Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/7a39b1-1d1c-4919-b19c-3eebe7196972/1/89vgXjlw8zzBXJq1FLR9Z2_jIXE.roa
File: 89vgXjlw8zzBXJq1FLR9Z2_jIXE.roa (raw, json)
Hash identifier: num+0ju5Si96T4xwt3AzjJ8E8ORKNt8zRC8o1ok8YRI=
Subject key identifier: F3:DB:E0:5E:39:70:F3:3C:C1:5C:9A:B5:14:B4:7D:67:6F:E3:21:71
Certificate issuer: /CN=679a75debd65359a45317f203f11a321e14b2f2c
Certificate serial: 0635272C
Authority key identifier: 67:9A:75:DE:BD:65:35:9A:45:31:7F:20:3F:11:A3:21:E1:4B:2F:2C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z5p13r1lNZpFMX8gPxGjIeFLLyw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/7a39b1-1d1c-4919-b19c-3eebe7196972/1/89vgXjlw8zzBXJq1FLR9Z2_jIXE.roa
Signing time: Fri 25 Mar 2022 10:14:46 +0000
ROA not before: Fri 25 Mar 2022 10:14:46 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 25369
IP address blocks: 93.113.31.0/24 maxlen: 24
93.113.175.0/24 maxlen: 24
85.204.70.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 104146732 (0x635272c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=679a75debd65359a45317f203f11a321e14b2f2c
Validity
Not Before: Mar 25 10:14:46 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f3dbe05e3970f33cc15c9ab514b47d676fe32171
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:21:2c:72:ae:e0:79:5b:32:41:62:8b:b8:4c:
aa:76:c5:33:a3:f5:5a:77:1f:57:c5:a3:cc:58:ab:
2d:5d:3b:e0:12:c4:2f:f8:fa:b7:b3:54:ca:ea:17:
f2:35:be:9a:9c:78:0e:c0:1a:6a:cb:21:2d:b7:39:
f5:40:ce:01:c5:4c:76:c1:01:b8:36:a4:a1:01:1e:
64:85:c7:de:f8:20:90:7b:ed:5f:c9:16:26:34:43:
7a:8b:b6:93:e2:0c:4e:14:77:63:df:0a:3f:90:95:
d9:b5:37:84:c1:f5:7c:42:01:df:8f:56:4e:aa:ee:
4f:8e:ba:06:0f:9a:7b:17:f6:4e:4b:94:02:5b:1b:
17:f2:f0:6a:58:2e:91:ec:e6:23:c6:50:5f:61:1e:
41:a3:38:5f:1c:57:de:1e:79:a1:3b:21:eb:b7:3d:
2b:84:35:b9:db:39:9f:4b:8e:d3:5a:84:f6:24:8e:
52:6e:6f:79:0a:3b:36:75:2c:56:f0:8f:0c:ea:f0:
f2:1d:61:fd:fc:b6:f2:5b:0d:85:88:72:4e:a3:b8:
94:57:b6:b6:ca:7f:31:75:49:99:3b:1e:2f:61:74:
d5:1f:2a:00:f4:f6:20:5f:88:b4:3e:4c:42:26:50:
00:98:77:b3:48:d3:46:53:29:01:78:14:19:af:d7:
2c:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:DB:E0:5E:39:70:F3:3C:C1:5C:9A:B5:14:B4:7D:67:6F:E3:21:71
X509v3 Authority Key Identifier:
keyid:67:9A:75:DE:BD:65:35:9A:45:31:7F:20:3F:11:A3:21:E1:4B:2F:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z5p13r1lNZpFMX8gPxGjIeFLLyw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/7a39b1-1d1c-4919-b19c-3eebe7196972/1/89vgXjlw8zzBXJq1FLR9Z2_jIXE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/7a39b1-1d1c-4919-b19c-3eebe7196972/1/Z5p13r1lNZpFMX8gPxGjIeFLLyw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.204.70.0/24
93.113.31.0/24
93.113.175.0/24
Signature Algorithm: sha256WithRSAEncryption
04:86:d3:64:ab:24:4c:b0:22:1a:c3:53:86:99:05:7f:01:3d:
d8:fc:6a:ed:c0:dc:45:e0:7f:b5:a4:e9:c2:a9:98:8c:12:e0:
de:43:93:d3:52:8c:de:a9:33:80:c5:c7:67:a5:c1:ba:b6:5c:
0c:0c:74:50:36:3a:5c:c0:ec:08:78:0f:3b:c8:48:5f:7b:e0:
4b:5c:c8:4e:aa:84:a0:0a:5c:90:b0:39:e7:af:4c:59:10:97:
62:70:e9:ed:32:19:9e:2e:6d:c7:00:9c:3d:0c:47:12:41:de:
2f:50:86:d1:0e:27:1b:f7:55:5e:6d:39:80:f5:c1:ca:f4:04:
a3:d4:01:ef:53:03:a7:3c:f1:b5:51:bd:99:9e:1e:37:15:5b:
28:76:d3:c3:6f:e8:d8:bf:d6:cd:6b:1f:78:ee:a9:7a:0c:d7:
dc:ca:7b:c9:f5:b5:3f:f4:51:8c:20:bd:4c:f9:d6:fb:48:e1:
75:3d:b6:f0:8c:87:63:d6:73:94:31:92:9e:2c:dd:13:e7:a7:
b2:ba:1a:9b:ba:d2:26:a0:fa:9f:ae:a9:0c:48:60:9c:c2:2c:
2b:22:a9:c0:ec:0c:99:7b:bf:94:99:c7:42:a3:a5:74:a0:a1:
21:f5:25:05:c5:18:55:cc:ac:82:c4:09:b0:92:7d:57:9d:96:
d6:40:63:da
-----BEGIN CERTIFICATE-----
MIIE+zCCA+OgAwIBAgIEBjUnLDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg2
NzlhNzVkZWJkNjUzNTlhNDUzMTdmMjAzZjExYTMyMWUxNGIyZjJjMB4XDTIyMDMy
NTEwMTQ0NloXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoZjNkYmUwNWUzOTcw
ZjMzY2MxNWM5YWI1MTRiNDdkNjc2ZmUzMjE3MTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAMEhLHKu4HlbMkFii7hMqnbFM6P1WncfV8WjzFirLV074BLE
L/j6t7NUyuoX8jW+mpx4DsAaasshLbc59UDOAcVMdsEBuDakoQEeZIXH3vggkHvt
X8kWJjRDeou2k+IMThR3Y98KP5CV2bU3hMH1fEIB349WTqruT466Bg+aexf2TkuU
AlsbF/LwalgukezmI8ZQX2EeQaM4XxxX3h55oTsh67c9K4Q1uds5n0uO01qE9iSO
Um5veQo7NnUsVvCPDOrw8h1h/fy28lsNhYhyTqO4lFe2tsp/MXVJmTseL2F01R8q
APT2IF+ItD5MQiZQAJh3s0jTRlMpAXgUGa/XLNECAwEAAaOCAhUwggIRMB0GA1Ud
DgQWBBTz2+BeOXDzPMFcmrUUtH1nb+MhcTAfBgNVHSMEGDAWgBRnmnXevWU1mkUx
fyA/EaMh4UsvLDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L1o1cDEzcjFsTlpwRk1YOGdQeEdqSWVGTEx5dy5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvYjUvN2EzOWIxLTFkMWMtNDkxOS1iMTljLTNlZWJlNzE5Njk3Mi8x
Lzg5dmdYamx3OHp6QlhKcTFGTFI5WjJfaklYRS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYjUv
N2EzOWIxLTFkMWMtNDkxOS1iMTljLTNlZWJlNzE5Njk3Mi8xL1o1cDEzcjFsTlpw
Rk1YOGdQeEdqSWVGTEx5dy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAr
BggrBgEFBQcBBwEB/wQcMBowGAQCAAEwEgMEAFXMRgMEAF1xHwMEAF1xrzANBgkq
hkiG9w0BAQsFAAOCAQEABIbTZKskTLAiGsNThpkFfwE92Pxq7cDcReB/taTpwqmY
jBLg3kOT01KM3qkzgMXHZ6XBurZcDAx0UDY6XMDsCHgPO8hIX3vgS1zITqqEoApc
kLA5569MWRCXYnDp7TIZni5txwCcPQxHEkHeL1CG0Q4nG/dVXm05gPXByvQEo9QB
71MDpzzxtVG9mZ4eNxVbKHbTw2/o2L/WzWsfeO6pegzX3Mp7yfW1P/RRjCC9TPnW
+0jhdT228IyHY9ZzlDGSnizdE+ensroam7rSJqD6n66pDEhgnMIsKyKpwOwMmXu/
lJnHQqOldKChIfUlBcUYVcysgsQJsJJ9V52W1kBj2g==
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:06:30 2023 by rpki-client on console-ams.rpki-client.org