Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/4de598-6b03-4bef-ab14-33894913dcb7/1/rQtGidUMa-Xy5jOutSYpoTtYXBk.roa
File: rQtGidUMa-Xy5jOutSYpoTtYXBk.roa (raw, json)
Hash identifier: UxY5Ixyom6wwL2tSZzeTNcvbSBz3+hvHtAYeVOvuHBk=
Subject key identifier: AD:0B:46:89:D5:0C:6B:E5:F2:E6:33:AE:B5:26:29:A1:3B:58:5C:19
Certificate issuer: /CN=fe779e56238b6f2ea068ede4e20aef00c904132b
Certificate serial: 03903FDF
Authority key identifier: FE:77:9E:56:23:8B:6F:2E:A0:68:ED:E4:E2:0A:EF:00:C9:04:13:2B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_neeViOLby6gaO3k4grvAMkEEys.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/4de598-6b03-4bef-ab14-33894913dcb7/1/rQtGidUMa-Xy5jOutSYpoTtYXBk.roa
Signing time: Sat 01 Jan 2022 11:01:25 +0000
ROA not before: Sat 01 Jan 2022 11:01:25 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 1239
IP address blocks: 176.52.128.0/22 maxlen: 24
176.52.144.0/22 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 59785183 (0x3903fdf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fe779e56238b6f2ea068ede4e20aef00c904132b
Validity
Not Before: Jan 1 11:01:25 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ad0b4689d50c6be5f2e633aeb52629a13b585c19
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:7f:9a:fe:8b:78:8b:22:bf:38:bb:bc:50:ff:
20:df:1c:5a:c5:f3:eb:20:14:c3:3d:67:c7:96:7c:
20:ad:5b:46:1f:97:1b:a6:b8:48:8d:9b:2b:fb:0a:
f8:78:50:14:ad:4d:72:b9:c0:7e:f8:f1:7f:5d:5b:
ae:87:e8:18:50:95:1b:11:75:e2:c6:ae:f9:64:01:
4e:16:ac:24:eb:49:cb:20:2d:5c:c1:af:39:44:53:
3c:f1:aa:da:08:1d:79:28:95:1d:2d:b5:0b:10:e8:
e2:5c:d9:5f:f6:0e:29:38:6f:86:99:f9:a5:3e:6c:
78:ed:b0:1d:2b:1c:06:06:ab:d1:43:dd:c3:0d:1a:
ba:3c:d9:ec:be:49:ee:d7:59:0d:be:aa:ec:fa:3c:
42:1b:f6:0c:3f:e6:50:d1:51:e0:10:72:8a:8e:f6:
c7:07:2e:27:1c:7b:59:44:a7:ae:7b:a4:c4:45:00:
0f:af:9b:f3:1a:b2:4e:19:f7:7d:0c:df:f0:64:e9:
ce:cf:b6:4f:eb:6e:8e:c5:ec:9a:52:40:9a:77:da:
ff:3d:6f:16:e7:76:f5:dd:62:fb:02:f4:29:27:2b:
24:91:31:75:77:6f:02:b0:ac:3f:fc:ac:ad:18:77:
be:6e:fb:a3:1a:6b:70:f7:d1:53:4e:02:87:47:c1:
9a:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:0B:46:89:D5:0C:6B:E5:F2:E6:33:AE:B5:26:29:A1:3B:58:5C:19
X509v3 Authority Key Identifier:
keyid:FE:77:9E:56:23:8B:6F:2E:A0:68:ED:E4:E2:0A:EF:00:C9:04:13:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_neeViOLby6gaO3k4grvAMkEEys.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/4de598-6b03-4bef-ab14-33894913dcb7/1/rQtGidUMa-Xy5jOutSYpoTtYXBk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/4de598-6b03-4bef-ab14-33894913dcb7/1/_neeViOLby6gaO3k4grvAMkEEys.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.52.128.0/22
176.52.144.0/22
Signature Algorithm: sha256WithRSAEncryption
0b:27:eb:12:ba:f1:88:bc:48:5e:d6:7e:bc:50:ae:23:71:33:
8c:97:5b:2b:35:64:12:8b:e2:2f:9a:01:d9:83:5c:0c:26:39:
04:e4:bd:10:c3:33:49:9d:8f:63:01:59:94:66:59:e2:91:08:
af:03:b2:5e:63:09:76:2a:02:7e:c6:21:8b:6a:01:90:b4:7a:
0a:74:72:73:ee:e3:51:9a:0e:f4:1b:70:9a:6d:ca:b9:f0:1c:
08:e5:64:65:08:e5:b7:9b:48:ea:2b:02:5e:a7:24:31:6f:64:
f6:c7:c6:90:2e:18:47:dd:bb:0b:41:fe:fe:44:b0:3f:40:39:
13:fe:e1:fd:51:99:c1:40:0f:15:21:e3:9a:88:e8:a7:ad:38:
26:90:17:fa:17:78:2d:0b:ac:c9:ac:6c:65:29:07:6c:5b:b6:
8a:3b:bb:d3:62:1b:81:23:03:39:8b:a7:ba:82:62:5e:b9:a8:
09:04:1a:7a:5b:be:78:97:c4:2a:9f:1a:1b:62:a6:be:f4:9f:
ea:d5:6c:f5:c1:1a:06:e4:b1:b6:ff:51:c5:bd:9b:23:fa:5a:
a3:7a:a3:30:66:68:35:24:e2:10:d2:3f:14:c0:a8:d9:2a:5d:
81:d8:7e:4d:08:a1:ba:2c:bc:d9:fa:7a:53:db:20:ea:57:92:
a4:b9:d2:f3
-----BEGIN CERTIFICATE-----
MIIE9TCCA92gAwIBAgIEA5A/3zANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhm
ZTc3OWU1NjIzOGI2ZjJlYTA2OGVkZTRlMjBhZWYwMGM5MDQxMzJiMB4XDTIyMDEw
MTExMDEyNVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoYWQwYjQ2ODlkNTBj
NmJlNWYyZTYzM2FlYjUyNjI5YTEzYjU4NWMxOTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAOR/mv6LeIsivzi7vFD/IN8cWsXz6yAUwz1nx5Z8IK1bRh+X
G6a4SI2bK/sK+HhQFK1NcrnAfvjxf11brofoGFCVGxF14sau+WQBThasJOtJyyAt
XMGvOURTPPGq2ggdeSiVHS21CxDo4lzZX/YOKThvhpn5pT5seO2wHSscBgar0UPd
ww0aujzZ7L5J7tdZDb6q7Po8Qhv2DD/mUNFR4BByio72xwcuJxx7WUSnrnukxEUA
D6+b8xqyThn3fQzf8GTpzs+2T+tujsXsmlJAmnfa/z1vFud29d1i+wL0KScrJJEx
dXdvArCsP/ysrRh3vm77oxprcPfRU04Ch0fBmoUCAwEAAaOCAg8wggILMB0GA1Ud
DgQWBBStC0aJ1Qxr5fLmM661JimhO1hcGTAfBgNVHSMEGDAWgBT+d55WI4tvLqBo
7eTiCu8AyQQTKzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L19uZWVWaU9MYnk2Z2FPM2s0Z3J2QU1rRUV5cy5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvYjEvNGRlNTk4LTZiMDMtNGJlZi1hYjE0LTMzODk0OTEzZGNiNy8x
L3JRdEdpZFVNYS1YeTVqT3V0U1lwb1R0WVhCay5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYjEv
NGRlNTk4LTZiMDMtNGJlZi1hYjE0LTMzODk0OTEzZGNiNy8xL19uZWVWaU9MYnk2
Z2FPM2s0Z3J2QU1rRUV5cy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAl
BggrBgEFBQcBBwEB/wQWMBQwEgQCAAEwDAMEArA0gAMEArA0kDANBgkqhkiG9w0B
AQsFAAOCAQEACyfrErrxiLxIXtZ+vFCuI3EzjJdbKzVkEoviL5oB2YNcDCY5BOS9
EMMzSZ2PYwFZlGZZ4pEIrwOyXmMJdioCfsYhi2oBkLR6CnRyc+7jUZoO9Btwmm3K
ufAcCOVkZQjlt5tI6isCXqckMW9k9sfGkC4YR927C0H+/kSwP0A5E/7h/VGZwUAP
FSHjmojop604JpAX+hd4LQusyaxsZSkHbFu2iju702IbgSMDOYunuoJiXrmoCQQa
elu+eJfEKp8aG2KmvvSf6tVs9cEaBuSxtv9Rxb2bI/pao3qjMGZoNSTiENI/FMCo
2Spdgdh+TQihuiy82fp6U9sg6leSpLnS8w==
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:39:05 2024 by rpki-client on console-ams.rpki-client.org