Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/266caf-3b43-49e0-b6e1-9c174e53e4fe/1/IjP7alXgKA0rGBngTOUleJ-XtDI.roa
File: IjP7alXgKA0rGBngTOUleJ-XtDI.roa (raw, json)
Hash identifier: JH9OCh9L/3g+80dZgT+HcGsVnG03SRztYwy1xKAzpJk=
Subject key identifier: 22:33:FB:6A:55:E0:28:0D:2B:18:19:E0:4C:E5:25:78:9F:97:B4:32
Certificate issuer: /CN=1045dacc837798c3e6cf31f4d27946a33b0de661
Certificate serial: 29FAA21D
Authority key identifier: 10:45:DA:CC:83:77:98:C3:E6:CF:31:F4:D2:79:46:A3:3B:0D:E6:61
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EEXazIN3mMPmzzH00nlGozsN5mE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/266caf-3b43-49e0-b6e1-9c174e53e4fe/1/IjP7alXgKA0rGBngTOUleJ-XtDI.roa
Signing time: Sat 01 Jan 2022 13:54:31 +0000
ROA not before: Sat 01 Jan 2022 13:54:31 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 211716
IP address blocks: 79.133.96.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 704291357 (0x29faa21d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1045dacc837798c3e6cf31f4d27946a33b0de661
Validity
Not Before: Jan 1 13:54:31 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=2233fb6a55e0280d2b1819e04ce525789f97b432
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:11:41:d4:6d:2e:ea:19:d2:13:bc:c6:e2:8f:
70:7a:00:21:8b:39:f2:bc:53:16:b0:e7:94:dd:02:
c3:ab:1a:db:19:ba:e0:6d:c4:2e:64:2a:38:c1:4f:
c5:e1:10:df:a7:59:ba:19:51:d3:4c:e7:08:e1:5a:
86:59:34:34:53:00:ee:77:23:3e:a0:5e:fa:6e:ce:
cb:05:aa:e7:79:8c:82:05:35:07:fe:dc:e1:8e:62:
77:ce:22:6c:73:9e:9b:93:86:91:ed:87:0e:ac:40:
8f:0d:63:30:0e:05:0d:9e:3b:e7:2c:43:d7:b7:32:
b2:0b:aa:d7:cd:e6:1c:34:63:69:b3:51:fe:96:2f:
c9:5e:b0:84:cc:dd:5b:05:e0:8c:1a:cc:36:34:54:
15:65:31:1a:c3:01:d1:ac:a5:31:6b:a2:69:98:ee:
51:c3:03:62:bf:20:48:b4:f6:d4:3e:7d:1c:82:03:
2a:b7:8b:f9:dc:6d:d4:4c:78:52:89:75:e6:9e:a5:
9d:b3:cd:f8:73:10:03:4b:48:d6:41:b6:d8:9d:4e:
f5:34:77:b7:5d:c0:03:be:35:2e:6d:ca:97:f5:a2:
b1:03:f8:b7:47:ee:6f:35:67:3f:a2:92:17:a2:83:
93:62:0a:41:d9:96:08:b0:d1:19:b0:c4:43:a0:99:
d2:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:33:FB:6A:55:E0:28:0D:2B:18:19:E0:4C:E5:25:78:9F:97:B4:32
X509v3 Authority Key Identifier:
keyid:10:45:DA:CC:83:77:98:C3:E6:CF:31:F4:D2:79:46:A3:3B:0D:E6:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EEXazIN3mMPmzzH00nlGozsN5mE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/266caf-3b43-49e0-b6e1-9c174e53e4fe/1/IjP7alXgKA0rGBngTOUleJ-XtDI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/266caf-3b43-49e0-b6e1-9c174e53e4fe/1/EEXazIN3mMPmzzH00nlGozsN5mE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.133.96.0/24
Signature Algorithm: sha256WithRSAEncryption
a6:48:b5:0e:db:2e:f9:ab:76:d6:a3:a0:8a:1e:3c:ea:3b:4f:
32:bb:56:26:6c:42:a9:db:68:50:3b:76:96:fc:ac:8e:06:cd:
6c:b6:8f:19:5f:01:02:31:76:d2:2b:99:78:83:f9:93:3c:73:
7d:3e:16:6b:36:70:3a:84:a1:ad:16:48:e5:51:08:41:2b:e8:
50:ef:0a:5a:5b:35:81:9a:c9:47:d7:98:b0:08:fb:cc:2c:90:
d3:4e:8a:a8:c5:b1:36:77:06:56:e5:14:b8:0f:0f:00:4a:09:
b6:e9:69:6b:49:d2:7b:af:4d:77:35:38:3c:f8:09:ab:f7:90:
16:60:69:10:ac:da:04:7a:74:80:48:b5:99:ce:4e:92:45:d3:
bd:8d:03:7d:5a:ae:41:34:4d:5e:00:c7:fe:83:28:c0:c1:6e:
0a:2c:90:c6:57:c7:05:7d:8d:fc:95:5b:75:a0:48:3c:57:28:
c0:19:a6:be:f5:57:8a:3c:ee:f9:ed:79:9b:b2:df:76:df:e2:
fe:8b:0e:7c:41:61:15:4b:9f:3e:b2:44:d5:c2:d5:74:58:39:
0b:d7:9d:96:c0:eb:01:a2:10:31:a3:3f:d0:e5:8f:71:74:01:
03:f8:cd:a7:8a:1e:f8:03:51:66:e4:25:bd:14:d9:c6:05:78:
76:70:26:9e
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEKfqiHTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygx
MDQ1ZGFjYzgzNzc5OGMzZTZjZjMxZjRkMjc5NDZhMzNiMGRlNjYxMB4XDTIyMDEw
MTEzNTQzMVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoMjIzM2ZiNmE1NWUw
MjgwZDJiMTgxOWUwNGNlNTI1Nzg5Zjk3YjQzMjCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAKIRQdRtLuoZ0hO8xuKPcHoAIYs58rxTFrDnlN0Cw6sa2xm6
4G3ELmQqOMFPxeEQ36dZuhlR00znCOFahlk0NFMA7ncjPqBe+m7OywWq53mMggU1
B/7c4Y5id84ibHOem5OGke2HDqxAjw1jMA4FDZ475yxD17cysguq183mHDRjabNR
/pYvyV6whMzdWwXgjBrMNjRUFWUxGsMB0aylMWuiaZjuUcMDYr8gSLT21D59HIID
KreL+dxt1Ex4Uol15p6lnbPN+HMQA0tI1kG22J1O9TR3t13AA741Lm3Kl/WisQP4
t0fubzVnP6KSF6KDk2IKQdmWCLDRGbDEQ6CZ0mcCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBQiM/tqVeAoDSsYGeBM5SV4n5e0MjAfBgNVHSMEGDAWgBQQRdrMg3eYw+bP
MfTSeUajOw3mYTAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L0VFWGF6SU4zbU1QbXp6SDAwbmxHb3pzTjVtRS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvZjIvMjY2Y2FmLTNiNDMtNDllMC1iNmUxLTljMTc0ZTUzZTRmZS8x
L0lqUDdhbFhnS0EwckdCbmdUT1VsZUotWHRESS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZjIv
MjY2Y2FmLTNiNDMtNDllMC1iNmUxLTljMTc0ZTUzZTRmZS8xL0VFWGF6SU4zbU1Q
bXp6SDAwbmxHb3pzTjVtRS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAE+FYDANBgkqhkiG9w0BAQsFAAOC
AQEApki1Dtsu+at21qOgih486jtPMrtWJmxCqdtoUDt2lvysjgbNbLaPGV8BAjF2
0iuZeIP5kzxzfT4WazZwOoShrRZI5VEIQSvoUO8KWls1gZrJR9eYsAj7zCyQ006K
qMWxNncGVuUUuA8PAEoJtulpa0nSe69NdzU4PPgJq/eQFmBpEKzaBHp0gEi1mc5O
kkXTvY0DfVquQTRNXgDH/oMowMFuCiyQxlfHBX2N/JVbdaBIPFcowBmmvvVXijzu
+e15m7Lfdt/i/osOfEFhFUufPrJE1cLVdFg5C9edlsDrAaIQMaM/0OWPcXQBA/jN
p4oe+ANRZuQlvRTZxgV4dnAmng==
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:06:18 2023 by rpki-client on console-fra.rpki-client.org