Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/1ccf25-20de-4b2e-a0e1-de4acf447fae/1/r_Qxu7VXt5OhPFQm08I5GXIy-Zg.roa
File: r_Qxu7VXt5OhPFQm08I5GXIy-Zg.roa (raw, json)
Hash identifier: U5BRo28NNfuG/SmIsEShytD/2F9t+eintUYU1FrdUW8=
Subject key identifier: AF:F4:31:BB:B5:57:B7:93:A1:3C:54:26:D3:C2:39:19:72:32:F9:98
Certificate issuer: /CN=7979863cea82aeb8e9df384b39aa5176f4bcfa61
Certificate serial: 0184370ADE3B74B1EEBF82EDCB1960DF4DB2
Authority key identifier: 79:79:86:3C:EA:82:AE:B8:E9:DF:38:4B:39:AA:51:76:F4:BC:FA:61
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eXmGPOqCrrjp3zhLOapRdvS8-mE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/1ccf25-20de-4b2e-a0e1-de4acf447fae/1/r_Qxu7VXt5OhPFQm08I5GXIy-Zg.roa
Signing time: Wed 02 Nov 2022 06:32:49 +0000
ROA not before: Wed 02 Nov 2022 06:32:49 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 43370
IP address blocks: 62.32.84.0/23 maxlen: 23
37.221.202.0/24 maxlen: 24
37.221.207.0/24 maxlen: 24
62.32.92.0/23 maxlen: 23
37.77.128.0/24 maxlen: 24
95.161.184.0/22 maxlen: 22
79.142.94.0/23 maxlen: 23
46.34.146.0/23 maxlen: 23
79.142.93.0/24 maxlen: 24
95.161.196.0/22 maxlen: 24
95.161.224.0/22 maxlen: 22
37.46.48.0/22 maxlen: 22
46.34.130.0/23 maxlen: 23
178.16.157.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:37:0a:de:3b:74:b1:ee:bf:82:ed:cb:19:60:df:4d:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7979863cea82aeb8e9df384b39aa5176f4bcfa61
Validity
Not Before: Nov 2 06:32:49 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=aff431bbb557b793a13c5426d3c239197232f998
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:b8:f0:45:f3:30:ac:87:75:9c:98:0c:ad:bd:
59:f5:49:48:6b:9a:5d:9a:f8:e0:42:2a:e3:98:0c:
4d:4b:4d:46:cb:0d:3a:4b:bd:9f:b2:42:4b:1b:19:
62:21:d8:a1:dc:fd:60:2f:53:ae:86:f7:7e:4c:b7:
4e:1d:43:cf:bf:71:f3:01:ec:c0:ec:b5:07:20:65:
14:02:96:f5:83:ba:3e:b4:b7:e8:b6:e8:af:92:0b:
f9:99:aa:b9:0e:67:7a:56:a2:9b:71:a7:c6:49:44:
f5:68:14:96:d3:c1:b8:ca:83:46:e3:07:18:d6:8f:
fa:c5:61:e3:c2:04:0f:5b:66:79:e2:e3:43:ea:2d:
db:aa:4d:39:88:60:cf:68:72:9a:8e:ce:0a:d4:fd:
38:01:11:6e:66:59:85:ff:00:81:70:37:76:1e:93:
13:ef:c9:27:f7:59:54:8a:d5:21:e2:91:26:c3:af:
41:b9:c8:5e:18:06:56:48:7f:3f:79:ac:b6:60:e3:
f6:e6:45:06:ae:20:2d:03:d0:d1:d0:92:5d:f6:b0:
29:77:69:7c:cd:59:61:9c:d6:ff:30:55:16:c0:e8:
9c:76:70:9c:38:c9:3e:20:a4:28:d4:e5:03:2a:b5:
d4:15:36:f8:fd:f6:68:7a:35:13:99:d0:86:82:de:
9a:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:F4:31:BB:B5:57:B7:93:A1:3C:54:26:D3:C2:39:19:72:32:F9:98
X509v3 Authority Key Identifier:
keyid:79:79:86:3C:EA:82:AE:B8:E9:DF:38:4B:39:AA:51:76:F4:BC:FA:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eXmGPOqCrrjp3zhLOapRdvS8-mE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/1ccf25-20de-4b2e-a0e1-de4acf447fae/1/r_Qxu7VXt5OhPFQm08I5GXIy-Zg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/1ccf25-20de-4b2e-a0e1-de4acf447fae/1/eXmGPOqCrrjp3zhLOapRdvS8-mE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.46.48.0/22
37.77.128.0/24
37.221.202.0/24
37.221.207.0/24
46.34.130.0/23
46.34.146.0/23
62.32.84.0/23
62.32.92.0/23
79.142.93.0-79.142.95.255
95.161.184.0/22
95.161.196.0/22
95.161.224.0/22
178.16.157.0/24
Signature Algorithm: sha256WithRSAEncryption
93:08:4e:c4:e2:a7:39:19:8a:42:55:0c:10:15:b5:77:68:59:
d7:1e:b6:47:4e:7c:13:a2:80:5a:44:7c:14:79:2a:4d:7d:e3:
b3:51:72:0f:6a:10:25:5f:0a:56:c0:70:ae:16:81:6b:e9:b6:
c6:25:3b:b8:4a:b8:e7:85:71:01:1e:b6:b9:af:55:ad:6d:31:
88:08:35:eb:a2:d7:70:55:b4:b5:cb:5e:93:33:b4:f6:02:b1:
9d:b0:af:5e:9c:02:3d:25:54:1b:05:42:af:cc:ff:07:22:b0:
09:5c:6f:79:12:d7:fe:d8:22:ad:92:3c:77:1b:98:f5:76:fb:
e0:89:8f:13:55:be:be:eb:d8:fe:84:16:ce:b0:ee:bd:ee:df:
df:69:8b:c0:99:f0:5c:91:60:69:43:92:4a:ba:45:c6:17:1d:
c6:6d:71:3c:3b:9e:13:22:84:ae:f3:44:77:1b:3e:df:27:26:
c8:2b:56:f4:de:1d:88:d8:50:35:15:f8:ad:e3:1e:89:24:dc:
31:a1:f0:ae:2e:a1:c8:42:68:03:c9:76:19:fc:7a:ad:7a:91:
73:c1:86:04:c9:7d:3f:bf:d0:08:47:74:7d:86:01:b4:9c:f2:
15:3d:0e:93:4d:af:91:2b:88:eb:a2:d2:7e:48:db:9d:c5:8c:
f2:8e:f9:23
-----BEGIN CERTIFICATE-----
MIIFTTCCBDWgAwIBAgISAYQ3Ct47dLHuv4Ltyxlg302yMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc5Nzk4NjNjZWE4MmFlYjhlOWRmMzg0YjM5YWE1MTc2ZjRi
Y2ZhNjEwHhcNMjIxMTAyMDYzMjQ5WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhZmY0MzFiYmI1NTdiNzkzYTEzYzU0MjZkM2MyMzkxOTcyMzJmOTk4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmLjwRfMwrId1nJgMrb1Z9UlIa5pd
mvjgQirjmAxNS01Gyw06S72fskJLGxliIdih3P1gL1Ouhvd+TLdOHUPPv3HzAezA
7LUHIGUUApb1g7o+tLfotuivkgv5maq5Dmd6VqKbcafGSUT1aBSW08G4yoNG4wcY
1o/6xWHjwgQPW2Z54uND6i3bqk05iGDPaHKajs4K1P04ARFuZlmF/wCBcDd2HpMT
78kn91lUitUh4pEmw69BucheGAZWSH8/eay2YOP25kUGriAtA9DR0JJd9rApd2l8
zVlhnNb/MFUWwOicdnCcOMk+IKQo1OUDKrXUFTb4/fZoejUTmdCGgt6aOQIDAQAB
o4ICWTCCAlUwHQYDVR0OBBYEFK/0Mbu1V7eToTxUJtPCORlyMvmYMB8GA1UdIwQY
MBaAFHl5hjzqgq646d84SzmqUXb0vPphMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZVhtR1BPcUNycmpwM3poTE9hcFJkdlM4LW1FLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZC8xY2NmMjUtMjBkZS00YjJlLWEwZTEt
ZGU0YWNmNDQ3ZmFlLzEvcl9ReHU3Vlh0NU9oUEZRbTA4STVHWEl5LVpnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZC8xY2NmMjUtMjBkZS00YjJlLWEwZTEtZGU0YWNmNDQ3ZmFl
LzEvZVhtR1BPcUNycmpwM3poTE9hcFJkdlM4LW1FLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMG8GCCsGAQUFBwEHAQH/BGAwXjBcBAIAATBWAwQCJS4wAwQA
JU2AAwQAJd3KAwQAJd3PAwQBLiKCAwQBLiKSAwQBPiBUAwQBPiBcMAwDBABPjl0D
BAVPjkADBAJfobgDBAJfocQDBAJfoeADBACyEJ0wDQYJKoZIhvcNAQELBQADggEB
AJMITsTipzkZikJVDBAVtXdoWdcetkdOfBOigFpEfBR5Kk1947NRcg9qECVfClbA
cK4WgWvptsYlO7hKuOeFcQEetrmvVa1tMYgINeui13BVtLXLXpMztPYCsZ2wr16c
Aj0lVBsFQq/M/wcisAlcb3kS1/7YIq2SPHcbmPV2++CJjxNVvr7r2P6EFs6w7r3u
399pi8CZ8FyRYGlDkkq6RcYXHcZtcTw7nhMihK7zRHcbPt8nJsgrVvTeHYjYUDUV
+K3jHokk3DGh8K4uochCaAPJdhn8eq16kXPBhgTJfT+/0AhHdH2GAbSc8hU9DpNN
r5EriOui0n5I253FjPKO+SM=
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:38:01 2025 by rpki-client