Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/1ccbfd-a651-4c8e-9d60-ebbbb444286e/1/U-nXy1btwEGjzap09BwjPS_gwy8.roa
File: U-nXy1btwEGjzap09BwjPS_gwy8.roa (raw, json)
Hash identifier: TS7/DA7yFk4k0uXhdtV4zL8P1QHYZGmkNFW/X893qQc=
Subject key identifier: 53:E9:D7:CB:56:ED:C0:41:A3:CD:AA:74:F4:1C:23:3D:2F:E0:C3:2F
Certificate issuer: /CN=de5e36f159f576988fb4e51d4101bb85d0d0c983
Certificate serial: 018571FA09ABAC8A09A23B555EB00140F3F3
Authority key identifier: DE:5E:36:F1:59:F5:76:98:8F:B4:E5:1D:41:01:BB:85:D0:D0:C9:83
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3l428Vn1dpiPtOUdQQG7hdDQyYM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/1ccbfd-a651-4c8e-9d60-ebbbb444286e/1/U-nXy1btwEGjzap09BwjPS_gwy8.roa
Signing time: Mon 02 Jan 2023 10:14:49 +0000
ROA not before: Mon 02 Jan 2023 10:14:49 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 39421
IP address blocks: 185.21.130.0/24 maxlen: 24
45.90.163.0/24 maxlen: 24
45.90.162.0/24 maxlen: 24
45.90.160.0/22 maxlen: 22
45.90.161.0/24 maxlen: 24
45.90.160.0/24 maxlen: 24
2a0c:8880::/29 maxlen: 29
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:fa:09:ab:ac:8a:09:a2:3b:55:5e:b0:01:40:f3:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de5e36f159f576988fb4e51d4101bb85d0d0c983
Validity
Not Before: Jan 2 10:14:49 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=53e9d7cb56edc041a3cdaa74f41c233d2fe0c32f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:64:0e:5f:c0:fa:2d:84:46:49:aa:06:43:16:
39:69:b6:0c:63:5e:03:d5:02:df:8e:d0:21:71:51:
e8:75:a9:48:61:a5:95:02:f8:83:39:85:3a:de:13:
d0:e8:d6:5c:35:13:6d:ce:c8:a5:07:b7:04:63:03:
de:5f:5e:a1:8b:3a:7e:9c:c2:53:29:a2:25:de:9a:
ea:76:2e:e3:f1:fc:ea:46:a9:ce:0d:6a:c3:de:ab:
ea:63:32:a9:73:56:f5:d5:1c:9c:3e:30:c9:66:e9:
f5:e7:82:17:07:40:03:ae:52:71:72:73:0b:a7:d2:
82:57:e8:9a:9a:06:0c:e1:75:1a:fb:8b:1e:2e:22:
97:e1:aa:20:6c:e9:4f:5d:ed:a4:9c:4b:24:f2:94:
35:a7:5d:1f:34:78:fe:db:9f:7d:95:41:e7:4f:88:
97:ca:c4:b9:c2:8a:d5:be:13:ea:ea:11:8c:ce:0a:
5e:00:19:72:95:77:cf:f0:2d:33:84:d2:a5:47:e4:
ce:95:5d:90:6b:c5:2e:55:9d:fd:20:b8:a4:e1:6c:
ee:d6:8a:6d:ac:fb:38:3e:62:e8:d0:46:8d:e8:4b:
d9:d8:53:61:e2:51:3a:d2:57:5b:6d:a0:12:65:bf:
65:b6:2d:6d:e1:2e:87:2a:0a:1d:f2:23:5d:d0:0a:
ed:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:E9:D7:CB:56:ED:C0:41:A3:CD:AA:74:F4:1C:23:3D:2F:E0:C3:2F
X509v3 Authority Key Identifier:
keyid:DE:5E:36:F1:59:F5:76:98:8F:B4:E5:1D:41:01:BB:85:D0:D0:C9:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3l428Vn1dpiPtOUdQQG7hdDQyYM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/1ccbfd-a651-4c8e-9d60-ebbbb444286e/1/U-nXy1btwEGjzap09BwjPS_gwy8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/1ccbfd-a651-4c8e-9d60-ebbbb444286e/1/3l428Vn1dpiPtOUdQQG7hdDQyYM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.90.160.0/22
185.21.130.0/24
IPv6:
2a0c:8880::/29
Signature Algorithm: sha256WithRSAEncryption
a3:f3:c5:7f:a9:ce:c9:4a:5e:2d:37:4a:40:6d:e9:93:8a:2d:
84:e3:c5:55:7b:b7:78:c7:46:b1:58:00:b5:19:d3:e9:41:7f:
0c:a5:15:96:2d:c2:50:5f:e5:06:75:8a:27:9a:ac:60:e8:34:
07:f4:0b:a8:c9:6e:e8:47:1c:65:74:e1:8c:a1:20:ce:56:ae:
74:d2:e8:22:07:e0:c8:bd:d1:28:71:54:d7:b9:ac:e7:e3:85:
64:0d:e5:3a:a4:53:41:06:da:fd:b0:c2:a1:fa:cb:89:76:1f:
a0:b4:c1:94:13:bc:f1:fd:0d:04:b5:6d:f3:4e:bb:23:1a:e3:
42:a3:20:94:1a:dc:75:52:08:68:e0:22:79:3d:4f:c0:86:8b:
08:b2:d2:aa:c2:af:b8:9f:38:98:df:05:b7:51:e4:14:09:bd:
5c:32:0b:1e:91:82:11:9b:47:9c:d7:19:93:e5:c2:49:ad:0f:
a7:18:07:17:16:d2:cf:c8:09:4f:ba:e6:36:96:a3:9e:7a:33:
ec:25:e0:45:8c:4f:0a:79:ed:6a:1b:f2:5b:ce:1a:3c:f7:c9:
11:87:d4:d8:54:8e:d9:90:4c:df:51:45:b7:02:71:b2:9a:7c:
9f:d8:ad:aa:6f:fe:c0:98:2d:af:3e:8d:f2:f3:68:61:4c:50:
7c:91:4f:bf
-----BEGIN CERTIFICATE-----
MIIFEjCCA/qgAwIBAgISAYVx+gmrrIoJojtVXrABQPPzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRlNWUzNmYxNTlmNTc2OTg4ZmI0ZTUxZDQxMDFiYjg1ZDBk
MGM5ODMwHhcNMjMwMTAyMTAxNDQ5WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1M2U5ZDdjYjU2ZWRjMDQxYTNjZGFhNzRmNDFjMjMzZDJmZTBjMzJmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo2QOX8D6LYRGSaoGQxY5abYMY14D
1QLfjtAhcVHodalIYaWVAviDOYU63hPQ6NZcNRNtzsilB7cEYwPeX16hizp+nMJT
KaIl3prqdi7j8fzqRqnODWrD3qvqYzKpc1b11RycPjDJZun154IXB0ADrlJxcnML
p9KCV+iamgYM4XUa+4seLiKX4aogbOlPXe2knEsk8pQ1p10fNHj+2599lUHnT4iX
ysS5worVvhPq6hGMzgpeABlylXfP8C0zhNKlR+TOlV2Qa8UuVZ39ILik4Wzu1opt
rPs4PmLo0EaN6EvZ2FNh4lE60ldbbaASZb9lti1t4S6HKgod8iNd0ArtlQIDAQAB
o4ICHjCCAhowHQYDVR0OBBYEFFPp18tW7cBBo82qdPQcIz0v4MMvMB8GA1UdIwQY
MBaAFN5eNvFZ9XaYj7TlHUEBu4XQ0MmDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM2w0MjhWbjFkcGlQdE9VZFFRRzdoZERReVlNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZC8xY2NiZmQtYTY1MS00YzhlLTlkNjAt
ZWJiYmI0NDQyODZlLzEvVS1uWHkxYnR3RUdqemFwMDlCd2pQU19nd3k4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZC8xY2NiZmQtYTY1MS00YzhlLTlkNjAtZWJiYmI0NDQyODZl
LzEvM2w0MjhWbjFkcGlQdE9VZFFRRzdoZERReVlNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQCLVqgAwQA
uRWCMA0EAgACMAcDBQMqDIiAMA0GCSqGSIb3DQEBCwUAA4IBAQCj88V/qc7JSl4t
N0pAbemTii2E48VVe7d4x0axWAC1GdPpQX8MpRWWLcJQX+UGdYonmqxg6DQH9Auo
yW7oRxxldOGMoSDOVq500ugiB+DIvdEocVTXuazn44VkDeU6pFNBBtr9sMKh+suJ
dh+gtMGUE7zx/Q0EtW3zTrsjGuNCoyCUGtx1Ugho4CJ5PU/AhosIstKqwq+4nziY
3wW3UeQUCb1cMgsekYIRm0ec1xmT5cJJrQ+nGAcXFtLPyAlPuuY2lqOeejPsJeBF
jE8Kee1qG/Jbzho898kRh9TYVI7ZkEzfUUW3AnGymnyf2K2qb/7AmC2vPo3y82hh
TFB8kU+/
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:24:00 2025 by rpki-client