Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/7a39b1-1d1c-4919-b19c-3eebe7196972/1/jb51KlmFwIyJWylicX0Qq2fOGao.roa
File: jb51KlmFwIyJWylicX0Qq2fOGao.roa (raw, json)
Hash identifier: XyTlZjjZFRlTQQrNXbuz0NrLv+iVL62LPFVCvO6nZsU=
Subject key identifier: 8D:BE:75:2A:59:85:C0:8C:89:5B:29:62:71:7D:10:AB:67:CE:19:AA
Certificate issuer: /CN=679a75debd65359a45317f203f11a321e14b2f2c
Certificate serial: 05D9CE4E
Authority key identifier: 67:9A:75:DE:BD:65:35:9A:45:31:7F:20:3F:11:A3:21:E1:4B:2F:2C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z5p13r1lNZpFMX8gPxGjIeFLLyw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/7a39b1-1d1c-4919-b19c-3eebe7196972/1/jb51KlmFwIyJWylicX0Qq2fOGao.roa
Signing time: Tue 22 Feb 2022 18:47:31 +0000
ROA not before: Tue 22 Feb 2022 18:47:31 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 60721
IP address blocks: 89.43.48.0/24 maxlen: 24
86.106.89.0/24 maxlen: 24
85.204.72.0/24 maxlen: 24
89.35.135.0/24 maxlen: 24
89.35.25.0/24 maxlen: 24
86.107.241.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 98160206 (0x5d9ce4e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=679a75debd65359a45317f203f11a321e14b2f2c
Validity
Not Before: Feb 22 18:47:31 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=8dbe752a5985c08c895b2962717d10ab67ce19aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:9a:be:c5:6c:6f:24:4f:f6:1b:9c:2f:66:91:
11:63:0b:37:40:7e:56:50:ba:78:a2:84:03:03:c5:
c1:a2:ee:7e:74:f0:24:32:18:cf:02:93:14:82:0c:
7e:02:f7:0e:41:6e:27:53:5e:aa:05:47:36:fa:03:
63:08:d8:2f:e0:e6:38:96:e9:f9:a2:7b:d2:1b:b1:
70:80:f6:6a:ed:06:eb:91:d7:0f:2e:e4:1b:7d:c7:
33:61:19:56:c3:c9:97:56:fc:87:76:82:db:c2:3c:
ea:a6:60:0a:e8:a0:60:a8:6f:c0:c3:a0:c4:ba:e4:
a7:94:1b:f9:cd:5e:1d:0e:b2:47:a9:ff:3c:96:ef:
cf:0d:23:91:96:0b:72:82:fe:d4:63:44:ea:8d:c8:
60:1d:35:46:e8:1c:31:1e:37:5f:f2:bc:de:b1:94:
1d:b2:4a:95:ae:70:3a:40:38:a3:f8:35:1f:aa:d1:
91:e4:5d:f6:f2:db:d6:d6:73:1f:86:8d:05:73:36:
d3:81:76:39:29:05:fd:c5:87:e7:7a:42:e9:71:30:
87:88:dc:3d:2d:5b:1b:25:e0:66:51:54:5c:e4:cf:
02:ab:0b:d5:ec:91:a0:2b:13:15:fa:be:56:c3:f4:
74:20:37:86:a1:a1:13:55:52:21:57:9a:99:a9:08:
12:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:BE:75:2A:59:85:C0:8C:89:5B:29:62:71:7D:10:AB:67:CE:19:AA
X509v3 Authority Key Identifier:
keyid:67:9A:75:DE:BD:65:35:9A:45:31:7F:20:3F:11:A3:21:E1:4B:2F:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z5p13r1lNZpFMX8gPxGjIeFLLyw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/7a39b1-1d1c-4919-b19c-3eebe7196972/1/jb51KlmFwIyJWylicX0Qq2fOGao.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/7a39b1-1d1c-4919-b19c-3eebe7196972/1/Z5p13r1lNZpFMX8gPxGjIeFLLyw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.204.72.0/24
86.106.89.0/24
86.107.241.0/24
89.35.25.0/24
89.35.135.0/24
89.43.48.0/24
Signature Algorithm: sha256WithRSAEncryption
84:08:7e:8c:f2:73:5d:0b:c0:cb:d8:09:67:58:78:2c:79:7a:
92:7e:63:74:eb:0e:62:6b:60:22:65:61:99:d5:57:d4:2b:2c:
93:0a:94:e2:69:d2:c7:0a:ce:59:07:ff:92:33:46:81:4d:a3:
ba:40:ab:98:ff:f1:4b:60:ab:bd:36:ff:04:dd:fe:96:bd:2a:
f4:b6:a1:99:1b:d9:ac:34:e7:72:f3:62:de:3e:2f:b6:93:e2:
c6:02:45:a4:58:d8:84:2e:d3:b2:ce:e9:a5:f0:e6:ac:a5:0c:
fc:94:73:33:77:4c:2b:3c:9c:65:fa:4c:e9:13:d1:38:d2:ec:
03:d4:df:0d:20:94:38:80:e4:b0:dd:14:7c:3b:cb:bb:fe:b5:
13:d8:39:7e:fb:ad:eb:4a:e3:ae:d4:b8:cd:82:bc:cb:80:71:
46:a2:92:34:bf:eb:ea:1b:da:70:e9:79:fc:fe:a1:f2:dc:11:
94:87:01:7e:c5:d2:9f:9c:23:0d:3d:d0:60:0b:00:9c:3f:43:
9a:3f:d1:d7:1f:62:f2:47:40:4d:b7:6f:55:20:25:be:2d:c9:
a3:4c:95:73:de:8e:9e:86:e4:ea:eb:fc:98:37:25:4f:08:bd:
69:4c:67:7f:d7:a7:99:26:ac:b3:18:db:a8:1b:3c:2f:4d:58:
4d:ee:c2:41
-----BEGIN CERTIFICATE-----
MIIFDTCCA/WgAwIBAgIEBdnOTjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg2
NzlhNzVkZWJkNjUzNTlhNDUzMTdmMjAzZjExYTMyMWUxNGIyZjJjMB4XDTIyMDIy
MjE4NDczMVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoOGRiZTc1MmE1OTg1
YzA4Yzg5NWIyOTYyNzE3ZDEwYWI2N2NlMTlhYTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAL6avsVsbyRP9hucL2aREWMLN0B+VlC6eKKEAwPFwaLufnTw
JDIYzwKTFIIMfgL3DkFuJ1NeqgVHNvoDYwjYL+DmOJbp+aJ70huxcID2au0G65HX
Dy7kG33HM2EZVsPJl1b8h3aC28I86qZgCuigYKhvwMOgxLrkp5Qb+c1eHQ6yR6n/
PJbvzw0jkZYLcoL+1GNE6o3IYB01RugcMR43X/K83rGUHbJKla5wOkA4o/g1H6rR
keRd9vLb1tZzH4aNBXM204F2OSkF/cWH53pC6XEwh4jcPS1bGyXgZlFUXOTPAqsL
1eyRoCsTFfq+VsP0dCA3hqGhE1VSIVeamakIEkUCAwEAAaOCAicwggIjMB0GA1Ud
DgQWBBSNvnUqWYXAjIlbKWJxfRCrZ84ZqjAfBgNVHSMEGDAWgBRnmnXevWU1mkUx
fyA/EaMh4UsvLDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L1o1cDEzcjFsTlpwRk1YOGdQeEdqSWVGTEx5dy5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvYjUvN2EzOWIxLTFkMWMtNDkxOS1iMTljLTNlZWJlNzE5Njk3Mi8x
L2piNTFLbG1Gd0l5Sld5bGljWDBRcTJmT0dhby5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYjUv
N2EzOWIxLTFkMWMtNDkxOS1iMTljLTNlZWJlNzE5Njk3Mi8xL1o1cDEzcjFsTlpw
Rk1YOGdQeEdqSWVGTEx5dy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjA9
BggrBgEFBQcBBwEB/wQuMCwwKgQCAAEwJAMEAFXMSAMEAFZqWQMEAFZr8QMEAFkj
GQMEAFkjhwMEAFkrMDANBgkqhkiG9w0BAQsFAAOCAQEAhAh+jPJzXQvAy9gJZ1h4
LHl6kn5jdOsOYmtgImVhmdVX1CsskwqU4mnSxwrOWQf/kjNGgU2jukCrmP/xS2Cr
vTb/BN3+lr0q9LahmRvZrDTncvNi3j4vtpPixgJFpFjYhC7Tss7ppfDmrKUM/JRz
M3dMKzycZfpM6RPRONLsA9TfDSCUOIDksN0UfDvLu/61E9g5fvut60rjrtS4zYK8
y4BxRqKSNL/r6hvacOl5/P6h8twRlIcBfsXSn5wjDT3QYAsAnD9Dmj/R1x9i8kdA
TbdvVSAlvi3Jo0yVc96Onobk6uv8mDclTwi9aUxnf9enmSassxjbqBs8L01YTe7C
QQ==
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:02:36 2023 by rpki-client on console-fra.rpki-client.org