Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/a8947f-e52c-4de1-bade-70c0a506d797/1/_Yw6Q0kwUwD362RHgV-AKPSNO70.roa
File: _Yw6Q0kwUwD362RHgV-AKPSNO70.roa (raw, json)
Hash identifier: knCBntXL40L2ndwgKVbvURp7eGKRoZD4XtKoRSq34H8=
Subject key identifier: FD:8C:3A:43:49:30:53:00:F7:EB:64:47:81:5F:80:28:F4:8D:3B:BD
Certificate issuer: /CN=02b980c10d7110f91fff9e0eceb639d9e75b35e2
Certificate serial: 018268FA7ED1F3F28AAA27D69F2372199F09
Authority key identifier: 02:B9:80:C1:0D:71:10:F9:1F:FF:9E:0E:CE:B6:39:D9:E7:5B:35:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ArmAwQ1xEPkf_54OzrY52edbNeI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/a8947f-e52c-4de1-bade-70c0a506d797/1/_Yw6Q0kwUwD362RHgV-AKPSNO70.roa
Signing time: Thu 04 Aug 2022 13:10:23 +0000
ROA not before: Thu 04 Aug 2022 13:10:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 29676
IP address blocks: 109.224.216.0/22 maxlen: 22
109.224.222.0/24 maxlen: 24
109.224.220.0/23 maxlen: 23
109.224.224.0/23 maxlen: 23
109.224.228.0/22 maxlen: 22
109.224.233.0/24 maxlen: 24
109.224.236.0/22 maxlen: 22
109.224.243.0/24 maxlen: 24
109.224.244.0/22 maxlen: 22
109.224.248.0/21 maxlen: 21
109.224.192.0/20 maxlen: 20
109.224.192.0/18 maxlen: 18
109.224.208.0/21 maxlen: 21
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:68:fa:7e:d1:f3:f2:8a:aa:27:d6:9f:23:72:19:9f:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=02b980c10d7110f91fff9e0eceb639d9e75b35e2
Validity
Not Before: Aug 4 13:10:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=fd8c3a4349305300f7eb6447815f8028f48d3bbd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:5c:d5:98:7c:48:c0:fd:2c:37:31:50:a4:1e:
dc:b3:b1:03:4b:bf:4b:c7:9e:ff:6a:0d:08:86:bc:
14:c9:35:95:ef:91:73:53:27:98:8a:32:33:3a:78:
8b:d4:57:58:1c:90:eb:05:c2:f3:f2:6f:c6:6d:ac:
a4:e2:49:bc:50:48:21:45:4c:36:b3:26:f2:ec:c3:
c1:47:ae:8d:a9:ea:9f:e0:9f:9e:7d:5b:5c:77:a2:
69:12:ba:35:86:fb:5f:49:d5:18:19:0d:d0:8a:27:
10:9f:7a:c1:1e:53:00:68:d0:8a:9d:03:7f:1b:30:
cd:d5:32:9b:89:b8:36:7b:74:86:fc:b8:58:c4:3c:
1f:30:d6:51:54:48:b3:b5:13:76:f4:d9:76:6a:31:
98:16:d5:4c:e4:43:b2:e6:05:d7:1c:5b:4f:00:b6:
9b:fc:fc:4e:45:54:8c:5f:e9:f5:69:e0:b2:d9:ca:
1f:db:10:86:63:cd:7e:af:9a:b0:e4:45:4e:4a:16:
b2:93:4e:65:a8:be:d5:9c:cb:15:5d:50:ac:2d:59:
ab:f3:a2:5a:47:bf:fb:7d:2b:06:60:fe:65:24:cf:
f2:f8:56:d0:37:96:b0:58:56:14:08:b7:5b:77:4e:
ab:6d:5b:56:93:d1:8a:06:6a:1b:71:62:56:10:a0:
fd:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:8C:3A:43:49:30:53:00:F7:EB:64:47:81:5F:80:28:F4:8D:3B:BD
X509v3 Authority Key Identifier:
keyid:02:B9:80:C1:0D:71:10:F9:1F:FF:9E:0E:CE:B6:39:D9:E7:5B:35:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ArmAwQ1xEPkf_54OzrY52edbNeI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/a8947f-e52c-4de1-bade-70c0a506d797/1/_Yw6Q0kwUwD362RHgV-AKPSNO70.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/a8947f-e52c-4de1-bade-70c0a506d797/1/ArmAwQ1xEPkf_54OzrY52edbNeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.224.192.0/18
Signature Algorithm: sha256WithRSAEncryption
1e:5b:94:52:ac:68:08:67:e8:9e:38:19:97:d3:6d:e3:7b:b5:
75:66:e2:a4:8a:ed:ab:fc:a2:b5:1b:c3:9c:81:8c:fb:59:82:
4e:f7:32:e4:53:6e:f4:db:ab:84:af:03:db:85:fb:e2:af:a1:
aa:0b:49:f0:56:4c:c1:f6:53:7d:59:56:de:0f:61:46:13:4b:
53:cc:cc:4e:1d:53:ea:21:31:82:06:d5:c0:e5:bf:91:ab:38:
10:f1:30:64:1c:eb:df:48:73:7b:66:31:aa:4d:18:6c:d0:9d:
4d:db:37:ad:74:7a:ba:57:0c:3e:ec:5d:14:fd:49:4b:21:53:
b1:e2:43:85:66:9c:e9:bd:35:21:5a:dd:06:82:ec:71:0e:f9:
57:28:34:07:11:23:a6:50:d4:b6:c3:ed:14:41:d5:d6:e4:f2:
a3:55:75:44:aa:a1:d1:9a:ec:7d:a9:11:31:2c:0e:74:06:b2:
8e:03:a7:f3:95:4c:ca:79:04:83:21:32:0c:ac:fd:e2:96:da:
fb:ae:7a:64:6a:02:cb:61:cc:08:b5:82:5e:6e:a2:8f:81:c7:
8e:1e:7a:ef:76:e9:ed:41:04:6d:7e:fe:c7:88:2c:e8:b9:22:
ce:e0:3f:97:5d:30:da:d1:d8:7f:10:7e:09:c4:99:10:fb:31:
08:75:86:61
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYJo+n7R8/KKqifWnyNyGZ8JMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAyYjk4MGMxMGQ3MTEwZjkxZmZmOWUwZWNlYjYzOWQ5ZTc1
YjM1ZTIwHhcNMjIwODA0MTMxMDIzWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmZDhjM2E0MzQ5MzA1MzAwZjdlYjY0NDc4MTVmODAyOGY0OGQzYmJkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAslzVmHxIwP0sNzFQpB7cs7EDS79L
x57/ag0IhrwUyTWV75FzUyeYijIzOniL1FdYHJDrBcLz8m/Gbayk4km8UEghRUw2
syby7MPBR66Nqeqf4J+efVtcd6JpEro1hvtfSdUYGQ3QiicQn3rBHlMAaNCKnQN/
GzDN1TKbibg2e3SG/LhYxDwfMNZRVEiztRN29Nl2ajGYFtVM5EOy5gXXHFtPALab
/PxORVSMX+n1aeCy2cof2xCGY81+r5qw5EVOShayk05lqL7VnMsVXVCsLVmr86Ja
R7/7fSsGYP5lJM/y+FbQN5awWFYUCLdbd06rbVtWk9GKBmobcWJWEKD9+wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFP2MOkNJMFMA9+tkR4FfgCj0jTu9MB8GA1UdIwQY
MBaAFAK5gMENcRD5H/+eDs62OdnnWzXiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQXJtQXdRMXhFUGtmXzU0T3pyWTUyZWRiTmVJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZi9hODk0N2YtZTUyYy00ZGUxLWJhZGUt
NzBjMGE1MDZkNzk3LzEvX1l3NlEwa3dVd0QzNjJSSGdWLUFLUFNOTzcwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZi9hODk0N2YtZTUyYy00ZGUxLWJhZGUtNzBjMGE1MDZkNzk3
LzEvQXJtQXdRMXhFUGtmXzU0T3pyWTUyZWRiTmVJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGbeDAMA0G
CSqGSIb3DQEBCwUAA4IBAQAeW5RSrGgIZ+ieOBmX023je7V1ZuKkiu2r/KK1G8Oc
gYz7WYJO9zLkU27026uErwPbhfvir6GqC0nwVkzB9lN9WVbeD2FGE0tTzMxOHVPq
ITGCBtXA5b+RqzgQ8TBkHOvfSHN7ZjGqTRhs0J1N2zetdHq6Vww+7F0U/UlLIVOx
4kOFZpzpvTUhWt0GguxxDvlXKDQHESOmUNS2w+0UQdXW5PKjVXVEqqHRmux9qREx
LA50BrKOA6fzlUzKeQSDITIMrP3iltr7rnpkagLLYcwItYJebqKPgceOHnrvdunt
QQRtfv7HiCzouSLO4D+XXTDa0dh/EH4JxJkQ+zEIdYZh
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:08:03 2023 by rpki-client on console-ams.rpki-client.org