Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/9e22a2-9365-4956-8e66-ce4f25ace252/1/DcM9N5qaX9w2-fxieXmvL7CuD9o.roa
File: DcM9N5qaX9w2-fxieXmvL7CuD9o.roa (raw, json)
Hash identifier: eNb5Njefysc7TTYvrZjM0A0yngjKS9fx6nrZQREkxIE=
Subject key identifier: 0D:C3:3D:37:9A:9A:5F:DC:36:F9:FC:62:79:79:AF:2F:B0:AE:0F:DA
Certificate issuer: /CN=27ce1e9a6522616ab30b0f123e09d305a82304af
Certificate serial: 018572F12E7059AFC69F235234282554BA77
Authority key identifier: 27:CE:1E:9A:65:22:61:6A:B3:0B:0F:12:3E:09:D3:05:A8:23:04:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J84emmUiYWqzCw8SPgnTBagjBK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/9e22a2-9365-4956-8e66-ce4f25ace252/1/DcM9N5qaX9w2-fxieXmvL7CuD9o.roa
Signing time: Mon 02 Jan 2023 14:44:46 +0000
ROA not before: Mon 02 Jan 2023 14:44:46 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 15605
IP address blocks: 5.181.68.0/22 maxlen: 24
46.30.168.0/21 maxlen: 24
2.58.128.0/22 maxlen: 24
109.73.80.0/20 maxlen: 24
185.5.244.0/22 maxlen: 24
5.154.192.0/19 maxlen: 24
185.37.180.0/22 maxlen: 24
37.77.96.0/22 maxlen: 24
37.77.100.0/24 maxlen: 24
37.77.102.0/24 maxlen: 24
37.77.101.0/24 maxlen: 24
5.154.237.0/24 maxlen: 24
5.154.238.0/24 maxlen: 24
91.151.86.0/23 maxlen: 24
2a00:1cc8::/29 maxlen: 40
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:f1:2e:70:59:af:c6:9f:23:52:34:28:25:54:ba:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27ce1e9a6522616ab30b0f123e09d305a82304af
Validity
Not Before: Jan 2 14:44:46 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0dc33d379a9a5fdc36f9fc627979af2fb0ae0fda
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:33:68:50:b4:b3:f7:9f:ae:a2:66:50:92:ed:
a9:20:81:2c:82:51:a7:b6:ea:e2:16:0b:c3:87:9f:
47:1c:22:06:c6:79:07:dc:8e:3f:b1:83:1b:2a:a0:
1c:d1:fb:f1:7e:25:f2:14:82:d0:c5:fb:f7:6d:09:
c1:55:70:2a:f2:e4:0a:95:0d:46:63:93:e1:54:12:
ac:6a:1b:7f:d1:97:c4:6b:d4:51:dc:c1:fc:97:85:
ff:dc:a8:5b:72:c6:46:45:ca:29:a2:ef:53:fe:93:
9e:81:a7:a2:ba:1b:a8:2b:7e:ef:9d:22:f7:25:24:
69:55:d6:8b:bc:6c:8c:74:57:c9:11:78:1c:b3:c6:
d9:fb:82:e4:70:f9:e8:5a:22:6b:2b:6b:74:9b:e7:
b6:2e:54:ba:f4:ba:7c:39:90:37:8b:41:d8:2d:a9:
bf:bf:c6:88:b9:cd:7a:e5:fe:46:00:37:1c:d7:22:
b3:68:35:49:6b:8e:2a:59:a3:5a:e7:43:d1:7d:3c:
99:87:26:f4:b4:5e:fe:7b:97:3a:f0:28:15:36:cb:
49:9e:fb:c6:d3:cb:23:9b:b3:18:24:89:09:1e:5f:
ec:64:34:73:9d:d2:74:fb:6e:aa:2a:c5:dc:01:33:
52:61:5f:2c:92:f9:4d:6d:83:85:c7:7b:07:12:a4:
78:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:C3:3D:37:9A:9A:5F:DC:36:F9:FC:62:79:79:AF:2F:B0:AE:0F:DA
X509v3 Authority Key Identifier:
keyid:27:CE:1E:9A:65:22:61:6A:B3:0B:0F:12:3E:09:D3:05:A8:23:04:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J84emmUiYWqzCw8SPgnTBagjBK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/9e22a2-9365-4956-8e66-ce4f25ace252/1/DcM9N5qaX9w2-fxieXmvL7CuD9o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/9e22a2-9365-4956-8e66-ce4f25ace252/1/J84emmUiYWqzCw8SPgnTBagjBK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.58.128.0/22
5.154.192.0/19
5.154.237.0-5.154.238.255
5.181.68.0/22
37.77.96.0-37.77.102.255
46.30.168.0/21
91.151.86.0/23
109.73.80.0/20
185.5.244.0/22
185.37.180.0/22
IPv6:
2a00:1cc8::/29
Signature Algorithm: sha256WithRSAEncryption
26:7d:5b:28:d0:df:a7:74:48:e6:23:b8:b0:1c:45:d4:a8:24:
3c:92:9e:44:9c:ae:f0:92:a7:ee:63:10:1e:69:3a:b2:c1:d8:
af:95:44:2e:bc:ff:ca:14:cc:05:c9:b6:64:3e:16:8b:09:f2:
83:27:7a:ec:3b:aa:8a:14:10:ca:75:05:f2:ca:4c:d0:e4:d8:
e0:32:55:47:da:17:a3:d4:12:3c:d0:2c:cc:6f:7f:16:7b:3f:
40:3f:e5:1b:ed:83:54:7c:33:fb:b7:a9:22:a4:c6:d4:89:cc:
f7:e1:fe:b9:01:69:46:d9:78:d3:23:bc:f1:fc:8d:d2:26:9d:
fa:f1:aa:e8:6f:88:10:a8:41:10:cf:69:6a:db:81:cf:83:74:
8a:bb:64:7d:84:7c:90:25:45:97:ff:1a:f4:a8:9d:d9:77:e4:
7b:3d:40:85:2c:50:5d:28:d3:71:ac:3a:5b:e8:68:4c:65:7c:
5f:de:76:40:21:ba:1a:3b:dc:96:a3:3e:67:62:7d:7b:58:18:
d3:36:96:12:eb:f9:04:72:d8:fa:38:f8:40:50:11:a7:1e:a0:
fb:44:ea:ec:ec:87:a8:17:a9:47:6c:af:7e:d4:0d:e7:e4:a6:
3e:b6:3c:67:1d:5d:74:96:fd:61:02:22:7f:2c:9a:e2:85:6e:
31:1e:fe:b7
-----BEGIN CERTIFICATE-----
MIIFUjCCBDqgAwIBAgISAYVy8S5wWa/GnyNSNCglVLp3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI3Y2UxZTlhNjUyMjYxNmFiMzBiMGYxMjNlMDlkMzA1YTgy
MzA0YWYwHhcNMjMwMTAyMTQ0NDQ2WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwZGMzM2QzNzlhOWE1ZmRjMzZmOWZjNjI3OTc5YWYyZmIwYWUwZmRhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnjNoULSz95+uomZQku2pIIEsglGn
turiFgvDh59HHCIGxnkH3I4/sYMbKqAc0fvxfiXyFILQxfv3bQnBVXAq8uQKlQ1G
Y5PhVBKsaht/0ZfEa9RR3MH8l4X/3KhbcsZGRcopou9T/pOegaeiuhuoK37vnSL3
JSRpVdaLvGyMdFfJEXgcs8bZ+4LkcPnoWiJrK2t0m+e2LlS69Lp8OZA3i0HYLam/
v8aIuc165f5GADcc1yKzaDVJa44qWaNa50PRfTyZhyb0tF7+e5c68CgVNstJnvvG
08sjm7MYJIkJHl/sZDRzndJ0+26qKsXcATNSYV8skvlNbYOFx3sHEqR4FQIDAQAB
o4ICXjCCAlowHQYDVR0OBBYEFA3DPTeaml/cNvn8Ynl5ry+wrg/aMB8GA1UdIwQY
MBaAFCfOHpplImFqswsPEj4J0wWoIwSvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSjg0ZW1tVWlZV3F6Q3c4U1BnblRCYWdqQks4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMC85ZTIyYTItOTM2NS00OTU2LThlNjYt
Y2U0ZjI1YWNlMjUyLzEvRGNNOU41cWFYOXcyLWZ4aWVYbXZMN0N1RDlvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMC85ZTIyYTItOTM2NS00OTU2LThlNjYtY2U0ZjI1YWNlMjUy
LzEvSjg0ZW1tVWlZV3F6Q3c4U1BnblRCYWdqQks4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMHQGCCsGAQUFBwEHAQH/BGUwYzBSBAIAATBMAwQCAjqAAwQF
BZrAMAwDBAAFmu0DBAAFmu4DBAIFtUQwDAMEBSVNYAMEACVNZgMEAy4eqAMEAVuX
VgMEBG1JUAMEArkF9AMEArkltDANBAIAAjAHAwUDKgAcyDANBgkqhkiG9w0BAQsF
AAOCAQEAJn1bKNDfp3RI5iO4sBxF1KgkPJKeRJyu8JKn7mMQHmk6ssHYr5VELrz/
yhTMBcm2ZD4Wiwnygyd67DuqihQQynUF8spM0OTY4DJVR9oXo9QSPNAszG9/Fns/
QD/lG+2DVHwz+7epIqTG1InM9+H+uQFpRtl40yO88fyN0iad+vGq6G+IEKhBEM9p
atuBz4N0irtkfYR8kCVFl/8a9Kid2Xfkez1AhSxQXSjTcaw6W+hoTGV8X952QCG6
GjvclqM+Z2J9e1gY0zaWEuv5BHLY+jj4QFARpx6g+0Tq7OyHqBepR2yvftQN5+Sm
PrY8Zx1ddJb9YQIifyya4oVuMR7+tw==
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:14:43 2025 by rpki-client