Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/6ba39c-ef1d-4d48-982b-cf4b900997a0/1/e4BIG6Qics2s1ufbOQSezo8_jvQ.roa
File: e4BIG6Qics2s1ufbOQSezo8_jvQ.roa (raw, json)
Hash identifier: qKl0LFYrG/2gL8v43epQLnS0bnLGir6LnvYKg/1c4v4=
Subject key identifier: 7B:80:48:1B:A4:22:72:CD:AC:D6:E7:DB:39:04:9E:CE:8F:3F:8E:F4
Certificate issuer: /CN=ab71e9b13f5c339a58692eeabe72eaa406bbbd7d
Certificate serial: 0AEE2A76
Authority key identifier: AB:71:E9:B1:3F:5C:33:9A:58:69:2E:EA:BE:72:EA:A4:06:BB:BD:7D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q3HpsT9cM5pYaS7qvnLqpAa7vX0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/6ba39c-ef1d-4d48-982b-cf4b900997a0/1/e4BIG6Qics2s1ufbOQSezo8_jvQ.roa
Signing time: Fri 18 Feb 2022 16:24:45 +0000
ROA not before: Fri 18 Feb 2022 16:24:45 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 60721
IP address blocks: 213.142.150.0/24 maxlen: 24
213.142.158.0/24 maxlen: 24
80.253.254.0/24 maxlen: 24
80.253.255.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 183380598 (0xaee2a76)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab71e9b13f5c339a58692eeabe72eaa406bbbd7d
Validity
Not Before: Feb 18 16:24:45 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=7b80481ba42272cdacd6e7db39049ece8f3f8ef4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:c6:f3:8c:c4:91:ea:08:52:68:5a:03:f1:00:
44:dd:c5:c6:96:0a:3b:14:cb:e4:80:9e:93:b6:ad:
50:a1:7c:d3:44:15:11:f0:c9:d0:af:8f:e7:81:b0:
96:5c:fa:03:81:38:94:85:8d:1e:46:13:86:65:15:
7f:90:ae:b4:d1:ad:21:a6:11:25:42:be:9c:c7:af:
79:b1:aa:71:1d:48:93:bc:30:49:42:bd:d9:db:74:
57:0e:50:7f:ac:d9:97:4f:70:d5:0b:ad:ac:1f:85:
ff:82:07:1d:80:71:3b:7b:57:de:b2:68:ae:31:87:
da:e2:a3:37:cb:fe:15:33:ee:b0:ed:4d:2a:51:bc:
ea:3e:d2:c7:45:f2:56:43:67:3b:2f:85:1c:27:84:
24:2b:07:8c:0e:bd:8b:40:b2:0e:89:93:7b:18:70:
66:d2:48:2b:3c:25:21:44:8e:64:9d:29:54:69:34:
2d:af:82:70:34:ab:f1:68:60:d2:e3:f7:fc:4b:9d:
d1:9c:7d:66:33:b0:e7:6b:f6:87:41:aa:03:fa:de:
a2:c7:55:0d:87:ca:31:d5:55:2c:75:71:40:4a:0c:
34:68:25:66:13:08:17:4e:47:c0:2c:26:4b:ca:22:
13:d9:aa:9c:cb:b0:e6:13:50:83:de:49:44:12:1f:
46:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:80:48:1B:A4:22:72:CD:AC:D6:E7:DB:39:04:9E:CE:8F:3F:8E:F4
X509v3 Authority Key Identifier:
keyid:AB:71:E9:B1:3F:5C:33:9A:58:69:2E:EA:BE:72:EA:A4:06:BB:BD:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q3HpsT9cM5pYaS7qvnLqpAa7vX0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/6ba39c-ef1d-4d48-982b-cf4b900997a0/1/e4BIG6Qics2s1ufbOQSezo8_jvQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/6ba39c-ef1d-4d48-982b-cf4b900997a0/1/q3HpsT9cM5pYaS7qvnLqpAa7vX0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.253.254.0/23
213.142.150.0/24
213.142.158.0/24
Signature Algorithm: sha256WithRSAEncryption
7b:ee:55:b0:ee:79:08:29:c3:39:82:13:e8:72:38:90:50:0d:
12:04:1c:f3:d0:30:6e:d9:5b:da:96:d7:c7:4a:13:d2:38:04:
af:0f:76:84:49:15:56:e1:fa:ae:fa:5a:c6:52:f9:47:b6:fa:
a0:2f:08:eb:57:81:92:9b:4b:7a:34:c0:2f:88:c7:79:83:93:
ec:67:88:a4:51:3a:f5:ba:4c:df:90:18:2f:66:b5:ba:5c:a1:
5e:94:6e:08:22:61:3f:e2:26:75:6e:72:da:9a:4f:b2:22:95:
e3:b5:33:47:7b:d2:2a:c9:86:ac:a8:92:d2:9a:ed:e8:95:ea:
e2:aa:ef:2f:6a:18:63:a9:a2:ca:31:31:43:68:16:56:0c:2b:
05:da:53:22:92:0d:db:6b:37:b5:0f:59:cb:6f:0c:cf:50:d0:
ae:cd:4e:cb:0e:53:89:98:a5:31:13:99:27:b7:16:d2:ee:b9:
df:af:14:cb:f4:e2:da:fc:56:c6:70:09:cc:99:a0:31:17:7a:
36:56:29:33:ec:80:7c:bd:36:1e:18:e6:7a:c1:05:49:0d:67:
5f:3b:e8:a6:7b:e9:9a:88:d1:b0:a9:91:84:2b:ae:5e:7c:84:
c8:79:e8:fe:94:cb:6e:89:2a:52:05:4e:fb:78:ee:1c:c3:27:
b8:5e:27:bd
-----BEGIN CERTIFICATE-----
MIIE+zCCA+OgAwIBAgIECu4qdjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhh
YjcxZTliMTNmNWMzMzlhNTg2OTJlZWFiZTcyZWFhNDA2YmJiZDdkMB4XDTIyMDIx
ODE2MjQ0NVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoN2I4MDQ4MWJhNDIy
NzJjZGFjZDZlN2RiMzkwNDllY2U4ZjNmOGVmNDCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAMXG84zEkeoIUmhaA/EARN3FxpYKOxTL5ICek7atUKF800QV
EfDJ0K+P54Gwllz6A4E4lIWNHkYThmUVf5CutNGtIaYRJUK+nMevebGqcR1Ik7ww
SUK92dt0Vw5Qf6zZl09w1QutrB+F/4IHHYBxO3tX3rJorjGH2uKjN8v+FTPusO1N
KlG86j7Sx0XyVkNnOy+FHCeEJCsHjA69i0CyDomTexhwZtJIKzwlIUSOZJ0pVGk0
La+CcDSr8Whg0uP3/Eud0Zx9ZjOw52v2h0GqA/reosdVDYfKMdVVLHVxQEoMNGgl
ZhMIF05HwCwmS8oiE9mqnMuw5hNQg95JRBIfRkMCAwEAAaOCAhUwggIRMB0GA1Ud
DgQWBBR7gEgbpCJyzazW59s5BJ7Ojz+O9DAfBgNVHSMEGDAWgBSrcemxP1wzmlhp
Luq+cuqkBru9fTAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L3EzSHBzVDljTTVwWWFTN3F2bkxxcEFhN3ZYMC5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvYmUvNmJhMzljLWVmMWQtNGQ0OC05ODJiLWNmNGI5MDA5OTdhMC8x
L2U0QklHNlFpY3MyczF1ZmJPUVNlem84X2p2US5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYmUv
NmJhMzljLWVmMWQtNGQ0OC05ODJiLWNmNGI5MDA5OTdhMC8xL3EzSHBzVDljTTVw
WWFTN3F2bkxxcEFhN3ZYMC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAr
BggrBgEFBQcBBwEB/wQcMBowGAQCAAEwEgMEAVD9/gMEANWOlgMEANWOnjANBgkq
hkiG9w0BAQsFAAOCAQEAe+5VsO55CCnDOYIT6HI4kFANEgQc89Awbtlb2pbXx0oT
0jgErw92hEkVVuH6rvpaxlL5R7b6oC8I61eBkptLejTAL4jHeYOT7GeIpFE69bpM
35AYL2a1ulyhXpRuCCJhP+ImdW5y2ppPsiKV47UzR3vSKsmGrKiS0prt6JXq4qrv
L2oYY6miyjExQ2gWVgwrBdpTIpIN22s3tQ9Zy28Mz1DQrs1Oyw5TiZilMROZJ7cW
0u65368Uy/Ti2vxWxnAJzJmgMRd6NlYpM+yAfL02HhjmesEFSQ1nXzvopnvpmojR
sKmRhCuuXnyEyHno/pTLbokqUgVO+3juHMMnuF4nvQ==
-----END CERTIFICATE-----
Generated at Mon Feb 17 08:21:59 2025 by rpki-client