Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/266caf-3b43-49e0-b6e1-9c174e53e4fe/1/svGUsmdO7g7OZSc4LzqCLoeI5Ac.roa
File: svGUsmdO7g7OZSc4LzqCLoeI5Ac.roa (raw, json)
Hash identifier: CWl5f1j69pkszF2eQiFg7xzNHJrmCk7GBR+/DTsiu0A=
Subject key identifier: B2:F1:94:B2:67:4E:EE:0E:CE:65:27:38:2F:3A:82:2E:87:88:E4:07
Certificate issuer: /CN=1045dacc837798c3e6cf31f4d27946a33b0de661
Certificate serial: 29FBF8E9
Authority key identifier: 10:45:DA:CC:83:77:98:C3:E6:CF:31:F4:D2:79:46:A3:3B:0D:E6:61
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EEXazIN3mMPmzzH00nlGozsN5mE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/266caf-3b43-49e0-b6e1-9c174e53e4fe/1/svGUsmdO7g7OZSc4LzqCLoeI5Ac.roa
Signing time: Sat 01 Jan 2022 13:54:32 +0000
ROA not before: Sat 01 Jan 2022 13:54:32 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 212494
IP address blocks: 128.127.146.0/24 maxlen: 24
128.127.147.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 704379113 (0x29fbf8e9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1045dacc837798c3e6cf31f4d27946a33b0de661
Validity
Not Before: Jan 1 13:54:32 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b2f194b2674eee0ece6527382f3a822e8788e407
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:36:03:12:65:3d:b2:20:7d:b0:62:17:82:b3:
5f:01:6b:1d:5c:1d:3d:4a:04:11:f5:d8:1f:07:ca:
4d:de:5f:b0:b5:82:ae:8c:0d:fc:f5:54:50:8d:93:
0c:43:a2:9c:74:ce:b0:2a:43:72:23:77:23:07:59:
93:db:8d:6b:50:48:e0:13:50:6e:af:fd:05:65:2d:
5c:3c:38:83:b8:14:cd:12:8e:2e:83:7f:63:e3:24:
d3:2f:e2:2a:12:19:bc:24:52:52:02:d1:f0:dd:af:
44:4e:97:d7:5f:74:16:f4:ce:d9:90:bd:24:9b:95:
d1:ac:7d:98:d2:29:7b:58:2f:13:60:50:70:b5:45:
aa:2a:cc:7e:0c:95:7f:0b:bf:fc:60:1e:24:c0:a8:
b6:d4:f7:f0:11:2f:79:fc:d9:65:bb:b0:4f:84:a3:
2e:38:b4:0d:04:44:ee:2a:f6:e2:c2:53:7d:35:1d:
27:d6:35:c7:b4:ef:5a:89:ff:15:d8:42:9a:85:96:
30:1a:35:a5:b9:ef:70:26:e2:32:da:1b:f4:cb:45:
93:06:f8:74:a9:95:e7:29:2e:e5:63:a6:06:46:d3:
88:cc:90:8d:5f:08:41:a3:fc:ee:2a:3c:dc:09:d6:
d2:41:cf:f3:92:66:7a:01:d4:cf:22:f0:e3:a4:f6:
d8:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:F1:94:B2:67:4E:EE:0E:CE:65:27:38:2F:3A:82:2E:87:88:E4:07
X509v3 Authority Key Identifier:
keyid:10:45:DA:CC:83:77:98:C3:E6:CF:31:F4:D2:79:46:A3:3B:0D:E6:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EEXazIN3mMPmzzH00nlGozsN5mE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/266caf-3b43-49e0-b6e1-9c174e53e4fe/1/svGUsmdO7g7OZSc4LzqCLoeI5Ac.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/266caf-3b43-49e0-b6e1-9c174e53e4fe/1/EEXazIN3mMPmzzH00nlGozsN5mE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
128.127.146.0/23
Signature Algorithm: sha256WithRSAEncryption
dc:bd:ff:07:62:0f:af:4d:4e:0b:9d:ef:95:be:2c:10:4c:a5:
be:ea:41:05:fa:ba:c5:60:71:ce:61:87:3d:96:f5:d1:dd:80:
82:1e:20:5a:2e:77:06:cd:eb:f4:95:07:a9:33:cd:21:57:71:
17:1c:a6:f4:33:45:61:fb:e8:c4:80:e0:2b:39:60:60:87:61:
cb:3b:2e:26:c6:11:9f:96:14:a3:90:90:f2:1d:ad:77:ae:92:
75:8e:9b:84:88:d9:a6:c5:31:14:7f:df:e5:e9:d5:06:41:f9:
ae:85:c2:da:8f:3d:b3:22:36:2f:07:67:93:5d:4c:c5:4b:a3:
81:49:00:1d:52:6a:46:65:c3:d5:05:a6:ee:c4:2f:bb:b5:af:
bb:80:10:5d:2f:8d:a2:3e:bb:dc:15:63:df:d6:88:72:02:8d:
66:41:1b:7a:8a:84:8d:e3:d2:e6:3d:a9:c8:9c:31:e2:4c:19:
0c:80:63:b4:ef:64:81:02:b4:49:d2:dc:ce:9b:73:bf:be:1d:
d3:47:aa:2d:b4:1f:45:aa:ea:11:8b:34:42:9a:6a:4d:42:f8:
1d:df:05:df:04:fc:7a:ac:58:c5:2a:b8:bd:c5:39:a7:c9:48:
07:ef:69:68:87:ca:58:10:01:9e:ea:e9:37:8c:76:75:06:90:
90:38:76:85
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEKfv46TANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygx
MDQ1ZGFjYzgzNzc5OGMzZTZjZjMxZjRkMjc5NDZhMzNiMGRlNjYxMB4XDTIyMDEw
MTEzNTQzMloXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoYjJmMTk0YjI2NzRl
ZWUwZWNlNjUyNzM4MmYzYTgyMmU4Nzg4ZTQwNzCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBALM2AxJlPbIgfbBiF4KzXwFrHVwdPUoEEfXYHwfKTd5fsLWC
rowN/PVUUI2TDEOinHTOsCpDciN3IwdZk9uNa1BI4BNQbq/9BWUtXDw4g7gUzRKO
LoN/Y+Mk0y/iKhIZvCRSUgLR8N2vRE6X1190FvTO2ZC9JJuV0ax9mNIpe1gvE2BQ
cLVFqirMfgyVfwu//GAeJMCottT38BEvefzZZbuwT4SjLji0DQRE7ir24sJTfTUd
J9Y1x7TvWon/FdhCmoWWMBo1pbnvcCbiMtob9MtFkwb4dKmV5yku5WOmBkbTiMyQ
jV8IQaP87io83AnW0kHP85JmegHUzyLw46T22FMCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBSy8ZSyZ07uDs5lJzgvOoIuh4jkBzAfBgNVHSMEGDAWgBQQRdrMg3eYw+bP
MfTSeUajOw3mYTAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L0VFWGF6SU4zbU1QbXp6SDAwbmxHb3pzTjVtRS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvZjIvMjY2Y2FmLTNiNDMtNDllMC1iNmUxLTljMTc0ZTUzZTRmZS8x
L3N2R1VzbWRPN2c3T1pTYzRMenFDTG9lSTVBYy5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZjIv
MjY2Y2FmLTNiNDMtNDllMC1iNmUxLTljMTc0ZTUzZTRmZS8xL0VFWGF6SU4zbU1Q
bXp6SDAwbmxHb3pzTjVtRS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAYB/kjANBgkqhkiG9w0BAQsFAAOC
AQEA3L3/B2IPr01OC53vlb4sEEylvupBBfq6xWBxzmGHPZb10d2Agh4gWi53Bs3r
9JUHqTPNIVdxFxym9DNFYfvoxIDgKzlgYIdhyzsuJsYRn5YUo5CQ8h2td66SdY6b
hIjZpsUxFH/f5enVBkH5roXC2o89syI2Lwdnk11MxUujgUkAHVJqRmXD1QWm7sQv
u7Wvu4AQXS+Noj673BVj39aIcgKNZkEbeoqEjePS5j2pyJwx4kwZDIBjtO9kgQK0
SdLczptzv74d00eqLbQfRarqEYs0QppqTUL4Hd8F3wT8eqxYxSq4vcU5p8lIB+9p
aIfKWBABnurpN4x2dQaQkDh2hQ==
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:06:19 2023 by rpki-client on console-fra.rpki-client.org