Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/4de598-6b03-4bef-ab14-33894913dcb7/1/7AS8Aqyhx9UF6VJpZcADq1oWXs0.roa
File: 7AS8Aqyhx9UF6VJpZcADq1oWXs0.roa (raw, json)
Hash identifier: eLwR3jsMfNzIBa6zxQj++f8yPchurh/8KFJOt5DZj80=
Subject key identifier: EC:04:BC:02:AC:A1:C7:D5:05:E9:52:69:65:C0:03:AB:5A:16:5E:CD
Certificate issuer: /CN=fe779e56238b6f2ea068ede4e20aef00c904132b
Certificate serial: 0183450EB929B50ABE71770B30A2AE0D87D8
Authority key identifier: FE:77:9E:56:23:8B:6F:2E:A0:68:ED:E4:E2:0A:EF:00:C9:04:13:2B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_neeViOLby6gaO3k4grvAMkEEys.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/4de598-6b03-4bef-ab14-33894913dcb7/1/7AS8Aqyhx9UF6VJpZcADq1oWXs0.roa
Signing time: Fri 16 Sep 2022 06:48:56 +0000
ROA not before: Fri 16 Sep 2022 06:48:56 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 0
IP address blocks: 92.53.176.0/22 maxlen: 22
176.52.128.0/22 maxlen: 24
176.52.140.0/22 maxlen: 22
176.52.152.0/22 maxlen: 22
92.53.160.0/22 maxlen: 24
92.53.164.0/22 maxlen: 24
92.53.172.0/22 maxlen: 22
92.53.168.0/22 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:45:0e:b9:29:b5:0a:be:71:77:0b:30:a2:ae:0d:87:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fe779e56238b6f2ea068ede4e20aef00c904132b
Validity
Not Before: Sep 16 06:48:56 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ec04bc02aca1c7d505e9526965c003ab5a165ecd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:12:d2:8a:d6:37:3f:d8:aa:54:f8:7e:be:44:
d8:2e:d7:d3:ae:69:bc:57:67:0c:f0:ec:40:c0:ad:
2a:07:51:af:a5:e4:89:c6:ab:a7:ed:46:0f:07:37:
d5:3f:3e:93:9b:7d:8f:55:5e:d2:44:3e:0a:5d:27:
22:95:13:2e:2a:46:bf:0e:36:d4:f6:21:ba:55:e9:
03:5f:78:6b:73:09:39:a1:4c:a6:38:ae:ab:55:21:
7d:84:b2:d2:14:2c:ee:53:2e:c0:80:7b:6a:84:fe:
e6:68:21:ad:ed:a3:ac:3c:1b:97:30:77:4c:66:0b:
9f:12:d5:7a:1c:f2:bc:a6:09:db:35:86:64:cf:34:
f5:0c:36:39:ca:27:6e:76:bf:ff:5c:23:76:cf:f0:
28:04:ef:87:6e:68:3b:cc:b7:8b:fd:3e:ff:07:e8:
b2:0b:9f:76:79:d5:34:05:8c:3b:bd:bf:02:71:7a:
20:0f:a2:fa:63:ba:02:a5:19:5f:75:48:e6:d4:bf:
ac:7b:3e:c9:71:c7:20:5b:14:03:01:af:2f:5c:ed:
78:d5:d2:99:47:2f:c7:76:63:9c:cf:9e:01:bc:91:
ac:d5:8b:70:32:09:4c:df:b0:56:eb:98:da:11:2d:
bd:b5:8f:fd:75:95:8c:c1:a5:71:50:2e:66:b1:14:
5a:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:04:BC:02:AC:A1:C7:D5:05:E9:52:69:65:C0:03:AB:5A:16:5E:CD
X509v3 Authority Key Identifier:
keyid:FE:77:9E:56:23:8B:6F:2E:A0:68:ED:E4:E2:0A:EF:00:C9:04:13:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_neeViOLby6gaO3k4grvAMkEEys.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/4de598-6b03-4bef-ab14-33894913dcb7/1/7AS8Aqyhx9UF6VJpZcADq1oWXs0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/4de598-6b03-4bef-ab14-33894913dcb7/1/_neeViOLby6gaO3k4grvAMkEEys.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.53.160.0-92.53.179.255
176.52.128.0/22
176.52.140.0/22
176.52.152.0/22
Signature Algorithm: sha256WithRSAEncryption
71:39:e6:63:5c:b1:a6:f1:35:33:d8:bf:5b:e8:1b:d8:16:0a:
f5:e9:b6:5c:11:98:74:8a:8a:55:41:0c:20:59:86:4a:d1:12:
df:f1:45:26:5a:bc:21:c6:5e:3b:ad:28:16:4b:3a:02:56:ac:
ab:31:bb:6e:26:ba:35:49:86:01:8b:1e:43:61:a3:88:c7:f0:
0b:ed:bc:3e:bc:53:5c:cb:60:33:84:55:9d:d1:1d:4a:31:25:
d8:3c:ae:a8:25:e4:ea:71:71:07:0c:13:4a:bd:48:d1:4a:a3:
35:83:2d:61:56:be:1d:fd:4e:78:5e:ff:ad:7e:66:5e:55:03:
19:66:06:d7:01:e5:c4:49:25:d5:13:05:bb:3b:89:65:36:18:
6d:7b:79:59:51:89:56:41:49:0b:75:31:eb:ea:88:1d:1a:74:
c4:5f:bd:d5:2e:09:d4:f1:06:ec:d5:7b:c9:e5:1c:ce:db:9d:
00:bb:e8:a1:ff:72:53:63:fd:d3:14:2c:1e:9c:83:97:54:2c:
41:d2:6d:28:e3:43:fa:cb:e7:7f:1b:d2:b9:14:e3:c3:4a:a1:
18:d5:01:12:40:2d:ec:b4:7f:5f:97:8c:18:bc:f7:65:68:6d:
7c:1d:18:c4:21:7a:1d:67:d7:12:c8:da:bc:6e:72:fa:22:ba:
b1:81:ff:23
-----BEGIN CERTIFICATE-----
MIIFFzCCA/+gAwIBAgISAYNFDrkptQq+cXcLMKKuDYfYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZlNzc5ZTU2MjM4YjZmMmVhMDY4ZWRlNGUyMGFlZjAwYzkw
NDEzMmIwHhcNMjIwOTE2MDY0ODU2WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlYzA0YmMwMmFjYTFjN2Q1MDVlOTUyNjk2NWMwMDNhYjVhMTY1ZWNkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkBLSitY3P9iqVPh+vkTYLtfTrmm8
V2cM8OxAwK0qB1GvpeSJxqun7UYPBzfVPz6Tm32PVV7SRD4KXScilRMuKka/DjbU
9iG6VekDX3hrcwk5oUymOK6rVSF9hLLSFCzuUy7AgHtqhP7maCGt7aOsPBuXMHdM
ZgufEtV6HPK8pgnbNYZkzzT1DDY5yidudr//XCN2z/AoBO+Hbmg7zLeL/T7/B+iy
C592edU0BYw7vb8CcXogD6L6Y7oCpRlfdUjm1L+sez7JcccgWxQDAa8vXO141dKZ
Ry/HdmOcz54BvJGs1YtwMglM37BW65jaES29tY/9dZWMwaVxUC5msRRa8wIDAQAB
o4ICIzCCAh8wHQYDVR0OBBYEFOwEvAKsocfVBelSaWXAA6taFl7NMB8GA1UdIwQY
MBaAFP53nlYji28uoGjt5OIK7wDJBBMrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX25lZVZpT0xieTZnYU8zazRncnZBTWtFRXlzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMS80ZGU1OTgtNmIwMy00YmVmLWFiMTQt
MzM4OTQ5MTNkY2I3LzEvN0FTOEFxeWh4OVVGNlZKcFpjQURxMW9XWHMwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMS80ZGU1OTgtNmIwMy00YmVmLWFiMTQtMzM4OTQ5MTNkY2I3
LzEvX25lZVZpT0xieTZnYU8zazRncnZBTWtFRXlzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDkGCCsGAQUFBwEHAQH/BCowKDAmBAIAATAgMAwDBAVcNaAD
BAJcNbADBAKwNIADBAKwNIwDBAKwNJgwDQYJKoZIhvcNAQELBQADggEBAHE55mNc
sabxNTPYv1voG9gWCvXptlwRmHSKilVBDCBZhkrREt/xRSZavCHGXjutKBZLOgJW
rKsxu24mujVJhgGLHkNho4jH8AvtvD68U1zLYDOEVZ3RHUoxJdg8rqgl5OpxcQcM
E0q9SNFKozWDLWFWvh39Tnhe/61+Zl5VAxlmBtcB5cRJJdUTBbs7iWU2GG17eVlR
iVZBSQt1MevqiB0adMRfvdUuCdTxBuzVe8nlHM7bnQC76KH/clNj/dMULB6cg5dU
LEHSbSjjQ/rL538b0rkU48NKoRjVARJALey0f1+XjBi892VobXwdGMQheh1n1xLI
2rxucvoiurGB/yM=
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:39:04 2024 by rpki-client on console-ams.rpki-client.org