Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/3bfc31-dc32-4541-8460-c927b8c2c7c4/1/FrrwYvbYgJV3cvHmHwSCm__DBv4.roa
File: FrrwYvbYgJV3cvHmHwSCm__DBv4.roa (raw, json)
Hash identifier: F6ADkAIIM+PgAsRBFygjGlq4vsH3Q3ETXVDlnycM0B8=
Subject key identifier: 16:BA:F0:62:F6:D8:80:95:77:72:F1:E6:1F:04:82:9B:FF:C3:06:FE
Certificate issuer: /CN=c398060f1bf22f0999cb071b1b42696dbc43e10c
Certificate serial: 2FBEA219
Authority key identifier: C3:98:06:0F:1B:F2:2F:09:99:CB:07:1B:1B:42:69:6D:BC:43:E1:0C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w5gGDxvyLwmZywcbG0JpbbxD4Qw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/3bfc31-dc32-4541-8460-c927b8c2c7c4/1/FrrwYvbYgJV3cvHmHwSCm__DBv4.roa
Signing time: Sat 01 Jan 2022 10:04:52 +0000
ROA not before: Sat 01 Jan 2022 10:04:52 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 50238
IP address blocks: 212.189.35.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 801022489 (0x2fbea219)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c398060f1bf22f0999cb071b1b42696dbc43e10c
Validity
Not Before: Jan 1 10:04:52 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=16baf062f6d880957772f1e61f04829bffc306fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:ce:39:81:5e:86:f8:03:2a:2c:8a:61:78:89:
6e:4d:63:05:21:a9:13:95:ae:a4:0e:ae:ca:5a:b7:
f7:9f:90:36:4f:ec:2e:eb:92:98:2b:e8:3d:ed:11:
58:13:fc:cc:4f:66:39:7b:2b:d0:1d:30:0f:e3:0d:
dd:f3:11:b8:67:c7:7c:12:23:1a:6c:76:01:14:4e:
ed:d6:72:36:60:01:bd:1a:80:08:76:16:5c:75:4c:
af:8a:fb:fd:57:d3:c3:95:df:13:52:69:f5:c9:e7:
bb:33:26:de:2e:46:f3:e0:26:8a:d4:26:8b:db:6d:
96:be:31:2a:f5:49:dc:2e:44:f2:7d:40:04:0a:64:
1a:2b:de:db:0a:29:2f:5a:e9:d5:7d:04:13:96:0e:
db:3f:5a:2c:b9:b7:2f:a4:46:1e:dc:49:0a:02:1f:
56:1f:a6:1f:44:9b:e0:f6:4b:28:78:03:b9:22:b4:
3d:2e:6e:c9:b5:90:54:e4:42:d1:69:6c:eb:8d:40:
ba:01:4a:24:2e:68:b3:30:38:74:c1:88:5f:75:12:
e0:d3:22:ac:a7:97:c4:bf:51:0c:b6:85:74:e7:4e:
b3:85:f9:cf:02:f6:fa:3f:05:2b:a8:f6:c2:f0:49:
69:fc:5f:7a:5f:83:06:8c:61:d9:c6:46:7e:11:70:
b0:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:BA:F0:62:F6:D8:80:95:77:72:F1:E6:1F:04:82:9B:FF:C3:06:FE
X509v3 Authority Key Identifier:
keyid:C3:98:06:0F:1B:F2:2F:09:99:CB:07:1B:1B:42:69:6D:BC:43:E1:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w5gGDxvyLwmZywcbG0JpbbxD4Qw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/3bfc31-dc32-4541-8460-c927b8c2c7c4/1/FrrwYvbYgJV3cvHmHwSCm__DBv4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/3bfc31-dc32-4541-8460-c927b8c2c7c4/1/w5gGDxvyLwmZywcbG0JpbbxD4Qw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.189.35.0/24
Signature Algorithm: sha256WithRSAEncryption
0e:82:a7:d5:a5:64:3b:18:1f:3a:dd:84:8c:77:e8:1f:97:56:
12:f6:3a:c9:dc:a2:e9:21:9e:88:ee:f6:f2:b9:96:70:15:7c:
3c:2e:a2:33:f5:be:bc:bf:0f:2c:70:c0:b9:02:2f:de:3e:df:
4e:2e:3b:db:ae:96:ec:c2:73:bf:f1:eb:35:97:20:ed:29:19:
65:4c:8b:33:65:96:13:ec:f8:e5:f0:67:3b:4b:80:b6:4d:73:
94:75:88:15:67:bd:3a:d3:49:66:ea:d1:c0:e4:ca:23:e1:24:
af:44:a9:24:7e:17:1a:e1:16:59:6e:08:ce:1e:32:91:53:17:
c7:ee:73:70:98:c9:ad:5f:d4:50:69:c6:e8:34:2c:51:0d:98:
7d:f3:4f:b8:fe:11:51:f9:c3:0d:32:68:36:15:8f:46:c2:fb:
b9:11:48:0b:bb:ad:ff:2f:99:74:29:b3:3d:c8:c8:17:a8:99:
6e:cb:01:6a:99:18:1b:77:45:50:f7:0e:7a:a3:96:1c:0a:90:
d8:c4:47:70:a2:ec:b4:c3:d5:c5:eb:d8:41:4b:e4:c4:0f:f7:
4b:da:96:f3:36:68:30:b1:12:d0:5b:dc:97:7a:f1:03:d9:64:
e7:ab:db:6e:9c:c9:ed:8a:2d:f8:f4:8d:2f:14:6d:6e:db:37:
7b:0f:84:f2
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEL76iGTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhj
Mzk4MDYwZjFiZjIyZjA5OTljYjA3MWIxYjQyNjk2ZGJjNDNlMTBjMB4XDTIyMDEw
MTEwMDQ1MloXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoMTZiYWYwNjJmNmQ4
ODA5NTc3NzJmMWU2MWYwNDgyOWJmZmMzMDZmZTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAJbOOYFehvgDKiyKYXiJbk1jBSGpE5WupA6uylq395+QNk/s
LuuSmCvoPe0RWBP8zE9mOXsr0B0wD+MN3fMRuGfHfBIjGmx2ARRO7dZyNmABvRqA
CHYWXHVMr4r7/VfTw5XfE1Jp9cnnuzMm3i5G8+AmitQmi9ttlr4xKvVJ3C5E8n1A
BApkGive2wopL1rp1X0EE5YO2z9aLLm3L6RGHtxJCgIfVh+mH0Sb4PZLKHgDuSK0
PS5uybWQVORC0Wls641AugFKJC5oszA4dMGIX3US4NMirKeXxL9RDLaFdOdOs4X5
zwL2+j8FK6j2wvBJafxfel+DBoxh2cZGfhFwsFECAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBQWuvBi9tiAlXdy8eYfBIKb/8MG/jAfBgNVHSMEGDAWgBTDmAYPG/IvCZnL
BxsbQmltvEPhDDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L3c1Z0dEeHZ5THdtWnl3Y2JHMEpwYmJ4RDRRdy5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvYjAvM2JmYzMxLWRjMzItNDU0MS04NDYwLWM5MjdiOGMyYzdjNC8x
L0ZycndZdmJZZ0pWM2N2SG1Id1NDbV9fREJ2NC5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYjAv
M2JmYzMxLWRjMzItNDU0MS04NDYwLWM5MjdiOGMyYzdjNC8xL3c1Z0dEeHZ5THdt
Wnl3Y2JHMEpwYmJ4RDRRdy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEANS9IzANBgkqhkiG9w0BAQsFAAOC
AQEADoKn1aVkOxgfOt2EjHfoH5dWEvY6ydyi6SGeiO728rmWcBV8PC6iM/W+vL8P
LHDAuQIv3j7fTi47266W7MJzv/HrNZcg7SkZZUyLM2WWE+z45fBnO0uAtk1zlHWI
FWe9OtNJZurRwOTKI+Ekr0SpJH4XGuEWWW4Izh4ykVMXx+5zcJjJrV/UUGnG6DQs
UQ2YffNPuP4RUfnDDTJoNhWPRsL7uRFIC7ut/y+ZdCmzPcjIF6iZbssBapkYG3dF
UPcOeqOWHAqQ2MRHcKLstMPVxevYQUvkxA/3S9qW8zZoMLES0Fvcl3rxA9lk56vb
bpzJ7Yot+PSNLxRtbts3ew+E8g==
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:38:51 2024 by rpki-client on console-ams.rpki-client.org