Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/278663-b135-4db1-a044-20624b3c157f/1/B2DjFPFsq6VNTme7o13XC9wUNJo.roa
File: B2DjFPFsq6VNTme7o13XC9wUNJo.roa (raw, json)
Hash identifier: uqLTI2FRmhM5rWNFkPIXLcze7pv5OMI0SrkRyAICVgo=
Subject key identifier: 07:60:E3:14:F1:6C:AB:A5:4D:4E:67:BB:A3:5D:D7:0B:DC:14:34:9A
Certificate issuer: /CN=fb32e9f4aa32aba7312fab054b174dce8c515ca3
Certificate serial: 13F4359B
Authority key identifier: FB:32:E9:F4:AA:32:AB:A7:31:2F:AB:05:4B:17:4D:CE:8C:51:5C:A3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-zLp9Koyq6cxL6sFSxdNzoxRXKM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/278663-b135-4db1-a044-20624b3c157f/1/B2DjFPFsq6VNTme7o13XC9wUNJo.roa
Signing time: Thu 02 Jun 2022 20:44:20 +0000
ROA not before: Thu 02 Jun 2022 20:44:20 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 42861
IP address blocks: 77.91.64.0/24 maxlen: 24
77.91.65.0/24 maxlen: 24
2a00:1e68:112::/48 maxlen: 128
2a00:1e68:100::/48 maxlen: 128
2a00:1e68:100::/47 maxlen: 128
2a00:1e68:101::/48 maxlen: 128
2a00:1e68::/29 maxlen: 128
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 334771611 (0x13f4359b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fb32e9f4aa32aba7312fab054b174dce8c515ca3
Validity
Not Before: Jun 2 20:44:20 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=0760e314f16caba54d4e67bba35dd70bdc14349a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:67:dd:c7:bd:46:ef:86:f5:df:bb:2e:78:ce:
68:b5:f8:c8:1c:e4:7f:22:ec:71:07:0b:a2:cc:76:
1c:2d:50:1d:4f:28:11:1d:44:24:c1:2c:b8:dd:6a:
a5:75:13:31:73:bc:04:8b:a0:69:25:9e:09:86:f4:
69:aa:d9:2f:d9:ac:2a:f3:cf:11:7d:f1:c7:43:91:
da:f8:7f:21:07:26:50:6c:fb:93:e5:bb:60:c1:03:
b6:50:17:7d:17:01:0c:1c:33:c8:2f:c3:c5:d5:2e:
fa:87:bf:23:86:2e:f0:b9:46:8d:b1:98:97:d3:c5:
da:bf:bc:30:88:9b:48:da:e5:8a:3d:47:09:81:1f:
c8:64:fa:45:7c:08:ef:a4:30:92:0d:8a:72:80:98:
0e:b3:09:be:8a:bd:51:3d:d1:4f:4e:2f:5d:07:48:
23:03:f1:e7:48:ee:f7:a3:64:d7:43:40:62:9f:88:
5f:2d:0a:de:f9:48:22:fa:9c:a0:9d:8e:3c:15:44:
8c:03:10:ef:b0:32:34:1c:26:3b:ef:fe:d7:c0:7c:
07:db:ea:72:16:e2:35:6a:24:95:b3:d7:67:8a:94:
d9:ea:3c:9e:51:ef:40:2e:c6:ea:a8:16:2f:78:9e:
26:1b:02:6f:4b:d1:83:a5:f8:95:54:71:82:50:8b:
02:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:60:E3:14:F1:6C:AB:A5:4D:4E:67:BB:A3:5D:D7:0B:DC:14:34:9A
X509v3 Authority Key Identifier:
keyid:FB:32:E9:F4:AA:32:AB:A7:31:2F:AB:05:4B:17:4D:CE:8C:51:5C:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-zLp9Koyq6cxL6sFSxdNzoxRXKM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/278663-b135-4db1-a044-20624b3c157f/1/B2DjFPFsq6VNTme7o13XC9wUNJo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/278663-b135-4db1-a044-20624b3c157f/1/1-zLp9Koyq6cxL6sFSxdNzoxRXKM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.91.64.0/23
IPv6:
2a00:1e68::/29
Signature Algorithm: sha256WithRSAEncryption
95:af:cd:eb:d2:0d:04:8a:f3:a5:cb:c5:96:62:44:16:24:71:
7b:49:66:4f:72:c9:c5:66:17:de:58:89:f5:1c:1d:a8:95:ba:
a7:4f:f1:6a:94:48:47:df:9f:90:7b:e5:d8:7c:9a:ef:b2:da:
c2:ab:eb:c9:15:7e:25:e0:79:05:d0:70:cd:bd:ee:11:9e:35:
bd:4f:97:b1:e6:db:e7:86:b5:b7:78:96:02:33:0d:5f:60:a2:
4b:25:0f:51:65:2e:ed:a9:1c:a0:b7:cc:5e:9a:71:a6:fd:d9:
b2:54:b5:e3:c0:a6:1d:f6:f2:61:ad:6b:64:88:20:99:ce:6d:
02:90:47:bb:66:d4:dc:c8:7b:94:22:11:ff:49:25:96:b8:c9:
21:c9:e5:b6:cf:38:0c:07:37:63:a4:35:d3:33:82:b1:7e:63:
fb:3e:d6:8b:f2:d8:25:71:a7:1e:54:7d:5a:75:f4:10:41:e5:
c7:30:1e:7a:66:e7:2c:f9:f0:8f:ca:aa:07:85:fb:33:6a:99:
cc:e5:d4:4e:7f:ab:2e:9c:1b:1e:6c:c8:12:7e:0a:e0:bb:e9:
28:f3:00:56:c1:c7:0c:66:3c:77:8f:be:2d:ac:36:9f:20:ee:
35:4c:cc:1b:90:5c:ce:77:14:48:10:4b:a2:08:b1:80:e2:d3:
96:08:29:57
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgIEE/Q1mzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhm
YjMyZTlmNGFhMzJhYmE3MzEyZmFiMDU0YjE3NGRjZThjNTE1Y2EzMB4XDTIyMDYw
MjIwNDQyMFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoMDc2MGUzMTRmMTZj
YWJhNTRkNGU2N2JiYTM1ZGQ3MGJkYzE0MzQ5YTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAJZn3ce9Ru+G9d+7LnjOaLX4yBzkfyLscQcLosx2HC1QHU8o
ER1EJMEsuN1qpXUTMXO8BIugaSWeCYb0aarZL9msKvPPEX3xx0OR2vh/IQcmUGz7
k+W7YMEDtlAXfRcBDBwzyC/DxdUu+oe/I4Yu8LlGjbGYl9PF2r+8MIibSNrlij1H
CYEfyGT6RXwI76Qwkg2KcoCYDrMJvoq9UT3RT04vXQdIIwPx50ju96Nk10NAYp+I
Xy0K3vlIIvqcoJ2OPBVEjAMQ77AyNBwmO+/+18B8B9vqchbiNWoklbPXZ4qU2eo8
nlHvQC7G6qgWL3ieJhsCb0vRg6X4lVRxglCLAqECAwEAAaOCAhowggIWMB0GA1Ud
DgQWBBQHYOMU8WyrpU1OZ7ujXdcL3BQ0mjAfBgNVHSMEGDAWgBT7Mun0qjKrpzEv
qwVLF03OjFFcozAOBgNVHQ8BAf8EBAMCB4AwZQYIKwYBBQUHAQEEWTBXMFUGCCsG
AQUFBzAChklyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
LzEtekxwOUtveXE2Y3hMNnNGU3hkTnpveFJYS00uY2VyMIGNBggrBgEFBQcBCwSB
gDB+MHwGCCsGAQUFBzALhnByc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9y
eS9ERUZBVUxUL2UyLzI3ODY2My1iMTM1LTRkYjEtYTA0NC0yMDYyNGIzYzE1N2Yv
MS9CMkRqRlBGc3E2Vk5UbWU3bzEzWEM5d1VOSm8ucm9hMIGCBgNVHR8EezB5MHeg
daBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2Uy
LzI3ODY2My1iMTM1LTRkYjEtYTA0NC0yMDYyNGIzYzE1N2YvMS8xLXpMcDlLb3lx
NmN4TDZzRlN4ZE56b3hSWEtNLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4C
MC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQBTVtAMA0EAgACMAcDBQMqAB5o
MA0GCSqGSIb3DQEBCwUAA4IBAQCVr83r0g0EivOly8WWYkQWJHF7SWZPcsnFZhfe
WIn1HB2olbqnT/FqlEhH35+Qe+XYfJrvstrCq+vJFX4l4HkF0HDNve4RnjW9T5ex
5tvnhrW3eJYCMw1fYKJLJQ9RZS7tqRygt8xemnGm/dmyVLXjwKYd9vJhrWtkiCCZ
zm0CkEe7ZtTcyHuUIhH/SSWWuMkhyeW2zzgMBzdjpDXTM4KxfmP7PtaL8tglcace
VH1adfQQQeXHMB56Zucs+fCPyqoHhfszapnM5dROf6sunBsebMgSfgrgu+ko8wBW
wccMZjx3j74trDafIO41TMwbkFzOdxRIEEuiCLGA4tOWCClX
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:05:16 2023 by rpki-client on console-fra.rpki-client.org