Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/6ba39c-ef1d-4d48-982b-cf4b900997a0/1/edo8Hb4_lYNhyAxQzZFdoRABB_w.roa
File: edo8Hb4_lYNhyAxQzZFdoRABB_w.roa (raw, json)
Hash identifier: gWbD0i4j/oy+cExews5r0IoAcPdBK3yToslzowK5HIo=
Subject key identifier: 79:DA:3C:1D:BE:3F:95:83:61:C8:0C:50:CD:91:5D:A1:10:01:07:FC
Certificate issuer: /CN=ab71e9b13f5c339a58692eeabe72eaa406bbbd7d
Certificate serial: 0185110EFE4C01CBDE72B4A588FF16DE0800
Authority key identifier: AB:71:E9:B1:3F:5C:33:9A:58:69:2E:EA:BE:72:EA:A4:06:BB:BD:7D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q3HpsT9cM5pYaS7qvnLqpAa7vX0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/6ba39c-ef1d-4d48-982b-cf4b900997a0/1/edo8Hb4_lYNhyAxQzZFdoRABB_w.roa
Signing time: Wed 14 Dec 2022 14:34:33 +0000
ROA not before: Wed 14 Dec 2022 14:34:33 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 203377
IP address blocks: 91.151.85.0/24 maxlen: 24
91.151.87.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:11:0e:fe:4c:01:cb:de:72:b4:a5:88:ff:16:de:08:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab71e9b13f5c339a58692eeabe72eaa406bbbd7d
Validity
Not Before: Dec 14 14:34:33 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=79da3c1dbe3f958361c80c50cd915da1100107fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:92:19:cc:26:14:37:45:ff:77:05:f9:ee:93:
17:8e:b8:b4:83:0b:e7:4b:10:0c:97:0a:a7:7b:d7:
54:69:e2:6f:37:1a:f4:0d:0e:07:ef:9e:9a:e2:d1:
65:58:34:3f:de:a3:45:f1:a0:c3:54:87:c1:cd:2d:
48:81:cd:dd:e6:0a:f7:9f:59:08:ed:1d:e3:38:34:
a4:27:90:62:a8:2e:05:8b:a9:d3:d0:f5:0b:a6:92:
68:6d:13:60:7e:a4:f7:ab:6d:b1:4b:5a:2b:47:11:
fe:ed:83:a3:aa:02:f8:7a:08:22:39:67:be:f0:14:
a2:dc:0b:07:c2:d9:eb:e2:5f:ef:eb:e2:0a:31:bf:
ea:2e:32:5a:69:1b:8a:6e:5a:48:97:9b:f1:10:6a:
98:b3:67:0b:0e:1c:dd:8e:a9:39:d5:0d:74:5b:ee:
70:f6:e3:09:98:07:f0:29:b4:bc:57:05:38:bb:03:
8d:8e:15:1c:51:cc:d1:a8:08:4a:16:df:8c:eb:43:
29:94:1d:c1:03:3c:ab:df:ee:a2:22:2b:a6:b2:69:
46:96:5a:b2:46:a6:36:ec:1e:92:e0:f3:74:e1:27:
72:ff:7f:f1:b8:c5:66:f4:66:4b:9d:d6:bf:fe:61:
03:c2:5f:cf:90:4f:02:43:45:76:53:e3:49:6f:db:
f7:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:DA:3C:1D:BE:3F:95:83:61:C8:0C:50:CD:91:5D:A1:10:01:07:FC
X509v3 Authority Key Identifier:
keyid:AB:71:E9:B1:3F:5C:33:9A:58:69:2E:EA:BE:72:EA:A4:06:BB:BD:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q3HpsT9cM5pYaS7qvnLqpAa7vX0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/6ba39c-ef1d-4d48-982b-cf4b900997a0/1/edo8Hb4_lYNhyAxQzZFdoRABB_w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/6ba39c-ef1d-4d48-982b-cf4b900997a0/1/q3HpsT9cM5pYaS7qvnLqpAa7vX0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.151.85.0/24
91.151.87.0/24
Signature Algorithm: sha256WithRSAEncryption
85:01:60:c6:c5:df:f6:72:b3:e6:96:28:d8:78:5a:10:aa:e7:
78:84:c4:09:3d:72:25:f8:16:0a:f8:3c:d0:2d:f8:48:11:3f:
99:ca:aa:7e:4d:56:13:4f:1b:62:0b:44:33:f3:33:8f:f3:8f:
c8:91:10:e5:f9:4c:f9:9a:fb:90:06:6c:4d:0e:99:00:55:36:
e7:cb:23:e5:54:0e:30:f8:0b:59:7d:b4:6b:5f:b3:a2:2c:ed:
57:87:2f:6b:25:18:93:0e:af:c0:de:8f:2e:ad:5c:a1:08:0c:
06:82:82:d1:06:9d:a1:95:f6:55:8f:f0:83:42:31:a3:a7:d3:
a0:07:62:37:98:ec:2d:08:21:7b:2d:37:5d:f2:da:4e:64:17:
fd:0e:b2:e6:18:fa:13:eb:f0:53:20:90:e8:2f:e8:77:40:d8:
5e:7b:2d:f1:00:12:26:d1:aa:2f:01:77:d6:2c:ea:0b:6e:77:
38:2e:d8:45:8f:ef:6c:e2:d6:19:fa:60:18:ea:42:c6:90:16:
5b:be:af:8a:80:bb:2c:8d:c4:62:34:86:d3:60:57:bf:2c:da:
0c:97:c6:f6:58:b4:be:89:49:3a:3b:9f:f8:9d:9e:44:c0:87:
3a:4c:30:22:e6:03:c3:12:0b:82:b7:4c:cf:1a:d6:b4:39:78:
12:98:a5:de
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYURDv5MAcvecrSliP8W3ggAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFiNzFlOWIxM2Y1YzMzOWE1ODY5MmVlYWJlNzJlYWE0MDZi
YmJkN2QwHhcNMjIxMjE0MTQzNDMzWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3OWRhM2MxZGJlM2Y5NTgzNjFjODBjNTBjZDkxNWRhMTEwMDEwN2ZjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzJIZzCYUN0X/dwX57pMXjri0gwvn
SxAMlwqne9dUaeJvNxr0DQ4H756a4tFlWDQ/3qNF8aDDVIfBzS1Igc3d5gr3n1kI
7R3jODSkJ5BiqC4Fi6nT0PULppJobRNgfqT3q22xS1orRxH+7YOjqgL4eggiOWe+
8BSi3AsHwtnr4l/v6+IKMb/qLjJaaRuKblpIl5vxEGqYs2cLDhzdjqk51Q10W+5w
9uMJmAfwKbS8VwU4uwONjhUcUczRqAhKFt+M60MplB3BAzyr3+6iIiumsmlGllqy
RqY27B6S4PN04Sdy/3/xuMVm9GZLnda//mEDwl/PkE8CQ0V2U+NJb9v3MwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFHnaPB2+P5WDYcgMUM2RXaEQAQf8MB8GA1UdIwQY
MBaAFKtx6bE/XDOaWGku6r5y6qQGu719MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcTNIcHNUOWNNNXBZYVM3cXZuTHFwQWE3dlgwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZS82YmEzOWMtZWYxZC00ZDQ4LTk4MmIt
Y2Y0YjkwMDk5N2EwLzEvZWRvOEhiNF9sWU5oeUF4UXpaRmRvUkFCQl93LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZS82YmEzOWMtZWYxZC00ZDQ4LTk4MmItY2Y0YjkwMDk5N2Ew
LzEvcTNIcHNUOWNNNXBZYVM3cXZuTHFwQWE3dlgwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAW5dVAwQA
W5dXMA0GCSqGSIb3DQEBCwUAA4IBAQCFAWDGxd/2crPmlijYeFoQqud4hMQJPXIl
+BYK+DzQLfhIET+Zyqp+TVYTTxtiC0Qz8zOP84/IkRDl+Uz5mvuQBmxNDpkAVTbn
yyPlVA4w+AtZfbRrX7OiLO1Xhy9rJRiTDq/A3o8urVyhCAwGgoLRBp2hlfZVj/CD
QjGjp9OgB2I3mOwtCCF7LTdd8tpOZBf9DrLmGPoT6/BTIJDoL+h3QNheey3xABIm
0aovAXfWLOoLbnc4LthFj+9s4tYZ+mAY6kLGkBZbvq+KgLssjcRiNIbTYFe/LNoM
l8b2WLS+iUk6O5/4nZ5EwIc6TDAi5gPDEguCt0zPGta0OXgSmKXe
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:03:11 2023 by rpki-client on console-fra.rpki-client.org