Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/32109e-24c9-4c88-a8e8-fdf6638d2c04/1/U7EzVpY1PeHqHHNbfQq0VMF45dw.roa
File: U7EzVpY1PeHqHHNbfQq0VMF45dw.roa (raw, json)
Hash identifier: stQXgdWU6iGA83aOkJkAQbmhybaMLrTEOAAs/t/IqIE=
Subject key identifier: 53:B1:33:56:96:35:3D:E1:EA:1C:73:5B:7D:0A:B4:54:C1:78:E5:DC
Certificate issuer: /CN=6bc5de7d7255b7d58260c65a120b164ef10ef903
Certificate serial: 01856D8AC449DE50B779214001AAADCB34F6
Authority key identifier: 6B:C5:DE:7D:72:55:B7:D5:82:60:C6:5A:12:0B:16:4E:F1:0E:F9:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a8XefXJVt9WCYMZaEgsWTvEO-QM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/32109e-24c9-4c88-a8e8-fdf6638d2c04/1/U7EzVpY1PeHqHHNbfQq0VMF45dw.roa
Signing time: Sun 01 Jan 2023 13:34:48 +0000
ROA not before: Sun 01 Jan 2023 13:34:48 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 200509
IP address blocks: 212.237.228.0/24 maxlen: 24
185.177.74.0/23 maxlen: 23
185.177.73.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:8a:c4:49:de:50:b7:79:21:40:01:aa:ad:cb:34:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6bc5de7d7255b7d58260c65a120b164ef10ef903
Validity
Not Before: Jan 1 13:34:48 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=53b1335696353de1ea1c735b7d0ab454c178e5dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:ca:87:11:0a:2c:fe:4b:10:b3:db:1b:4f:48:
c0:ca:99:31:d1:36:24:03:21:4a:55:5e:5c:a3:43:
d9:29:ad:80:c9:8c:c8:c6:4c:77:ec:cf:95:74:82:
37:b1:f0:92:b1:91:fd:3f:54:b5:d0:4d:ef:4c:00:
27:60:4a:5e:bc:b2:43:0c:e1:b7:96:42:94:df:66:
31:5f:9e:4a:82:2f:44:48:d8:30:97:a7:c5:79:7b:
b8:78:8b:3a:1f:79:08:5a:81:81:c4:23:6c:2f:8c:
fd:7b:86:a4:a8:06:e9:03:98:bc:06:54:67:9b:ab:
69:af:3a:0b:d6:8d:98:2e:d9:56:1e:99:fa:69:e6:
91:a2:2d:69:78:25:b2:8f:f9:fd:68:74:4b:76:8f:
da:6c:8c:15:2e:75:6a:4e:b3:b3:ba:69:f7:22:d4:
98:df:02:70:21:5b:af:5a:19:9d:fc:08:c9:98:a4:
20:09:e1:e7:cd:46:32:d4:0d:27:38:be:43:7c:23:
be:d4:d8:f0:44:52:93:a9:a7:62:61:c0:2a:44:4f:
4c:48:b2:4c:9d:3f:43:20:de:d9:42:8f:0a:39:eb:
28:73:bb:f0:38:1f:66:cf:94:35:a8:98:7e:85:ac:
73:88:ca:9f:1d:df:8a:60:b8:44:67:9d:79:06:0c:
ba:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:B1:33:56:96:35:3D:E1:EA:1C:73:5B:7D:0A:B4:54:C1:78:E5:DC
X509v3 Authority Key Identifier:
keyid:6B:C5:DE:7D:72:55:B7:D5:82:60:C6:5A:12:0B:16:4E:F1:0E:F9:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8XefXJVt9WCYMZaEgsWTvEO-QM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/32109e-24c9-4c88-a8e8-fdf6638d2c04/1/U7EzVpY1PeHqHHNbfQq0VMF45dw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/32109e-24c9-4c88-a8e8-fdf6638d2c04/1/a8XefXJVt9WCYMZaEgsWTvEO-QM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.177.73.0-185.177.75.255
212.237.228.0/24
Signature Algorithm: sha256WithRSAEncryption
1c:fe:9b:1d:5a:a9:1d:8a:58:2c:5e:3a:9c:18:29:19:ca:d2:
56:1a:06:02:8d:15:df:9d:6d:50:97:42:19:42:40:82:16:07:
a8:0c:8f:27:ba:79:95:ec:d9:be:97:bc:33:c6:ee:ce:80:10:
28:75:a5:2d:8c:df:81:a7:42:91:35:09:e8:78:de:22:37:a2:
a9:36:d6:d3:01:5b:66:f8:a7:a2:7d:31:c2:67:f6:cb:c4:6a:
06:c9:19:ae:ca:59:9c:a7:9b:74:a7:fc:f5:71:c8:c9:6f:09:
5e:fa:5d:2b:0e:eb:86:5e:0d:08:06:2c:b0:06:c3:35:1d:5f:
b9:e9:0a:c1:e4:f5:c2:f6:e1:85:cf:3d:92:d9:c2:b8:d5:bb:
aa:30:8e:77:3c:ee:77:e0:e4:28:4a:f2:80:72:35:78:39:42:
e2:80:47:c1:67:8d:ef:6c:2b:b2:e7:2b:9c:e8:d0:f3:a3:37:
44:9b:f4:33:23:e3:c4:8a:8c:ec:a5:79:2d:28:fa:f8:9e:be:
7d:83:32:ff:2a:09:1c:18:f8:cd:82:54:55:51:eb:9c:14:cb:
0f:59:0f:72:94:96:48:da:4f:51:d6:60:ca:9f:93:a5:d1:51:
5f:f8:c1:a0:84:d5:10:2a:6e:21:f9:46:0d:30:63:ed:66:0e:
bd:15:af:02
-----BEGIN CERTIFICATE-----
MIIFCzCCA/OgAwIBAgISAYVtisRJ3lC3eSFAAaqtyzT2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZiYzVkZTdkNzI1NWI3ZDU4MjYwYzY1YTEyMGIxNjRlZjEw
ZWY5MDMwHhcNMjMwMTAxMTMzNDQ4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1M2IxMzM1Njk2MzUzZGUxZWExYzczNWI3ZDBhYjQ1NGMxNzhlNWRjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA48qHEQos/ksQs9sbT0jAypkx0TYk
AyFKVV5co0PZKa2AyYzIxkx37M+VdII3sfCSsZH9P1S10E3vTAAnYEpevLJDDOG3
lkKU32YxX55Kgi9ESNgwl6fFeXu4eIs6H3kIWoGBxCNsL4z9e4akqAbpA5i8BlRn
m6tprzoL1o2YLtlWHpn6aeaRoi1peCWyj/n9aHRLdo/abIwVLnVqTrOzumn3ItSY
3wJwIVuvWhmd/AjJmKQgCeHnzUYy1A0nOL5DfCO+1NjwRFKTqadiYcAqRE9MSLJM
nT9DIN7ZQo8KOesoc7vwOB9mz5Q1qJh+haxziMqfHd+KYLhEZ515Bgy6XwIDAQAB
o4ICFzCCAhMwHQYDVR0OBBYEFFOxM1aWNT3h6hxzW30KtFTBeOXcMB8GA1UdIwQY
MBaAFGvF3n1yVbfVgmDGWhILFk7xDvkDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYThYZWZYSlZ0OVdDWU1aYUVnc1dUdkVPLVFNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYi8zMjEwOWUtMjRjOS00Yzg4LWE4ZTgt
ZmRmNjYzOGQyYzA0LzEvVTdFelZwWTFQZUhxSEhOYmZRcTBWTUY0NWR3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYi8zMjEwOWUtMjRjOS00Yzg4LWE4ZTgtZmRmNjYzOGQyYzA0
LzEvYThYZWZYSlZ0OVdDWU1aYUVnc1dUdkVPLVFNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIAATAUMAwDBAC5sUkD
BAK5sUgDBADU7eQwDQYJKoZIhvcNAQELBQADggEBABz+mx1aqR2KWCxeOpwYKRnK
0lYaBgKNFd+dbVCXQhlCQIIWB6gMjye6eZXs2b6XvDPG7s6AECh1pS2M34GnQpE1
Ceh43iI3oqk21tMBW2b4p6J9McJn9svEagbJGa7KWZynm3Sn/PVxyMlvCV76XSsO
64ZeDQgGLLAGwzUdX7npCsHk9cL24YXPPZLZwrjVu6owjnc87nfg5ChK8oByNXg5
QuKAR8Fnje9sK7LnK5zo0POjN0Sb9DMj48SKjOyleS0o+vievn2DMv8qCRwY+M2C
VFVR65wUyw9ZD3KUlkjaT1HWYMqfk6XRUV/4waCE1RAqbiH5Rg0wY+1mDr0VrwI=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:51:34 2024 by rpki-client on console-fra.rpki-client.org