Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/c14115-8cf8-40c8-87c8-ce82ebe11ac8/1/4KffT1i5xaejGlslYCPbF2SQCu8.roa
File: 4KffT1i5xaejGlslYCPbF2SQCu8.roa (raw, json)
Hash identifier: Gcs6tJQNJsXJW9P2T4CzbYuIImR8nfhrBZs8vTXL4N8=
Subject key identifier: E0:A7:DF:4F:58:B9:C5:A7:A3:1A:5B:25:60:23:DB:17:64:90:0A:EF
Certificate issuer: /CN=1e9a92daf08c20b4691b925cf032e5491fe0acc0
Certificate serial: 0359106C
Authority key identifier: 1E:9A:92:DA:F0:8C:20:B4:69:1B:92:5C:F0:32:E5:49:1F:E0:AC:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HpqS2vCMILRpG5Jc8DLlSR_grMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/c14115-8cf8-40c8-87c8-ce82ebe11ac8/1/4KffT1i5xaejGlslYCPbF2SQCu8.roa
Signing time: Tue 15 Mar 2022 10:10:07 +0000
ROA not before: Tue 15 Mar 2022 10:10:07 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 42233
IP address blocks: 217.144.171.0/24 maxlen: 24
217.144.168.0/24 maxlen: 24
217.144.169.0/24 maxlen: 24
217.144.168.0/22 maxlen: 22
217.144.170.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 56168556 (0x359106c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e9a92daf08c20b4691b925cf032e5491fe0acc0
Validity
Not Before: Mar 15 10:10:07 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e0a7df4f58b9c5a7a31a5b256023db1764900aef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:79:72:82:d7:cb:1e:4d:88:85:b9:bd:7c:a4:
40:50:7d:c6:bd:79:da:a2:60:5d:d2:9e:b4:e2:2a:
0f:2c:78:b5:d9:c8:27:b5:a3:d6:97:c5:12:4e:a1:
d6:3e:e9:22:f9:4b:1f:69:b3:e7:f6:68:88:ae:dc:
eb:33:3d:d8:8f:15:ad:19:9e:e1:6e:4a:1e:64:70:
06:cb:05:b4:3f:20:1a:d9:f9:04:11:c6:2d:cc:6b:
d9:22:84:04:86:18:10:60:34:bf:54:ff:f5:8b:c2:
a5:f1:94:ab:95:cd:d6:98:32:6e:cf:99:36:52:10:
75:41:64:3f:28:74:59:a8:68:72:65:f8:ed:dd:8a:
22:ba:fe:0d:a9:e5:1b:1c:34:4b:3a:09:3b:20:27:
fd:86:1f:98:e3:c3:17:f5:6d:2e:f1:fa:63:2a:00:
ae:a2:60:38:0a:69:f0:cc:c7:53:1b:ae:a5:88:24:
d8:e4:28:b8:bc:41:f3:29:1f:cb:b3:04:f2:8e:86:
a2:6c:3f:90:6f:88:d3:15:33:3a:c7:ae:25:92:e9:
6b:0c:94:c6:12:c8:7d:5e:ef:5a:65:94:2c:41:56:
3a:60:b4:d4:54:3e:c4:4b:3b:94:33:04:dc:32:e7:
13:da:d9:e1:c0:dc:3d:4e:80:7f:b3:0c:2f:ff:49:
d3:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:A7:DF:4F:58:B9:C5:A7:A3:1A:5B:25:60:23:DB:17:64:90:0A:EF
X509v3 Authority Key Identifier:
keyid:1E:9A:92:DA:F0:8C:20:B4:69:1B:92:5C:F0:32:E5:49:1F:E0:AC:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HpqS2vCMILRpG5Jc8DLlSR_grMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/c14115-8cf8-40c8-87c8-ce82ebe11ac8/1/4KffT1i5xaejGlslYCPbF2SQCu8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/c14115-8cf8-40c8-87c8-ce82ebe11ac8/1/HpqS2vCMILRpG5Jc8DLlSR_grMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.144.168.0/22
Signature Algorithm: sha256WithRSAEncryption
59:35:48:52:c3:0b:d6:79:1e:24:6a:21:6b:ae:4e:ab:5e:1c:
89:62:51:84:d1:6d:62:16:20:57:e5:d0:5d:fe:5e:8a:78:98:
11:fd:4b:4a:23:76:72:4d:59:20:a2:ac:61:ae:e8:86:92:49:
e7:e5:6d:67:f2:1e:b6:73:ed:3e:2d:f9:aa:32:1f:d3:90:b9:
f9:bd:cb:51:11:45:bf:12:90:d2:96:a8:71:42:30:15:1b:4a:
2c:5c:d9:6e:fa:fb:82:bb:b5:6b:f6:1c:f2:02:26:0f:57:78:
27:08:a7:2e:51:36:a6:8b:2d:50:4c:a3:05:db:6b:4f:a7:e6:
e8:a7:fc:2c:ce:13:50:a8:e1:51:ea:e2:f3:11:76:6d:08:42:
ed:c0:54:12:24:1e:fb:14:48:13:73:b2:66:32:12:ab:0f:9d:
c1:1e:93:d1:38:1d:0a:9b:cd:1b:b9:57:1b:cc:ba:77:06:c4:
cb:cd:72:3c:dc:c2:2a:a8:90:0c:7d:ff:b8:7a:0d:4c:30:40:
66:53:f8:9c:76:19:36:a3:fa:7e:be:83:18:35:61:e1:cc:c6:
1a:19:75:60:81:3a:15:3c:d8:52:6b:63:c6:3a:c4:92:02:ef:
f3:92:ad:e0:ef:6e:a9:c6:e3:8d:65:30:b6:11:88:19:80:ec:
ab:e4:c1:6f
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEA1kQbDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygx
ZTlhOTJkYWYwOGMyMGI0NjkxYjkyNWNmMDMyZTU0OTFmZTBhY2MwMB4XDTIyMDMx
NTEwMTAwN1oXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoZTBhN2RmNGY1OGI5
YzVhN2EzMWE1YjI1NjAyM2RiMTc2NDkwMGFlZjCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAMV5coLXyx5NiIW5vXykQFB9xr152qJgXdKetOIqDyx4tdnI
J7Wj1pfFEk6h1j7pIvlLH2mz5/ZoiK7c6zM92I8VrRme4W5KHmRwBssFtD8gGtn5
BBHGLcxr2SKEBIYYEGA0v1T/9YvCpfGUq5XN1pgybs+ZNlIQdUFkPyh0WahocmX4
7d2KIrr+DanlGxw0SzoJOyAn/YYfmOPDF/VtLvH6YyoArqJgOApp8MzHUxuupYgk
2OQouLxB8ykfy7ME8o6Gomw/kG+I0xUzOseuJZLpawyUxhLIfV7vWmWULEFWOmC0
1FQ+xEs7lDME3DLnE9rZ4cDcPU6Af7MML/9J0ycCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBTgp99PWLnFp6MaWyVgI9sXZJAK7zAfBgNVHSMEGDAWgBQempLa8IwgtGkb
klzwMuVJH+CswDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L0hwcVMydkNNSUxScEc1SmM4RExsU1JfZ3JNQS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvYjgvYzE0MTE1LThjZjgtNDBjOC04N2M4LWNlODJlYmUxMWFjOC8x
LzRLZmZUMWk1eGFlakdsc2xZQ1BiRjJTUUN1OC5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYjgv
YzE0MTE1LThjZjgtNDBjOC04N2M4LWNlODJlYmUxMWFjOC8xL0hwcVMydkNNSUxS
cEc1SmM4RExsU1JfZ3JNQS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAtmQqDANBgkqhkiG9w0BAQsFAAOC
AQEAWTVIUsML1nkeJGoha65Oq14ciWJRhNFtYhYgV+XQXf5einiYEf1LSiN2ck1Z
IKKsYa7ohpJJ5+VtZ/IetnPtPi35qjIf05C5+b3LURFFvxKQ0paocUIwFRtKLFzZ
bvr7gru1a/Yc8gImD1d4JwinLlE2postUEyjBdtrT6fm6Kf8LM4TUKjhUeri8xF2
bQhC7cBUEiQe+xRIE3OyZjISqw+dwR6T0TgdCpvNG7lXG8y6dwbEy81yPNzCKqiQ
DH3/uHoNTDBAZlP4nHYZNqP6fr6DGDVh4czGGhl1YIE6FTzYUmtjxjrEkgLv85Kt
4O9uqcbjjWUwthGIGYDsq+TBbw==
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:40:24 2024 by rpki-client on console-ams.rpki-client.org