Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/quYURIVBO_OEuDKrXbfUT6D6zsE.roa
File: quYURIVBO_OEuDKrXbfUT6D6zsE.roa (raw, json)
Hash identifier: OXuZqz0pgxYMbnX4ZvpVrwzkY5KvJsKM0tO7ZVFkh2M=
Subject key identifier: AA:E6:14:44:85:41:3B:F3:84:B8:32:AB:5D:B7:D4:4F:A0:FA:CE:C1
Certificate issuer: /CN=cdaaa0e082360360acda347664eb8314eb11da10
Certificate serial: 018B3D8B1424EC2255954FCACEABB51A73C3
Authority key identifier: CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/quYURIVBO_OEuDKrXbfUT6D6zsE.roa
Signing time: Tue 17 Oct 2023 12:10:06 +0000
ROA not before: Tue 17 Oct 2023 12:10:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 216326
IP address blocks: 83.137.153.0/24 maxlen: 24
178.210.235.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:3d:8b:14:24:ec:22:55:95:4f:ca:ce:ab:b5:1a:73:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cdaaa0e082360360acda347664eb8314eb11da10
Validity
Not Before: Oct 17 12:10:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=aae6144485413bf384b832ab5db7d44fa0facec1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:27:7f:74:cf:d2:a7:01:75:1a:77:14:55:18:
1b:a2:26:94:fc:c2:a1:0e:43:1e:26:a6:e0:81:96:
51:b1:b6:e5:64:aa:d4:c0:82:93:13:3d:c6:bd:f6:
5f:db:8e:67:28:70:29:c5:90:ee:da:64:60:85:7d:
e1:2f:82:99:4c:ec:80:13:14:c6:12:e8:b0:30:9b:
21:9a:ff:42:af:42:d7:44:14:fd:71:a5:47:e8:8a:
50:d0:45:d7:39:1c:6a:36:d0:49:d9:51:f3:7a:cd:
0a:b4:3a:8e:c6:d8:ac:1a:12:16:c4:7a:2d:ac:d9:
00:a6:a3:0e:28:26:4c:3a:a5:a6:17:17:28:62:cf:
56:3d:d8:85:49:5d:71:33:cb:45:6d:a8:bc:56:09:
73:05:a7:ef:dd:e4:29:bf:73:75:7b:54:f2:76:de:
49:47:91:90:22:fa:29:d4:e6:cd:e1:ab:17:93:38:
7a:c0:6d:f3:ce:ff:37:af:01:3f:63:1b:92:b7:db:
d8:3b:3b:d6:18:c6:d9:ae:c0:eb:4c:1b:b5:3e:07:
1e:b3:d7:e4:dc:94:6d:28:60:0f:68:10:f6:0f:41:
3c:0d:23:b7:96:21:f5:9b:ec:e3:bc:8b:0a:bf:e7:
92:20:11:b1:70:c0:91:60:47:4d:6d:17:96:e4:11:
9f:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:E6:14:44:85:41:3B:F3:84:B8:32:AB:5D:B7:D4:4F:A0:FA:CE:C1
X509v3 Authority Key Identifier:
keyid:CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/quYURIVBO_OEuDKrXbfUT6D6zsE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.137.153.0/24
178.210.235.0/24
Signature Algorithm: sha256WithRSAEncryption
49:53:f9:e4:50:8a:db:f1:d7:7d:ae:54:35:49:7d:07:4d:51:
47:99:c1:8a:49:99:f2:06:ac:f3:61:e3:f3:52:0e:62:e2:ee:
64:5d:79:c0:de:86:23:e9:47:ee:3b:59:89:d6:56:51:f6:88:
ab:28:38:11:b7:9a:b2:5f:73:a1:f4:da:a8:10:0f:35:65:1e:
f4:74:81:d5:42:a2:56:d9:05:56:1c:2c:1c:da:98:f8:b0:cd:
ab:27:04:ad:9b:94:69:0d:47:41:6d:33:db:3b:5f:13:2f:56:
99:7a:b5:c0:c0:a0:be:ad:83:50:79:71:e7:8f:59:b0:0b:69:
ba:f4:49:bd:b9:45:f0:06:93:7b:7f:37:0d:7d:f6:3d:e3:5b:
ec:cd:5d:ad:9c:a7:23:4a:90:4b:fa:1e:72:c0:b8:c4:22:07:
3e:43:9b:2a:7f:86:28:f3:65:64:aa:97:b7:6f:92:3c:f2:5d:
a0:13:2c:bf:fa:e5:f7:3a:9d:c4:9a:c5:64:d5:97:f0:89:72:
14:87:d2:4d:e8:1e:48:b6:37:23:3b:6d:05:92:9b:01:c9:1a:
17:48:ad:39:73:bf:60:9a:8a:55:ee:08:15:84:99:5a:ef:19:
4d:f1:b6:16:fb:cd:c5:b0:b9:d4:b7:33:bf:4c:96:fa:23:13:
45:82:e9:b4
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYs9ixQk7CJVlU/Kzqu1GnPDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNkYWFhMGUwODIzNjAzNjBhY2RhMzQ3NjY0ZWI4MzE0ZWIx
MWRhMTAwHhcNMjMxMDE3MTIxMDA2WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhYWU2MTQ0NDg1NDEzYmYzODRiODMyYWI1ZGI3ZDQ0ZmEwZmFjZWMxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjSd/dM/SpwF1GncUVRgboiaU/MKh
DkMeJqbggZZRsbblZKrUwIKTEz3GvfZf245nKHApxZDu2mRghX3hL4KZTOyAExTG
EuiwMJshmv9Cr0LXRBT9caVH6IpQ0EXXORxqNtBJ2VHzes0KtDqOxtisGhIWxHot
rNkApqMOKCZMOqWmFxcoYs9WPdiFSV1xM8tFbai8VglzBafv3eQpv3N1e1Tydt5J
R5GQIvop1ObN4asXkzh6wG3zzv83rwE/YxuSt9vYOzvWGMbZrsDrTBu1Pgces9fk
3JRtKGAPaBD2D0E8DSO3liH1m+zjvIsKv+eSIBGxcMCRYEdNbReW5BGfpwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFKrmFESFQTvzhLgyq1231E+g+s7BMB8GA1UdIwQY
MBaAFM2qoOCCNgNgrNo0dmTrgxTrEdoQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvemFxZzRJSTJBMkNzMmpSMlpPdURGT3NSMmhBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZC81ODkxMjctMTA5Ni00YzkxLTk2Y2Mt
N2U0ZDZmNmY2ZTY2LzEvcXVZVVJJVkJPX09FdURLclhiZlVUNkQ2enNFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZC81ODkxMjctMTA5Ni00YzkxLTk2Y2MtN2U0ZDZmNmY2ZTY2
LzEvemFxZzRJSTJBMkNzMmpSMlpPdURGT3NSMmhBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAU4mZAwQA
stLrMA0GCSqGSIb3DQEBCwUAA4IBAQBJU/nkUIrb8dd9rlQ1SX0HTVFHmcGKSZny
BqzzYePzUg5i4u5kXXnA3oYj6UfuO1mJ1lZR9oirKDgRt5qyX3Oh9NqoEA81ZR70
dIHVQqJW2QVWHCwc2pj4sM2rJwStm5RpDUdBbTPbO18TL1aZerXAwKC+rYNQeXHn
j1mwC2m69Em9uUXwBpN7fzcNffY941vszV2tnKcjSpBL+h5ywLjEIgc+Q5sqf4Yo
82Vkqpe3b5I88l2gEyy/+uX3Op3EmsVk1ZfwiXIUh9JN6B5ItjcjO20FkpsByRoX
SK05c79gmopV7ggVhJla7xlN8bYW+83FsLnUtzO/TJb6IxNFgum0
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:56:28 2024 by rpki-client on console-fra.rpki-client.org