Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/9170e3-e9b3-4d6d-8787-e46ea89bf849/1/iTrfkNinlLdW8R8uJEUfhf98Iho.roa
File: iTrfkNinlLdW8R8uJEUfhf98Iho.roa (raw, json)
Hash identifier: x7t6ODeioeEVHWS5xfaeXBYH4ruQLH1/7cCSbNgSPks=
Subject key identifier: 89:3A:DF:90:D8:A7:94:B7:56:F1:1F:2E:24:45:1F:85:FF:7C:22:1A
Certificate issuer: /CN=59a06c187953cfc8133b2beee5f01a15e45da078
Certificate serial: 01856CCB103CBE207FF5F563E8DA11469EA8
Authority key identifier: 59:A0:6C:18:79:53:CF:C8:13:3B:2B:EE:E5:F0:1A:15:E4:5D:A0:78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WaBsGHlTz8gTOyvu5fAaFeRdoHg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/9170e3-e9b3-4d6d-8787-e46ea89bf849/1/iTrfkNinlLdW8R8uJEUfhf98Iho.roa
Signing time: Sun 01 Jan 2023 10:05:25 +0000
ROA not before: Sun 01 Jan 2023 10:05:25 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 16509
IP address blocks: 91.233.120.0/24 maxlen: 24
194.104.235.0/24 maxlen: 24
2a11:6740::/29 maxlen: 48
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:cb:10:3c:be:20:7f:f5:f5:63:e8:da:11:46:9e:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=59a06c187953cfc8133b2beee5f01a15e45da078
Validity
Not Before: Jan 1 10:05:25 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=893adf90d8a794b756f11f2e24451f85ff7c221a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:b1:1e:1a:8b:8f:ee:38:7b:03:de:77:f9:75:
dd:e8:14:95:53:90:bb:24:07:3c:c0:87:cc:87:88:
5f:53:5f:37:17:d7:36:ae:89:bf:64:c3:74:cd:a5:
0a:fb:97:f7:90:64:de:3b:a5:c4:21:5e:b6:e1:15:
33:26:cb:60:f6:47:4e:55:83:9c:4c:82:e5:3e:57:
40:c7:dc:98:71:7c:ea:de:0d:bf:a4:11:7a:50:78:
49:d4:3d:68:37:a5:aa:c5:cc:65:a6:2a:3b:7b:05:
ed:e8:1e:ab:4f:7c:e7:10:ac:19:3b:37:12:7c:28:
b9:b2:a0:97:18:de:db:75:54:fb:fa:31:ba:7a:e1:
31:f8:ef:ec:d8:fd:39:69:43:b6:da:84:e9:d7:d9:
cc:76:bf:44:03:13:e5:ae:63:5a:33:fc:7b:23:41:
6b:a4:31:7b:bf:2e:84:a7:87:6a:52:77:2d:90:ea:
68:8a:44:03:35:8f:42:d3:0f:61:19:fe:74:32:bc:
6e:ae:63:bf:be:b9:3c:7b:7c:66:b4:0a:dd:6c:ed:
fb:20:a0:46:4a:a9:f5:5c:25:d6:18:43:a6:32:6b:
a6:4a:99:af:cc:84:5b:41:bc:e7:67:17:b0:7c:a0:
2f:43:9c:1b:47:d5:45:af:4b:9e:88:93:4d:60:04:
a2:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:3A:DF:90:D8:A7:94:B7:56:F1:1F:2E:24:45:1F:85:FF:7C:22:1A
X509v3 Authority Key Identifier:
keyid:59:A0:6C:18:79:53:CF:C8:13:3B:2B:EE:E5:F0:1A:15:E4:5D:A0:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WaBsGHlTz8gTOyvu5fAaFeRdoHg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/9170e3-e9b3-4d6d-8787-e46ea89bf849/1/iTrfkNinlLdW8R8uJEUfhf98Iho.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/9170e3-e9b3-4d6d-8787-e46ea89bf849/1/WaBsGHlTz8gTOyvu5fAaFeRdoHg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.233.120.0/24
194.104.235.0/24
IPv6:
2a11:6740::/29
Signature Algorithm: sha256WithRSAEncryption
52:32:eb:92:e9:3a:20:27:32:e4:c8:44:ff:92:d4:dc:45:45:
4e:ba:72:12:95:e0:b8:86:c2:b1:f0:84:7a:51:0f:3a:55:f6:
c0:d2:76:a1:4c:f1:a0:c9:94:2a:fc:e4:78:83:a3:f4:f4:6e:
c9:59:b2:96:19:55:27:80:60:bb:d4:f7:27:2d:fb:e3:28:39:
41:21:c6:86:e8:22:8e:31:cb:29:f7:37:90:59:66:64:69:6a:
42:d0:f2:c9:7e:49:22:bb:c1:6a:a4:6f:f8:73:1f:92:fb:7b:
8b:05:13:b8:b8:57:d9:7c:42:d1:06:a5:db:c4:a6:b1:dd:bd:
1a:71:02:ed:25:13:96:f0:a8:1b:d0:67:49:85:90:49:b0:bc:
73:2f:94:3e:3a:f6:2f:7d:b5:4b:be:d4:e6:c0:86:a0:31:29:
1c:cd:8f:91:4d:5a:78:db:41:fd:2f:d5:1e:a8:23:90:32:60:
c7:21:8c:73:ca:d6:be:23:56:f4:c7:b0:85:2b:c8:a8:04:04:
33:0c:b2:4a:61:b2:14:d8:6f:70:03:fb:48:c1:1b:df:58:70:
fe:45:39:a6:95:11:5c:13:ca:00:11:8e:39:93:0a:00:44:79:
55:e2:8a:95:6c:dd:19:37:a4:b8:f0:df:16:41:42:3a:eb:9c:
c0:01:6f:9e
-----BEGIN CERTIFICATE-----
MIIFEjCCA/qgAwIBAgISAYVsyxA8viB/9fVj6NoRRp6oMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU5YTA2YzE4Nzk1M2NmYzgxMzNiMmJlZWU1ZjAxYTE1ZTQ1
ZGEwNzgwHhcNMjMwMTAxMTAwNTI1WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4OTNhZGY5MGQ4YTc5NGI3NTZmMTFmMmUyNDQ1MWY4NWZmN2MyMjFhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt7EeGouP7jh7A953+XXd6BSVU5C7
JAc8wIfMh4hfU183F9c2rom/ZMN0zaUK+5f3kGTeO6XEIV624RUzJstg9kdOVYOc
TILlPldAx9yYcXzq3g2/pBF6UHhJ1D1oN6Wqxcxlpio7ewXt6B6rT3znEKwZOzcS
fCi5sqCXGN7bdVT7+jG6euEx+O/s2P05aUO22oTp19nMdr9EAxPlrmNaM/x7I0Fr
pDF7vy6Ep4dqUnctkOpoikQDNY9C0w9hGf50MrxurmO/vrk8e3xmtArdbO37IKBG
Sqn1XCXWGEOmMmumSpmvzIRbQbznZxewfKAvQ5wbR9VFr0ueiJNNYASiKQIDAQAB
o4ICHjCCAhowHQYDVR0OBBYEFIk635DYp5S3VvEfLiRFH4X/fCIaMB8GA1UdIwQY
MBaAFFmgbBh5U8/IEzsr7uXwGhXkXaB4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV2FCc0dIbFR6OGdUT3l2dTVmQWFGZVJkb0hnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMi85MTcwZTMtZTliMy00ZDZkLTg3ODct
ZTQ2ZWE4OWJmODQ5LzEvaVRyZmtOaW5sTGRXOFI4dUpFVWZoZjk4SWhvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMi85MTcwZTMtZTliMy00ZDZkLTg3ODctZTQ2ZWE4OWJmODQ5
LzEvV2FCc0dIbFR6OGdUT3l2dTVmQWFGZVJkb0hnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQAW+l4AwQA
wmjrMA0EAgACMAcDBQMqEWdAMA0GCSqGSIb3DQEBCwUAA4IBAQBSMuuS6TogJzLk
yET/ktTcRUVOunISleC4hsKx8IR6UQ86VfbA0nahTPGgyZQq/OR4g6P09G7JWbKW
GVUngGC71PcnLfvjKDlBIcaG6CKOMcsp9zeQWWZkaWpC0PLJfkkiu8FqpG/4cx+S
+3uLBRO4uFfZfELRBqXbxKax3b0acQLtJROW8Kgb0GdJhZBJsLxzL5Q+OvYvfbVL
vtTmwIagMSkczY+RTVp420H9L9UeqCOQMmDHIYxzyta+I1b0x7CFK8ioBAQzDLJK
YbIU2G9wA/tIwRvfWHD+RTmmlRFcE8oAEY45kwoARHlV4oqVbN0ZN6S48N8WQUI6
65zAAW+e
-----END CERTIFICATE-----
Generated at Mon Feb 17 08:00:08 2025 by rpki-client