Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/7a39b1-1d1c-4919-b19c-3eebe7196972/1/5upOznReZSqBPi7LWl9EqSvNx-M.roa
File: 5upOznReZSqBPi7LWl9EqSvNx-M.roa (raw, json)
Hash identifier: MFOrqJDUp/iY+xL8WXrtXFAKXnRhmLyXNh6b/cVWqXk=
Subject key identifier: E6:EA:4E:CE:74:5E:65:2A:81:3E:2E:CB:5A:5F:44:A9:2B:CD:C7:E3
Certificate issuer: /CN=679a75debd65359a45317f203f11a321e14b2f2c
Certificate serial: 059BCCCE
Authority key identifier: 67:9A:75:DE:BD:65:35:9A:45:31:7F:20:3F:11:A3:21:E1:4B:2F:2C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z5p13r1lNZpFMX8gPxGjIeFLLyw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/7a39b1-1d1c-4919-b19c-3eebe7196972/1/5upOznReZSqBPi7LWl9EqSvNx-M.roa
Signing time: Thu 27 Jan 2022 20:01:57 +0000
ROA not before: Thu 27 Jan 2022 20:01:57 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 25369
IP address blocks: 89.40.66.0/24 maxlen: 24
93.113.31.0/24 maxlen: 24
93.113.175.0/24 maxlen: 24
85.204.70.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 94096590 (0x59bccce)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=679a75debd65359a45317f203f11a321e14b2f2c
Validity
Not Before: Jan 27 20:01:57 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e6ea4ece745e652a813e2ecb5a5f44a92bcdc7e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:86:09:d6:30:2a:39:fc:0d:ac:aa:11:78:98:
67:ea:6a:8e:b1:93:dc:45:5e:6b:8c:b4:6f:2d:d6:
26:29:a0:b1:f3:60:ec:a0:4d:23:e5:44:1f:66:31:
3c:46:8c:51:bd:2e:26:b3:fc:fd:53:41:fa:d0:a5:
ba:66:d9:f4:36:71:ab:ea:f5:0b:cc:11:01:ba:dc:
e0:b7:73:6f:26:94:81:c9:6f:b4:8a:cf:15:b4:bb:
ce:c5:af:4d:fd:53:f6:3f:98:3d:5f:80:d3:ab:49:
04:60:a9:e3:bb:d3:e8:31:02:cc:e8:ae:07:06:7b:
a7:05:e5:57:74:73:80:75:d8:0f:57:c9:5d:48:e0:
70:3b:f9:ed:e7:59:74:1b:49:ac:0e:3d:56:38:6e:
62:2f:41:98:b5:48:19:05:3d:73:f4:a0:22:58:95:
4d:3f:5a:f2:ea:f4:23:a7:03:3b:dd:73:e3:c7:f9:
0b:3c:a4:05:36:b0:84:2c:09:a9:7a:ac:91:40:d1:
2f:5e:de:74:76:d6:61:4f:fb:7d:bb:20:0d:27:dc:
32:83:f3:8b:f4:ce:5a:55:e7:cc:c1:c0:38:33:9e:
47:5e:0c:bc:b7:b7:78:4a:63:53:42:92:5d:b1:20:
74:45:a5:b4:c9:af:7d:58:4d:09:ef:1b:44:2e:ab:
cb:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:EA:4E:CE:74:5E:65:2A:81:3E:2E:CB:5A:5F:44:A9:2B:CD:C7:E3
X509v3 Authority Key Identifier:
keyid:67:9A:75:DE:BD:65:35:9A:45:31:7F:20:3F:11:A3:21:E1:4B:2F:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z5p13r1lNZpFMX8gPxGjIeFLLyw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/7a39b1-1d1c-4919-b19c-3eebe7196972/1/5upOznReZSqBPi7LWl9EqSvNx-M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/7a39b1-1d1c-4919-b19c-3eebe7196972/1/Z5p13r1lNZpFMX8gPxGjIeFLLyw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.204.70.0/24
89.40.66.0/24
93.113.31.0/24
93.113.175.0/24
Signature Algorithm: sha256WithRSAEncryption
48:cf:b3:63:2c:cf:69:3a:fd:73:e3:c6:1d:b5:04:c4:e9:f5:
c0:8e:2a:e5:e7:8a:82:d2:a4:a8:a8:07:81:a2:d0:d9:97:08:
99:16:6f:b6:74:ee:f6:7a:c7:72:e4:ca:07:e7:7d:05:67:10:
01:f8:f0:db:0d:86:89:78:90:ca:a6:98:0c:50:1d:00:64:cb:
cd:48:94:6a:f8:b5:af:8c:62:f1:b4:67:2a:d5:10:37:a3:66:
fc:34:cc:81:13:e7:73:e8:2e:bf:3b:31:ee:08:05:fd:21:57:
25:92:8c:c4:f5:94:e4:da:d1:fe:6d:1c:66:16:e7:6f:ac:7a:
b1:58:02:60:67:2f:70:f5:b0:f8:ae:8f:36:cd:fb:38:9c:30:
2d:59:70:7e:02:63:fe:85:35:9f:d7:0a:19:5f:b9:63:fc:02:
df:96:3a:49:be:42:3b:28:c3:1a:3f:b1:fe:a3:32:22:d9:6d:
cf:a4:87:f2:af:21:32:12:ee:b0:21:12:db:26:f0:f7:61:37:
a2:6f:83:5c:f6:35:73:ce:53:1d:76:a1:b2:55:9b:56:6e:d2:
da:95:f4:0c:de:00:31:a5:1d:1b:9e:a9:1e:3c:70:93:46:64:
d6:e3:36:37:1e:7b:3b:64:ea:9e:77:5a:55:02:7a:e2:db:b8:
4a:84:c0:98
-----BEGIN CERTIFICATE-----
MIIFATCCA+mgAwIBAgIEBZvMzjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg2
NzlhNzVkZWJkNjUzNTlhNDUzMTdmMjAzZjExYTMyMWUxNGIyZjJjMB4XDTIyMDEy
NzIwMDE1N1oXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoZTZlYTRlY2U3NDVl
NjUyYTgxM2UyZWNiNWE1ZjQ0YTkyYmNkYzdlMzCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBALKGCdYwKjn8DayqEXiYZ+pqjrGT3EVea4y0by3WJimgsfNg
7KBNI+VEH2YxPEaMUb0uJrP8/VNB+tClumbZ9DZxq+r1C8wRAbrc4LdzbyaUgclv
tIrPFbS7zsWvTf1T9j+YPV+A06tJBGCp47vT6DECzOiuBwZ7pwXlV3RzgHXYD1fJ
XUjgcDv57edZdBtJrA49VjhuYi9BmLVIGQU9c/SgIliVTT9a8ur0I6cDO91z48f5
CzykBTawhCwJqXqskUDRL17edHbWYU/7fbsgDSfcMoPzi/TOWlXnzMHAODOeR14M
vLe3eEpjU0KSXbEgdEWltMmvfVhNCe8bRC6ry7kCAwEAAaOCAhswggIXMB0GA1Ud
DgQWBBTm6k7OdF5lKoE+LstaX0SpK83H4zAfBgNVHSMEGDAWgBRnmnXevWU1mkUx
fyA/EaMh4UsvLDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L1o1cDEzcjFsTlpwRk1YOGdQeEdqSWVGTEx5dy5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvYjUvN2EzOWIxLTFkMWMtNDkxOS1iMTljLTNlZWJlNzE5Njk3Mi8x
LzV1cE96blJlWlNxQlBpN0xXbDlFcVN2TngtTS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYjUv
N2EzOWIxLTFkMWMtNDkxOS1iMTljLTNlZWJlNzE5Njk3Mi8xL1o1cDEzcjFsTlpw
Rk1YOGdQeEdqSWVGTEx5dy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAx
BggrBgEFBQcBBwEB/wQiMCAwHgQCAAEwGAMEAFXMRgMEAFkoQgMEAF1xHwMEAF1x
rzANBgkqhkiG9w0BAQsFAAOCAQEASM+zYyzPaTr9c+PGHbUExOn1wI4q5eeKgtKk
qKgHgaLQ2ZcImRZvtnTu9nrHcuTKB+d9BWcQAfjw2w2GiXiQyqaYDFAdAGTLzUiU
avi1r4xi8bRnKtUQN6Nm/DTMgRPnc+guvzsx7ggF/SFXJZKMxPWU5NrR/m0cZhbn
b6x6sVgCYGcvcPWw+K6PNs37OJwwLVlwfgJj/oU1n9cKGV+5Y/wC35Y6Sb5COyjD
Gj+x/qMyItltz6SH8q8hMhLusCES2ybw92E3om+DXPY1c85THXahslWbVm7S2pX0
DN4AMaUdG56pHjxwk0Zk1uM2Nx57O2TqnndaVQJ64tu4SoTAmA==
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:06:30 2023 by rpki-client on console-ams.rpki-client.org