Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/b49562-f157-4382-998e-8f934e71767c/1/rYnUAPFjV1ufUtRbjF1LXugIeKM.roa
File: rYnUAPFjV1ufUtRbjF1LXugIeKM.roa (raw, json)
Hash identifier: XXBubeASyLsWTsRF/EFSPRR04t/4wQQvparLG6LwC1I=
Subject key identifier: AD:89:D4:00:F1:63:57:5B:9F:52:D4:5B:8C:5D:4B:5E:E8:08:78:A3
Certificate issuer: /CN=46947c5c3d4c2fc4c4a4a7428b622a7fef392e29
Certificate serial: 0188D4E73D3649491EC2A4BEC6304882083D
Authority key identifier: 46:94:7C:5C:3D:4C:2F:C4:C4:A4:A7:42:8B:62:2A:7F:EF:39:2E:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RpR8XD1ML8TEpKdCi2Iqf-85Lik.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/b49562-f157-4382-998e-8f934e71767c/1/rYnUAPFjV1ufUtRbjF1LXugIeKM.roa
Signing time: Mon 19 Jun 2023 18:25:04 +0000
ROA not before: Mon 19 Jun 2023 18:25:04 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 205499
IP address blocks: 185.135.116.0/22 maxlen: 22
185.135.116.0/24 maxlen: 24
185.135.117.0/24 maxlen: 24
185.135.118.0/24 maxlen: 24
185.135.119.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:d4:e7:3d:36:49:49:1e:c2:a4:be:c6:30:48:82:08:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=46947c5c3d4c2fc4c4a4a7428b622a7fef392e29
Validity
Not Before: Jun 19 18:25:04 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ad89d400f163575b9f52d45b8c5d4b5ee80878a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:8c:5c:75:aa:13:97:43:6c:17:b1:26:6c:c8:
60:04:8d:60:df:79:dc:79:0e:ea:fc:7d:ea:1b:af:
a9:0a:34:8c:3b:fe:0e:c1:bb:09:d4:e5:72:4b:80:
6f:9f:62:93:2d:e3:c2:0a:d4:b5:61:4b:76:2b:56:
3e:d3:03:a1:c4:02:c9:85:85:b6:0a:c8:6d:24:22:
4c:5c:40:08:fc:aa:bb:2b:10:44:1c:17:14:b4:cd:
c7:82:71:f4:68:65:ba:d4:42:c1:bf:00:ae:e0:17:
60:c1:c1:74:a8:23:0f:26:90:59:f8:de:7a:63:6c:
e6:e8:f1:1d:d1:f4:45:1f:d7:f6:48:23:1b:75:af:
8b:e2:0a:c0:45:51:a9:25:98:f1:e0:77:5c:ef:5c:
36:55:01:42:e9:92:01:56:93:17:c7:fc:00:ee:91:
b3:2d:2f:72:be:44:54:2c:f4:90:63:3e:b2:0b:3c:
ac:9a:89:e0:58:17:bf:cc:81:cb:fb:d4:0f:ac:23:
a6:ef:e3:08:e5:b7:a1:33:a8:06:e8:b1:6b:a2:3e:
9f:6e:4d:e0:84:89:b8:67:35:35:fd:4e:a9:8c:39:
2d:bc:8b:fb:dd:86:8d:76:35:45:6c:35:ee:f2:03:
86:70:1a:5e:e0:be:64:c2:4c:83:c6:c4:d4:cd:fe:
b5:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:89:D4:00:F1:63:57:5B:9F:52:D4:5B:8C:5D:4B:5E:E8:08:78:A3
X509v3 Authority Key Identifier:
keyid:46:94:7C:5C:3D:4C:2F:C4:C4:A4:A7:42:8B:62:2A:7F:EF:39:2E:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RpR8XD1ML8TEpKdCi2Iqf-85Lik.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/b49562-f157-4382-998e-8f934e71767c/1/rYnUAPFjV1ufUtRbjF1LXugIeKM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/b49562-f157-4382-998e-8f934e71767c/1/RpR8XD1ML8TEpKdCi2Iqf-85Lik.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.135.116.0/22
Signature Algorithm: sha256WithRSAEncryption
0e:e1:90:d0:6c:3d:d4:0a:a7:5a:f7:ed:cc:4c:68:d6:0b:a3:
f6:32:38:9a:b4:fc:cb:be:25:a0:c6:87:0a:1a:af:ae:72:ae:
3a:b0:91:e8:2e:b1:37:d9:28:b1:2d:74:a2:2a:64:83:2d:ca:
20:6a:8b:dd:46:54:35:66:47:d2:ba:26:63:e0:f5:16:59:20:
b2:53:28:09:5f:03:da:29:72:94:35:fd:36:a3:8b:e8:f8:8e:
15:08:cd:be:b5:84:c6:a4:f9:01:1c:bb:8a:58:cc:27:56:87:
78:16:26:19:0e:0d:1d:4d:5b:16:e0:46:a2:be:f3:31:14:fa:
54:86:25:90:b1:17:1d:6a:48:55:5b:42:94:cd:88:b4:19:ad:
7d:f7:19:94:b3:58:08:dd:2b:f5:4a:d3:9d:95:e0:f9:5c:e7:
1c:50:00:65:00:94:f5:f2:30:c9:9b:a3:42:51:25:fc:b1:bb:
e8:8e:50:c5:78:8b:96:f2:a7:60:39:af:d4:c2:39:5a:70:45:
31:c3:0f:cf:43:08:0f:84:60:49:dc:b0:97:57:72:d1:f9:50:
b4:9b:71:79:88:8f:35:3b:86:3c:4c:e0:c6:34:2d:a3:e6:d8:
da:ed:9e:ac:17:09:5e:66:71:12:a1:ce:fd:e8:d0:01:b4:84:
09:48:1a:21
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYjU5z02SUkewqS+xjBIggg9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ2OTQ3YzVjM2Q0YzJmYzRjNGE0YTc0MjhiNjIyYTdmZWYz
OTJlMjkwHhcNMjMwNjE5MTgyNTA0WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhZDg5ZDQwMGYxNjM1NzViOWY1MmQ0NWI4YzVkNGI1ZWU4MDg3OGEzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm4xcdaoTl0NsF7EmbMhgBI1g33nc
eQ7q/H3qG6+pCjSMO/4OwbsJ1OVyS4Bvn2KTLePCCtS1YUt2K1Y+0wOhxALJhYW2
CshtJCJMXEAI/Kq7KxBEHBcUtM3HgnH0aGW61ELBvwCu4BdgwcF0qCMPJpBZ+N56
Y2zm6PEd0fRFH9f2SCMbda+L4grARVGpJZjx4Hdc71w2VQFC6ZIBVpMXx/wA7pGz
LS9yvkRULPSQYz6yCzysmongWBe/zIHL+9QPrCOm7+MI5behM6gG6LFroj6fbk3g
hIm4ZzU1/U6pjDktvIv73YaNdjVFbDXu8gOGcBpe4L5kwkyDxsTUzf619QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFK2J1ADxY1dbn1LUW4xdS17oCHijMB8GA1UdIwQY
MBaAFEaUfFw9TC/ExKSnQotiKn/vOS4pMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUnBSOFhEMU1MOFRFcEtkQ2kySXFmLTg1TGlrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZi9iNDk1NjItZjE1Ny00MzgyLTk5OGUt
OGY5MzRlNzE3NjdjLzEvclluVUFQRmpWMXVmVXRSYmpGMUxYdWdJZUtNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZi9iNDk1NjItZjE1Ny00MzgyLTk5OGUtOGY5MzRlNzE3Njdj
LzEvUnBSOFhEMU1MOFRFcEtkQ2kySXFmLTg1TGlrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuYd0MA0G
CSqGSIb3DQEBCwUAA4IBAQAO4ZDQbD3UCqda9+3MTGjWC6P2MjiatPzLviWgxocK
Gq+ucq46sJHoLrE32SixLXSiKmSDLcogaovdRlQ1ZkfSuiZj4PUWWSCyUygJXwPa
KXKUNf02o4vo+I4VCM2+tYTGpPkBHLuKWMwnVod4FiYZDg0dTVsW4EaivvMxFPpU
hiWQsRcdakhVW0KUzYi0Ga199xmUs1gI3Sv1StOdleD5XOccUABlAJT18jDJm6NC
USX8sbvojlDFeIuW8qdgOa/UwjlacEUxww/PQwgPhGBJ3LCXV3LR+VC0m3F5iI81
O4Y8TODGNC2j5tja7Z6sFwleZnESoc796NABtIQJSBoh
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:27:47 2025 by rpki-client