Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/278663-b135-4db1-a044-20624b3c157f/1/sSH7AiSSnWXODa-tZs4O0I4NMmg.roa
File: sSH7AiSSnWXODa-tZs4O0I4NMmg.roa (raw, json)
Hash identifier: ee/lH25bE7G+scdG4Rl7KCH/d0DubdQe8MKv5CGbBnQ=
Subject key identifier: B1:21:FB:02:24:92:9D:65:CE:0D:AF:AD:66:CE:0E:D0:8E:0D:32:68
Certificate issuer: /CN=fb32e9f4aa32aba7312fab054b174dce8c515ca3
Certificate serial: 127F9D21
Authority key identifier: FB:32:E9:F4:AA:32:AB:A7:31:2F:AB:05:4B:17:4D:CE:8C:51:5C:A3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-zLp9Koyq6cxL6sFSxdNzoxRXKM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/278663-b135-4db1-a044-20624b3c157f/1/sSH7AiSSnWXODa-tZs4O0I4NMmg.roa
Signing time: Sat 01 Jan 2022 15:05:39 +0000
ROA not before: Sat 01 Jan 2022 15:05:39 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 206066
IP address blocks: 77.91.122.0/23 maxlen: 32
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 310353185 (0x127f9d21)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fb32e9f4aa32aba7312fab054b174dce8c515ca3
Validity
Not Before: Jan 1 15:05:39 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b121fb0224929d65ce0dafad66ce0ed08e0d3268
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:47:85:44:c8:e1:a0:e6:a7:c4:b7:00:58:9d:
ff:20:10:0e:3b:5d:83:6d:4c:c8:67:7a:aa:5d:fe:
07:33:b7:de:ee:29:ef:b8:44:7d:44:91:d8:bb:db:
41:e5:e0:11:7e:a0:3e:f1:7b:b4:d4:b1:bf:9b:85:
32:9b:d3:79:f8:9a:fb:ec:7b:9b:95:9f:ed:5e:95:
5d:0f:94:87:ec:4d:ab:f8:a3:6a:e8:e1:41:1c:27:
34:ab:88:ab:a3:70:67:93:89:60:b4:6b:6c:8d:68:
07:c0:e2:7f:8c:ee:c4:7e:df:0e:2a:a7:ff:18:d6:
7a:59:a9:7f:9e:ca:79:a5:36:0c:23:f9:5e:38:41:
0a:40:6d:1a:f2:d7:87:97:c9:43:b7:f1:fa:df:35:
26:8f:00:19:06:f6:40:44:99:ca:41:e7:f4:74:94:
51:1d:e7:e2:92:62:1c:6f:b3:5a:b7:17:96:8f:bf:
72:84:c7:32:91:c0:fc:d2:75:fa:73:f2:27:df:80:
fc:b9:de:0e:d2:15:a8:a5:a0:09:5e:d9:ce:7b:e3:
be:92:cb:47:22:33:69:ed:3e:9c:0f:10:64:c2:1e:
f6:7e:5a:bd:b8:92:fb:fc:61:aa:9a:bf:af:0d:12:
7e:4f:07:b9:43:04:ae:fd:f0:25:c8:c4:f7:ed:98:
b8:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:21:FB:02:24:92:9D:65:CE:0D:AF:AD:66:CE:0E:D0:8E:0D:32:68
X509v3 Authority Key Identifier:
keyid:FB:32:E9:F4:AA:32:AB:A7:31:2F:AB:05:4B:17:4D:CE:8C:51:5C:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-zLp9Koyq6cxL6sFSxdNzoxRXKM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/278663-b135-4db1-a044-20624b3c157f/1/sSH7AiSSnWXODa-tZs4O0I4NMmg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/278663-b135-4db1-a044-20624b3c157f/1/1-zLp9Koyq6cxL6sFSxdNzoxRXKM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.91.122.0/23
Signature Algorithm: sha256WithRSAEncryption
3a:1b:32:f9:f7:b9:1a:05:50:d4:9e:bf:9f:84:3a:7f:87:a6:
bb:ff:c6:5b:fb:0e:60:0a:3d:b0:fd:09:c4:c0:ea:5e:9e:9f:
b6:05:ce:70:6d:90:97:82:a2:c7:5d:5d:bf:c5:69:6c:25:d9:
5b:77:6b:dd:45:07:a7:4b:bf:bb:87:e6:c2:31:22:6b:cb:72:
e5:c4:40:08:cd:48:84:f2:eb:cb:dc:8e:7b:c7:ea:b8:c4:94:
c4:e7:13:57:45:ac:24:c5:54:5d:cb:31:f5:e8:37:20:56:d7:
f5:6f:45:18:1a:59:1a:2d:45:40:3b:04:e2:b1:7a:43:09:4c:
6d:c3:93:9f:7d:e3:52:50:2b:97:d2:92:ac:48:b5:52:10:64:
e5:f1:80:e3:35:8c:75:bc:c4:ce:20:64:8f:dd:06:d8:ac:76:
f3:4f:8a:f2:cf:70:59:4f:b0:e4:2b:a3:b8:d3:08:32:8e:f2:
89:bd:24:91:0d:b8:8b:6d:82:3d:cc:18:a7:41:25:a3:81:ee:
0c:41:64:03:71:2b:49:cd:12:30:35:5f:36:65:59:99:20:d8:
62:c5:bc:b1:31:20:2b:32:23:5a:cf:c5:b8:54:a6:5e:e6:b2:
cc:4f:1b:ed:5f:d0:12:86:05:69:90:04:9f:34:1e:17:0b:62:
b7:c5:c2:fb
-----BEGIN CERTIFICATE-----
MIIE8TCCA9mgAwIBAgIEEn+dITANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhm
YjMyZTlmNGFhMzJhYmE3MzEyZmFiMDU0YjE3NGRjZThjNTE1Y2EzMB4XDTIyMDEw
MTE1MDUzOVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoYjEyMWZiMDIyNDky
OWQ2NWNlMGRhZmFkNjZjZTBlZDA4ZTBkMzI2ODCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAK1HhUTI4aDmp8S3AFid/yAQDjtdg21MyGd6ql3+BzO33u4p
77hEfUSR2LvbQeXgEX6gPvF7tNSxv5uFMpvTefia++x7m5Wf7V6VXQ+Uh+xNq/ij
aujhQRwnNKuIq6NwZ5OJYLRrbI1oB8Dif4zuxH7fDiqn/xjWelmpf57KeaU2DCP5
XjhBCkBtGvLXh5fJQ7fx+t81Jo8AGQb2QESZykHn9HSUUR3n4pJiHG+zWrcXlo+/
coTHMpHA/NJ1+nPyJ9+A/LneDtIVqKWgCV7ZznvjvpLLRyIzae0+nA8QZMIe9n5a
vbiS+/xhqpq/rw0Sfk8HuUMErv3wJcjE9+2YuAECAwEAAaOCAgswggIHMB0GA1Ud
DgQWBBSxIfsCJJKdZc4Nr61mzg7Qjg0yaDAfBgNVHSMEGDAWgBT7Mun0qjKrpzEv
qwVLF03OjFFcozAOBgNVHQ8BAf8EBAMCB4AwZQYIKwYBBQUHAQEEWTBXMFUGCCsG
AQUFBzAChklyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
LzEtekxwOUtveXE2Y3hMNnNGU3hkTnpveFJYS00uY2VyMIGNBggrBgEFBQcBCwSB
gDB+MHwGCCsGAQUFBzALhnByc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9y
eS9ERUZBVUxUL2UyLzI3ODY2My1iMTM1LTRkYjEtYTA0NC0yMDYyNGIzYzE1N2Yv
MS9zU0g3QWlTU25XWE9EYS10WnM0TzBJNE5NbWcucm9hMIGCBgNVHR8EezB5MHeg
daBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2Uy
LzI3ODY2My1iMTM1LTRkYjEtYTA0NC0yMDYyNGIzYzE1N2YvMS8xLXpMcDlLb3lx
NmN4TDZzRlN4ZE56b3hSWEtNLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4C
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBTVt6MA0GCSqGSIb3DQEBCwUA
A4IBAQA6GzL597kaBVDUnr+fhDp/h6a7/8Zb+w5gCj2w/QnEwOpenp+2Bc5wbZCX
gqLHXV2/xWlsJdlbd2vdRQenS7+7h+bCMSJry3LlxEAIzUiE8uvL3I57x+q4xJTE
5xNXRawkxVRdyzH16DcgVtf1b0UYGlkaLUVAOwTisXpDCUxtw5OffeNSUCuX0pKs
SLVSEGTl8YDjNYx1vMTOIGSP3QbYrHbzT4ryz3BZT7DkK6O40wgyjvKJvSSRDbiL
bYI9zBinQSWjge4MQWQDcStJzRIwNV82ZVmZINhixbyxMSArMiNaz8W4VKZe5rLM
TxvtX9AShgVpkASfNB4XC2K3xcL7
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:57:04 2024 by rpki-client on console-fra.rpki-client.org