Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/82a7d6-92a9-4204-9ae0-9a48ecf9e15e/1/FbSkuaRnSVncpj45WeWitLcuYbI.roa
File: FbSkuaRnSVncpj45WeWitLcuYbI.roa (raw, json)
Hash identifier: 4l+vP9a2gYl7vhpNdWYrSl3xJ+m66/Trvwg/9vwfe14=
Subject key identifier: 15:B4:A4:B9:A4:67:49:59:DC:A6:3E:39:59:E5:A2:B4:B7:2E:61:B2
Certificate issuer: /CN=da00e981953061972c896bd6d27738d083aadb0e
Certificate serial: 034C2F39
Authority key identifier: DA:00:E9:81:95:30:61:97:2C:89:6B:D6:D2:77:38:D0:83:AA:DB:0E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2gDpgZUwYZcsiWvW0nc40IOq2w4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/82a7d6-92a9-4204-9ae0-9a48ecf9e15e/1/FbSkuaRnSVncpj45WeWitLcuYbI.roa
Signing time: Fri 11 Mar 2022 20:32:08 +0000
ROA not before: Fri 11 Mar 2022 20:32:08 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 49999
IP address blocks: 89.42.215.0/24 maxlen: 24
176.223.181.0/24 maxlen: 24
188.211.249.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 55324473 (0x34c2f39)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da00e981953061972c896bd6d27738d083aadb0e
Validity
Not Before: Mar 11 20:32:08 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=15b4a4b9a4674959dca63e3959e5a2b4b72e61b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:e2:fd:0e:7f:57:9b:55:2f:9c:ee:d3:a1:74:
f4:15:73:0a:22:00:6d:b6:76:10:e8:84:4e:00:b8:
99:e6:d7:4a:f6:3c:eb:ac:78:0b:cf:3b:51:b5:d4:
91:3f:5c:58:63:af:6b:fb:15:3e:75:1c:57:ea:dd:
b1:b9:33:c5:b5:cf:c4:2e:a4:05:09:b3:f1:1b:07:
b6:92:0a:a8:47:2f:af:54:a7:46:14:c4:99:d5:f9:
1a:58:fd:7c:bc:dd:60:2f:77:d0:04:42:2b:5c:ea:
c0:4c:c0:5b:6c:5e:25:92:be:7c:64:29:72:ed:14:
3c:53:28:06:17:7e:bb:cf:d0:b5:41:41:6e:39:56:
97:3b:10:f7:27:22:a6:e2:35:86:9e:2c:38:34:4c:
05:4e:c6:51:68:99:8e:98:08:9a:05:d2:bf:5d:f7:
79:b2:7c:0f:f0:91:03:4b:70:2d:de:0e:bb:fc:06:
a5:44:12:75:ca:6a:07:04:b4:35:30:cd:49:2b:1b:
77:ea:e9:ad:20:1b:aa:8a:dd:c7:a8:2d:25:ec:ca:
6d:18:c2:c1:4b:0b:30:f9:26:f3:54:05:ed:3b:eb:
a6:31:cf:6e:ba:1a:51:99:82:90:dc:6f:17:32:39:
aa:68:66:3a:0a:3c:25:31:eb:e0:11:37:21:1c:bb:
20:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:B4:A4:B9:A4:67:49:59:DC:A6:3E:39:59:E5:A2:B4:B7:2E:61:B2
X509v3 Authority Key Identifier:
keyid:DA:00:E9:81:95:30:61:97:2C:89:6B:D6:D2:77:38:D0:83:AA:DB:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2gDpgZUwYZcsiWvW0nc40IOq2w4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/82a7d6-92a9-4204-9ae0-9a48ecf9e15e/1/FbSkuaRnSVncpj45WeWitLcuYbI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/82a7d6-92a9-4204-9ae0-9a48ecf9e15e/1/2gDpgZUwYZcsiWvW0nc40IOq2w4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.42.215.0/24
176.223.181.0/24
188.211.249.0/24
Signature Algorithm: sha256WithRSAEncryption
6d:0b:f3:d8:d6:ce:f1:a9:05:ec:e7:dd:ea:bd:9c:41:b2:ef:
df:a7:1d:18:a3:a1:91:c1:4c:8b:e3:d8:46:50:2b:be:28:38:
b8:7b:35:93:e3:a3:be:89:01:0f:ca:0f:b4:82:ee:40:4a:c2:
6e:bc:6d:60:4b:11:9a:15:e4:fc:a5:db:1d:8e:5b:b4:7a:fe:
0a:81:99:2d:83:c3:3f:70:d3:05:17:9a:7b:d0:c8:00:bb:bd:
d6:5c:38:17:cd:91:1b:80:56:15:96:11:80:8b:61:04:25:41:
43:a0:b3:e2:b6:79:90:92:aa:3f:0a:82:64:fe:59:9b:17:3b:
04:03:3c:79:0e:7a:bd:00:a4:be:c3:fe:ba:5c:94:fb:6c:f1:
af:c4:45:9c:db:4b:48:54:f5:4a:25:b4:0b:99:24:0d:78:8a:
49:87:42:f8:c2:2b:32:fc:82:5d:b3:09:32:68:16:38:c7:8b:
58:48:a6:66:a7:1a:93:31:d5:9c:c4:2d:2b:45:5f:ad:12:76:
00:7c:8e:91:87:6b:77:1b:46:94:fd:8f:69:e4:93:15:8b:e1:
36:bd:99:9f:03:dc:10:53:56:3d:5d:02:12:c0:39:dc:f6:72:
ff:7f:6f:18:b4:4b:be:6b:21:4d:18:5f:ee:85:87:f3:bc:ab:
a7:45:5c:69
-----BEGIN CERTIFICATE-----
MIIE+zCCA+OgAwIBAgIEA0wvOTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhk
YTAwZTk4MTk1MzA2MTk3MmM4OTZiZDZkMjc3MzhkMDgzYWFkYjBlMB4XDTIyMDMx
MTIwMzIwOFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoMTViNGE0YjlhNDY3
NDk1OWRjYTYzZTM5NTllNWEyYjRiNzJlNjFiMjCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAN/i/Q5/V5tVL5zu06F09BVzCiIAbbZ2EOiETgC4mebXSvY8
66x4C887UbXUkT9cWGOva/sVPnUcV+rdsbkzxbXPxC6kBQmz8RsHtpIKqEcvr1Sn
RhTEmdX5Glj9fLzdYC930ARCK1zqwEzAW2xeJZK+fGQpcu0UPFMoBhd+u8/QtUFB
bjlWlzsQ9ycipuI1hp4sODRMBU7GUWiZjpgImgXSv133ebJ8D/CRA0twLd4Ou/wG
pUQSdcpqBwS0NTDNSSsbd+rprSAbqordx6gtJezKbRjCwUsLMPkm81QF7TvrpjHP
broaUZmCkNxvFzI5qmhmOgo8JTHr4BE3IRy7IJECAwEAAaOCAhUwggIRMB0GA1Ud
DgQWBBQVtKS5pGdJWdymPjlZ5aK0ty5hsjAfBgNVHSMEGDAWgBTaAOmBlTBhlyyJ
a9bSdzjQg6rbDjAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
LzJnRHBnWlV3WVpjc2lXdlcwbmM0MElPcTJ3NC5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvZmYvODJhN2Q2LTkyYTktNDIwNC05YWUwLTlhNDhlY2Y5ZTE1ZS8x
L0ZiU2t1YVJuU1ZuY3BqNDVXZVdpdExjdVliSS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZmYv
ODJhN2Q2LTkyYTktNDIwNC05YWUwLTlhNDhlY2Y5ZTE1ZS8xLzJnRHBnWlV3WVpj
c2lXdlcwbmM0MElPcTJ3NC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAr
BggrBgEFBQcBBwEB/wQcMBowGAQCAAEwEgMEAFkq1wMEALDftQMEALzT+TANBgkq
hkiG9w0BAQsFAAOCAQEAbQvz2NbO8akF7Ofd6r2cQbLv36cdGKOhkcFMi+PYRlAr
vig4uHs1k+OjvokBD8oPtILuQErCbrxtYEsRmhXk/KXbHY5btHr+CoGZLYPDP3DT
BReae9DIALu91lw4F82RG4BWFZYRgIthBCVBQ6Cz4rZ5kJKqPwqCZP5Zmxc7BAM8
eQ56vQCkvsP+ulyU+2zxr8RFnNtLSFT1SiW0C5kkDXiKSYdC+MIrMvyCXbMJMmgW
OMeLWEimZqcakzHVnMQtK0VfrRJ2AHyOkYdrdxtGlP2PaeSTFYvhNr2ZnwPcEFNW
PV0CEsA53PZy/39vGLRLvmshTRhf7oWH87yrp0VcaQ==
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:01:14 2024 by rpki-client on console-fra.rpki-client.org