Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/b1a82a-490f-43fb-986e-26170da4a0b1/1/PYLMzLxgQp1b0ATIMlD7Q2vnWOs.roa
File: PYLMzLxgQp1b0ATIMlD7Q2vnWOs.roa (raw, json)
Hash identifier: AHH7+6TNv4BNUQHG1gZ+FOIvKvWCe9iXNKCiPJ7j1yI=
Subject key identifier: 3D:82:CC:CC:BC:60:42:9D:5B:D0:04:C8:32:50:FB:43:6B:E7:58:EB
Certificate issuer: /CN=6d69da44ae067fc1a98a5f6f05f12e545d0fc62a
Certificate serial: 018A08C025C842CAE4FA47A68FEED8CD9AE3
Authority key identifier: 6D:69:DA:44:AE:06:7F:C1:A9:8A:5F:6F:05:F1:2E:54:5D:0F:C6:2A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bWnaRK4Gf8Gpil9vBfEuVF0Pxio.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/b1a82a-490f-43fb-986e-26170da4a0b1/1/PYLMzLxgQp1b0ATIMlD7Q2vnWOs.roa
Signing time: Fri 18 Aug 2023 13:05:24 +0000
ROA not before: Fri 18 Aug 2023 13:05:24 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 9121
IP address blocks: 185.33.61.0/24 maxlen: 24
185.33.63.0/24 maxlen: 24
31.169.69.0/24 maxlen: 24
31.169.70.0/24 maxlen: 24
31.169.65.0/24 maxlen: 24
31.169.66.0/24 maxlen: 24
31.169.67.0/24 maxlen: 24
31.169.71.0/24 maxlen: 24
31.169.78.0/24 maxlen: 24
31.169.76.0/24 maxlen: 24
31.169.77.0/24 maxlen: 24
31.169.72.0/24 maxlen: 24
31.169.81.0/24 maxlen: 24
31.169.88.0/24 maxlen: 24
31.169.90.0/24 maxlen: 24
31.169.91.0/24 maxlen: 24
31.169.95.0/24 maxlen: 24
31.169.92.0/24 maxlen: 24
31.169.93.0/24 maxlen: 24
31.169.94.0/24 maxlen: 24
31.169.64.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:08:c0:25:c8:42:ca:e4:fa:47:a6:8f:ee:d8:cd:9a:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d69da44ae067fc1a98a5f6f05f12e545d0fc62a
Validity
Not Before: Aug 18 13:05:24 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3d82ccccbc60429d5bd004c83250fb436be758eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:5e:52:3a:14:d2:cb:b4:79:d9:08:36:9b:28:
1f:ef:8e:be:eb:f8:22:84:54:5f:2d:e9:14:62:25:
bd:30:19:9f:9f:3b:bb:10:5f:f0:c9:b9:b7:ed:1e:
1c:c7:7d:ac:6a:0c:b7:57:44:d5:48:76:ed:fa:f9:
fa:5b:e5:ff:6d:ee:13:18:7b:6f:21:a2:81:79:14:
c0:b6:5e:0c:ce:0c:cf:95:68:7d:fd:0c:7e:c8:de:
0c:e5:6d:20:e0:7d:27:7a:d1:63:be:5a:d6:30:9a:
d3:56:aa:c4:91:30:26:3a:aa:18:20:1e:66:d3:f9:
29:f4:ca:78:78:17:ef:c5:61:96:57:17:82:5c:10:
9b:e9:a4:50:85:68:29:d2:82:24:c8:38:b3:14:f5:
b6:b5:08:b9:b4:f9:f1:84:f3:50:2c:9d:96:db:c7:
d0:1c:15:d9:fa:60:e4:25:1b:3c:94:0d:ab:f5:6b:
ed:f1:3e:bf:46:db:ed:2d:cd:71:c5:34:ce:03:eb:
21:e7:33:7a:82:82:40:47:3c:48:e1:36:59:00:86:
f2:77:f6:4d:87:37:2d:a8:13:dc:6c:3a:06:19:da:
e7:d1:a0:68:3f:b3:5d:93:f1:7f:23:5e:9e:9a:be:
44:2b:74:7e:a2:d4:a2:09:04:51:86:08:a8:39:f8:
7e:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:82:CC:CC:BC:60:42:9D:5B:D0:04:C8:32:50:FB:43:6B:E7:58:EB
X509v3 Authority Key Identifier:
keyid:6D:69:DA:44:AE:06:7F:C1:A9:8A:5F:6F:05:F1:2E:54:5D:0F:C6:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bWnaRK4Gf8Gpil9vBfEuVF0Pxio.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/b1a82a-490f-43fb-986e-26170da4a0b1/1/PYLMzLxgQp1b0ATIMlD7Q2vnWOs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/b1a82a-490f-43fb-986e-26170da4a0b1/1/bWnaRK4Gf8Gpil9vBfEuVF0Pxio.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.169.64.0/22
31.169.69.0-31.169.72.255
31.169.76.0-31.169.78.255
31.169.81.0/24
31.169.88.0/24
31.169.90.0-31.169.95.255
185.33.61.0/24
185.33.63.0/24
Signature Algorithm: sha256WithRSAEncryption
63:b1:c7:48:fa:ee:f5:12:71:aa:4d:8d:11:1b:0a:ea:3d:eb:
7d:12:91:69:59:ab:5d:28:a5:2d:14:3f:97:3f:d8:34:55:e4:
1e:b0:ce:90:c3:da:a3:0a:90:e8:b8:f9:88:56:8d:ea:0a:90:
3f:67:1a:66:79:6a:50:ab:37:72:14:f6:e2:fe:1e:30:d4:17:
a1:51:c0:54:25:c1:7a:8b:3b:c8:3e:7a:a3:c0:42:53:72:39:
ee:ca:57:7b:64:14:67:a9:28:dc:74:08:47:7c:cd:0d:ca:4f:
c8:6b:1f:54:f5:6c:68:38:6d:92:fd:bd:7e:6e:fe:88:a0:8a:
44:95:63:57:cc:fc:46:4c:d7:f4:bb:86:cf:c6:d0:73:7b:c0:
da:76:e1:aa:c3:62:2f:c6:43:cc:29:e1:3b:e8:46:20:15:99:
1b:f9:d4:c9:81:4e:1e:7d:47:a9:f9:18:75:74:84:61:d9:30:
a3:ed:28:21:44:6b:bb:49:ff:79:17:3d:bc:78:41:f8:24:57:
e7:3f:67:30:37:12:32:9f:56:a3:43:a2:0a:14:87:b1:46:ef:
60:a8:0d:74:10:3e:c7:b1:7d:0e:df:69:17:a4:61:1b:85:93:
4d:bd:df:f9:30:01:a1:28:ea:a9:42:63:fe:c8:44:ee:66:03:
6e:31:23:8f
-----BEGIN CERTIFICATE-----
MIIFPzCCBCegAwIBAgISAYoIwCXIQsrk+kemj+7YzZrjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZkNjlkYTQ0YWUwNjdmYzFhOThhNWY2ZjA1ZjEyZTU0NWQw
ZmM2MmEwHhcNMjMwODE4MTMwNTI0WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzZDgyY2NjY2JjNjA0MjlkNWJkMDA0YzgzMjUwZmI0MzZiZTc1OGViMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi15SOhTSy7R52Qg2mygf746+6/gi
hFRfLekUYiW9MBmfnzu7EF/wybm37R4cx32sagy3V0TVSHbt+vn6W+X/be4TGHtv
IaKBeRTAtl4MzgzPlWh9/Qx+yN4M5W0g4H0netFjvlrWMJrTVqrEkTAmOqoYIB5m
0/kp9Mp4eBfvxWGWVxeCXBCb6aRQhWgp0oIkyDizFPW2tQi5tPnxhPNQLJ2W28fQ
HBXZ+mDkJRs8lA2r9Wvt8T6/RtvtLc1xxTTOA+sh5zN6goJARzxI4TZZAIbyd/ZN
hzctqBPcbDoGGdrn0aBoP7Ndk/F/I16emr5EK3R+otSiCQRRhgioOfh+LwIDAQAB
o4ICSzCCAkcwHQYDVR0OBBYEFD2CzMy8YEKdW9AEyDJQ+0Nr51jrMB8GA1UdIwQY
MBaAFG1p2kSuBn/BqYpfbwXxLlRdD8YqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYlduYVJLNEdmOEdwaWw5dkJmRXVWRjBQeGlvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMS9iMWE4MmEtNDkwZi00M2ZiLTk4NmUt
MjYxNzBkYTRhMGIxLzEvUFlMTXpMeGdRcDFiMEFUSU1sRDdRMnZuV09zLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMS9iMWE4MmEtNDkwZi00M2ZiLTk4NmUtMjYxNzBkYTRhMGIx
LzEvYlduYVJLNEdmOEdwaWw5dkJmRXVWRjBQeGlvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMGEGCCsGAQUFBwEHAQH/BFIwUDBOBAIAATBIAwQCH6lAMAwD
BAAfqUUDBAAfqUgwDAMEAh+pTAMEAB+pTgMEAB+pUQMEAB+pWDAMAwQBH6laAwQF
H6lAAwQAuSE9AwQAuSE/MA0GCSqGSIb3DQEBCwUAA4IBAQBjscdI+u71EnGqTY0R
GwrqPet9EpFpWatdKKUtFD+XP9g0VeQesM6Qw9qjCpDouPmIVo3qCpA/ZxpmeWpQ
qzdyFPbi/h4w1BehUcBUJcF6izvIPnqjwEJTcjnuyld7ZBRnqSjcdAhHfM0Nyk/I
ax9U9WxoOG2S/b1+bv6IoIpElWNXzPxGTNf0u4bPxtBze8DaduGqw2IvxkPMKeE7
6EYgFZkb+dTJgU4efUep+Rh1dIRh2TCj7SghRGu7Sf95Fz28eEH4JFfnP2cwNxIy
n1ajQ6IKFIexRu9gqA10ED7HsX0O32kXpGEbhZNNvd/5MAGhKOqpQmP+yETuZgNu
MSOP
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:45:47 2024 by rpki-client on console-ams.rpki-client.org