Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/d53c78-0d5b-4237-9999-0e2d697b27e3/1/ka1AkYwiYNXIkr5yuAPUPobV9WM.roa
File: ka1AkYwiYNXIkr5yuAPUPobV9WM.roa (raw, json)
Hash identifier: wYco+++l/JHRjKsyOvCTe/v//p7IE3ZsigEhSkKXSdI=
Subject key identifier: 91:AD:40:91:8C:22:60:D5:C8:92:BE:72:B8:03:D4:3E:86:D5:F5:63
Certificate issuer: /CN=005ff9cc89c66a8a3a5d734a0d65c61fdc8518be
Certificate serial: 08595A64
Authority key identifier: 00:5F:F9:CC:89:C6:6A:8A:3A:5D:73:4A:0D:65:C6:1F:DC:85:18:BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AF_5zInGaoo6XXNKDWXGH9yFGL4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/d53c78-0d5b-4237-9999-0e2d697b27e3/1/ka1AkYwiYNXIkr5yuAPUPobV9WM.roa
Signing time: Sat 01 Jan 2022 10:54:24 +0000
ROA not before: Sat 01 Jan 2022 10:54:24 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 12574
IP address blocks: 213.160.64.0/19 maxlen: 24
185.166.4.0/22 maxlen: 24
2a00:17d8::/32 maxlen: 32
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 140073572 (0x8595a64)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=005ff9cc89c66a8a3a5d734a0d65c61fdc8518be
Validity
Not Before: Jan 1 10:54:24 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=91ad40918c2260d5c892be72b803d43e86d5f563
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:5d:f7:12:5c:07:c9:7d:80:f8:e2:69:42:f0:
9b:f0:d5:0c:a5:30:76:9d:46:b6:1b:15:59:85:53:
a0:85:c5:d0:83:37:cf:3e:d7:48:83:7a:66:c7:11:
9c:0e:f0:03:b7:60:45:bc:a1:21:18:28:80:7c:53:
06:91:34:f3:4b:54:da:d1:0d:af:30:66:3d:13:df:
a2:24:35:07:23:af:c1:0f:dd:1b:e6:77:01:21:f2:
ca:1a:86:26:8a:0c:37:df:d9:b7:cf:70:af:a7:f9:
c8:f5:85:67:b6:77:80:cd:6e:63:19:d2:79:77:76:
91:29:fc:18:ba:5b:99:e2:d6:b6:2f:d2:e5:f1:6f:
90:5d:f2:7c:cb:68:3d:65:2e:17:9b:01:bf:5d:d5:
dc:11:cf:2c:e0:bb:61:6f:0a:ae:a4:ad:f4:7c:3d:
24:72:4f:d4:e0:f0:c1:c9:04:fb:e7:e7:b4:d0:b8:
fc:3d:56:ef:af:3b:58:64:d1:48:26:81:7e:44:fe:
bd:a0:45:00:d0:69:09:2b:9c:4b:99:c7:3d:cb:42:
35:e9:c7:cd:80:18:ae:08:ad:32:40:a0:50:57:70:
bf:3d:2e:03:7b:51:ef:47:1f:f8:4b:39:4a:c6:6e:
9b:99:c2:30:ea:3f:77:d3:08:9e:56:db:34:ca:71:
67:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:AD:40:91:8C:22:60:D5:C8:92:BE:72:B8:03:D4:3E:86:D5:F5:63
X509v3 Authority Key Identifier:
keyid:00:5F:F9:CC:89:C6:6A:8A:3A:5D:73:4A:0D:65:C6:1F:DC:85:18:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AF_5zInGaoo6XXNKDWXGH9yFGL4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/d53c78-0d5b-4237-9999-0e2d697b27e3/1/ka1AkYwiYNXIkr5yuAPUPobV9WM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/d53c78-0d5b-4237-9999-0e2d697b27e3/1/AF_5zInGaoo6XXNKDWXGH9yFGL4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.166.4.0/22
213.160.64.0/19
IPv6:
2a00:17d8::/32
Signature Algorithm: sha256WithRSAEncryption
8b:5e:bb:5c:3f:82:6c:66:fc:9b:7a:22:57:fa:29:32:2f:89:
4a:2f:1c:0b:71:1e:6d:57:72:10:4e:b7:b1:51:1f:bb:ba:2a:
1d:12:63:50:8d:28:48:99:4d:86:16:5b:33:16:47:de:cd:a2:
52:c3:cf:5b:7c:46:2d:77:d4:f6:d7:83:37:ca:fc:98:c3:4f:
5a:76:47:b8:4c:b6:59:ca:35:d3:8a:d2:f6:21:d9:4e:72:e0:
5b:ea:1b:98:83:ab:75:55:e1:3d:97:7b:22:71:75:9c:92:5d:
bd:43:6a:ac:4a:96:27:9d:61:92:d6:e6:1f:c6:55:2e:dd:93:
08:84:2c:68:4f:f5:38:a9:62:15:94:7b:76:4e:d0:b8:a7:ce:
c6:6f:d2:96:53:ad:eb:a4:cf:f5:b2:81:7c:5a:66:31:63:7b:
4c:1f:1c:dc:1e:41:dc:b8:61:d2:92:59:da:b3:af:1c:4f:cc:
b6:67:d2:dc:58:17:0f:a4:58:40:7b:0a:a2:ac:e3:bc:d5:cf:
97:b5:8c:6b:05:ca:5f:df:8c:64:bd:dc:7d:96:22:99:80:cc:
a8:fb:eb:4e:b5:2a:ac:58:92:75:3b:b4:f3:ce:70:7b:c2:58:
da:7c:60:22:80:d7:83:eb:9a:67:da:6e:86:ab:ec:cb:64:78:
8b:cb:79:1a
-----BEGIN CERTIFICATE-----
MIIFBDCCA+ygAwIBAgIECFlaZDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygw
MDVmZjljYzg5YzY2YThhM2E1ZDczNGEwZDY1YzYxZmRjODUxOGJlMB4XDTIyMDEw
MTEwNTQyNFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoOTFhZDQwOTE4YzIy
NjBkNWM4OTJiZTcyYjgwM2Q0M2U4NmQ1ZjU2MzCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBALZd9xJcB8l9gPjiaULwm/DVDKUwdp1GthsVWYVToIXF0IM3
zz7XSIN6ZscRnA7wA7dgRbyhIRgogHxTBpE080tU2tENrzBmPRPfoiQ1ByOvwQ/d
G+Z3ASHyyhqGJooMN9/Zt89wr6f5yPWFZ7Z3gM1uYxnSeXd2kSn8GLpbmeLWti/S
5fFvkF3yfMtoPWUuF5sBv13V3BHPLOC7YW8KrqSt9Hw9JHJP1ODwwckE++fntNC4
/D1W7687WGTRSCaBfkT+vaBFANBpCSucS5nHPctCNenHzYAYrgitMkCgUFdwvz0u
A3tR70cf+Es5SsZum5nCMOo/d9MInlbbNMpxZ2cCAwEAAaOCAh4wggIaMB0GA1Ud
DgQWBBSRrUCRjCJg1ciSvnK4A9Q+htX1YzAfBgNVHSMEGDAWgBQAX/nMicZqijpd
c0oNZcYf3IUYvjAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L0FGXzV6SW5HYW9vNlhYTktEV1hHSDl5RkdMNC5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvZjgvZDUzYzc4LTBkNWItNDIzNy05OTk5LTBlMmQ2OTdiMjdlMy8x
L2thMUFrWXdpWU5YSWtyNXl1QVBVUG9iVjlXTS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZjgv
ZDUzYzc4LTBkNWItNDIzNy05OTk5LTBlMmQ2OTdiMjdlMy8xL0FGXzV6SW5HYW9v
NlhYTktEV1hHSDl5RkdMNC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjA0
BggrBgEFBQcBBwEB/wQlMCMwEgQCAAEwDAMEArmmBAMEBdWgQDANBAIAAjAHAwUA
KgAX2DANBgkqhkiG9w0BAQsFAAOCAQEAi167XD+CbGb8m3oiV/opMi+JSi8cC3Ee
bVdyEE63sVEfu7oqHRJjUI0oSJlNhhZbMxZH3s2iUsPPW3xGLXfU9teDN8r8mMNP
WnZHuEy2Wco104rS9iHZTnLgW+obmIOrdVXhPZd7InF1nJJdvUNqrEqWJ51hktbm
H8ZVLt2TCIQsaE/1OKliFZR7dk7QuKfOxm/SllOt66TP9bKBfFpmMWN7TB8c3B5B
3Lhh0pJZ2rOvHE/MtmfS3FgXD6RYQHsKoqzjvNXPl7WMawXKX9+MZL3cfZYimYDM
qPvrTrUqrFiSdTu0885we8JY2nxgIoDXg+uaZ9puhqvsy2R4i8t5Gg==
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:18:30 2025 by rpki-client