Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/ayTVqwRjSph95loTuMJlb4PBI-c.roa
File: ayTVqwRjSph95loTuMJlb4PBI-c.roa (raw, json)
Hash identifier: 39TTWGmxepYH6LIlgLQckWD5m9sFXlCKXNWwshapDEg=
Subject key identifier: 6B:24:D5:AB:04:63:4A:98:7D:E6:5A:13:B8:C2:65:6F:83:C1:23:E7
Certificate issuer: /CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Certificate serial: 01887A7781474603F324737E154DCEA29240
Authority key identifier: 36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/ayTVqwRjSph95loTuMJlb4PBI-c.roa
Signing time: Fri 02 Jun 2023 04:57:12 +0000
ROA not before: Fri 02 Jun 2023 04:57:12 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 49981
IP address blocks: 185.115.147.0/24 maxlen: 24
45.130.201.0/24 maxlen: 24
77.75.61.0/24 maxlen: 24
185.244.138.0/24 maxlen: 24
45.159.155.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:7a:77:81:47:46:03:f3:24:73:7e:15:4d:ce:a2:92:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Validity
Not Before: Jun 2 04:57:12 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6b24d5ab04634a987de65a13b8c2656f83c123e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:fc:aa:c8:2f:59:3a:09:10:7f:66:50:46:ab:
5b:da:31:3d:a7:e8:38:7b:12:a6:90:35:0a:8c:15:
3e:1f:af:fd:06:fa:54:90:43:a7:05:e9:53:34:46:
e7:78:e8:82:c4:fb:85:4c:5b:8b:bc:b4:24:38:02:
ea:be:c8:cc:6f:6e:f4:11:5d:44:a0:a0:57:5f:37:
67:aa:91:32:0c:85:ee:28:96:a1:c8:44:2f:d8:be:
52:1b:ec:34:45:6c:9f:bb:21:d2:0c:f7:b8:3d:64:
e0:05:b9:2a:63:99:6d:27:78:33:df:5a:d4:51:77:
0a:47:39:65:d6:6d:29:77:7d:0b:79:7f:68:78:5e:
12:17:02:d3:bb:44:c2:4b:7a:55:84:7c:42:4e:bb:
35:5c:1d:95:3d:92:a1:bd:9b:7a:33:87:b0:55:8d:
19:92:d7:c5:ff:70:8f:1c:2f:07:4c:57:6e:41:be:
6e:9c:e2:fe:7b:50:5f:bd:3d:af:bb:e6:23:f8:a9:
10:a9:83:39:b8:4d:19:ef:49:15:7d:f2:96:fe:c7:
8a:9d:1d:9f:3e:c3:c6:53:89:c0:e2:11:5e:75:cb:
3a:e4:fc:da:71:35:cb:b7:9b:57:76:73:48:31:2b:
3f:2c:34:f4:84:67:09:89:87:fc:30:d1:49:8b:3b:
f2:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:24:D5:AB:04:63:4A:98:7D:E6:5A:13:B8:C2:65:6F:83:C1:23:E7
X509v3 Authority Key Identifier:
keyid:36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/ayTVqwRjSph95loTuMJlb4PBI-c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.130.201.0/24
45.159.155.0/24
77.75.61.0/24
185.115.147.0/24
185.244.138.0/24
Signature Algorithm: sha256WithRSAEncryption
35:71:0c:33:8e:af:e8:78:37:cb:c5:d3:2d:48:0b:ea:5b:be:
5c:e1:ce:a3:95:aa:71:ee:51:56:0b:17:aa:32:10:d5:b7:62:
9e:89:96:a7:d7:71:ef:fb:48:5e:98:b1:ac:1f:f4:2b:52:2c:
a0:7a:d5:65:2b:75:4f:0c:72:ec:b2:8b:3a:36:ab:e5:76:90:
e2:f0:45:44:8c:04:18:d8:aa:bd:17:dc:f7:d2:0c:c1:97:b7:
28:bb:f7:5f:c0:ca:cc:30:9e:3d:69:18:3d:e7:50:1b:17:7a:
f5:0c:cd:01:d4:7a:33:ae:b3:d6:6f:3a:64:5c:d6:e0:85:1d:
c2:c1:c0:49:d3:66:37:8a:df:fc:42:dc:af:19:79:e3:fe:08:
a8:5a:fb:fd:9d:29:3c:40:f2:42:c5:5d:d9:9f:aa:a7:9e:5a:
9e:77:d1:a0:1c:96:c4:16:b0:3b:ea:cd:46:58:63:d2:64:e9:
f9:89:d8:16:2b:3a:ab:11:c9:51:37:58:ae:cd:1f:43:dc:3b:
77:4f:14:6e:83:62:3d:5c:5b:f7:5f:ae:2c:85:38:1d:d7:62:
66:6f:8e:00:23:3c:eb:1a:48:4c:de:54:cc:9e:3d:11:ac:2e:
8d:ae:93:76:4d:8a:bd:a2:17:75:6b:e8:0f:a5:28:e8:17:70:
fb:a1:c0:47
-----BEGIN CERTIFICATE-----
MIIFFTCCA/2gAwIBAgISAYh6d4FHRgPzJHN+FU3OopJAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM2YzJhNGI3ZDVkNzNjNWI1NzA0NjIyM2JmMzBlYjY1MzAw
NWIwZTIwHhcNMjMwNjAyMDQ1NzEyWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2YjI0ZDVhYjA0NjM0YTk4N2RlNjVhMTNiOGMyNjU2ZjgzYzEyM2U3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgPyqyC9ZOgkQf2ZQRqtb2jE9p+g4
exKmkDUKjBU+H6/9BvpUkEOnBelTNEbneOiCxPuFTFuLvLQkOALqvsjMb270EV1E
oKBXXzdnqpEyDIXuKJahyEQv2L5SG+w0RWyfuyHSDPe4PWTgBbkqY5ltJ3gz31rU
UXcKRzll1m0pd30LeX9oeF4SFwLTu0TCS3pVhHxCTrs1XB2VPZKhvZt6M4ewVY0Z
ktfF/3CPHC8HTFduQb5unOL+e1BfvT2vu+Yj+KkQqYM5uE0Z70kVffKW/seKnR2f
PsPGU4nA4hFedcs65PzacTXLt5tXdnNIMSs/LDT0hGcJiYf8MNFJizvypwIDAQAB
o4ICITCCAh0wHQYDVR0OBBYEFGsk1asEY0qYfeZaE7jCZW+DwSPnMB8GA1UdIwQY
MBaAFDbCpLfV1zxbVwRiI78w62UwBbDiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTnNLa3Q5WFhQRnRYQkdJanZ6RHJaVEFGc09JLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYy84ZGQ4NWEtYmY4Zi00MjVlLWEyNGIt
MmNjZWRiOTY2YTU4LzEvYXlUVnF3UmpTcGg5NWxvVHVNSmxiNFBCSS1jLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYy84ZGQ4NWEtYmY4Zi00MjVlLWEyNGItMmNjZWRiOTY2YTU4
LzEvTnNLa3Q5WFhQRnRYQkdJanZ6RHJaVEFGc09JLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDcGCCsGAQUFBwEHAQH/BCgwJjAkBAIAATAeAwQALYLJAwQA
LZ+bAwQATUs9AwQAuXOTAwQAufSKMA0GCSqGSIb3DQEBCwUAA4IBAQA1cQwzjq/o
eDfLxdMtSAvqW75c4c6jlapx7lFWCxeqMhDVt2KeiZan13Hv+0hemLGsH/QrUiyg
etVlK3VPDHLssos6NqvldpDi8EVEjAQY2Kq9F9z30gzBl7cou/dfwMrMMJ49aRg9
51AbF3r1DM0B1HozrrPWbzpkXNbghR3CwcBJ02Y3it/8QtyvGXnj/gioWvv9nSk8
QPJCxV3Zn6qnnlqed9GgHJbEFrA76s1GWGPSZOn5idgWKzqrEclRN1iuzR9D3Dt3
TxRug2I9XFv3X64shTgd12Jmb44AIzzrGkhM3lTMnj0RrC6NrpN2TYq9ohd1a+gP
pSjoF3D7ocBH
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:41:12 2024 by rpki-client on console-ams.rpki-client.org