Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/01f736-af83-456c-8b45-5146ab7ea015/1/2DyZSyt3ye8h3Ruku93O-yE7GAs.roa
File: 2DyZSyt3ye8h3Ruku93O-yE7GAs.roa (raw, json)
Hash identifier: YXIwyCMuiPJrWpRFj3fJtysU0WErlOvrdGNIxojRCkc=
Subject key identifier: D8:3C:99:4B:2B:77:C9:EF:21:DD:1B:A4:BB:DD:CE:FB:21:3B:18:0B
Certificate issuer: /CN=535825ce8bf544170282f720a2484141568b0e7d
Certificate serial: 33E8740C
Authority key identifier: 53:58:25:CE:8B:F5:44:17:02:82:F7:20:A2:48:41:41:56:8B:0E:7D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U1glzov1RBcCgvcgokhBQVaLDn0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/01f736-af83-456c-8b45-5146ab7ea015/1/2DyZSyt3ye8h3Ruku93O-yE7GAs.roa
Signing time: Sat 01 Jan 2022 06:56:52 +0000
ROA not before: Sat 01 Jan 2022 06:56:52 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 21177
IP address blocks: 80.84.64.0/21 maxlen: 21
80.84.72.0/21 maxlen: 21
80.84.80.0/21 maxlen: 21
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 870872076 (0x33e8740c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=535825ce8bf544170282f720a2484141568b0e7d
Validity
Not Before: Jan 1 06:56:52 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d83c994b2b77c9ef21dd1ba4bbddcefb213b180b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:a0:ff:6e:44:65:6b:88:8d:b7:d0:fa:e6:c7:
cb:73:f3:16:44:4b:33:37:7c:ba:e9:9a:38:2a:a6:
56:df:74:e3:78:50:28:22:ea:fa:c5:01:4a:7d:37:
dc:07:af:58:6f:49:a9:51:55:36:1d:47:5e:17:7c:
32:60:19:c7:54:5b:c2:d6:61:b5:d1:7b:71:1f:e3:
cc:14:0b:39:ed:ce:6e:4a:39:73:07:7c:89:8c:a3:
d6:43:94:9e:61:07:de:d2:2b:e9:79:9e:6c:ca:e1:
dd:7b:3c:db:8f:62:aa:cf:c3:14:cc:ec:b9:c1:37:
9d:d6:8b:99:9d:8e:57:9b:61:de:bb:c4:c3:21:2a:
b2:5d:6a:2d:a8:6b:e6:f8:6c:ef:84:7d:fe:3d:88:
e2:7a:1a:00:f0:45:da:59:75:bd:2c:b9:48:47:64:
35:1f:a0:e3:bf:ec:78:0f:cc:78:e3:6a:e5:af:96:
5c:87:46:37:f4:c8:14:84:81:a7:34:39:ff:24:12:
4e:02:c8:d5:f7:80:e8:19:03:4d:8a:4b:2d:bd:ea:
e3:0c:6f:a8:3a:f1:a3:c5:69:bb:fe:df:85:0a:d3:
a1:62:d3:c9:cb:e3:45:dd:e0:a3:b7:9c:f8:7e:9a:
fd:fa:56:56:25:b4:03:1e:02:1f:09:f4:33:eb:b2:
86:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:3C:99:4B:2B:77:C9:EF:21:DD:1B:A4:BB:DD:CE:FB:21:3B:18:0B
X509v3 Authority Key Identifier:
keyid:53:58:25:CE:8B:F5:44:17:02:82:F7:20:A2:48:41:41:56:8B:0E:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U1glzov1RBcCgvcgokhBQVaLDn0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/01f736-af83-456c-8b45-5146ab7ea015/1/2DyZSyt3ye8h3Ruku93O-yE7GAs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/01f736-af83-456c-8b45-5146ab7ea015/1/U1glzov1RBcCgvcgokhBQVaLDn0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.84.64.0-80.84.87.255
Signature Algorithm: sha256WithRSAEncryption
5a:fc:43:b4:32:f2:8a:24:18:ee:ac:fd:63:5c:8d:52:50:1d:
bd:39:cb:49:39:44:23:94:7f:29:7e:6e:94:ee:c8:42:10:9f:
c2:bb:c5:bd:71:60:04:b0:42:c1:8e:2d:30:cd:44:92:80:de:
93:51:f8:4b:e5:2c:6a:30:03:54:09:ef:cb:4e:e1:77:ec:10:
d5:65:9a:a1:4a:dd:6e:3f:77:c3:7a:b6:61:7f:67:ee:4e:29:
09:65:ac:56:f1:62:51:d6:61:12:e3:62:79:10:23:57:98:ce:
24:9d:a1:24:e9:69:9b:35:f5:73:fa:53:c7:d3:43:23:09:f9:
22:31:d5:bd:fc:c6:aa:b1:f7:a0:9f:39:2d:78:99:ee:aa:59:
0c:d2:e0:1d:71:50:54:aa:e6:a0:70:7b:b4:23:ff:82:0e:16:
f5:4b:5a:08:e1:d7:08:9e:e2:9f:d2:5a:3a:78:90:44:6d:8d:
32:28:ea:a9:c7:b3:ca:0e:db:cb:86:f9:30:87:87:5a:44:be:
9f:db:63:85:da:ac:7a:f4:17:b7:69:b9:26:9e:ea:77:22:14:
e0:9c:5a:e3:62:52:e3:86:05:96:95:3d:9b:6c:cf:1d:2a:df:
48:0f:f7:97:29:c5:89:06:47:27:17:90:d3:87:d2:52:86:b5:
5b:d2:39:41
-----BEGIN CERTIFICATE-----
MIIE9zCCA9+gAwIBAgIEM+h0DDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg1
MzU4MjVjZThiZjU0NDE3MDI4MmY3MjBhMjQ4NDE0MTU2OGIwZTdkMB4XDTIyMDEw
MTA2NTY1MloXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoZDgzYzk5NGIyYjc3
YzllZjIxZGQxYmE0YmJkZGNlZmIyMTNiMTgwYjCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAL+g/25EZWuIjbfQ+ubHy3PzFkRLMzd8uumaOCqmVt9043hQ
KCLq+sUBSn033AevWG9JqVFVNh1HXhd8MmAZx1RbwtZhtdF7cR/jzBQLOe3Obko5
cwd8iYyj1kOUnmEH3tIr6XmebMrh3Xs8249iqs/DFMzsucE3ndaLmZ2OV5th3rvE
wyEqsl1qLahr5vhs74R9/j2I4noaAPBF2ll1vSy5SEdkNR+g47/seA/MeONq5a+W
XIdGN/TIFISBpzQ5/yQSTgLI1feA6BkDTYpLLb3q4wxvqDrxo8Vpu/7fhQrToWLT
ycvjRd3go7ec+H6a/fpWViW0Ax4CHwn0M+uyhhECAwEAAaOCAhEwggINMB0GA1Ud
DgQWBBTYPJlLK3fJ7yHdG6S73c77ITsYCzAfBgNVHSMEGDAWgBRTWCXOi/VEFwKC
9yCiSEFBVosOfTAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L1UxZ2x6b3YxUkJjQ2d2Y2dva2hCUVZhTERuMC5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvYzkvMDFmNzM2LWFmODMtNDU2Yy04YjQ1LTUxNDZhYjdlYTAxNS8x
LzJEeVpTeXQzeWU4aDNSdWt1OTNPLXlFN0dBcy5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYzkv
MDFmNzM2LWFmODMtNDU2Yy04YjQ1LTUxNDZhYjdlYTAxNS8xL1UxZ2x6b3YxUkJj
Q2d2Y2dva2hCUVZhTERuMC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAn
BggrBgEFBQcBBwEB/wQYMBYwFAQCAAEwDjAMAwQGUFRAAwQDUFRQMA0GCSqGSIb3
DQEBCwUAA4IBAQBa/EO0MvKKJBjurP1jXI1SUB29OctJOUQjlH8pfm6U7shCEJ/C
u8W9cWAEsELBji0wzUSSgN6TUfhL5SxqMANUCe/LTuF37BDVZZqhSt1uP3fDerZh
f2fuTikJZaxW8WJR1mES42J5ECNXmM4knaEk6WmbNfVz+lPH00MjCfkiMdW9/Maq
sfegnzkteJnuqlkM0uAdcVBUquagcHu0I/+CDhb1S1oI4dcInuKf0lo6eJBEbY0y
KOqpx7PKDtvLhvkwh4daRL6f22OF2qx69Be3abkmnup3IhTgnFrjYlLjhgWWlT2b
bM8dKt9ID/eXKcWJBkcnF5DTh9JShrVb0jlB
-----END CERTIFICATE-----
Generated at Wed Apr 16 07:11:54 2025 by rpki-client