Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/7a39b1-1d1c-4919-b19c-3eebe7196972/1/B1uurw5hEbUi163US0Hoq_B58o0.roa
File: B1uurw5hEbUi163US0Hoq_B58o0.roa (raw, json)
Hash identifier: 7lq/x+3Xg/KhpbWoXXOpK0nDdnNcz/0aovf7QLG+2E8=
Subject key identifier: 07:5B:AE:AF:0E:61:11:B5:22:D7:AD:D4:4B:41:E8:AB:F0:79:F2:8D
Certificate issuer: /CN=679a75debd65359a45317f203f11a321e14b2f2c
Certificate serial: 068013E1
Authority key identifier: 67:9A:75:DE:BD:65:35:9A:45:31:7F:20:3F:11:A3:21:E1:4B:2F:2C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z5p13r1lNZpFMX8gPxGjIeFLLyw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/7a39b1-1d1c-4919-b19c-3eebe7196972/1/B1uurw5hEbUi163US0Hoq_B58o0.roa
Signing time: Thu 21 Apr 2022 01:21:09 +0000
ROA not before: Thu 21 Apr 2022 01:21:09 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 60721
IP address blocks: 89.35.25.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 109056993 (0x68013e1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=679a75debd65359a45317f203f11a321e14b2f2c
Validity
Not Before: Apr 21 01:21:09 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=075baeaf0e6111b522d7add44b41e8abf079f28d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:2c:89:f7:0b:39:55:10:b3:be:66:a9:a0:ff:
ff:17:7a:3f:28:f5:9c:6d:74:59:7c:4e:66:e8:47:
79:ed:6a:c8:24:dc:95:bb:66:fb:41:51:8a:b8:43:
61:9e:c5:ac:9e:d9:65:1c:6a:16:1f:2f:84:97:3c:
88:b9:e7:c2:e9:61:b4:e7:6d:61:1e:73:5f:4d:b5:
a4:73:d2:38:60:93:af:86:9f:e8:f5:a7:27:79:5c:
31:2a:ac:54:c7:0f:f1:9e:62:65:81:31:b8:68:d1:
e5:61:dd:7c:c5:62:e2:70:ff:c4:4a:10:01:98:45:
02:ba:54:73:93:cc:88:5b:31:27:6c:fc:fa:77:4e:
77:04:ec:a9:42:4b:97:7e:05:1d:51:ea:70:84:b0:
e7:66:04:c4:3d:5f:c6:6b:40:ce:ff:79:34:b6:95:
ff:0c:51:5d:84:68:db:fb:3d:2e:10:e3:6c:ee:ba:
73:ac:d8:7e:2d:26:62:1d:c9:98:fb:8a:67:8f:cb:
c9:7f:96:b4:8f:4e:c3:86:63:a7:9f:e8:5c:44:33:
37:d4:a5:b6:a0:9f:b9:0f:5a:fd:c0:92:02:ac:47:
e8:6b:f9:3e:8d:bf:79:0e:d7:2a:77:64:95:95:a8:
0b:74:32:de:83:4a:cd:27:bb:f9:9b:ad:c2:b9:ab:
fa:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:5B:AE:AF:0E:61:11:B5:22:D7:AD:D4:4B:41:E8:AB:F0:79:F2:8D
X509v3 Authority Key Identifier:
keyid:67:9A:75:DE:BD:65:35:9A:45:31:7F:20:3F:11:A3:21:E1:4B:2F:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z5p13r1lNZpFMX8gPxGjIeFLLyw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/7a39b1-1d1c-4919-b19c-3eebe7196972/1/B1uurw5hEbUi163US0Hoq_B58o0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/7a39b1-1d1c-4919-b19c-3eebe7196972/1/Z5p13r1lNZpFMX8gPxGjIeFLLyw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.35.25.0/24
Signature Algorithm: sha256WithRSAEncryption
17:28:f3:79:77:83:43:9b:17:3c:4d:22:fb:bd:05:62:dc:03:
86:96:a1:f5:f7:12:36:b8:06:f4:1d:39:54:4b:f8:aa:e1:ea:
f5:0e:97:c3:d4:87:24:a9:19:61:e7:99:14:aa:f4:6e:8d:f9:
4b:3f:d0:8c:4f:ed:2d:52:5f:3f:ba:9f:aa:c4:77:db:ad:95:
9f:d3:4f:bb:af:fc:7f:ff:83:dc:a0:65:6e:67:93:86:b6:4e:
f7:64:8c:0d:1c:73:e3:2f:66:ee:0d:46:c7:11:86:3b:c7:64:
7f:d2:c6:79:49:ea:1f:c6:3e:25:9c:a3:d1:24:fb:3c:37:8f:
11:b3:1f:1e:0f:46:20:12:16:e3:7c:be:ed:6b:9e:d3:08:6d:
a4:d2:f9:20:04:e4:29:02:a7:7c:c5:ff:52:48:bb:a5:1e:e1:
41:ad:95:5d:3a:c4:b1:0a:5b:07:92:b9:de:7b:78:dd:94:14:
6e:ef:01:94:c5:cb:fc:cd:7e:0c:fd:6c:9b:c1:ae:34:7d:03:
81:e0:26:1f:c2:fa:38:f2:a7:cf:f1:ba:12:26:a0:85:b0:2f:
3b:f5:e5:b9:8f:32:47:27:df:81:7f:86:20:78:01:15:58:f4:
ec:de:03:e7:99:12:71:5d:a4:d0:87:b2:6c:04:93:15:14:00:
a6:2f:a9:db
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEBoAT4TANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg2
NzlhNzVkZWJkNjUzNTlhNDUzMTdmMjAzZjExYTMyMWUxNGIyZjJjMB4XDTIyMDQy
MTAxMjEwOVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoMDc1YmFlYWYwZTYx
MTFiNTIyZDdhZGQ0NGI0MWU4YWJmMDc5ZjI4ZDCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBANIsifcLOVUQs75mqaD//xd6Pyj1nG10WXxOZuhHee1qyCTc
lbtm+0FRirhDYZ7FrJ7ZZRxqFh8vhJc8iLnnwulhtOdtYR5zX021pHPSOGCTr4af
6PWnJ3lcMSqsVMcP8Z5iZYExuGjR5WHdfMVi4nD/xEoQAZhFArpUc5PMiFsxJ2z8
+ndOdwTsqUJLl34FHVHqcISw52YExD1fxmtAzv95NLaV/wxRXYRo2/s9LhDjbO66
c6zYfi0mYh3JmPuKZ4/LyX+WtI9Ow4Zjp5/oXEQzN9SltqCfuQ9a/cCSAqxH6Gv5
Po2/eQ7XKndklZWoC3Qy3oNKzSe7+Zutwrmr+oUCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBQHW66vDmERtSLXrdRLQeir8HnyjTAfBgNVHSMEGDAWgBRnmnXevWU1mkUx
fyA/EaMh4UsvLDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L1o1cDEzcjFsTlpwRk1YOGdQeEdqSWVGTEx5dy5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvYjUvN2EzOWIxLTFkMWMtNDkxOS1iMTljLTNlZWJlNzE5Njk3Mi8x
L0IxdXVydzVoRWJVaTE2M1VTMEhvcV9CNThvMC5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYjUv
N2EzOWIxLTFkMWMtNDkxOS1iMTljLTNlZWJlNzE5Njk3Mi8xL1o1cDEzcjFsTlpw
Rk1YOGdQeEdqSWVGTEx5dy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAFkjGTANBgkqhkiG9w0BAQsFAAOC
AQEAFyjzeXeDQ5sXPE0i+70FYtwDhpah9fcSNrgG9B05VEv4quHq9Q6Xw9SHJKkZ
YeeZFKr0bo35Sz/QjE/tLVJfP7qfqsR3262Vn9NPu6/8f/+D3KBlbmeThrZO92SM
DRxz4y9m7g1GxxGGO8dkf9LGeUnqH8Y+JZyj0ST7PDePEbMfHg9GIBIW43y+7Wue
0whtpNL5IATkKQKnfMX/Uki7pR7hQa2VXTrEsQpbB5K53nt43ZQUbu8BlMXL/M1+
DP1sm8GuNH0DgeAmH8L6OPKnz/G6EiaghbAvO/XluY8yRyffgX+GIHgBFVj07N4D
55kScV2k0IeybASTFRQApi+p2w==
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:06:30 2023 by rpki-client on console-ams.rpki-client.org