Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/b1a82a-490f-43fb-986e-26170da4a0b1/1/PaylFgMHh2-Xn-Y1QKsX6fkYhg4.roa
File: PaylFgMHh2-Xn-Y1QKsX6fkYhg4.roa (raw, json)
Hash identifier: wb5gBKAFK7PNp6ruGIrh8/xXjg6uTIbWDL/OGWLwYbk=
Subject key identifier: 3D:AC:A5:16:03:07:87:6F:97:9F:E6:35:40:AB:17:E9:F9:18:86:0E
Certificate issuer: /CN=6d69da44ae067fc1a98a5f6f05f12e545d0fc62a
Certificate serial: 382DED3E
Authority key identifier: 6D:69:DA:44:AE:06:7F:C1:A9:8A:5F:6F:05:F1:2E:54:5D:0F:C6:2A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bWnaRK4Gf8Gpil9vBfEuVF0Pxio.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/b1a82a-490f-43fb-986e-26170da4a0b1/1/PaylFgMHh2-Xn-Y1QKsX6fkYhg4.roa
Signing time: Fri 29 Apr 2022 14:59:58 +0000
ROA not before: Fri 29 Apr 2022 14:59:58 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 9121
IP address blocks: 185.33.61.0/24 maxlen: 24
185.33.63.0/24 maxlen: 24
31.169.69.0/24 maxlen: 24
31.169.70.0/24 maxlen: 24
31.169.65.0/24 maxlen: 24
31.169.66.0/24 maxlen: 24
31.169.67.0/24 maxlen: 24
31.169.71.0/24 maxlen: 24
31.169.78.0/24 maxlen: 24
31.169.76.0/24 maxlen: 24
31.169.77.0/24 maxlen: 24
31.169.72.0/24 maxlen: 24
31.169.74.0/24 maxlen: 24
31.169.81.0/24 maxlen: 24
31.169.88.0/24 maxlen: 24
31.169.90.0/24 maxlen: 24
31.169.91.0/24 maxlen: 24
31.169.95.0/24 maxlen: 24
31.169.92.0/24 maxlen: 24
31.169.93.0/24 maxlen: 24
31.169.94.0/24 maxlen: 24
31.169.64.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 942533950 (0x382ded3e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d69da44ae067fc1a98a5f6f05f12e545d0fc62a
Validity
Not Before: Apr 29 14:59:58 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=3daca5160307876f979fe63540ab17e9f918860e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:f4:7c:2a:21:b9:16:56:56:c3:05:8a:23:02:
ce:f6:0f:99:10:2d:8e:68:3f:6a:e8:bf:36:f4:e8:
cc:25:d0:54:1f:04:a9:a9:94:c2:da:b3:e7:31:c2:
dd:65:d5:c6:ac:2b:f9:04:0f:26:01:9a:30:93:1b:
d3:cd:66:e7:dc:8c:99:b5:5b:90:3a:7c:30:89:02:
58:c9:95:4e:29:bb:28:88:0e:8d:66:43:f8:10:68:
7e:37:ec:1e:fe:5f:61:00:6f:e9:af:56:5f:88:aa:
a4:34:ca:cb:34:0f:cc:b3:9b:28:d3:7b:b4:18:51:
76:f6:26:db:b8:51:28:59:f0:dd:b2:6f:2c:08:d5:
54:79:68:62:58:65:5e:be:1a:6f:1a:f1:d6:9d:20:
e4:99:87:ee:0a:1e:9e:15:0b:0a:4f:22:81:00:7a:
21:77:c2:1c:91:ba:16:c8:94:1b:bb:f1:29:19:0b:
39:ca:78:ad:79:8d:b2:71:48:8d:8d:63:b0:05:eb:
be:8a:18:ff:8a:6a:6c:21:01:f1:4a:a7:4f:a9:49:
6f:d2:a4:5b:61:ba:86:0b:2b:ef:f1:b7:f3:c4:31:
ff:c4:37:fb:5f:4f:74:31:5b:fd:f6:4a:c2:4c:b2:
58:e6:7f:29:14:dd:57:6c:eb:e8:a5:71:7a:b7:8b:
d6:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:AC:A5:16:03:07:87:6F:97:9F:E6:35:40:AB:17:E9:F9:18:86:0E
X509v3 Authority Key Identifier:
keyid:6D:69:DA:44:AE:06:7F:C1:A9:8A:5F:6F:05:F1:2E:54:5D:0F:C6:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bWnaRK4Gf8Gpil9vBfEuVF0Pxio.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/b1a82a-490f-43fb-986e-26170da4a0b1/1/PaylFgMHh2-Xn-Y1QKsX6fkYhg4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/b1a82a-490f-43fb-986e-26170da4a0b1/1/bWnaRK4Gf8Gpil9vBfEuVF0Pxio.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.169.64.0/22
31.169.69.0-31.169.72.255
31.169.74.0/24
31.169.76.0-31.169.78.255
31.169.81.0/24
31.169.88.0/24
31.169.90.0-31.169.95.255
185.33.61.0/24
185.33.63.0/24
Signature Algorithm: sha256WithRSAEncryption
86:b8:8f:e3:c0:15:99:cd:6e:27:87:66:00:fd:f1:10:5c:ee:
5c:5b:a8:0e:40:fd:4e:c8:84:e4:9a:82:22:f7:02:88:2b:a2:
72:cf:9e:42:65:a7:a8:a1:21:a5:3a:dc:50:81:ea:e8:46:e4:
8b:fc:8f:3d:d1:68:42:1c:26:da:a8:80:7d:0b:d3:3b:39:92:
ac:d3:e1:2e:33:84:66:b1:83:cf:65:54:f1:8a:93:82:46:f2:
97:60:74:6e:70:b1:05:46:46:6f:76:70:b0:3f:69:84:99:c9:
f3:d3:84:01:60:72:df:a0:5f:fb:9b:59:58:e6:b2:b8:65:63:
63:28:a5:6f:ca:30:08:60:9b:d8:d9:11:c3:63:fa:da:55:5f:
e7:67:0d:12:63:d6:56:f3:ee:42:e3:a4:f7:06:5b:b4:f8:dc:
0b:e4:e9:58:bb:36:d9:45:d6:ac:dd:31:3e:41:7f:a9:93:d4:
80:8f:95:c6:b0:c6:4b:77:17:65:02:72:de:1f:5c:ae:15:ef:
11:61:b1:f9:f1:e6:5a:da:ff:4e:80:86:b5:1b:f6:b7:68:7d:
24:5a:89:fa:4f:be:bd:ae:07:e5:0a:c0:7a:09:7e:ba:80:41:
ef:cd:a5:c3:9b:57:92:54:49:92:95:69:7c:b0:f6:04:6f:88:
bb:db:eb:7c
-----BEGIN CERTIFICATE-----
MIIFNzCCBB+gAwIBAgIEOC3tPjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg2
ZDY5ZGE0NGFlMDY3ZmMxYTk4YTVmNmYwNWYxMmU1NDVkMGZjNjJhMB4XDTIyMDQy
OTE0NTk1OFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoM2RhY2E1MTYwMzA3
ODc2Zjk3OWZlNjM1NDBhYjE3ZTlmOTE4ODYwZTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAMn0fCohuRZWVsMFiiMCzvYPmRAtjmg/aui/NvTozCXQVB8E
qamUwtqz5zHC3WXVxqwr+QQPJgGaMJMb081m59yMmbVbkDp8MIkCWMmVTim7KIgO
jWZD+BBofjfsHv5fYQBv6a9WX4iqpDTKyzQPzLObKNN7tBhRdvYm27hRKFnw3bJv
LAjVVHloYlhlXr4abxrx1p0g5JmH7goenhULCk8igQB6IXfCHJG6FsiUG7vxKRkL
Ocp4rXmNsnFIjY1jsAXrvooY/4pqbCEB8UqnT6lJb9KkW2G6hgsr7/G388Qx/8Q3
+19PdDFb/fZKwkyyWOZ/KRTdV2zr6KVxereL1o8CAwEAAaOCAlEwggJNMB0GA1Ud
DgQWBBQ9rKUWAweHb5ef5jVAqxfp+RiGDjAfBgNVHSMEGDAWgBRtadpErgZ/wamK
X28F8S5UXQ/GKjAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L2JXbmFSSzRHZjhHcGlsOXZCZkV1VkYwUHhpby5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvZDEvYjFhODJhLTQ5MGYtNDNmYi05ODZlLTI2MTcwZGE0YTBiMS8x
L1BheWxGZ01IaDItWG4tWTFRS3NYNmZrWWhnNC5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZDEv
YjFhODJhLTQ5MGYtNDNmYi05ODZlLTI2MTcwZGE0YTBiMS8xL2JXbmFSSzRHZjhH
cGlsOXZCZkV1VkYwUHhpby5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBn
BggrBgEFBQcBBwEB/wRYMFYwVAQCAAEwTgMEAh+pQDAMAwQAH6lFAwQAH6lIAwQA
H6lKMAwDBAIfqUwDBAAfqU4DBAAfqVEDBAAfqVgwDAMEAR+pWgMEBR+pQAMEALkh
PQMEALkhPzANBgkqhkiG9w0BAQsFAAOCAQEAhriP48AVmc1uJ4dmAP3xEFzuXFuo
DkD9TsiE5JqCIvcCiCuics+eQmWnqKEhpTrcUIHq6Ebki/yPPdFoQhwm2qiAfQvT
OzmSrNPhLjOEZrGDz2VU8YqTgkbyl2B0bnCxBUZGb3ZwsD9phJnJ89OEAWBy36Bf
+5tZWOayuGVjYyilb8owCGCb2NkRw2P62lVf52cNEmPWVvPuQuOk9wZbtPjcC+Tp
WLs22UXWrN0xPkF/qZPUgI+VxrDGS3cXZQJy3h9crhXvEWGx+fHmWtr/ToCGtRv2
t2h9JFqJ+k++va4H5QrAegl+uoBB782lw5tXklRJkpVpfLD2BG+Iu9vrfA==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:54:56 2024 by rpki-client on console-fra.rpki-client.org