Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/1tHxlDW82yCxMzVWdeLOdkodQiQ.roa
File: 1tHxlDW82yCxMzVWdeLOdkodQiQ.roa (raw, json)
Hash identifier: DrxFaPY3oHAFegv0xVQQ6yVIB4+YyoSeb3j5hUq8HRo=
Subject key identifier: D6:D1:F1:94:35:BC:DB:20:B1:33:35:56:75:E2:CE:76:4A:1D:42:24
Certificate issuer: /CN=c2778de2a9be9802120382e750d159e95872c2ae
Certificate serial: 0191C97DFC7D1049BDD4E9FC2DF139D3C516
Authority key identifier: C2:77:8D:E2:A9:BE:98:02:12:03:82:E7:50:D1:59:E9:58:72:C2:AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wneN4qm-mAISA4LnUNFZ6Vhywq4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/1tHxlDW82yCxMzVWdeLOdkodQiQ.roa
Signing time: Fri 06 Sep 2024 22:39:22 +0000
ROA not before: Fri 06 Sep 2024 22:39:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 83.147.222.0/24 maxlen: 24
83.147.244.0/22 maxlen: 24
91.186.200.0/22 maxlen: 24
91.186.204.0/22 maxlen: 24
91.186.216.0/23 maxlen: 24
94.241.168.0/21 maxlen: 24
178.253.12.0/23 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:c9:7d:fc:7d:10:49:bd:d4:e9:fc:2d:f1:39:d3:c5:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2778de2a9be9802120382e750d159e95872c2ae
Validity
Not Before: Sep 6 22:39:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d6d1f19435bcdb20b133355675e2ce764a1d4224
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:50:5e:4e:d0:04:bc:b4:94:39:c8:b8:fe:8b:
7a:4a:4c:0e:16:88:c4:d2:09:ec:ce:2a:0e:c8:45:
a4:d7:a2:dc:fe:e2:fc:9d:f0:d4:4e:67:e1:e5:bd:
f2:f9:0b:cd:12:31:36:be:67:5f:54:23:1b:d4:cd:
1c:bb:f9:84:76:38:ad:71:34:99:07:84:9f:d9:cb:
a6:a8:49:0e:b1:4e:e4:c6:1f:b4:66:38:a0:08:bc:
83:32:ca:ca:82:0c:35:c1:a4:63:1f:8d:2f:15:01:
93:3c:a6:b1:79:ee:08:39:dc:29:3d:ae:84:3c:96:
21:43:fc:b6:cf:da:e7:81:28:c7:93:f9:86:b1:2e:
99:e2:37:c6:53:4f:c5:9d:ae:5b:6c:3c:5c:76:5f:
4d:b3:e5:23:a0:0a:fd:9a:97:e7:44:6a:c2:88:0f:
79:4d:ed:54:cd:39:df:bf:ea:75:ec:2d:79:bc:59:
06:ce:16:cd:e3:4a:4e:8d:9f:19:df:93:03:98:a3:
81:52:8c:9a:68:ec:d5:59:4d:99:94:1d:90:83:9a:
ce:f0:9b:66:df:58:43:ff:ab:4b:bc:f0:5c:e2:da:
df:61:d7:a2:86:88:b3:b2:1d:1a:05:58:5d:ee:f2:
75:94:b6:6d:08:3a:99:ac:6e:65:18:13:01:fd:0a:
99:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:D1:F1:94:35:BC:DB:20:B1:33:35:56:75:E2:CE:76:4A:1D:42:24
X509v3 Authority Key Identifier:
keyid:C2:77:8D:E2:A9:BE:98:02:12:03:82:E7:50:D1:59:E9:58:72:C2:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wneN4qm-mAISA4LnUNFZ6Vhywq4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/1tHxlDW82yCxMzVWdeLOdkodQiQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/wneN4qm-mAISA4LnUNFZ6Vhywq4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.147.222.0/24
83.147.244.0/22
91.186.200.0/21
91.186.216.0/23
94.241.168.0/21
178.253.12.0/23
Signature Algorithm: sha256WithRSAEncryption
99:e5:80:1a:8c:6f:70:d9:37:6c:c7:14:a1:04:df:df:02:3f:
4a:c5:17:55:e0:ca:74:0a:12:e1:82:7e:b2:3c:05:ea:70:1b:
61:ef:1d:dc:26:8c:27:e3:39:95:e1:97:8b:17:fb:03:75:bb:
e3:88:10:21:d8:2b:73:62:5f:60:14:6e:26:44:10:39:8f:c5:
b2:66:d3:7c:38:5a:5c:08:3d:83:1a:c6:02:3d:0a:67:0c:87:
5b:c7:13:ca:df:07:47:18:6e:8a:cc:4c:28:ee:9a:70:96:94:
ee:9f:ab:a2:8d:ea:e0:d3:49:dd:f0:aa:9e:0b:80:73:af:b4:
0d:36:67:e7:04:7f:a2:37:50:c4:f9:95:3b:49:ad:e0:4e:4a:
cc:37:08:fb:bf:ee:08:cb:12:80:f6:5c:06:bf:5b:b0:83:a2:
4d:9a:15:5c:37:74:4f:d9:9b:5f:f3:ce:97:7b:16:69:ee:d4:
c7:c0:ca:ca:df:8c:e4:aa:53:4a:f1:b8:70:eb:aa:45:b9:cb:
bc:b7:69:4b:fb:d0:65:6d:82:db:88:cb:3c:ed:9c:44:42:a2:
9e:a1:c6:5a:34:33:69:0f:34:22:a1:de:83:96:9b:c9:b2:23:
0f:c7:47:a8:a3:49:09:fe:4c:11:b5:90:a8:af:10:6a:0e:2b:
81:73:1a:8b
-----BEGIN CERTIFICATE-----
MIIFGzCCBAOgAwIBAgISAZHJffx9EEm91On8LfE508UWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMyNzc4ZGUyYTliZTk4MDIxMjAzODJlNzUwZDE1OWU5NTg3
MmMyYWUwHhcNMjQwOTA2MjIzOTIyWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkNmQxZjE5NDM1YmNkYjIwYjEzMzM1NTY3NWUyY2U3NjRhMWQ0MjI0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArVBeTtAEvLSUOci4/ot6SkwOFojE
0gnszioOyEWk16Lc/uL8nfDUTmfh5b3y+QvNEjE2vmdfVCMb1M0cu/mEdjitcTSZ
B4Sf2cumqEkOsU7kxh+0ZjigCLyDMsrKggw1waRjH40vFQGTPKaxee4IOdwpPa6E
PJYhQ/y2z9rngSjHk/mGsS6Z4jfGU0/Fna5bbDxcdl9Ns+UjoAr9mpfnRGrCiA95
Te1UzTnfv+p17C15vFkGzhbN40pOjZ8Z35MDmKOBUoyaaOzVWU2ZlB2Qg5rO8Jtm
31hD/6tLvPBc4trfYdeihoizsh0aBVhd7vJ1lLZtCDqZrG5lGBMB/QqZAwIDAQAB
o4ICJzCCAiMwHQYDVR0OBBYEFNbR8ZQ1vNsgsTM1VnXiznZKHUIkMB8GA1UdIwQY
MBaAFMJ3jeKpvpgCEgOC51DRWelYcsKuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd25lTjRxbS1tQUlTQTRMblVORlo2Vmh5d3E0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOC80MTA5MzAtOWQ2NS00YmU4LTllYmEt
Zjk4ZGE1NGFmNDM0LzEvMXRIeGxEVzgyeUN4TXpWV2RlTE9ka29kUWlRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iOC80MTA5MzAtOWQ2NS00YmU4LTllYmEtZjk4ZGE1NGFmNDM0
LzEvd25lTjRxbS1tQUlTQTRMblVORlo2Vmh5d3E0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMD0GCCsGAQUFBwEHAQH/BC4wLDAqBAIAATAkAwQAU5PeAwQC
U5P0AwQDW7rIAwQBW7rYAwQDXvGoAwQBsv0MMA0GCSqGSIb3DQEBCwUAA4IBAQCZ
5YAajG9w2TdsxxShBN/fAj9KxRdV4Mp0ChLhgn6yPAXqcBth7x3cJown4zmV4ZeL
F/sDdbvjiBAh2CtzYl9gFG4mRBA5j8WyZtN8OFpcCD2DGsYCPQpnDIdbxxPK3wdH
GG6KzEwo7ppwlpTun6uijerg00nd8KqeC4Bzr7QNNmfnBH+iN1DE+ZU7Sa3gTkrM
Nwj7v+4IyxKA9lwGv1uwg6JNmhVcN3RP2Ztf886XexZp7tTHwMrK34zkqlNK8bhw
66pFucu8t2lL+9BlbYLbiMs87ZxEQqKeocZaNDNpDzQiod6DlpvJsiMPx0eoo0kJ
/kwRtZCorxBqDiuBcxqL
-----END CERTIFICATE-----
Generated at Tue Apr 22 01:07:19 2025 by rpki-client