Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/266caf-3b43-49e0-b6e1-9c174e53e4fe/1/r9K-VMW9ETjigqq_aIpcvugWm30.roa
File: r9K-VMW9ETjigqq_aIpcvugWm30.roa (raw, json)
Hash identifier: AgBisFARWJ0dnW5aHS7K2fV4wi2VB0TTjcz2ohMTpFo=
Subject key identifier: AF:D2:BE:54:C5:BD:11:38:E2:82:AA:BF:68:8A:5C:BE:E8:16:9B:7D
Certificate issuer: /CN=1045dacc837798c3e6cf31f4d27946a33b0de661
Certificate serial: 29E459BB
Authority key identifier: 10:45:DA:CC:83:77:98:C3:E6:CF:31:F4:D2:79:46:A3:3B:0D:E6:61
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EEXazIN3mMPmzzH00nlGozsN5mE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/266caf-3b43-49e0-b6e1-9c174e53e4fe/1/r9K-VMW9ETjigqq_aIpcvugWm30.roa
Signing time: Sat 01 Jan 2022 13:54:19 +0000
ROA not before: Sat 01 Jan 2022 13:54:19 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 8749
IP address blocks: 93.179.64.0/23 maxlen: 23
95.85.87.0/24 maxlen: 24
79.133.96.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 702831035 (0x29e459bb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1045dacc837798c3e6cf31f4d27946a33b0de661
Validity
Not Before: Jan 1 13:54:19 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=afd2be54c5bd1138e282aabf688a5cbee8169b7d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:fb:54:a3:4e:a6:bb:68:87:b4:c5:f4:88:79:
4f:8f:43:f1:19:37:1c:3f:98:ed:a7:cb:7d:c2:20:
a4:d1:03:81:9c:9a:59:14:4b:4c:39:81:65:2b:6a:
f3:f9:93:2c:a7:7f:48:72:40:82:79:c4:3c:b8:2f:
9b:dd:e9:8c:b2:63:0b:2e:1f:1a:b0:24:e7:08:5f:
e0:77:e7:be:dc:c3:71:72:c3:68:df:76:43:7d:84:
07:e7:d9:9e:f6:5e:62:3e:22:98:5d:1c:5e:79:ba:
cf:93:11:04:48:b2:0e:b3:37:27:e4:b6:0f:52:2b:
d5:20:d6:3b:28:2e:a8:01:37:7b:ce:c3:20:07:f7:
15:19:f7:8a:45:3c:6f:e9:58:99:fe:8b:d9:d5:48:
30:a3:59:f6:e7:de:a2:ec:66:0a:52:d6:c8:48:a6:
17:11:75:b4:b1:94:90:6f:53:26:e9:f9:67:d8:ad:
99:52:d3:cf:48:c0:d9:d0:2a:69:45:22:78:0a:33:
d7:1f:77:41:56:80:87:c4:49:7f:1e:32:ce:1f:16:
85:85:cb:4c:c9:ab:95:e2:67:73:bb:22:04:b0:18:
1f:65:19:f6:ca:f0:f2:fa:21:0d:33:08:0c:9a:7d:
3a:93:a3:87:6c:6e:b2:05:48:56:05:dd:32:d8:79:
56:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:D2:BE:54:C5:BD:11:38:E2:82:AA:BF:68:8A:5C:BE:E8:16:9B:7D
X509v3 Authority Key Identifier:
keyid:10:45:DA:CC:83:77:98:C3:E6:CF:31:F4:D2:79:46:A3:3B:0D:E6:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EEXazIN3mMPmzzH00nlGozsN5mE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/266caf-3b43-49e0-b6e1-9c174e53e4fe/1/r9K-VMW9ETjigqq_aIpcvugWm30.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/266caf-3b43-49e0-b6e1-9c174e53e4fe/1/EEXazIN3mMPmzzH00nlGozsN5mE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.133.96.0/24
93.179.64.0/23
95.85.87.0/24
Signature Algorithm: sha256WithRSAEncryption
41:89:f4:46:19:3e:2f:d5:1b:98:d6:8e:35:f5:f8:2f:af:9c:
3c:16:b5:cb:55:75:35:6c:77:26:00:c3:3a:c2:57:d9:45:45:
f0:fb:c1:ff:1a:a4:5e:2b:70:67:f8:96:79:be:ef:78:94:59:
c1:3d:c4:c6:2c:a0:d9:0c:fb:09:2a:db:95:90:5c:4c:5e:3f:
ca:37:bf:62:ba:7b:2a:d1:5e:27:c4:2d:4f:80:28:ba:75:60:
9d:47:fe:73:f5:de:4d:56:be:d4:28:06:7c:77:1c:52:b8:ae:
32:dc:03:da:6f:58:53:bc:80:45:66:b7:e9:3a:48:28:a3:c0:
74:86:3f:83:c1:43:f6:61:fe:b7:81:06:20:b5:f4:03:b4:de:
d0:6b:e8:0d:6b:ed:c5:e3:bb:19:7d:97:23:c9:dc:87:58:2d:
f0:88:57:99:e7:cc:b5:18:d6:c0:75:c2:06:3e:26:91:18:cb:
35:e9:cd:f8:10:49:95:a5:69:0f:7b:58:fa:22:ab:65:62:9b:
5b:ef:f6:b0:0e:8c:76:c5:c1:03:00:ae:97:91:88:ee:ef:0d:
25:82:f6:01:87:a4:ce:27:48:9f:c5:d0:4e:0a:9c:e5:04:4a:
b0:53:0c:f1:ad:b1:8c:ce:cf:67:1e:52:82:62:7b:85:ba:10:
2d:f8:7f:58
-----BEGIN CERTIFICATE-----
MIIE+zCCA+OgAwIBAgIEKeRZuzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygx
MDQ1ZGFjYzgzNzc5OGMzZTZjZjMxZjRkMjc5NDZhMzNiMGRlNjYxMB4XDTIyMDEw
MTEzNTQxOVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoYWZkMmJlNTRjNWJk
MTEzOGUyODJhYWJmNjg4YTVjYmVlODE2OWI3ZDCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBANH7VKNOprtoh7TF9Ih5T49D8Rk3HD+Y7afLfcIgpNEDgZya
WRRLTDmBZStq8/mTLKd/SHJAgnnEPLgvm93pjLJjCy4fGrAk5whf4HfnvtzDcXLD
aN92Q32EB+fZnvZeYj4imF0cXnm6z5MRBEiyDrM3J+S2D1Ir1SDWOyguqAE3e87D
IAf3FRn3ikU8b+lYmf6L2dVIMKNZ9ufeouxmClLWyEimFxF1tLGUkG9TJun5Z9it
mVLTz0jA2dAqaUUieAoz1x93QVaAh8RJfx4yzh8WhYXLTMmrleJnc7siBLAYH2UZ
9srw8vohDTMIDJp9OpOjh2xusgVIVgXdMth5VjsCAwEAAaOCAhUwggIRMB0GA1Ud
DgQWBBSv0r5Uxb0ROOKCqr9oily+6BabfTAfBgNVHSMEGDAWgBQQRdrMg3eYw+bP
MfTSeUajOw3mYTAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L0VFWGF6SU4zbU1QbXp6SDAwbmxHb3pzTjVtRS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvZjIvMjY2Y2FmLTNiNDMtNDllMC1iNmUxLTljMTc0ZTUzZTRmZS8x
L3I5Sy1WTVc5RVRqaWdxcV9hSXBjdnVnV20zMC5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZjIv
MjY2Y2FmLTNiNDMtNDllMC1iNmUxLTljMTc0ZTUzZTRmZS8xL0VFWGF6SU4zbU1Q
bXp6SDAwbmxHb3pzTjVtRS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAr
BggrBgEFBQcBBwEB/wQcMBowGAQCAAEwEgMEAE+FYAMEAV2zQAMEAF9VVzANBgkq
hkiG9w0BAQsFAAOCAQEAQYn0Rhk+L9UbmNaONfX4L6+cPBa1y1V1NWx3JgDDOsJX
2UVF8PvB/xqkXitwZ/iWeb7veJRZwT3Exiyg2Qz7CSrblZBcTF4/yje/Yrp7KtFe
J8QtT4AounVgnUf+c/XeTVa+1CgGfHccUriuMtwD2m9YU7yARWa36TpIKKPAdIY/
g8FD9mH+t4EGILX0A7Te0GvoDWvtxeO7GX2XI8nch1gt8IhXmefMtRjWwHXCBj4m
kRjLNenN+BBJlaVpD3tY+iKrZWKbW+/2sA6MdsXBAwCul5GI7u8NJYL2AYekzidI
n8XQTgqc5QRKsFMM8a2xjM7PZx5SgmJ7hboQLfh/WA==
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:06:19 2023 by rpki-client on console-fra.rpki-client.org