Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/631925-6b0e-4ea5-91d7-08ad94101d7e/1/7dqCHNVHIFKRkHb9rlqQUe6Jn6I.roa
File: 7dqCHNVHIFKRkHb9rlqQUe6Jn6I.roa (raw, json)
Hash identifier: vUv2nkzVBO1oIoDCviniHKijG4WGh6H2FjNdK+xplrA=
Subject key identifier: ED:DA:82:1C:D5:47:20:52:91:90:76:FD:AE:5A:90:51:EE:89:9F:A2
Certificate issuer: /CN=67955b1aa1c0284d2843b96f26c5fe751e66946f
Certificate serial: 079A4254
Authority key identifier: 67:95:5B:1A:A1:C0:28:4D:28:43:B9:6F:26:C5:FE:75:1E:66:94:6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z5VbGqHAKE0oQ7lvJsX-dR5mlG8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/631925-6b0e-4ea5-91d7-08ad94101d7e/1/7dqCHNVHIFKRkHb9rlqQUe6Jn6I.roa
Signing time: Sat 23 Apr 2022 05:45:15 +0000
ROA not before: Sat 23 Apr 2022 05:45:15 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 0
IP address blocks: 193.200.161.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 127550036 (0x79a4254)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67955b1aa1c0284d2843b96f26c5fe751e66946f
Validity
Not Before: Apr 23 05:45:15 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=edda821cd5472052919076fdae5a9051ee899fa2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:d8:82:03:25:2b:ad:8e:1d:92:fb:17:b5:17:
e9:b7:49:05:e5:8d:5f:5c:c2:9a:57:0d:12:56:20:
dc:b9:2d:0f:61:eb:57:52:0d:0a:af:26:5f:c9:91:
aa:9a:56:86:0e:12:76:7f:8c:c8:8a:55:76:ff:ab:
34:84:5c:e5:26:76:7d:b3:3a:1f:d6:a3:99:70:f7:
5a:6b:73:3b:8f:79:5d:55:90:f9:c6:14:f2:bd:91:
dc:87:38:ad:6c:79:a6:ee:1a:a3:75:1e:f7:e5:e1:
13:0a:9b:b6:bf:9a:9d:bc:44:cf:6f:90:76:c0:f0:
09:98:65:9f:1d:da:bf:ed:1c:ec:39:77:e9:fa:47:
2a:e2:97:b3:4e:a8:51:f0:0a:02:0d:4a:72:78:b2:
02:76:c9:dc:e8:33:48:8b:08:77:91:0a:b3:b0:d0:
e0:20:b6:fc:bb:81:d8:8e:17:6b:7a:45:d3:c8:e6:
d1:e4:a4:e5:dd:8d:57:c4:51:be:a3:4c:46:c7:80:
ce:67:81:54:40:2a:c8:47:7d:b0:0b:53:6a:80:8c:
04:a3:5a:a0:93:9c:5a:fc:ae:62:0a:d8:17:18:d4:
44:79:86:7d:16:96:57:90:58:a8:2b:32:93:4a:34:
cc:a7:44:3c:23:f1:b7:04:29:3d:95:c3:de:72:1a:
74:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:DA:82:1C:D5:47:20:52:91:90:76:FD:AE:5A:90:51:EE:89:9F:A2
X509v3 Authority Key Identifier:
keyid:67:95:5B:1A:A1:C0:28:4D:28:43:B9:6F:26:C5:FE:75:1E:66:94:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z5VbGqHAKE0oQ7lvJsX-dR5mlG8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/631925-6b0e-4ea5-91d7-08ad94101d7e/1/7dqCHNVHIFKRkHb9rlqQUe6Jn6I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/631925-6b0e-4ea5-91d7-08ad94101d7e/1/Z5VbGqHAKE0oQ7lvJsX-dR5mlG8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.200.161.0/24
Signature Algorithm: sha256WithRSAEncryption
12:23:5f:1c:16:b2:38:b3:37:0a:d7:ee:50:05:77:7a:35:ad:
a0:eb:0e:d9:fd:a6:38:54:0c:fd:6d:3f:25:ea:db:c6:d8:fe:
ec:08:ce:ab:00:7c:1e:7f:71:b4:82:08:21:47:9e:92:05:6d:
a7:b5:f9:59:85:3e:30:2f:3e:59:bf:98:11:9b:6c:e3:b3:9b:
c5:ee:6a:ea:43:0d:17:b7:dd:31:55:ba:b5:9e:fa:7d:73:ad:
62:dc:77:ea:4e:fb:04:2f:3f:a4:db:7c:68:0b:65:36:c6:d5:
36:cd:f9:8a:9b:e2:3d:87:7b:b0:0d:04:80:6e:ea:b8:75:d9:
26:42:b4:6a:54:54:81:b7:31:e7:52:aa:a7:0a:a8:9b:30:57:
15:d5:2b:8d:9d:6e:95:7e:1a:51:10:1a:74:8a:26:31:ce:72:
17:af:7d:85:00:78:35:92:2f:e0:25:11:bb:94:62:78:9d:9c:
bc:9b:80:f9:fb:3f:2a:fa:f6:94:07:70:28:6b:67:f3:75:88:
8b:fe:a3:84:c9:7d:36:a6:31:81:05:9c:fc:e7:80:33:0b:c5:
01:98:a0:57:44:93:0b:f8:d1:d2:ec:80:3d:e5:a3:12:4d:9f:
3c:dd:3b:e2:9d:37:a0:a2:21:0b:ab:25:c1:1b:5e:64:c5:33:
e8:5f:40:68
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEB5pCVDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg2
Nzk1NWIxYWExYzAyODRkMjg0M2I5NmYyNmM1ZmU3NTFlNjY5NDZmMB4XDTIyMDQy
MzA1NDUxNVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoZWRkYTgyMWNkNTQ3
MjA1MjkxOTA3NmZkYWU1YTkwNTFlZTg5OWZhMjCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBALHYggMlK62OHZL7F7UX6bdJBeWNX1zCmlcNElYg3LktD2Hr
V1INCq8mX8mRqppWhg4Sdn+MyIpVdv+rNIRc5SZ2fbM6H9ajmXD3WmtzO495XVWQ
+cYU8r2R3Ic4rWx5pu4ao3Ue9+XhEwqbtr+anbxEz2+QdsDwCZhlnx3av+0c7Dl3
6fpHKuKXs06oUfAKAg1KcniyAnbJ3OgzSIsId5EKs7DQ4CC2/LuB2I4Xa3pF08jm
0eSk5d2NV8RRvqNMRseAzmeBVEAqyEd9sAtTaoCMBKNaoJOcWvyuYgrYFxjURHmG
fRaWV5BYqCsyk0o0zKdEPCPxtwQpPZXD3nIadDsCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBTt2oIc1UcgUpGQdv2uWpBR7omfojAfBgNVHSMEGDAWgBRnlVsaocAoTShD
uW8mxf51HmaUbzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L1o1VmJHcUhBS0Uwb1E3bHZKc1gtZFI1bWxHOC5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvZWIvNjMxOTI1LTZiMGUtNGVhNS05MWQ3LTA4YWQ5NDEwMWQ3ZS8x
LzdkcUNITlZISUZLUmtIYjlybHFRVWU2Sm42SS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZWIv
NjMxOTI1LTZiMGUtNGVhNS05MWQ3LTA4YWQ5NDEwMWQ3ZS8xL1o1VmJHcUhBS0Uw
b1E3bHZKc1gtZFI1bWxHOC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAMHIoTANBgkqhkiG9w0BAQsFAAOC
AQEAEiNfHBayOLM3CtfuUAV3ejWtoOsO2f2mOFQM/W0/Jerbxtj+7AjOqwB8Hn9x
tIIIIUeekgVtp7X5WYU+MC8+Wb+YEZts47Obxe5q6kMNF7fdMVW6tZ76fXOtYtx3
6k77BC8/pNt8aAtlNsbVNs35ipviPYd7sA0EgG7quHXZJkK0alRUgbcx51Kqpwqo
mzBXFdUrjZ1ulX4aURAadIomMc5yF699hQB4NZIv4CURu5RieJ2cvJuA+fs/Kvr2
lAdwKGtn83WIi/6jhMl9NqYxgQWc/OeAMwvFAZigV0STC/jR0uyAPeWjEk2fPN07
4p03oKIhC6slwRteZMUz6F9AaA==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:58:27 2024 by rpki-client on console-fra.rpki-client.org