Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/7a39b1-1d1c-4919-b19c-3eebe7196972/1/dCGtnT-vVwGs4qpz1r7zgWEYF28.roa
File: dCGtnT-vVwGs4qpz1r7zgWEYF28.roa (raw, json)
Hash identifier: PeBETAWOhxLoY3poRmtHh+2Sv2iw7zQ8YzyuUtK7peU=
Subject key identifier: 74:21:AD:9D:3F:AF:57:01:AC:E2:AA:73:D6:BE:F3:81:61:18:17:6F
Certificate issuer: /CN=679a75debd65359a45317f203f11a321e14b2f2c
Certificate serial: 068ACE5D
Authority key identifier: 67:9A:75:DE:BD:65:35:9A:45:31:7F:20:3F:11:A3:21:E1:4B:2F:2C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z5p13r1lNZpFMX8gPxGjIeFLLyw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/7a39b1-1d1c-4919-b19c-3eebe7196972/1/dCGtnT-vVwGs4qpz1r7zgWEYF28.roa
Signing time: Mon 25 Apr 2022 20:41:34 +0000
ROA not before: Mon 25 Apr 2022 20:41:34 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 49999
IP address blocks: 93.113.31.0/24 maxlen: 24
93.114.129.0/24 maxlen: 24
86.106.135.0/24 maxlen: 24
86.104.228.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 109760093 (0x68ace5d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=679a75debd65359a45317f203f11a321e14b2f2c
Validity
Not Before: Apr 25 20:41:34 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=7421ad9d3faf5701ace2aa73d6bef3816118176f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:d9:17:b2:1d:4d:b6:e9:31:52:9b:b3:cb:6d:
35:b5:6d:55:6c:1f:42:bd:88:5a:83:b1:b8:b4:a9:
36:15:b9:15:c5:12:4a:17:bb:e0:2a:0d:91:13:ea:
29:4d:ee:eb:b3:49:cd:51:ab:4b:11:23:5c:74:0f:
8a:20:cc:39:49:c4:1f:ff:82:d1:14:d2:fd:ae:29:
56:7d:f8:c8:ae:b0:19:99:7c:32:65:98:65:65:b4:
89:b3:36:66:54:ad:60:e3:e1:f5:22:db:74:0c:fe:
cd:90:df:8c:5c:aa:a1:3b:93:41:5a:14:18:15:c5:
83:d0:0d:4d:29:e5:ea:32:c7:54:f0:d5:52:09:28:
4e:6e:98:21:5a:5a:5d:4c:ac:ec:07:9c:26:05:77:
8a:fc:39:e5:3b:b1:63:28:37:29:84:33:31:c6:47:
2c:2e:fd:b2:65:db:ea:f1:9f:ce:e3:fe:76:27:09:
47:1b:0c:92:5e:0f:28:ac:ad:b3:ea:26:94:ef:1a:
f9:69:eb:15:24:32:12:f2:cc:61:29:71:15:26:8b:
01:25:32:3c:f2:e6:b6:22:97:84:1a:32:e6:a4:d7:
d4:20:94:fe:09:77:cb:e0:da:87:57:32:17:0b:96:
b6:98:c4:ad:56:52:2a:9c:fd:19:8a:7c:a6:d3:47:
e7:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:21:AD:9D:3F:AF:57:01:AC:E2:AA:73:D6:BE:F3:81:61:18:17:6F
X509v3 Authority Key Identifier:
keyid:67:9A:75:DE:BD:65:35:9A:45:31:7F:20:3F:11:A3:21:E1:4B:2F:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z5p13r1lNZpFMX8gPxGjIeFLLyw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/7a39b1-1d1c-4919-b19c-3eebe7196972/1/dCGtnT-vVwGs4qpz1r7zgWEYF28.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/7a39b1-1d1c-4919-b19c-3eebe7196972/1/Z5p13r1lNZpFMX8gPxGjIeFLLyw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
86.104.228.0/24
86.106.135.0/24
93.113.31.0/24
93.114.129.0/24
Signature Algorithm: sha256WithRSAEncryption
6b:03:27:3e:49:3d:f7:c0:e6:0e:7c:22:11:2a:d1:9f:17:11:
13:2b:5e:a7:e5:6b:66:51:6e:64:75:61:78:83:83:50:19:ba:
3d:fc:01:d0:71:82:e9:f7:e1:20:2e:50:98:8a:9a:5d:97:ac:
12:4e:1d:92:ae:1d:f8:88:9a:e5:a9:71:42:b6:49:05:4a:63:
79:c9:dc:d2:93:c3:97:b5:65:79:6a:41:d5:43:b5:5d:75:12:
57:17:d1:26:9d:22:97:6d:45:0d:a8:fa:03:53:db:da:9a:66:
9c:5f:17:1f:76:f6:11:18:cc:e6:d5:d7:02:f9:8a:bc:02:31:
e6:2c:81:cd:14:46:cd:e9:ce:b1:86:7d:26:7f:df:ed:1f:56:
ca:52:f6:e2:72:04:65:b9:6c:07:ee:fe:be:3e:5d:c7:b0:ed:
e8:f0:33:0f:b8:48:8d:b7:7b:9a:03:c9:d1:4a:30:43:97:8c:
1d:c2:4a:fd:e2:20:83:d2:7b:4d:c8:fb:d7:fb:d0:87:45:cf:
3b:fe:65:1d:9c:fc:49:b7:2f:da:da:56:02:84:82:04:31:e4:
0f:fb:42:3f:4f:0a:5b:10:a9:be:26:48:ed:4e:fb:93:7d:f4:
60:bd:b2:1c:3a:c7:8b:f8:c3:bd:fd:ee:4a:9c:8b:12:08:da:
ae:da:ad:e4
-----BEGIN CERTIFICATE-----
MIIFATCCA+mgAwIBAgIEBorOXTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg2
NzlhNzVkZWJkNjUzNTlhNDUzMTdmMjAzZjExYTMyMWUxNGIyZjJjMB4XDTIyMDQy
NTIwNDEzNFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoNzQyMWFkOWQzZmFm
NTcwMWFjZTJhYTczZDZiZWYzODE2MTE4MTc2ZjCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAKzZF7IdTbbpMVKbs8ttNbVtVWwfQr2IWoOxuLSpNhW5FcUS
She74CoNkRPqKU3u67NJzVGrSxEjXHQPiiDMOUnEH/+C0RTS/a4pVn34yK6wGZl8
MmWYZWW0ibM2ZlStYOPh9SLbdAz+zZDfjFyqoTuTQVoUGBXFg9ANTSnl6jLHVPDV
UgkoTm6YIVpaXUys7AecJgV3ivw55TuxYyg3KYQzMcZHLC79smXb6vGfzuP+dicJ
RxsMkl4PKKyts+omlO8a+WnrFSQyEvLMYSlxFSaLASUyPPLmtiKXhBoy5qTX1CCU
/gl3y+Dah1cyFwuWtpjErVZSKpz9GYp8ptNH50ECAwEAAaOCAhswggIXMB0GA1Ud
DgQWBBR0Ia2dP69XAaziqnPWvvOBYRgXbzAfBgNVHSMEGDAWgBRnmnXevWU1mkUx
fyA/EaMh4UsvLDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L1o1cDEzcjFsTlpwRk1YOGdQeEdqSWVGTEx5dy5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvYjUvN2EzOWIxLTFkMWMtNDkxOS1iMTljLTNlZWJlNzE5Njk3Mi8x
L2RDR3RuVC12VndHczRxcHoxcjd6Z1dFWUYyOC5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYjUv
N2EzOWIxLTFkMWMtNDkxOS1iMTljLTNlZWJlNzE5Njk3Mi8xL1o1cDEzcjFsTlpw
Rk1YOGdQeEdqSWVGTEx5dy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAx
BggrBgEFBQcBBwEB/wQiMCAwHgQCAAEwGAMEAFZo5AMEAFZqhwMEAF1xHwMEAF1y
gTANBgkqhkiG9w0BAQsFAAOCAQEAawMnPkk998DmDnwiESrRnxcREytep+VrZlFu
ZHVheIODUBm6PfwB0HGC6ffhIC5QmIqaXZesEk4dkq4d+Iia5alxQrZJBUpjecnc
0pPDl7VleWpB1UO1XXUSVxfRJp0il21FDaj6A1Pb2ppmnF8XH3b2ERjM5tXXAvmK
vAIx5iyBzRRGzenOsYZ9Jn/f7R9WylL24nIEZblsB+7+vj5dx7Dt6PAzD7hIjbd7
mgPJ0UowQ5eMHcJK/eIgg9J7Tcj71/vQh0XPO/5lHZz8Sbcv2tpWAoSCBDHkD/tC
P08KWxCpviZI7U77k330YL2yHDrHi/jDvf3uSpyLEgjartqt5A==
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:06:30 2023 by rpki-client on console-ams.rpki-client.org