e:ea:86:57:b7:58:ff:ac:
96:d7:f6:2d:62:69:db:8f:ce:66:4f:8e:bf:e1:d2:ce:ed:f9:
cc:c5:1e:4b:7e:7f:22:c4:6a:83:70:48:dd:ee:2b:f4:76:c1:
6f:74:01:db:f1:82:b7:8b:b5:a2:8f:f3:ad:52:f2:91:84:7d:
14:7d:9c:75:70:9b:a9:4f:f2:a5:2d:f4:51:0d:65:96:4b:a3:
20:d6:37:99:b2:3a:04:dd:00:43:ac:bf:39:80:d9:99:21:ee:
80:3f:38:2f:6a:89:81:f5:d0:0f:75:ec:f0:d6:2b:82:36:1f:
9c:5c:9e:f4:4d:33:e9:f2:33:a7:35:88:86:46:c9:5f:60:10:
20:19:07:80:f4:8d:b3:ef:f9:31:cc:ea:0c:de:bb:be:9d:11:
24:ed:87:1f:92:de:93:3a:74:ba:17:e7:5b:fb:e4:f9:a9:ea:
7f:6b:6b:3a:66:2b:6e:56:12:ba:bb:c1:d6:38:8a:bf:f2:90:
c2:bd:9d:84
-----BEGIN CERTIFICATE-----
MIIFDzCCA/egAwIBAgISAYLLsMTKL3g6oMPZNvtlHDPEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDliMGMwZDA0MjI1NTY2ZGI5NWU5YWQzYjJlZjYwNTAxNDk3
NWFhYTIwHhcNMjIwODIzMTcxMjE1WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0YzEzZjA2MzY3NmI3MDI4MzlmYjQ0ODBjYWMyMTk5MjcwODJhNjNkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArAv9X/SiETHhtgh6zurS6UPsOgTU
XTRV32ueWTnfUotmCFlUDEDpkfcNIUcZ8qTC4QaIr0XoUnCBelDNtRK0YDOXFnxl
grrKezOPuFJKZXpFkEOjUppOmQK7DV48pVmCNHKh9x85BPVeBr3Kd1W9qrYl0E9g
QrreOqfbXQOD5f983JK1TH3zlcpzghwHpfYbll0Lii0Bww8DMGM1hoUz8yPZ/LB2
cpK5zpSd/oDnkGO7wnJjYn5alGUusNMcTvaw94BgYmKBiPL+XpDSvceaDrX+EPdX
kHBIYe7HTFtoPZ+HutazmWnNDPLPhSSmpMP/QFNPeswtSH/DXetAGLaxQwIDAQAB
o4ICGzCCAhcwHQYDVR0OBBYEFEwT8GNna3AoOftEgMrCGZJwgqY9MB8GA1UdIwQY
MBaAFJsMDQQiVWbblemtOy72BQFJdaqiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbXd3TkJDSlZadHVWNmEwN0x2WUZBVWwxcXFJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMC8wZWM2ZDItZjFkNy00YjBhLWFkMzMt
ZThlZjJmMDk1OThlLzEvVEJQd1kyZHJjQ2c1LTBTQXlzSVprbkNDcGowLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMC8wZWM2ZDItZjFkNy00YjBhLWFkMzMtZThlZjJmMDk1OThl
LzEvbXd3TkJDSlZadHVWNmEwN0x2WUZBVWwxcXFJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQCLYRQAwQA
LYkSAwQBURz+AwQAsGnkMA0GCSqGSIb3DQEBCwUAA4IBAQBfn7XCHXSGglG2QGT6
PXFTCVRpOLhWrj7+GKHiCYdnX5Se8Pa17ySW0oJ37T2ajaDtJP5A3EQ2yhwXeGMi
j20IDuqGV7dY/6yW1/YtYmnbj85mT46/4dLO7fnMxR5Lfn8ixGqDcEjd7iv0dsFv
dAHb8YK3i7Wij/OtUvKRhH0UfZx1cJupT/KlLfRRDWWWS6Mg1jeZsjoE3QBDrL85
gNmZIe6APzgvaomB9dAPdezw1iuCNh+cXJ70TTPp8jOnNYiGRslfYBAgGQeA9I2z
7/kxzOoM3ru+nREk7Ycfkt6TOnS6F+db++T5qep/a2s6ZituVhK6u8HWOIq/8pDC
vZ2E
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:50:00 2024 by rpki-client on console-fra.rpki-client.org