Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/b1a82a-490f-43fb-986e-26170da4a0b1/1/W4y80dqaGt4UNMtrWBtDqWVE7bA.roa
File: W4y80dqaGt4UNMtrWBtDqWVE7bA.roa (raw, json)
Hash identifier: FIxgGb1onLD6O8k8B3uER+x8/faYOP1P/9UFcvh2v0s=
Subject key identifier: 5B:8C:BC:D1:DA:9A:1A:DE:14:34:CB:6B:58:1B:43:A9:65:44:ED:B0
Certificate issuer: /CN=6d69da44ae067fc1a98a5f6f05f12e545d0fc62a
Certificate serial: 018CC7271EB803874EC7D957B1D78FBF4769
Authority key identifier: 6D:69:DA:44:AE:06:7F:C1:A9:8A:5F:6F:05:F1:2E:54:5D:0F:C6:2A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bWnaRK4Gf8Gpil9vBfEuVF0Pxio.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/b1a82a-490f-43fb-986e-26170da4a0b1/1/W4y80dqaGt4UNMtrWBtDqWVE7bA.roa
Signing time: Mon 01 Jan 2024 22:31:18 +0000
ROA not before: Mon 01 Jan 2024 22:31:18 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 9121
IP address blocks: 185.33.63.0/24 maxlen: 24
31.169.69.0/24 maxlen: 24
31.169.70.0/24 maxlen: 24
31.169.65.0/24 maxlen: 24
31.169.66.0/24 maxlen: 24
31.169.67.0/24 maxlen: 24
31.169.71.0/24 maxlen: 24
31.169.78.0/24 maxlen: 24
31.169.77.0/24 maxlen: 24
31.169.72.0/24 maxlen: 24
31.169.81.0/24 maxlen: 24
31.169.88.0/24 maxlen: 24
31.169.91.0/24 maxlen: 24
31.169.92.0/24 maxlen: 24
31.169.93.0/24 maxlen: 24
31.169.94.0/24 maxlen: 24
31.169.64.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:27:1e:b8:03:87:4e:c7:d9:57:b1:d7:8f:bf:47:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d69da44ae067fc1a98a5f6f05f12e545d0fc62a
Validity
Not Before: Jan 1 22:31:18 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5b8cbcd1da9a1ade1434cb6b581b43a96544edb0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:29:2e:78:04:11:32:f4:f9:84:a9:2a:40:6e:
45:01:ea:44:6b:19:a9:31:11:3c:f6:ce:d1:6d:6f:
11:ee:bd:43:a4:24:43:4f:5c:2b:c8:c2:6f:f2:2e:
ea:7d:dc:a0:29:57:f5:de:dc:4e:c3:f4:bc:7f:cf:
c2:4f:70:e4:6b:1d:37:04:07:27:49:74:7d:41:eb:
50:1e:e4:27:a3:a1:d2:81:a8:6e:5e:44:7f:76:92:
0b:86:07:38:f9:54:98:04:83:ec:96:49:46:7d:64:
f4:91:13:c3:e6:dc:9c:f3:9e:db:72:90:73:4d:80:
b7:ec:c9:d0:73:ad:db:c9:65:66:ca:f5:1b:62:5d:
bf:4d:44:11:f9:68:f0:bb:69:f9:96:7a:98:36:de:
5e:0f:ee:3e:97:c1:04:35:83:fa:df:b2:6e:35:21:
06:36:46:5f:34:b5:07:78:8b:51:7a:fa:6f:40:0b:
82:66:21:49:34:28:93:91:28:45:30:ab:2f:6b:3f:
4a:56:a2:82:e7:14:57:5d:91:12:ac:91:1b:8c:18:
0d:5f:8d:ab:72:b4:e8:2e:1d:d4:6f:ec:76:70:93:
66:ab:a4:eb:00:e7:6d:ac:59:f5:24:8c:fb:a9:df:
2c:ed:61:a8:cd:c4:56:c0:86:d8:0b:f1:41:10:e1:
32:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:8C:BC:D1:DA:9A:1A:DE:14:34:CB:6B:58:1B:43:A9:65:44:ED:B0
X509v3 Authority Key Identifier:
keyid:6D:69:DA:44:AE:06:7F:C1:A9:8A:5F:6F:05:F1:2E:54:5D:0F:C6:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bWnaRK4Gf8Gpil9vBfEuVF0Pxio.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/b1a82a-490f-43fb-986e-26170da4a0b1/1/W4y80dqaGt4UNMtrWBtDqWVE7bA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/b1a82a-490f-43fb-986e-26170da4a0b1/1/bWnaRK4Gf8Gpil9vBfEuVF0Pxio.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.169.64.0/22
31.169.69.0-31.169.72.255
31.169.77.0-31.169.78.255
31.169.81.0/24
31.169.88.0/24
31.169.91.0-31.169.94.255
185.33.63.0/24
Signature Algorithm: sha256WithRSAEncryption
32:48:3d:cf:fd:ca:ca:a1:1f:2a:ac:05:3e:26:7b:c1:69:3a:
96:fc:e5:4e:cf:11:a9:96:dc:95:25:ca:4e:5f:9b:36:66:d4:
7b:f7:9c:aa:0b:6c:95:1c:6f:b0:7a:eb:c3:6c:70:85:db:68:
84:47:d4:9c:58:d6:a7:af:5f:b3:4d:bf:90:47:8f:b1:3c:ea:
09:85:d9:bb:3d:7e:ed:f7:72:c6:64:c6:65:b6:a5:38:a6:51:
7c:ca:3c:a0:ce:bb:56:f9:1e:90:b4:57:4e:d8:26:38:7f:94:
35:6a:f6:97:4b:73:e3:ee:89:f0:97:78:99:b5:93:ca:b0:b8:
83:8e:a9:5e:73:f4:2d:e7:9e:ad:bf:86:ea:1e:3b:b6:f2:91:
0e:7f:39:27:9e:90:91:2c:b4:60:f5:b0:87:bc:c7:e3:fd:ab:
7b:58:2b:16:e5:1d:c4:a9:db:ca:cc:c4:ef:fb:b4:c8:3e:23:
57:e4:de:0c:fb:3d:31:3e:4c:15:b4:a0:cc:08:2e:a0:3b:82:
6b:0c:e2:5c:c5:80:5b:54:cc:21:5f:ae:69:6a:5c:18:8f:ff:
5a:51:9b:d8:f3:44:53:1b:fe:5c:23:3d:fa:2c:a4:5e:9f:34:
5e:f7:44:f1:93:be:54:04:04:61:c2:42:1c:f7:b8:ee:0c:3a:
9f:86:02:b6
-----BEGIN CERTIFICATE-----
MIIFOTCCBCGgAwIBAgISAYzHJx64A4dOx9lXsdePv0dpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZkNjlkYTQ0YWUwNjdmYzFhOThhNWY2ZjA1ZjEyZTU0NWQw
ZmM2MmEwHhcNMjQwMTAxMjIzMTE4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1YjhjYmNkMWRhOWExYWRlMTQzNGNiNmI1ODFiNDNhOTY1NDRlZGIwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArSkueAQRMvT5hKkqQG5FAepEaxmp
MRE89s7RbW8R7r1DpCRDT1wryMJv8i7qfdygKVf13txOw/S8f8/CT3Dkax03BAcn
SXR9QetQHuQno6HSgahuXkR/dpILhgc4+VSYBIPslklGfWT0kRPD5tyc857bcpBz
TYC37MnQc63byWVmyvUbYl2/TUQR+Wjwu2n5lnqYNt5eD+4+l8EENYP637JuNSEG
NkZfNLUHeItRevpvQAuCZiFJNCiTkShFMKsvaz9KVqKC5xRXXZESrJEbjBgNX42r
crToLh3Ub+x2cJNmq6TrAOdtrFn1JIz7qd8s7WGozcRWwIbYC/FBEOEy9QIDAQAB
o4ICRTCCAkEwHQYDVR0OBBYEFFuMvNHamhreFDTLa1gbQ6llRO2wMB8GA1UdIwQY
MBaAFG1p2kSuBn/BqYpfbwXxLlRdD8YqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYlduYVJLNEdmOEdwaWw5dkJmRXVWRjBQeGlvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMS9iMWE4MmEtNDkwZi00M2ZiLTk4NmUt
MjYxNzBkYTRhMGIxLzEvVzR5ODBkcWFHdDRVTk10cldCdERxV1ZFN2JBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMS9iMWE4MmEtNDkwZi00M2ZiLTk4NmUtMjYxNzBkYTRhMGIx
LzEvYlduYVJLNEdmOEdwaWw5dkJmRXVWRjBQeGlvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMFsGCCsGAQUFBwEHAQH/BEwwSjBIBAIAATBCAwQCH6lAMAwD
BAAfqUUDBAAfqUgwDAMEAB+pTQMEAB+pTgMEAB+pUQMEAB+pWDAMAwQAH6lbAwQA
H6leAwQAuSE/MA0GCSqGSIb3DQEBCwUAA4IBAQAySD3P/crKoR8qrAU+JnvBaTqW
/OVOzxGpltyVJcpOX5s2ZtR795yqC2yVHG+weuvDbHCF22iER9ScWNanr1+zTb+Q
R4+xPOoJhdm7PX7t93LGZMZltqU4plF8yjygzrtW+R6QtFdO2CY4f5Q1avaXS3Pj
7onwl3iZtZPKsLiDjqlec/Qt556tv4bqHju28pEOfzknnpCRLLRg9bCHvMfj/at7
WCsW5R3EqdvKzMTv+7TIPiNX5N4M+z0xPkwVtKDMCC6gO4JrDOJcxYBbVMwhX65p
alwYj/9aUZvY80RTG/5cIz36LKRenzRe90Txk75UBARhwkIc97juDDqfhgK2
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:45:47 2024 by rpki-client on console-ams.rpki-client.org