Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/ff2a1c-18af-4ba5-a49f-ecad3b714938/1/tlgVRo3waq7xJA9t9sz83qfnDFo.roa
File: tlgVRo3waq7xJA9t9sz83qfnDFo.roa (raw, json)
Hash identifier: We2z1EAgdBGuYQzfNUmmVbBeTGbvhzHNhchMdOge60k=
Subject key identifier: B6:58:15:46:8D:F0:6A:AE:F1:24:0F:6D:F6:CC:FC:DE:A7:E7:0C:5A
Certificate issuer: /CN=4e5ecfec9f54e4ec39c2005ef4e63e70b51faed4
Certificate serial: 184793C8
Authority key identifier: 4E:5E:CF:EC:9F:54:E4:EC:39:C2:00:5E:F4:E6:3E:70:B5:1F:AE:D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Tl7P7J9U5Ow5wgBe9OY-cLUfrtQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/ff2a1c-18af-4ba5-a49f-ecad3b714938/1/tlgVRo3waq7xJA9t9sz83qfnDFo.roa
Signing time: Sat 01 Jan 2022 03:53:31 +0000
ROA not before: Sat 01 Jan 2022 03:53:31 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 48960
IP address blocks: 95.173.192.0/21 maxlen: 21
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 407344072 (0x184793c8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e5ecfec9f54e4ec39c2005ef4e63e70b51faed4
Validity
Not Before: Jan 1 03:53:31 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b65815468df06aaef1240f6df6ccfcdea7e70c5a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:38:4a:f4:a9:7e:24:b9:3a:98:cb:da:d4:a1:
df:9c:d9:2c:c2:ce:1f:4b:2c:d4:c0:43:24:30:bc:
13:36:77:0d:55:77:ec:e8:6f:ac:f6:1f:ce:8f:2c:
95:7c:5c:f7:7b:b2:72:86:7c:e9:6d:86:e6:1a:3c:
cf:04:e7:11:df:83:41:7f:7d:62:16:48:f5:77:f4:
60:c9:8e:77:f1:dc:81:91:2f:ee:98:5d:4e:ee:d4:
bd:bb:86:d7:e5:56:9a:4a:e8:fd:da:45:37:27:98:
99:e8:de:e6:4c:5a:be:27:be:cb:48:97:be:8e:07:
a4:f2:09:24:35:80:3e:37:54:ac:e9:66:39:cb:fc:
71:ee:5e:1e:a5:26:41:ff:50:11:13:27:01:e2:fa:
4a:1e:c8:47:b4:22:99:54:bc:75:41:c0:80:89:71:
fd:df:73:92:fc:a7:b1:eb:41:f6:d5:f7:f7:aa:ed:
7d:3c:f5:b0:82:5c:86:46:c5:90:6a:3c:2d:8f:c2:
37:8e:75:10:1c:6d:6a:c6:ac:8c:29:c8:3d:0a:a2:
64:69:e9:78:72:a0:d4:55:12:e5:d5:b7:8d:8f:79:
ac:cf:f9:1d:3b:a0:e6:3b:5b:70:0d:c3:81:6e:1f:
d4:38:6a:64:69:a8:5f:b5:c7:aa:c7:14:e5:37:e4:
5e:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:58:15:46:8D:F0:6A:AE:F1:24:0F:6D:F6:CC:FC:DE:A7:E7:0C:5A
X509v3 Authority Key Identifier:
keyid:4E:5E:CF:EC:9F:54:E4:EC:39:C2:00:5E:F4:E6:3E:70:B5:1F:AE:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Tl7P7J9U5Ow5wgBe9OY-cLUfrtQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/ff2a1c-18af-4ba5-a49f-ecad3b714938/1/tlgVRo3waq7xJA9t9sz83qfnDFo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/ff2a1c-18af-4ba5-a49f-ecad3b714938/1/Tl7P7J9U5Ow5wgBe9OY-cLUfrtQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.173.192.0/21
Signature Algorithm: sha256WithRSAEncryption
53:31:60:05:27:60:c8:24:05:3a:39:57:93:64:47:c4:2a:8b:
7f:b4:e7:eb:d7:3a:45:9c:27:b6:7a:6e:ef:ad:15:31:95:4f:
74:b5:53:7d:05:43:24:c0:13:6e:a5:f0:63:ab:d3:83:bd:d8:
c2:2d:33:dd:eb:78:d4:ad:b4:22:f5:b8:57:a1:56:4e:71:26:
62:8f:68:a4:1d:b6:3a:ee:ff:67:57:59:e4:9a:b8:06:36:2c:
fa:c9:2b:59:2b:db:36:88:f9:42:09:35:e8:3c:ee:a4:62:2a:
ee:5f:2b:2d:c4:f8:ce:f5:2d:24:bf:78:ca:01:0d:9f:62:c0:
fa:3a:8a:a7:91:08:21:f3:84:a1:0e:97:60:2e:e0:13:cb:0f:
be:7d:01:50:a0:28:0f:2e:b0:0b:32:50:70:9f:e4:92:37:e7:
95:42:9e:d3:f9:a5:14:ea:91:a7:47:eb:55:36:f8:e7:1c:ae:
33:d0:7f:a6:31:cf:01:3a:48:59:49:24:2e:30:a4:66:b9:a3:
63:b4:c4:db:af:16:03:64:ca:db:fc:b1:c8:55:6c:70:b3:b9:
4a:d6:68:fc:ae:1b:cd:47:06:e7:59:39:9b:60:6d:50:0b:ec:
7b:52:14:09:a6:ac:63:8e:14:c4:46:dc:7f:51:6b:b4:e9:42:
6a:2a:f5:54
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEGEeTyDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg0
ZTVlY2ZlYzlmNTRlNGVjMzljMjAwNWVmNGU2M2U3MGI1MWZhZWQ0MB4XDTIyMDEw
MTAzNTMzMVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoYjY1ODE1NDY4ZGYw
NmFhZWYxMjQwZjZkZjZjY2ZjZGVhN2U3MGM1YTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAKc4SvSpfiS5OpjL2tSh35zZLMLOH0ss1MBDJDC8EzZ3DVV3
7OhvrPYfzo8slXxc93uycoZ86W2G5ho8zwTnEd+DQX99YhZI9Xf0YMmOd/HcgZEv
7phdTu7UvbuG1+VWmkro/dpFNyeYmeje5kxavie+y0iXvo4HpPIJJDWAPjdUrOlm
Ocv8ce5eHqUmQf9QERMnAeL6Sh7IR7QimVS8dUHAgIlx/d9zkvynsetB9tX396rt
fTz1sIJchkbFkGo8LY/CN451EBxtasasjCnIPQqiZGnpeHKg1FUS5dW3jY95rM/5
HTug5jtbcA3DgW4f1DhqZGmoX7XHqscU5TfkXl8CAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBS2WBVGjfBqrvEkD232zPzep+cMWjAfBgNVHSMEGDAWgBROXs/sn1Tk7DnC
AF705j5wtR+u1DAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L1RsN1A3SjlVNU93NXdnQmU5T1ktY0xVZnJ0US5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvZmQvZmYyYTFjLTE4YWYtNGJhNS1hNDlmLWVjYWQzYjcxNDkzOC8x
L3RsZ1ZSbzN3YXE3eEpBOXQ5c3o4M3FmbkRGby5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZmQv
ZmYyYTFjLTE4YWYtNGJhNS1hNDlmLWVjYWQzYjcxNDkzOC8xL1RsN1A3SjlVNU93
NXdnQmU5T1ktY0xVZnJ0US5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEA1+twDANBgkqhkiG9w0BAQsFAAOC
AQEAUzFgBSdgyCQFOjlXk2RHxCqLf7Tn69c6RZwntnpu760VMZVPdLVTfQVDJMAT
bqXwY6vTg73Ywi0z3et41K20IvW4V6FWTnEmYo9opB22Ou7/Z1dZ5Jq4BjYs+skr
WSvbNoj5Qgk16DzupGIq7l8rLcT4zvUtJL94ygENn2LA+jqKp5EIIfOEoQ6XYC7g
E8sPvn0BUKAoDy6wCzJQcJ/kkjfnlUKe0/mlFOqRp0frVTb45xyuM9B/pjHPATpI
WUkkLjCkZrmjY7TE268WA2TK2/yxyFVscLO5StZo/K4bzUcG51k5m2BtUAvse1IU
CaasY44UxEbcf1FrtOlCair1VA==
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:54:31 2024 by rpki-client on console-ams.rpki-client.org