Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/d5c042-5b4d-4b10-bc76-42eaabbfbfd2/1/FeH9kZv5ZC6KSu8RCJOcBh59H7s.roa
File: FeH9kZv5ZC6KSu8RCJOcBh59H7s.roa (raw, json)
Hash identifier: BNFgw2uc3ueYVdx5rE0dGlzCI8CUl+hyjanWFWCinZA=
Subject key identifier: 15:E1:FD:91:9B:F9:64:2E:8A:4A:EF:11:08:93:9C:06:1E:7D:1F:BB
Certificate issuer: /CN=16f9f928b0ac67731991f374b8e194eb6542ac24
Certificate serial: 04314140
Authority key identifier: 16:F9:F9:28:B0:AC:67:73:19:91:F3:74:B8:E1:94:EB:65:42:AC:24
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Fvn5KLCsZ3MZkfN0uOGU62VCrCQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/d5c042-5b4d-4b10-bc76-42eaabbfbfd2/1/FeH9kZv5ZC6KSu8RCJOcBh59H7s.roa
Signing time: Sat 01 Jan 2022 14:03:36 +0000
ROA not before: Sat 01 Jan 2022 14:03:36 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 209053
IP address blocks: 45.8.232.0/22 maxlen: 22
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 70336832 (0x4314140)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=16f9f928b0ac67731991f374b8e194eb6542ac24
Validity
Not Before: Jan 1 14:03:36 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=15e1fd919bf9642e8a4aef1108939c061e7d1fbb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:89:fb:ff:37:87:7c:e4:9a:6c:ab:19:93:eb:
54:c5:1b:07:80:e5:c7:a8:61:78:fb:11:9f:05:95:
b9:00:cd:23:29:ad:2c:a3:e9:24:7e:7e:06:59:ef:
3c:d8:53:f9:70:d8:5e:62:37:02:4f:9e:45:dd:d8:
8f:af:37:13:9e:31:7b:d9:5e:cd:10:d1:e6:ba:d8:
aa:f8:3f:68:92:d8:9c:6f:8a:af:da:df:1e:ee:03:
e3:4a:e5:64:9e:44:3d:31:b3:55:e4:61:82:e7:d4:
b4:65:e4:2e:52:b2:ac:aa:b3:b4:33:74:71:87:01:
05:b8:de:05:f7:55:93:0d:4a:fe:83:c1:40:75:f5:
47:78:ec:24:7e:95:35:a3:19:2c:59:09:e5:42:bf:
f3:b7:aa:12:ce:cc:ac:56:72:a9:db:ba:0f:ae:88:
8a:74:a0:4f:20:88:86:79:c3:7f:a2:a6:fb:3b:14:
a3:cc:3d:d4:e0:92:a3:2f:e5:96:70:ca:87:7a:9d:
b4:4a:51:cc:c0:5d:d1:c0:54:ff:35:4a:0f:e9:e2:
7c:51:4f:86:26:c3:8d:fc:8f:f3:39:c8:c0:e9:33:
e3:af:df:38:1f:f1:27:26:93:2c:97:6c:39:70:c2:
f8:8c:b1:77:94:22:3a:d8:61:0b:0c:a0:6b:a4:f9:
0a:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:E1:FD:91:9B:F9:64:2E:8A:4A:EF:11:08:93:9C:06:1E:7D:1F:BB
X509v3 Authority Key Identifier:
keyid:16:F9:F9:28:B0:AC:67:73:19:91:F3:74:B8:E1:94:EB:65:42:AC:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fvn5KLCsZ3MZkfN0uOGU62VCrCQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/d5c042-5b4d-4b10-bc76-42eaabbfbfd2/1/FeH9kZv5ZC6KSu8RCJOcBh59H7s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/d5c042-5b4d-4b10-bc76-42eaabbfbfd2/1/Fvn5KLCsZ3MZkfN0uOGU62VCrCQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.8.232.0/22
Signature Algorithm: sha256WithRSAEncryption
86:66:97:24:7d:ce:31:57:c6:55:09:b4:52:8b:91:67:9a:51:
0c:57:96:36:cd:1a:a0:e9:df:00:a3:17:71:0a:78:97:42:63:
df:bf:a9:36:46:bb:d2:b7:87:f5:3f:55:60:f6:e8:bf:79:a8:
79:24:28:01:7d:62:b0:28:14:df:bc:40:6a:f3:6d:b1:3d:ae:
96:7b:53:5f:5a:b5:7d:88:ae:a7:28:12:d2:b2:05:1b:0a:71:
4c:38:2c:f3:86:b5:3c:d2:e6:10:be:7b:fa:62:e6:9e:9c:da:
20:f0:3f:71:ba:03:7b:e6:ca:46:03:e4:e3:9d:70:84:a0:d8:
e0:42:f9:64:5a:f6:94:4e:a8:af:da:87:33:3d:0b:ec:60:6e:
78:67:ca:fa:d7:fd:74:35:ed:61:04:e6:f9:d6:51:d1:03:09:
6b:37:79:89:eb:ec:f1:eb:de:01:28:de:38:bf:14:5b:46:bf:
29:f5:60:07:62:07:39:69:ae:32:0e:63:67:d7:60:22:45:9e:
0f:85:42:16:d1:fc:26:c3:97:80:ca:50:7d:84:af:76:23:86:
bd:a8:1b:3a:f1:af:23:df:df:e0:82:de:16:c9:68:c1:ae:18:
c8:6a:87:be:26:f2:52:48:f8:db:be:3b:7e:8a:97:b3:06:b5:
ea:07:5c:62
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEBDFBQDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygx
NmY5ZjkyOGIwYWM2NzczMTk5MWYzNzRiOGUxOTRlYjY1NDJhYzI0MB4XDTIyMDEw
MTE0MDMzNloXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoMTVlMWZkOTE5YmY5
NjQyZThhNGFlZjExMDg5MzljMDYxZTdkMWZiYjCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAL2J+/83h3zkmmyrGZPrVMUbB4Dlx6hhePsRnwWVuQDNIymt
LKPpJH5+BlnvPNhT+XDYXmI3Ak+eRd3Yj683E54xe9lezRDR5rrYqvg/aJLYnG+K
r9rfHu4D40rlZJ5EPTGzVeRhgufUtGXkLlKyrKqztDN0cYcBBbjeBfdVkw1K/oPB
QHX1R3jsJH6VNaMZLFkJ5UK/87eqEs7MrFZyqdu6D66IinSgTyCIhnnDf6Km+zsU
o8w91OCSoy/llnDKh3qdtEpRzMBd0cBU/zVKD+nifFFPhibDjfyP8znIwOkz46/f
OB/xJyaTLJdsOXDC+Iyxd5QiOthhCwyga6T5CjkCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBQV4f2Rm/lkLopK7xEIk5wGHn0fuzAfBgNVHSMEGDAWgBQW+fkosKxncxmR
83S44ZTrZUKsJDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L0Z2bjVLTENzWjNNWmtmTjB1T0dVNjJWQ3JDUS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvZmQvZDVjMDQyLTViNGQtNGIxMC1iYzc2LTQyZWFhYmJmYmZkMi8x
L0ZlSDlrWnY1WkM2S1N1OFJDSk9jQmg1OUg3cy5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZmQv
ZDVjMDQyLTViNGQtNGIxMC1iYzc2LTQyZWFhYmJmYmZkMi8xL0Z2bjVLTENzWjNN
WmtmTjB1T0dVNjJWQ3JDUS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAi0I6DANBgkqhkiG9w0BAQsFAAOC
AQEAhmaXJH3OMVfGVQm0UouRZ5pRDFeWNs0aoOnfAKMXcQp4l0Jj37+pNka70reH
9T9VYPbov3moeSQoAX1isCgU37xAavNtsT2ulntTX1q1fYiupygS0rIFGwpxTDgs
84a1PNLmEL57+mLmnpzaIPA/cboDe+bKRgPk451whKDY4EL5ZFr2lE6or9qHMz0L
7GBueGfK+tf9dDXtYQTm+dZR0QMJazd5ievs8eveASjeOL8UW0a/KfVgB2IHOWmu
Mg5jZ9dgIkWeD4VCFtH8JsOXgMpQfYSvdiOGvagbOvGvI9/f4ILeFslowa4YyGqH
vibyUkj42747foqXswa16gdcYg==
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:10:49 2023 by rpki-client on console-ams.rpki-client.org