Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/cc8bfa-2b13-4674-a984-a5fdb570fe9a/1/aBkh8t0IpPWp2GGc2ZXQefEKnsc.roa
File: aBkh8t0IpPWp2GGc2ZXQefEKnsc.roa (raw, json)
Hash identifier: kwfYNmOGWZrP2fu9DvrAOr0a3ov3p1Aq1zO7ho6RZt0=
Subject key identifier: 68:19:21:F2:DD:08:A4:F5:A9:D8:61:9C:D9:95:D0:79:F1:0A:9E:C7
Certificate issuer: /CN=0620eadb2e1562b4e2e4f480772c36887a777f24
Certificate serial: 01856E5D5B27BC81B7E2EAA13545E7239DB9
Authority key identifier: 06:20:EA:DB:2E:15:62:B4:E2:E4:F4:80:77:2C:36:88:7A:77:7F:24
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BiDq2y4VYrTi5PSAdyw2iHp3fyQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/cc8bfa-2b13-4674-a984-a5fdb570fe9a/1/aBkh8t0IpPWp2GGc2ZXQefEKnsc.roa
Signing time: Sun 01 Jan 2023 17:24:49 +0000
ROA not before: Sun 01 Jan 2023 17:24:49 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 201364
IP address blocks: 78.111.111.0/24 maxlen: 24
217.195.195.0/24 maxlen: 24
217.195.197.0/24 maxlen: 24
80.93.220.0/24 maxlen: 24
217.195.202.0/24 maxlen: 24
217.195.207.0/24 maxlen: 24
2a05:3046::/32 maxlen: 32
2a05:3045::/32 maxlen: 32
2a05:3042::/32 maxlen: 32
2a05:3041::/32 maxlen: 32
2a05:3044::/32 maxlen: 32
2a05:3047::/32 maxlen: 32
2a05:3040::/32 maxlen: 32
2a05:3040::/29 maxlen: 29
2a05:3043::/32 maxlen: 32
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:5d:5b:27:bc:81:b7:e2:ea:a1:35:45:e7:23:9d:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0620eadb2e1562b4e2e4f480772c36887a777f24
Validity
Not Before: Jan 1 17:24:49 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=681921f2dd08a4f5a9d8619cd995d079f10a9ec7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:e0:65:ec:c6:39:a1:71:6b:03:2c:e7:d5:bf:
8f:45:32:51:a8:96:11:60:38:3b:1e:2c:96:38:38:
49:71:2e:47:fd:af:f6:ac:ac:9a:2a:e4:9b:73:1f:
8a:63:16:9b:48:6f:60:95:c4:1d:de:02:ae:5c:a5:
57:c5:ea:29:fa:54:02:45:bc:14:6c:f9:4e:72:43:
64:c4:0d:56:2d:da:7c:aa:7a:fa:ce:25:0f:0a:8e:
a9:9c:7a:ca:d6:31:5a:95:b9:9e:1f:c3:e4:88:2e:
8b:21:02:ee:c1:7f:11:86:d7:39:c8:56:27:4b:f9:
cf:71:2f:21:d5:50:08:0f:e2:d6:ae:f0:b9:84:46:
08:0c:ad:a8:f3:47:3d:a6:4b:23:26:20:a3:92:f9:
49:91:ee:b5:29:9e:79:ab:db:7d:38:17:83:aa:d9:
fd:8e:71:2f:12:ee:3b:12:f9:35:bc:72:d0:f9:b7:
94:02:2d:3b:81:f8:5c:d3:fd:d2:33:0b:a6:8f:a3:
5c:0e:e2:7e:34:2d:f5:c4:10:0e:f2:cb:d8:90:75:
9a:e4:f2:b4:b9:a4:15:05:67:ae:81:d3:31:88:fe:
e8:8e:64:98:99:67:bb:93:3f:ff:b5:f4:63:06:ee:
74:84:a3:c0:60:c9:cc:0c:4a:11:85:58:fd:b3:83:
41:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:19:21:F2:DD:08:A4:F5:A9:D8:61:9C:D9:95:D0:79:F1:0A:9E:C7
X509v3 Authority Key Identifier:
keyid:06:20:EA:DB:2E:15:62:B4:E2:E4:F4:80:77:2C:36:88:7A:77:7F:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BiDq2y4VYrTi5PSAdyw2iHp3fyQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/cc8bfa-2b13-4674-a984-a5fdb570fe9a/1/aBkh8t0IpPWp2GGc2ZXQefEKnsc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/cc8bfa-2b13-4674-a984-a5fdb570fe9a/1/BiDq2y4VYrTi5PSAdyw2iHp3fyQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.111.111.0/24
80.93.220.0/24
217.195.195.0/24
217.195.197.0/24
217.195.202.0/24
217.195.207.0/24
IPv6:
2a05:3040::/29
Signature Algorithm: sha256WithRSAEncryption
39:43:58:8f:18:40:2a:33:44:55:cc:28:e5:67:a4:32:c0:cd:
dc:49:54:8a:79:41:b6:f9:5d:b8:16:3f:38:16:97:ce:eb:3d:
dc:e7:7e:e4:09:10:86:60:d0:81:22:6a:bb:db:63:07:5a:68:
7c:92:25:36:39:7b:c7:10:c6:b7:cc:65:52:93:31:60:e4:ac:
f3:f9:f9:f3:25:b8:9c:0f:9b:36:ea:4d:7e:06:b6:be:c3:35:
6d:79:e4:46:d1:04:7b:f4:3e:9a:06:78:2a:b3:88:f3:09:cf:
b3:62:5a:a1:e8:85:d8:49:7d:b5:31:c0:e8:d8:d9:77:41:a9:
eb:b5:ff:1c:ed:64:12:79:ce:5c:f2:90:a5:b4:83:4d:41:0f:
d1:a1:dc:db:62:7e:f1:0e:05:f6:ea:3f:2d:72:1e:e9:b3:e9:
dc:2d:5f:48:da:1d:e6:a5:b0:33:8c:46:ef:7e:ff:5f:24:a0:
94:2c:af:93:f5:25:e7:b8:d6:1a:de:49:06:5c:8f:46:35:c4:
04:82:22:b4:e4:60:b2:07:31:d5:3f:eb:79:7f:f7:9c:22:d4:
13:6d:1c:f1:6e:dd:4d:b4:22:a8:c1:63:8e:77:9c:2e:c1:e7:
ac:24:e8:21:12:d4:76:94:c7:7a:91:da:57:5b:e2:5e:59:97:
97:7b:ae:67
-----BEGIN CERTIFICATE-----
MIIFKjCCBBKgAwIBAgISAYVuXVsnvIG34uqhNUXnI525MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA2MjBlYWRiMmUxNTYyYjRlMmU0ZjQ4MDc3MmMzNjg4N2E3
NzdmMjQwHhcNMjMwMTAxMTcyNDQ5WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2ODE5MjFmMmRkMDhhNGY1YTlkODYxOWNkOTk1ZDA3OWYxMGE5ZWM3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw+Bl7MY5oXFrAyzn1b+PRTJRqJYR
YDg7HiyWODhJcS5H/a/2rKyaKuSbcx+KYxabSG9glcQd3gKuXKVXxeop+lQCRbwU
bPlOckNkxA1WLdp8qnr6ziUPCo6pnHrK1jFalbmeH8PkiC6LIQLuwX8Rhtc5yFYn
S/nPcS8h1VAID+LWrvC5hEYIDK2o80c9pksjJiCjkvlJke61KZ55q9t9OBeDqtn9
jnEvEu47Evk1vHLQ+beUAi07gfhc0/3SMwumj6NcDuJ+NC31xBAO8svYkHWa5PK0
uaQVBWeugdMxiP7ojmSYmWe7kz//tfRjBu50hKPAYMnMDEoRhVj9s4NB9QIDAQAB
o4ICNjCCAjIwHQYDVR0OBBYEFGgZIfLdCKT1qdhhnNmV0HnxCp7HMB8GA1UdIwQY
MBaAFAYg6tsuFWK04uT0gHcsNoh6d38kMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQmlEcTJ5NFZZclRpNVBTQWR5dzJpSHAzZnlRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNS9jYzhiZmEtMmIxMy00Njc0LWE5ODQt
YTVmZGI1NzBmZTlhLzEvYUJraDh0MElwUFdwMkdHYzJaWFFlZkVLbnNjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNS9jYzhiZmEtMmIxMy00Njc0LWE5ODQtYTVmZGI1NzBmZTlh
LzEvQmlEcTJ5NFZZclRpNVBTQWR5dzJpSHAzZnlRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEwGCCsGAQUFBwEHAQH/BD0wOzAqBAIAATAkAwQATm9vAwQA
UF3cAwQA2cPDAwQA2cPFAwQA2cPKAwQA2cPPMA0EAgACMAcDBQMqBTBAMA0GCSqG
SIb3DQEBCwUAA4IBAQA5Q1iPGEAqM0RVzCjlZ6QywM3cSVSKeUG2+V24Fj84FpfO
6z3c537kCRCGYNCBImq722MHWmh8kiU2OXvHEMa3zGVSkzFg5Kzz+fnzJbicD5s2
6k1+Bra+wzVteeRG0QR79D6aBngqs4jzCc+zYlqh6IXYSX21McDo2Nl3Qanrtf8c
7WQSec5c8pCltINNQQ/RodzbYn7xDgX26j8tch7ps+ncLV9I2h3mpbAzjEbvfv9f
JKCULK+T9SXnuNYa3kkGXI9GNcQEgiK05GCyBzHVP+t5f/ecItQTbRzxbt1NtCKo
wWOOd5wuweesJOghEtR2lMd6kdpXW+JeWZeXe65n
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:55:29 2024 by rpki-client on console-fra.rpki-client.org