Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/0d903f-1831-4d03-aab4-81af7c657e05/1/li0S5koOynOW8wFzoAS8F3jC_-Y.roa
File: li0S5koOynOW8wFzoAS8F3jC_-Y.roa (raw, json)
Hash identifier: T7hBdFJUTyNFtlbaVWs+d3LxsatLMBiNG2Tc38sreHg=
Subject key identifier: 96:2D:12:E6:4A:0E:CA:73:96:F3:01:73:A0:04:BC:17:78:C2:FF:E6
Certificate issuer: /CN=d123b8d462134667ec6a9d1e154e5c7f0596662c
Certificate serial: 018255F74C52F61708CBE7615850D50CDE3C
Authority key identifier: D1:23:B8:D4:62:13:46:67:EC:6A:9D:1E:15:4E:5C:7F:05:96:66:2C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0SO41GITRmfsap0eFU5cfwWWZiw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/0d903f-1831-4d03-aab4-81af7c657e05/1/li0S5koOynOW8wFzoAS8F3jC_-Y.roa
Signing time: Sun 31 Jul 2022 20:34:06 +0000
ROA not before: Sun 31 Jul 2022 20:34:06 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 41843
IP address blocks: 62.78.85.0/24 maxlen: 24
62.78.84.0/24 maxlen: 24
62.78.80.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:55:f7:4c:52:f6:17:08:cb:e7:61:58:50:d5:0c:de:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d123b8d462134667ec6a9d1e154e5c7f0596662c
Validity
Not Before: Jul 31 20:34:06 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=962d12e64a0eca7396f30173a004bc1778c2ffe6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:52:e1:5e:b3:1f:91:32:ef:85:ab:3a:1f:b2:
94:7d:7f:67:3a:a7:b4:49:94:32:09:ba:dd:75:cd:
5c:0b:4e:b3:52:d7:1c:80:9b:3d:be:5b:2a:be:e4:
03:1e:92:45:be:2d:aa:eb:bc:c3:ef:c9:1c:83:80:
7d:f5:96:21:e8:7f:85:02:ad:78:d5:93:1e:1a:4c:
a3:d0:04:21:f2:12:1b:13:19:70:31:78:6b:d8:1a:
d9:6c:89:95:78:00:ee:ef:99:d1:ca:ba:dc:e1:df:
ce:8b:1e:80:04:9f:a0:37:78:9c:52:71:2d:27:19:
33:77:fb:6c:23:e3:0b:03:80:e6:4a:8b:67:54:c0:
1a:96:5a:9b:6d:81:00:e4:30:c8:dc:20:d8:57:79:
34:8b:48:db:cb:46:31:dd:87:34:9e:0f:44:0d:7e:
18:19:ca:9a:2d:8c:33:fb:0d:36:65:b4:7a:6f:cc:
a6:12:d4:6f:5c:88:01:96:ea:6f:aa:de:09:9d:35:
5d:90:ea:d8:6d:82:a0:58:c0:be:95:f4:ed:fb:67:
ec:95:f4:56:b1:ce:05:13:ad:fd:54:d3:88:ce:42:
e0:14:dc:9f:e6:22:2b:71:9f:80:71:a3:fe:ca:e8:
c0:29:6f:69:25:da:23:b6:da:db:ff:74:fd:52:87:
bb:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:2D:12:E6:4A:0E:CA:73:96:F3:01:73:A0:04:BC:17:78:C2:FF:E6
X509v3 Authority Key Identifier:
keyid:D1:23:B8:D4:62:13:46:67:EC:6A:9D:1E:15:4E:5C:7F:05:96:66:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0SO41GITRmfsap0eFU5cfwWWZiw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/0d903f-1831-4d03-aab4-81af7c657e05/1/li0S5koOynOW8wFzoAS8F3jC_-Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/0d903f-1831-4d03-aab4-81af7c657e05/1/0SO41GITRmfsap0eFU5cfwWWZiw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.78.80.0/24
62.78.84.0/23
Signature Algorithm: sha256WithRSAEncryption
b4:ad:a5:ff:7e:50:5e:34:21:c1:31:90:52:7f:65:ef:e9:f1:
ca:c2:22:2f:d2:c6:bf:1c:73:38:6a:16:85:4e:5c:f4:6d:5a:
f2:8a:e9:29:40:f3:e2:27:ec:15:bf:0b:c6:f2:e7:2d:c0:ff:
7d:dd:76:2b:1c:31:52:5e:f9:68:a7:9a:47:0a:fd:a8:15:1b:
9f:73:d6:5e:fb:b7:0d:c4:eb:08:ae:9a:c8:63:2d:58:11:74:
48:db:af:b5:be:cb:32:61:73:ad:02:8f:fb:0b:89:05:50:57:
99:25:c3:02:41:16:af:10:49:0b:97:5b:99:74:89:a6:0e:f1:
1f:10:37:f7:a3:13:11:64:62:e4:73:d7:de:6a:e7:9c:61:17:
1e:3b:fc:27:3e:1e:72:d0:ac:b8:26:34:73:ba:9e:dd:d7:39:
04:82:38:b9:fc:0c:0b:93:63:9c:f2:5a:e6:8c:d3:ac:39:e6:
ec:e6:01:49:fc:ec:00:20:6b:eb:54:67:a0:a8:fb:ce:a9:77:
16:de:3b:4c:53:06:30:0e:45:c5:83:1d:c8:47:66:f4:3f:cc:
f0:8f:3f:e5:fe:d2:3c:3e:3e:69:c8:1e:64:42:ca:37:ed:93:
fd:92:d7:cc:ed:eb:11:80:3b:44:66:e6:58:ca:2d:86:f6:e1:
e1:6f:d8:08
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYJV90xS9hcIy+dhWFDVDN48MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQxMjNiOGQ0NjIxMzQ2NjdlYzZhOWQxZTE1NGU1YzdmMDU5
NjY2MmMwHhcNMjIwNzMxMjAzNDA2WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5NjJkMTJlNjRhMGVjYTczOTZmMzAxNzNhMDA0YmMxNzc4YzJmZmU2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmFLhXrMfkTLvhas6H7KUfX9nOqe0
SZQyCbrddc1cC06zUtccgJs9vlsqvuQDHpJFvi2q67zD78kcg4B99ZYh6H+FAq14
1ZMeGkyj0AQh8hIbExlwMXhr2BrZbImVeADu75nRyrrc4d/Oix6ABJ+gN3icUnEt
Jxkzd/tsI+MLA4DmSotnVMAallqbbYEA5DDI3CDYV3k0i0jby0Yx3Yc0ng9EDX4Y
GcqaLYwz+w02ZbR6b8ymEtRvXIgBlupvqt4JnTVdkOrYbYKgWMC+lfTt+2fslfRW
sc4FE639VNOIzkLgFNyf5iIrcZ+AcaP+yujAKW9pJdojttrb/3T9Uoe76QIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFJYtEuZKDspzlvMBc6AEvBd4wv/mMB8GA1UdIwQY
MBaAFNEjuNRiE0Zn7GqdHhVOXH8FlmYsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMFNPNDFHSVRSbWZzYXAwZUZVNWNmd1dXWml3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOC8wZDkwM2YtMTgzMS00ZDAzLWFhYjQt
ODFhZjdjNjU3ZTA1LzEvbGkwUzVrb095bk9XOHdGem9BUzhGM2pDXy1ZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mOC8wZDkwM2YtMTgzMS00ZDAzLWFhYjQtODFhZjdjNjU3ZTA1
LzEvMFNPNDFHSVRSbWZzYXAwZUZVNWNmd1dXWml3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAPk5QAwQB
Pk5UMA0GCSqGSIb3DQEBCwUAA4IBAQC0raX/flBeNCHBMZBSf2Xv6fHKwiIv0sa/
HHM4ahaFTlz0bVryiukpQPPiJ+wVvwvG8uctwP993XYrHDFSXvlop5pHCv2oFRuf
c9Ze+7cNxOsIrprIYy1YEXRI26+1vssyYXOtAo/7C4kFUFeZJcMCQRavEEkLl1uZ
dImmDvEfEDf3oxMRZGLkc9feauecYRceO/wnPh5y0Ky4JjRzup7d1zkEgji5/AwL
k2Oc8lrmjNOsOebs5gFJ/OwAIGvrVGegqPvOqXcW3jtMUwYwDkXFgx3IR2b0P8zw
jz/l/tI8Pj5pyB5kQso37ZP9ktfM7esRgDtEZuZYyi2G9uHhb9gI
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:06:39 2023 by rpki-client on console-fra.rpki-client.org