Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/6e9RJSt31tN3NvprJ9Nn46YlSD0.roa
File: 6e9RJSt31tN3NvprJ9Nn46YlSD0.roa (raw, json)
Hash identifier: 6+1qAEajTSL8lYDLqH7HXbHDUg1m0m2y6a8ogHEWWI8=
Subject key identifier: E9:EF:51:25:2B:77:D6:D3:77:36:FA:6B:27:D3:67:E3:A6:25:48:3D
Certificate issuer: /CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Certificate serial: 0CBF61A9
Authority key identifier: 36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/6e9RJSt31tN3NvprJ9Nn46YlSD0.roa
Signing time: Sat 01 Jan 2022 05:05:04 +0000
ROA not before: Sat 01 Jan 2022 05:05:04 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 205544
IP address blocks: 192.159.99.0/24 maxlen: 24
192.159.100.0/22 maxlen: 22
95.214.184.0/22 maxlen: 22
171.22.104.0/22 maxlen: 22
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 213868969 (0xcbf61a9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Validity
Not Before: Jan 1 05:05:04 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e9ef51252b77d6d37736fa6b27d367e3a625483d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:8f:b9:9e:3b:ed:81:f4:09:36:79:18:12:1e:
0f:63:d8:3d:73:74:fb:79:ba:73:cb:b1:b1:bb:e9:
7b:7c:0c:55:77:f1:47:af:f5:53:9c:a4:e9:b7:22:
8a:a2:2a:a2:d7:9e:0f:b8:26:ad:26:02:9c:f9:6d:
ac:17:19:6c:66:8c:43:4f:90:83:33:1d:c4:8a:e4:
4f:62:a4:e9:1a:96:14:ba:31:05:12:88:c5:da:b3:
5c:9c:af:3f:9c:0a:23:af:c5:d4:37:5c:1c:80:45:
6e:9c:b7:d7:6e:37:e8:be:8d:bc:8b:60:97:b0:b6:
47:15:75:93:96:07:9d:ae:c4:90:e9:45:db:c3:be:
ed:e1:7b:f7:14:df:f4:28:f9:2c:d1:c2:a3:43:44:
01:46:5f:51:de:1d:84:2e:6e:ff:6e:c5:97:63:b0:
c0:75:02:14:04:07:9f:b8:7f:4b:89:72:5d:ea:e4:
f7:5e:cd:a6:7f:32:ff:d1:20:48:4f:db:b7:00:85:
e0:4e:22:d6:86:d4:84:95:17:d9:2c:93:93:37:41:
9d:c6:26:36:a4:78:d4:ec:f6:86:0d:80:88:df:13:
97:d2:eb:96:dc:5d:b1:1a:6a:a6:83:ba:ca:c0:e2:
e7:60:cf:f0:e3:99:0e:ff:d1:4e:3a:27:ba:fd:0b:
f4:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:EF:51:25:2B:77:D6:D3:77:36:FA:6B:27:D3:67:E3:A6:25:48:3D
X509v3 Authority Key Identifier:
keyid:36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/6e9RJSt31tN3NvprJ9Nn46YlSD0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.214.184.0/22
171.22.104.0/22
192.159.99.0-192.159.103.255
Signature Algorithm: sha256WithRSAEncryption
17:e2:d8:36:6b:ab:a2:6d:a9:b3:d3:5d:c6:8c:26:ec:a3:88:
24:2b:2c:77:4f:2b:7b:ed:31:6d:51:36:b5:73:af:8c:68:1b:
13:98:40:8f:7f:7f:18:5b:1e:6b:eb:01:b4:9e:19:43:85:ab:
f4:00:82:06:d6:61:09:c8:da:c1:9f:0f:ff:ab:19:c0:da:96:
86:10:d9:e0:57:9d:74:ae:f5:60:89:7c:af:ad:46:e8:89:7a:
aa:31:54:3a:ad:8a:4a:55:fb:ec:5b:2b:ec:74:e9:a1:d9:06:
52:87:95:a8:05:fe:b4:f2:27:28:e1:43:fb:4a:91:e6:26:d0:
e9:fe:a7:c2:9b:59:a3:36:3a:af:98:68:8c:dc:a5:ec:d5:b9:
c3:5f:db:34:02:5f:6f:d1:85:cc:e0:1f:c5:32:63:05:cb:1f:
fd:c5:ed:4d:87:d1:7d:7c:57:92:1f:b8:74:7f:62:5e:89:6f:
0d:48:0d:00:69:15:ff:6b:ac:68:8f:b3:8b:86:f5:51:a6:d0:
2d:1a:5a:36:eb:f2:fa:6c:35:ff:14:46:16:0c:a1:88:ee:20:
d8:7a:81:68:b4:52:cf:1a:9d:47:63:ba:e2:24:a9:2b:a9:05:
3f:ed:46:32:57:2b:fc:6e:c2:77:db:1d:81:16:b8:ec:0f:06:
22:be:ea:53
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgIEDL9hqTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygz
NmMyYTRiN2Q1ZDczYzViNTcwNDYyMjNiZjMwZWI2NTMwMDViMGUyMB4XDTIyMDEw
MTA1MDUwNFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoZTllZjUxMjUyYjc3
ZDZkMzc3MzZmYTZiMjdkMzY3ZTNhNjI1NDgzZDCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAMOPuZ477YH0CTZ5GBIeD2PYPXN0+3m6c8uxsbvpe3wMVXfx
R6/1U5yk6bciiqIqoteeD7gmrSYCnPltrBcZbGaMQ0+QgzMdxIrkT2Kk6RqWFLox
BRKIxdqzXJyvP5wKI6/F1DdcHIBFbpy312436L6NvItgl7C2RxV1k5YHna7EkOlF
28O+7eF79xTf9Cj5LNHCo0NEAUZfUd4dhC5u/27Fl2OwwHUCFAQHn7h/S4lyXerk
917Npn8y/9EgSE/btwCF4E4i1obUhJUX2SyTkzdBncYmNqR41Oz2hg2AiN8Tl9Lr
ltxdsRpqpoO6ysDi52DP8OOZDv/RTjonuv0L9FcCAwEAAaOCAh0wggIZMB0GA1Ud
DgQWBBTp71ElK3fW03c2+msn02fjpiVIPTAfBgNVHSMEGDAWgBQ2wqS31dc8W1cE
YiO/MOtlMAWw4jAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L05zS2t0OVhYUEZ0WEJHSWp2ekRyWlRBRnNPSS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvYmMvOGRkODVhLWJmOGYtNDI1ZS1hMjRiLTJjY2VkYjk2NmE1OC8x
LzZlOVJKU3QzMXROM052cHJKOU5uNDZZbFNEMC5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYmMv
OGRkODVhLWJmOGYtNDI1ZS1hMjRiLTJjY2VkYjk2NmE1OC8xL05zS2t0OVhYUEZ0
WEJHSWp2ekRyWlRBRnNPSS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAz
BggrBgEFBQcBBwEB/wQkMCIwIAQCAAEwGgMEAl/WuAMEAqsWaDAMAwQAwJ9jAwQD
wJ9gMA0GCSqGSIb3DQEBCwUAA4IBAQAX4tg2a6uibamz013GjCbso4gkKyx3Tyt7
7TFtUTa1c6+MaBsTmECPf38YWx5r6wG0nhlDhav0AIIG1mEJyNrBnw//qxnA2paG
ENngV510rvVgiXyvrUboiXqqMVQ6rYpKVfvsWyvsdOmh2QZSh5WoBf608ico4UP7
SpHmJtDp/qfCm1mjNjqvmGiM3KXs1bnDX9s0Al9v0YXM4B/FMmMFyx/9xe1Nh9F9
fFeSH7h0f2JeiW8NSA0AaRX/a6xoj7OLhvVRptAtGlo26/L6bDX/FEYWDKGI7iDY
eoFotFLPGp1HY7riJKkrqQU/7UYyVyv8bsJ32x2BFrjsDwYivupT
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:02:57 2023 by rpki-client on console-fra.rpki-client.org