Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/7a39b1-1d1c-4919-b19c-3eebe7196972/1/0JFg0y07uCpm5-3OeoK1N2aZPuY.roa
File: 0JFg0y07uCpm5-3OeoK1N2aZPuY.roa (raw, json)
Hash identifier: 4bOt35c8KW/GHPeWPzcLAea0zRfw/vwyLyFPg3LEjQs=
Subject key identifier: D0:91:60:D3:2D:3B:B8:2A:66:E7:ED:CE:7A:82:B5:37:66:99:3E:E6
Certificate issuer: /CN=679a75debd65359a45317f203f11a321e14b2f2c
Certificate serial: 067A3A7B
Authority key identifier: 67:9A:75:DE:BD:65:35:9A:45:31:7F:20:3F:11:A3:21:E1:4B:2F:2C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z5p13r1lNZpFMX8gPxGjIeFLLyw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/7a39b1-1d1c-4919-b19c-3eebe7196972/1/0JFg0y07uCpm5-3OeoK1N2aZPuY.roa
Signing time: Tue 19 Apr 2022 19:38:58 +0000
ROA not before: Tue 19 Apr 2022 19:38:58 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 25369
IP address blocks: 93.113.31.0/24 maxlen: 24
93.113.175.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 108673659 (0x67a3a7b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=679a75debd65359a45317f203f11a321e14b2f2c
Validity
Not Before: Apr 19 19:38:58 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d09160d32d3bb82a66e7edce7a82b53766993ee6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:69:76:b6:cd:11:0c:c1:d5:f4:f5:e4:52:15:
84:f8:3f:a0:37:54:c9:01:f4:74:ad:13:c6:42:78:
34:81:19:81:ca:43:d2:e4:5f:1e:f2:b8:9a:c5:c0:
8c:fb:e7:05:a6:8b:81:bf:db:2b:cd:76:fc:b0:50:
d5:1b:c0:9c:91:9a:85:15:99:9c:8c:33:e0:7b:50:
d8:62:b2:b8:16:2a:08:44:ec:95:26:2a:af:d7:ad:
8a:be:4e:e8:97:28:d7:c4:9c:20:3e:ae:57:d1:a9:
40:7c:39:70:39:39:88:65:e8:42:93:c6:35:b4:e4:
53:be:3a:9c:2e:51:1e:4d:21:24:3a:7d:87:80:4c:
82:2f:4c:64:d0:1e:69:a4:7d:26:fe:75:0f:b8:07:
d8:63:94:5e:d7:6c:00:de:2b:7e:7e:e6:f9:57:a9:
14:42:48:79:38:d0:9d:81:51:84:e6:e3:da:51:a1:
be:45:aa:93:4f:d8:1e:c5:92:21:96:81:74:a2:aa:
61:d3:73:60:c2:6b:b0:f6:65:4f:49:7c:a9:88:8d:
56:ee:0f:28:7b:46:8e:2c:53:08:d6:b1:80:38:81:
9e:f1:c1:8f:d3:c1:0a:12:9a:d4:92:4d:d5:f0:95:
06:2d:b0:5b:19:c7:4b:ef:38:84:ec:2d:f5:df:60:
df:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:91:60:D3:2D:3B:B8:2A:66:E7:ED:CE:7A:82:B5:37:66:99:3E:E6
X509v3 Authority Key Identifier:
keyid:67:9A:75:DE:BD:65:35:9A:45:31:7F:20:3F:11:A3:21:E1:4B:2F:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z5p13r1lNZpFMX8gPxGjIeFLLyw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/7a39b1-1d1c-4919-b19c-3eebe7196972/1/0JFg0y07uCpm5-3OeoK1N2aZPuY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/7a39b1-1d1c-4919-b19c-3eebe7196972/1/Z5p13r1lNZpFMX8gPxGjIeFLLyw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.113.31.0/24
93.113.175.0/24
Signature Algorithm: sha256WithRSAEncryption
b9:46:a1:25:b7:1e:c5:36:4a:85:6f:75:cc:bb:b6:b5:94:98:
c1:17:8b:05:51:9c:ab:1f:1a:98:0d:b3:db:44:09:90:be:9c:
9a:24:b1:a1:c4:45:12:3c:47:e6:df:fc:45:db:06:47:50:23:
9f:82:31:88:e8:27:a5:70:02:71:e1:1c:73:33:db:3d:c6:80:
48:8a:f9:06:ab:3e:fc:37:f2:f8:8a:6c:4b:76:07:de:7f:d0:
79:03:0a:26:fb:45:24:b8:85:45:a0:87:4a:26:67:d9:6b:ec:
05:16:ba:e2:eb:78:60:72:3f:a6:e2:a3:cc:9d:d2:f6:54:64:
9c:cc:c4:dd:28:e7:71:da:4b:13:b7:e3:6a:1f:35:92:54:8c:
41:80:0d:b6:05:ca:92:a2:ba:74:cf:f0:e5:b8:27:cb:ac:35:
1c:0a:b0:93:2f:19:49:55:57:77:e0:f8:eb:42:ef:0c:c2:81:
b7:f4:b5:93:99:70:63:68:22:8e:86:86:af:cb:7c:70:04:f8:
fb:66:2d:c3:c9:9f:5e:6d:42:a5:58:59:a1:a5:36:ee:08:96:
2a:ac:b4:5d:5f:ce:5e:be:2c:00:b4:98:c2:2a:3d:2e:0c:5c:
4e:bf:21:39:1a:ad:35:92:c6:04:76:18:dc:93:9f:02:7b:27:
73:74:af:25
-----BEGIN CERTIFICATE-----
MIIE9TCCA92gAwIBAgIEBno6ezANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg2
NzlhNzVkZWJkNjUzNTlhNDUzMTdmMjAzZjExYTMyMWUxNGIyZjJjMB4XDTIyMDQx
OTE5Mzg1OFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoZDA5MTYwZDMyZDNi
YjgyYTY2ZTdlZGNlN2E4MmI1Mzc2Njk5M2VlNjCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAJdpdrbNEQzB1fT15FIVhPg/oDdUyQH0dK0TxkJ4NIEZgcpD
0uRfHvK4msXAjPvnBaaLgb/bK812/LBQ1RvAnJGahRWZnIwz4HtQ2GKyuBYqCETs
lSYqr9etir5O6Jco18ScID6uV9GpQHw5cDk5iGXoQpPGNbTkU746nC5RHk0hJDp9
h4BMgi9MZNAeaaR9Jv51D7gH2GOUXtdsAN4rfn7m+VepFEJIeTjQnYFRhObj2lGh
vkWqk0/YHsWSIZaBdKKqYdNzYMJrsPZlT0l8qYiNVu4PKHtGjixTCNaxgDiBnvHB
j9PBChKa1JJN1fCVBi2wWxnHS+84hOwt9d9g36ECAwEAAaOCAg8wggILMB0GA1Ud
DgQWBBTQkWDTLTu4Kmbn7c56grU3Zpk+5jAfBgNVHSMEGDAWgBRnmnXevWU1mkUx
fyA/EaMh4UsvLDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L1o1cDEzcjFsTlpwRk1YOGdQeEdqSWVGTEx5dy5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvYjUvN2EzOWIxLTFkMWMtNDkxOS1iMTljLTNlZWJlNzE5Njk3Mi8x
LzBKRmcweTA3dUNwbTUtM09lb0sxTjJhWlB1WS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYjUv
N2EzOWIxLTFkMWMtNDkxOS1iMTljLTNlZWJlNzE5Njk3Mi8xL1o1cDEzcjFsTlpw
Rk1YOGdQeEdqSWVGTEx5dy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAl
BggrBgEFBQcBBwEB/wQWMBQwEgQCAAEwDAMEAF1xHwMEAF1xrzANBgkqhkiG9w0B
AQsFAAOCAQEAuUahJbcexTZKhW91zLu2tZSYwReLBVGcqx8amA2z20QJkL6cmiSx
ocRFEjxH5t/8RdsGR1Ajn4IxiOgnpXACceEcczPbPcaASIr5Bqs+/Dfy+IpsS3YH
3n/QeQMKJvtFJLiFRaCHSiZn2WvsBRa64ut4YHI/puKjzJ3S9lRknMzE3SjncdpL
E7fjah81klSMQYANtgXKkqK6dM/w5bgny6w1HAqwky8ZSVVXd+D460LvDMKBt/S1
k5lwY2gijoaGr8t8cAT4+2Ytw8mfXm1CpVhZoaU27giWKqy0XV/OXr4sALSYwio9
LgxcTr8hORqtNZLGBHYY3JOfAnsnc3SvJQ==
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:06:30 2023 by rpki-client on console-ams.rpki-client.org