Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/c37497-6376-461e-93c6-9778674edc97/1/AvchGGnizOpC3y6okqGXF9KHdC8.roa
File: AvchGGnizOpC3y6okqGXF9KHdC8.roa (raw, json)
Hash identifier: LjMNGqauOgQjFdZvreSB5MiAJ1liCPG9ssQQBREtFVc=
Subject key identifier: 02:F7:21:18:69:E2:CC:EA:42:DF:2E:A8:92:A1:97:17:D2:87:74:2F
Certificate issuer: /CN=7df132df13e4be53d8250c8c48420264eef6c14c
Certificate serial: 17527552
Authority key identifier: 7D:F1:32:DF:13:E4:BE:53:D8:25:0C:8C:48:42:02:64:EE:F6:C1:4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ffEy3xPkvlPYJQyMSEICZO72wUw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/c37497-6376-461e-93c6-9778674edc97/1/AvchGGnizOpC3y6okqGXF9KHdC8.roa
Signing time: Sat 01 Jan 2022 16:03:55 +0000
ROA not before: Sat 01 Jan 2022 16:03:55 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 51832
IP address blocks: 93.119.168.0/24 maxlen: 24
93.119.170.0/24 maxlen: 24
93.119.169.0/24 maxlen: 24
93.119.171.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 391279954 (0x17527552)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7df132df13e4be53d8250c8c48420264eef6c14c
Validity
Not Before: Jan 1 16:03:55 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=02f7211869e2ccea42df2ea892a19717d287742f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:7f:c2:bd:54:44:d1:07:f3:b1:6b:19:88:b2:
45:47:ed:cf:53:07:40:1e:4a:57:d2:25:cd:e5:5d:
a2:9a:d6:4b:10:2d:6e:56:eb:89:d1:9e:31:b3:9d:
b6:b3:e3:63:40:f7:27:35:c0:18:17:51:13:81:55:
5c:ae:e8:2e:5b:ce:d4:b0:ea:3c:e2:80:88:73:98:
e2:46:96:84:11:7b:eb:b2:c7:45:0b:83:6e:66:bb:
e8:33:b2:d1:f7:a9:24:2f:55:73:6b:ae:92:db:6e:
40:e7:d4:ba:5b:1a:62:38:0d:77:39:d9:37:e9:fe:
33:5b:73:de:60:0e:dd:15:18:5d:29:ca:ab:6b:60:
c1:41:fb:42:00:4f:bd:0b:a8:a9:c5:d4:ba:b3:fe:
b8:5f:d6:2e:14:d4:03:ae:e9:b8:fe:eb:17:65:07:
bf:08:fe:ea:e4:b4:69:c9:66:56:4f:ab:fc:8b:c0:
e2:aa:47:44:ac:6d:b2:53:2a:15:44:a1:8b:c0:be:
6b:e8:7e:c4:a0:67:9a:c5:c8:6b:32:00:1d:18:b2:
ce:fe:86:40:9c:c6:8a:ef:54:06:16:ba:c9:53:ad:
47:01:f2:2a:1f:a1:13:9d:8f:24:6f:03:c6:91:fa:
e4:65:83:12:23:4a:7b:be:5b:08:e7:de:ac:11:52:
48:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:F7:21:18:69:E2:CC:EA:42:DF:2E:A8:92:A1:97:17:D2:87:74:2F
X509v3 Authority Key Identifier:
keyid:7D:F1:32:DF:13:E4:BE:53:D8:25:0C:8C:48:42:02:64:EE:F6:C1:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ffEy3xPkvlPYJQyMSEICZO72wUw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/c37497-6376-461e-93c6-9778674edc97/1/AvchGGnizOpC3y6okqGXF9KHdC8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/c37497-6376-461e-93c6-9778674edc97/1/ffEy3xPkvlPYJQyMSEICZO72wUw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.119.168.0/22
Signature Algorithm: sha256WithRSAEncryption
61:af:88:ca:10:53:76:83:5e:ce:a4:0a:8c:45:28:68:2b:23:
08:2c:be:a0:c9:3a:ff:95:04:43:92:a9:33:17:7e:c1:29:a3:
ac:0a:5b:43:7d:b8:f7:a3:45:e4:dd:57:b5:c6:30:c4:df:5f:
3e:16:34:8c:66:2d:23:22:55:fa:b5:d4:3d:b6:57:04:56:fe:
42:f8:d1:80:08:74:4c:f0:72:c5:44:0e:68:d7:5c:38:13:f3:
ee:67:32:e8:f3:e6:51:2e:f8:51:81:11:5a:03:aa:79:07:f8:
c8:03:59:14:c9:11:1b:02:fe:9f:a3:3f:51:b5:03:2d:04:5d:
cc:5a:88:62:ba:19:69:e5:45:e6:4f:33:71:a6:f8:35:3f:01:
f6:6c:39:90:55:68:6b:4c:09:61:68:e9:73:03:79:a9:30:97:
54:42:7b:6a:0e:ad:c8:5b:0b:7c:04:71:0b:aa:c2:ce:e8:c2:
69:97:fe:12:d3:c9:4f:3c:42:c9:d9:1f:71:6a:45:a8:45:fe:
fd:29:00:92:64:0e:a8:da:c8:ec:b8:49:ca:74:ff:ed:51:fc:
d4:d3:5a:9c:7e:b7:97:e0:45:7a:0c:22:b0:91:ae:79:ef:a8:
83:11:91:f6:c1:49:3a:b4:87:84:75:a1:27:5f:97:49:45:a7:
af:3f:bc:94
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEF1J1UjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg3
ZGYxMzJkZjEzZTRiZTUzZDgyNTBjOGM0ODQyMDI2NGVlZjZjMTRjMB4XDTIyMDEw
MTE2MDM1NVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoMDJmNzIxMTg2OWUy
Y2NlYTQyZGYyZWE4OTJhMTk3MTdkMjg3NzQyZjCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAOV/wr1URNEH87FrGYiyRUftz1MHQB5KV9IlzeVdoprWSxAt
blbridGeMbOdtrPjY0D3JzXAGBdRE4FVXK7oLlvO1LDqPOKAiHOY4kaWhBF767LH
RQuDbma76DOy0fepJC9Vc2uukttuQOfUulsaYjgNdznZN+n+M1tz3mAO3RUYXSnK
q2tgwUH7QgBPvQuoqcXUurP+uF/WLhTUA67puP7rF2UHvwj+6uS0aclmVk+r/IvA
4qpHRKxtslMqFUShi8C+a+h+xKBnmsXIazIAHRiyzv6GQJzGiu9UBha6yVOtRwHy
Kh+hE52PJG8DxpH65GWDEiNKe75bCOferBFSSAECAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBQC9yEYaeLM6kLfLqiSoZcX0od0LzAfBgNVHSMEGDAWgBR98TLfE+S+U9gl
DIxIQgJk7vbBTDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L2ZmRXkzeFBrdmxQWUpReU1TRUlDWk83MndVdy5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvYmUvYzM3NDk3LTYzNzYtNDYxZS05M2M2LTk3Nzg2NzRlZGM5Ny8x
L0F2Y2hHR25pek9wQzN5Nm9rcUdYRjlLSGRDOC5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYmUv
YzM3NDk3LTYzNzYtNDYxZS05M2M2LTk3Nzg2NzRlZGM5Ny8xL2ZmRXkzeFBrdmxQ
WUpReU1TRUlDWk83MndVdy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAl13qDANBgkqhkiG9w0BAQsFAAOC
AQEAYa+IyhBTdoNezqQKjEUoaCsjCCy+oMk6/5UEQ5KpMxd+wSmjrApbQ32496NF
5N1XtcYwxN9fPhY0jGYtIyJV+rXUPbZXBFb+QvjRgAh0TPByxUQOaNdcOBPz7mcy
6PPmUS74UYERWgOqeQf4yANZFMkRGwL+n6M/UbUDLQRdzFqIYroZaeVF5k8zcab4
NT8B9mw5kFVoa0wJYWjpcwN5qTCXVEJ7ag6tyFsLfARxC6rCzujCaZf+EtPJTzxC
ydkfcWpFqEX+/SkAkmQOqNrI7LhJynT/7VH81NNanH63l+BFegwisJGuee+ogxGR
9sFJOrSHhHWhJ1+XSUWnrz+8lA==
-----END CERTIFICATE-----
Generated at Fri Apr 18 08:09:41 2025 by rpki-client