Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/82a7d6-92a9-4204-9ae0-9a48ecf9e15e/1/d-Knyg8LLGwKKuxyuy-BupjeSGs.roa
File: d-Knyg8LLGwKKuxyuy-BupjeSGs.roa (raw, json)
Hash identifier: +sAcFcbhIo0HPfIFtyKNfjGUBXPJx9LW2Mw58CkCZEI=
Subject key identifier: 77:E2:A7:CA:0F:0B:2C:6C:0A:2A:EC:72:BB:2F:81:BA:98:DE:48:6B
Certificate issuer: /CN=da00e981953061972c896bd6d27738d083aadb0e
Certificate serial: 018AF6DCDBC25788D307E7818064F7F0B28A
Authority key identifier: DA:00:E9:81:95:30:61:97:2C:89:6B:D6:D2:77:38:D0:83:AA:DB:0E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2gDpgZUwYZcsiWvW0nc40IOq2w4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/82a7d6-92a9-4204-9ae0-9a48ecf9e15e/1/d-Knyg8LLGwKKuxyuy-BupjeSGs.roa
Signing time: Tue 03 Oct 2023 18:46:23 +0000
ROA not before: Tue 03 Oct 2023 18:46:23 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 42055
IP address blocks: 89.36.231.0/24 maxlen: 24
89.42.40.0/24 maxlen: 24
93.114.69.0/24 maxlen: 24
188.211.249.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:f6:dc:db:c2:57:88:d3:07:e7:81:80:64:f7:f0:b2:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da00e981953061972c896bd6d27738d083aadb0e
Validity
Not Before: Oct 3 18:46:23 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=77e2a7ca0f0b2c6c0a2aec72bb2f81ba98de486b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:3a:8f:76:41:ed:61:9b:a1:35:a8:bf:c8:59:
71:3b:f2:03:4a:26:72:31:58:b3:95:9e:7a:80:6a:
e0:2f:cf:8a:69:a1:43:b1:54:4c:be:17:aa:81:97:
06:2e:bf:b7:d9:02:2d:81:b7:70:e3:44:b3:d0:df:
dd:51:c3:1f:ef:87:87:75:9f:1f:6b:05:2f:b7:95:
bf:eb:8c:90:9a:01:ca:87:12:ca:12:d2:c5:d7:aa:
a4:bb:6b:a7:63:e7:10:76:0f:9e:17:72:f9:b9:aa:
6b:b5:08:c8:3b:06:36:16:97:d2:ba:72:91:b9:a4:
b9:4e:97:2c:07:ca:ef:95:1a:37:d0:9e:13:4a:d8:
4c:f4:6d:1c:d8:4d:f0:eb:1d:77:a5:4d:cf:e0:e2:
1b:9a:7b:b1:c0:c6:c5:f8:9c:d2:fa:23:20:28:09:
ab:70:d8:08:98:6c:57:2a:89:e6:73:ef:82:10:56:
f3:18:ee:cc:3e:d4:93:87:47:a6:ec:b1:43:25:0f:
19:7e:fe:d7:3c:d3:1a:f9:90:b9:33:de:76:7a:3f:
aa:d1:be:d2:8c:af:ce:41:d0:28:e4:1f:da:36:6b:
29:56:b9:e0:d8:81:9a:91:a3:01:0b:86:58:34:03:
97:8a:c6:41:d8:a4:0b:ce:45:b8:cb:a7:33:32:ea:
49:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:E2:A7:CA:0F:0B:2C:6C:0A:2A:EC:72:BB:2F:81:BA:98:DE:48:6B
X509v3 Authority Key Identifier:
keyid:DA:00:E9:81:95:30:61:97:2C:89:6B:D6:D2:77:38:D0:83:AA:DB:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2gDpgZUwYZcsiWvW0nc40IOq2w4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/82a7d6-92a9-4204-9ae0-9a48ecf9e15e/1/d-Knyg8LLGwKKuxyuy-BupjeSGs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/82a7d6-92a9-4204-9ae0-9a48ecf9e15e/1/2gDpgZUwYZcsiWvW0nc40IOq2w4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.36.231.0/24
89.42.40.0/24
93.114.69.0/24
188.211.249.0/24
Signature Algorithm: sha256WithRSAEncryption
77:d7:8a:29:0b:fd:c9:44:67:b8:84:e2:b5:b2:b8:e9:f2:76:
30:3d:e5:e8:c8:4f:b3:02:bd:96:39:44:6a:53:d5:48:ae:4b:
c2:51:e4:90:c6:bc:c7:e8:c6:5c:c3:6a:e9:a0:2d:65:c3:3b:
f0:82:55:5d:b2:d0:87:27:7c:db:80:e5:58:37:05:a8:99:26:
08:74:c2:3f:22:3d:fc:f9:70:7e:7c:cd:30:28:be:07:b7:63:
c9:ea:1f:a1:3a:a6:1d:93:b7:77:79:65:c1:06:8d:ae:62:2d:
1a:f8:fb:b4:12:21:56:d0:c4:8c:aa:ec:40:2a:d8:36:1c:7a:
08:bb:ea:0e:63:c5:fa:0e:1a:ad:a0:24:31:8d:88:6a:83:70:
be:40:3a:ac:c1:7d:bb:a7:55:55:78:eb:62:ae:fb:04:55:bb:
18:f3:b1:2d:25:c2:cb:87:8c:80:50:67:f8:1f:67:f0:0d:ae:
2f:17:f4:e1:61:c2:0b:9f:c4:cd:c3:ec:98:91:15:52:4d:d1:
1d:9f:2e:20:48:52:d1:5e:a1:45:01:bb:26:96:7f:80:f5:db:
dd:57:3f:72:8d:e2:9f:86:f3:56:46:e0:e3:50:68:83:35:e6:
7f:7e:1e:7f:61:cf:da:57:d4:06:ea:05:95:f8:eb:ed:50:28:
ba:f7:43:82
-----BEGIN CERTIFICATE-----
MIIFDzCCA/egAwIBAgISAYr23NvCV4jTB+eBgGT38LKKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRhMDBlOTgxOTUzMDYxOTcyYzg5NmJkNmQyNzczOGQwODNh
YWRiMGUwHhcNMjMxMDAzMTg0NjIzWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3N2UyYTdjYTBmMGIyYzZjMGEyYWVjNzJiYjJmODFiYTk4ZGU0ODZiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhDqPdkHtYZuhNai/yFlxO/IDSiZy
MVizlZ56gGrgL8+KaaFDsVRMvheqgZcGLr+32QItgbdw40Sz0N/dUcMf74eHdZ8f
awUvt5W/64yQmgHKhxLKEtLF16qku2unY+cQdg+eF3L5uaprtQjIOwY2FpfSunKR
uaS5TpcsB8rvlRo30J4TSthM9G0c2E3w6x13pU3P4OIbmnuxwMbF+JzS+iMgKAmr
cNgImGxXKonmc++CEFbzGO7MPtSTh0em7LFDJQ8Zfv7XPNMa+ZC5M952ej+q0b7S
jK/OQdAo5B/aNmspVrng2IGakaMBC4ZYNAOXisZB2KQLzkW4y6czMupJSwIDAQAB
o4ICGzCCAhcwHQYDVR0OBBYEFHfip8oPCyxsCirscrsvgbqY3khrMB8GA1UdIwQY
MBaAFNoA6YGVMGGXLIlr1tJ3ONCDqtsOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMmdEcGdaVXdZWmNzaVd2VzBuYzQwSU9xMnc0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZi84MmE3ZDYtOTJhOS00MjA0LTlhZTAt
OWE0OGVjZjllMTVlLzEvZC1LbnlnOExMR3dLS3V4eXV5LUJ1cGplU0dzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZi84MmE3ZDYtOTJhOS00MjA0LTlhZTAtOWE0OGVjZjllMTVl
LzEvMmdEcGdaVXdZWmNzaVd2VzBuYzQwSU9xMnc0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQAWSTnAwQA
WSooAwQAXXJFAwQAvNP5MA0GCSqGSIb3DQEBCwUAA4IBAQB314opC/3JRGe4hOK1
srjp8nYwPeXoyE+zAr2WOURqU9VIrkvCUeSQxrzH6MZcw2rpoC1lwzvwglVdstCH
J3zbgOVYNwWomSYIdMI/Ij38+XB+fM0wKL4Ht2PJ6h+hOqYdk7d3eWXBBo2uYi0a
+Pu0EiFW0MSMquxAKtg2HHoIu+oOY8X6DhqtoCQxjYhqg3C+QDqswX27p1VVeOti
rvsEVbsY87EtJcLLh4yAUGf4H2fwDa4vF/ThYcILn8TNw+yYkRVSTdEdny4gSFLR
XqFFAbsmln+A9dvdVz9yjeKfhvNWRuDjUGiDNeZ/fh5/Yc/aV9QG6gWV+OvtUCi6
90OC
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:54:49 2024 by rpki-client on console-ams.rpki-client.org