Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/3630cb-ebec-4d86-b12b-bffb757c3134/1/RbY0SVkimwjGGdx60wnwTWuZnAU.roa
File: RbY0SVkimwjGGdx60wnwTWuZnAU.roa (raw, json)
Hash identifier: Z4K32fcEAxVdusd+Jth9OIO6EQXf5V2VukE2MxAW8i8=
Subject key identifier: 45:B6:34:49:59:22:9B:08:C6:19:DC:7A:D3:09:F0:4D:6B:99:9C:05
Certificate issuer: /CN=96bfc5a172654dd6009db1d82d92ffaf71234120
Certificate serial: 099AB27D
Authority key identifier: 96:BF:C5:A1:72:65:4D:D6:00:9D:B1:D8:2D:92:FF:AF:71:23:41:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lr_FoXJlTdYAnbHYLZL_r3EjQSA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/3630cb-ebec-4d86-b12b-bffb757c3134/1/RbY0SVkimwjGGdx60wnwTWuZnAU.roa
Signing time: Tue 26 Apr 2022 14:28:26 +0000
ROA not before: Tue 26 Apr 2022 14:28:26 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 213081
IP address blocks: 147.78.192.0/22 maxlen: 24
91.194.139.0/24 maxlen: 24
185.203.112.0/22 maxlen: 24
2a0a:e5c0::/29 maxlen: 48
2a09:2940::/29 maxlen: 48
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 161133181 (0x99ab27d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=96bfc5a172654dd6009db1d82d92ffaf71234120
Validity
Not Before: Apr 26 14:28:26 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=45b6344959229b08c619dc7ad309f04d6b999c05
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:da:0c:3f:5d:9a:89:1f:ef:cb:e9:e0:2b:c9:
db:a9:a8:cc:80:fa:f7:bd:c2:d4:24:9f:81:1d:49:
0a:11:bb:69:fa:72:85:41:50:65:a8:50:63:de:95:
45:ae:85:a6:04:36:e7:63:bb:dd:23:74:33:a4:46:
0b:a2:6f:e8:86:0a:03:16:cd:c5:3e:cf:6b:30:f8:
38:39:96:8e:cd:f4:0c:a9:d4:df:ec:e7:2b:4f:6a:
16:a2:69:2e:0f:09:ba:24:37:47:9d:09:03:cd:56:
66:6b:88:ec:6d:f0:fc:d6:85:8c:0b:97:8e:e9:f8:
e0:26:44:40:33:fd:75:ff:84:96:86:db:cc:b0:c1:
ee:c4:e7:7a:d0:77:c5:2f:69:3a:31:2e:2c:e4:ed:
f6:5a:6f:cc:e3:ad:92:9b:4e:1b:ba:8c:c5:be:85:
10:89:e7:6b:20:61:0d:c8:11:de:22:52:3d:63:87:
2c:46:71:8a:12:e9:56:66:f0:e8:e5:d2:a8:d8:3b:
4b:0e:a7:ab:15:57:94:5d:98:a8:26:42:ed:0c:8b:
91:e5:d7:e8:92:9d:b6:aa:41:57:99:f9:a8:0e:75:
4a:df:0f:34:3d:3e:48:e1:a1:96:41:74:44:60:a0:
bf:8c:42:db:9e:98:84:60:f2:86:ac:1a:83:d9:bc:
05:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:B6:34:49:59:22:9B:08:C6:19:DC:7A:D3:09:F0:4D:6B:99:9C:05
X509v3 Authority Key Identifier:
keyid:96:BF:C5:A1:72:65:4D:D6:00:9D:B1:D8:2D:92:FF:AF:71:23:41:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lr_FoXJlTdYAnbHYLZL_r3EjQSA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/3630cb-ebec-4d86-b12b-bffb757c3134/1/RbY0SVkimwjGGdx60wnwTWuZnAU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/3630cb-ebec-4d86-b12b-bffb757c3134/1/lr_FoXJlTdYAnbHYLZL_r3EjQSA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.194.139.0/24
147.78.192.0/22
185.203.112.0/22
IPv6:
2a09:2940::/29
2a0a:e5c0::/29
Signature Algorithm: sha256WithRSAEncryption
45:57:ea:87:09:95:6b:bc:36:93:96:09:b9:54:15:ce:b6:02:
7f:19:f7:cc:ff:0f:46:88:8d:91:3b:55:92:e4:8c:5e:d8:42:
e6:41:d2:28:29:56:0b:ed:e8:5b:89:66:1a:52:d2:b5:64:be:
7a:22:0b:49:ec:0d:6d:80:1a:b5:c3:c9:ff:60:98:53:2e:43:
8a:40:13:47:aa:47:6a:a7:97:8e:27:47:d9:e4:5c:24:57:7c:
5d:22:1a:6e:d2:54:43:31:1d:3b:40:59:92:f0:58:c9:da:4f:
0c:a8:0b:0c:cf:74:ed:63:e8:a2:63:b4:86:02:76:bb:dc:24:
37:8f:44:a3:13:d2:f0:41:d6:99:16:bb:fc:01:43:32:f4:41:
4f:2b:69:af:ad:05:51:12:34:e1:4d:89:36:58:46:03:2f:4b:
be:7a:7c:9e:52:55:b7:c1:14:d0:02:10:86:48:21:5a:a1:ea:
6d:44:cd:59:d0:69:4e:d5:01:90:06:f7:70:0f:c5:79:2d:e1:
79:e6:6b:a9:98:6c:b1:db:ea:64:b2:34:48:4a:79:63:a1:68:
56:40:b1:ab:54:dc:97:20:0c:0e:a3:80:3a:f3:9e:cd:3c:e0:
9a:63:c9:37:57:44:3a:46:51:fa:d0:0b:af:e9:94:e0:79:4b:
6e:7d:50:ed
-----BEGIN CERTIFICATE-----
MIIFETCCA/mgAwIBAgIECZqyfTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg5
NmJmYzVhMTcyNjU0ZGQ2MDA5ZGIxZDgyZDkyZmZhZjcxMjM0MTIwMB4XDTIyMDQy
NjE0MjgyNloXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoNDViNjM0NDk1OTIy
OWIwOGM2MTlkYzdhZDMwOWYwNGQ2Yjk5OWMwNTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAIfaDD9dmokf78vp4CvJ26mozID6973C1CSfgR1JChG7afpy
hUFQZahQY96VRa6FpgQ252O73SN0M6RGC6Jv6IYKAxbNxT7PazD4ODmWjs30DKnU
3+znK09qFqJpLg8JuiQ3R50JA81WZmuI7G3w/NaFjAuXjun44CZEQDP9df+Elobb
zLDB7sTnetB3xS9pOjEuLOTt9lpvzOOtkptOG7qMxb6FEInnayBhDcgR3iJSPWOH
LEZxihLpVmbw6OXSqNg7Sw6nqxVXlF2YqCZC7QyLkeXX6JKdtqpBV5n5qA51St8P
ND0+SOGhlkF0RGCgv4xC256YhGDyhqwag9m8BcUCAwEAAaOCAiswggInMB0GA1Ud
DgQWBBRFtjRJWSKbCMYZ3HrTCfBNa5mcBTAfBgNVHSMEGDAWgBSWv8WhcmVN1gCd
sdgtkv+vcSNBIDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L2xyX0ZvWEpsVGRZQW5iSFlMWkxfcjNFalFTQS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvY2MvMzYzMGNiLWViZWMtNGQ4Ni1iMTJiLWJmZmI3NTdjMzEzNC8x
L1JiWTBTVmtpbXdqR0dkeDYwd253VFd1Wm5BVS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvY2Mv
MzYzMGNiLWViZWMtNGQ4Ni1iMTJiLWJmZmI3NTdjMzEzNC8xL2xyX0ZvWEpsVGRZ
QW5iSFlMWkxfcjNFalFTQS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBB
BggrBgEFBQcBBwEB/wQyMDAwGAQCAAEwEgMEAFvCiwMEApNOwAMEArnLcDAUBAIA
AjAOAwUDKgkpQAMFAyoK5cAwDQYJKoZIhvcNAQELBQADggEBAEVX6ocJlWu8NpOW
CblUFc62An8Z98z/D0aIjZE7VZLkjF7YQuZB0igpVgvt6FuJZhpS0rVkvnoiC0ns
DW2AGrXDyf9gmFMuQ4pAE0eqR2qnl44nR9nkXCRXfF0iGm7SVEMxHTtAWZLwWMna
TwyoCwzPdO1j6KJjtIYCdrvcJDePRKMT0vBB1pkWu/wBQzL0QU8raa+tBVESNOFN
iTZYRgMvS756fJ5SVbfBFNACEIZIIVqh6m1EzVnQaU7VAZAG93APxXkt4Xnma6mY
bLHb6mSyNEhKeWOhaFZAsatU3JcgDA6jgDrzns084JpjyTdXRDpGUfrQC6/plOB5
S259UO0=
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:44:34 2024 by rpki-client on console-ams.rpki-client.org