Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/7a39b1-1d1c-4919-b19c-3eebe7196972/1/IkrOHEnsTJtLnuy2HTM0eMkD_3w.roa
File: IkrOHEnsTJtLnuy2HTM0eMkD_3w.roa (raw, json)
Hash identifier: 6pvwwavy73/vFuVb7fDkrZgmp04Gamxih0sdyI8QCf4=
Subject key identifier: 22:4A:CE:1C:49:EC:4C:9B:4B:9E:EC:B6:1D:33:34:78:C9:03:FF:7C
Certificate issuer: /CN=679a75debd65359a45317f203f11a321e14b2f2c
Certificate serial: 0616F5B2
Authority key identifier: 67:9A:75:DE:BD:65:35:9A:45:31:7F:20:3F:11:A3:21:E1:4B:2F:2C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z5p13r1lNZpFMX8gPxGjIeFLLyw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/7a39b1-1d1c-4919-b19c-3eebe7196972/1/IkrOHEnsTJtLnuy2HTM0eMkD_3w.roa
Signing time: Mon 14 Mar 2022 08:33:35 +0000
ROA not before: Mon 14 Mar 2022 08:33:35 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 49999
IP address blocks: 93.114.129.0/24 maxlen: 24
86.106.135.0/24 maxlen: 24
86.104.228.0/24 maxlen: 24
89.32.127.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 102167986 (0x616f5b2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=679a75debd65359a45317f203f11a321e14b2f2c
Validity
Not Before: Mar 14 08:33:35 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=224ace1c49ec4c9b4b9eecb61d333478c903ff7c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:83:1d:01:04:1c:17:74:47:d6:4b:8c:95:25:
5a:65:4d:60:e0:81:de:60:dd:cd:7f:f0:79:8d:1b:
37:ab:7f:ea:ac:ad:62:2b:66:75:05:c0:0c:d0:b7:
c5:52:96:0b:7c:24:86:81:70:39:8e:6b:e1:d5:96:
74:9a:ba:82:27:8e:52:e5:23:ab:79:96:11:10:12:
bb:a3:ac:9c:af:c4:5e:2c:c2:e1:27:d8:88:f2:0e:
23:ca:dd:e5:b7:f9:1b:28:24:e1:73:1c:c9:5a:16:
6f:b1:aa:96:ce:8b:31:7e:65:ac:81:03:37:72:3f:
af:d5:fe:02:06:d9:c1:af:c4:1d:67:30:1c:9b:3c:
a8:84:d8:30:2e:cc:73:39:31:5b:cb:6e:f3:7a:5d:
b6:54:26:e2:0c:0d:05:0a:c8:1c:05:9a:92:7c:42:
d7:07:70:c6:c2:22:78:20:67:19:e5:ad:f0:73:b6:
22:0a:f9:31:fb:fa:fc:3b:74:e6:46:71:5d:57:60:
be:3a:82:20:82:83:f0:a5:58:b4:9e:f7:55:3a:56:
b1:e7:41:b0:32:51:e6:c3:b1:8a:ae:f1:1e:14:98:
c0:38:26:a1:e5:aa:8c:af:25:d4:d0:00:ee:98:89:
dc:9e:63:fa:15:b6:66:7d:30:bf:21:5f:f6:aa:7b:
ae:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:4A:CE:1C:49:EC:4C:9B:4B:9E:EC:B6:1D:33:34:78:C9:03:FF:7C
X509v3 Authority Key Identifier:
keyid:67:9A:75:DE:BD:65:35:9A:45:31:7F:20:3F:11:A3:21:E1:4B:2F:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z5p13r1lNZpFMX8gPxGjIeFLLyw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/7a39b1-1d1c-4919-b19c-3eebe7196972/1/IkrOHEnsTJtLnuy2HTM0eMkD_3w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/7a39b1-1d1c-4919-b19c-3eebe7196972/1/Z5p13r1lNZpFMX8gPxGjIeFLLyw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
86.104.228.0/24
86.106.135.0/24
89.32.127.0/24
93.114.129.0/24
Signature Algorithm: sha256WithRSAEncryption
0c:47:3b:74:3f:3a:6a:14:f4:44:63:b0:ba:2e:78:3d:cd:2b:
d8:99:80:ed:4c:18:ff:9f:79:8c:ab:da:bc:75:bd:f7:10:37:
e4:03:c3:16:42:bd:c3:7e:78:cf:d0:ca:12:0e:48:65:99:01:
8e:b7:1e:92:b0:a2:76:88:2c:3d:0c:01:40:11:66:ae:7f:69:
36:b1:9b:a4:a3:15:a0:7b:ca:9f:1d:54:e7:9e:5c:e8:7d:1c:
ca:94:73:46:97:9b:2a:6c:dc:f4:f8:3a:74:cb:ae:c8:c0:3e:
1a:f9:32:bd:36:9b:b0:91:70:6f:19:50:a6:fe:29:2c:aa:4c:
d6:e8:34:46:c3:40:73:24:c0:59:9f:03:0e:45:8c:f5:9d:60:
44:db:dd:5a:83:73:c7:6c:36:b7:70:51:eb:5f:f6:f3:95:2b:
45:9b:42:6c:95:93:f6:06:27:26:60:68:5b:c6:b6:b7:fa:a7:
2a:57:27:8b:98:99:ed:96:91:1e:70:92:58:f8:63:4d:67:7f:
b7:a0:a6:cb:a4:ec:f5:56:af:11:66:66:57:f5:1b:66:7f:89:
0b:74:7e:a0:2f:1d:44:79:bf:4f:92:ea:31:6d:a6:9b:2d:71:
c2:b9:1b:58:94:41:0e:25:a9:01:58:95:46:bd:ab:61:6c:46:
4d:06:58:f1
-----BEGIN CERTIFICATE-----
MIIFATCCA+mgAwIBAgIEBhb1sjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg2
NzlhNzVkZWJkNjUzNTlhNDUzMTdmMjAzZjExYTMyMWUxNGIyZjJjMB4XDTIyMDMx
NDA4MzMzNVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoMjI0YWNlMWM0OWVj
NGM5YjRiOWVlY2I2MWQzMzM0NzhjOTAzZmY3YzCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAJ6DHQEEHBd0R9ZLjJUlWmVNYOCB3mDdzX/weY0bN6t/6qyt
YitmdQXADNC3xVKWC3wkhoFwOY5r4dWWdJq6gieOUuUjq3mWERASu6OsnK/EXizC
4SfYiPIOI8rd5bf5Gygk4XMcyVoWb7Gqls6LMX5lrIEDN3I/r9X+AgbZwa/EHWcw
HJs8qITYMC7MczkxW8tu83pdtlQm4gwNBQrIHAWaknxC1wdwxsIieCBnGeWt8HO2
Igr5Mfv6/Dt05kZxXVdgvjqCIIKD8KVYtJ73VTpWsedBsDJR5sOxiq7xHhSYwDgm
oeWqjK8l1NAA7piJ3J5j+hW2Zn0wvyFf9qp7rrMCAwEAAaOCAhswggIXMB0GA1Ud
DgQWBBQiSs4cSexMm0ue7LYdMzR4yQP/fDAfBgNVHSMEGDAWgBRnmnXevWU1mkUx
fyA/EaMh4UsvLDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L1o1cDEzcjFsTlpwRk1YOGdQeEdqSWVGTEx5dy5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvYjUvN2EzOWIxLTFkMWMtNDkxOS1iMTljLTNlZWJlNzE5Njk3Mi8x
L0lrck9IRW5zVEp0TG51eTJIVE0wZU1rRF8zdy5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYjUv
N2EzOWIxLTFkMWMtNDkxOS1iMTljLTNlZWJlNzE5Njk3Mi8xL1o1cDEzcjFsTlpw
Rk1YOGdQeEdqSWVGTEx5dy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAx
BggrBgEFBQcBBwEB/wQiMCAwHgQCAAEwGAMEAFZo5AMEAFZqhwMEAFkgfwMEAF1y
gTANBgkqhkiG9w0BAQsFAAOCAQEADEc7dD86ahT0RGOwui54Pc0r2JmA7UwY/595
jKvavHW99xA35APDFkK9w354z9DKEg5IZZkBjrcekrCidogsPQwBQBFmrn9pNrGb
pKMVoHvKnx1U555c6H0cypRzRpebKmzc9Pg6dMuuyMA+GvkyvTabsJFwbxlQpv4p
LKpM1ug0RsNAcyTAWZ8DDkWM9Z1gRNvdWoNzx2w2t3BR61/285UrRZtCbJWT9gYn
JmBoW8a2t/qnKlcni5iZ7ZaRHnCSWPhjTWd/t6Cmy6Ts9VavEWZmV/UbZn+JC3R+
oC8dRHm/T5LqMW2mmy1xwrkbWJRBDiWpAViVRr2rYWxGTQZY8Q==
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:02:36 2023 by rpki-client on console-fra.rpki-client.org