Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/b80384-f2fe-4456-9cae-fe4a02caef7f/1/TrnS2EVBosemVV7KS2YppnBQooQ.roa
File: TrnS2EVBosemVV7KS2YppnBQooQ.roa (raw, json)
Hash identifier: QQEEHc4jUETkhx1yUox2WefRZRhXxfirguiHZUpkh8c=
Subject key identifier: 4E:B9:D2:D8:45:41:A2:C7:A6:55:5E:CA:4B:66:29:A6:70:50:A2:84
Certificate issuer: /CN=1d01f4dffd6fba66cdf8c374c9b0f047552705dd
Certificate serial: 018D3B1FBB48AAD359867838EFF465ED7AC4
Authority key identifier: 1D:01:F4:DF:FD:6F:BA:66:CD:F8:C3:74:C9:B0:F0:47:55:27:05:DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HQH03_1vumbN-MN0ybDwR1UnBd0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/b80384-f2fe-4456-9cae-fe4a02caef7f/1/TrnS2EVBosemVV7KS2YppnBQooQ.roa
Signing time: Wed 24 Jan 2024 10:59:11 +0000
ROA not before: Wed 24 Jan 2024 10:59:11 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 206509
IP address blocks: 62.164.128.0/17 maxlen: 21
62.164.128.0/18 maxlen: 18
62.164.144.0/21 maxlen: 21
62.164.192.0/21 maxlen: 21
62.169.154.0/24 maxlen: 24
86.54.0.0/16 maxlen: 16
193.108.168.0/23 maxlen: 23
193.108.169.0/24 maxlen: 24
194.62.44.0/22 maxlen: 22
194.164.97.0/24 maxlen: 24
194.164.114.0/24 maxlen: 24
194.164.181.0/24 maxlen: 24
195.26.224.0/19 maxlen: 19
195.200.0.0/19 maxlen: 19
212.32.0.0/17 maxlen: 17
213.254.160.0/19 maxlen: 19
213.254.171.0/24 maxlen: 24
213.254.178.0/24 maxlen: 24
213.254.185.0/24 maxlen: 24
217.29.192.0/20 maxlen: 22
217.154.0.0/16 maxlen: 16
2001:15e0::/32 maxlen: 32
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:3b:1f:bb:48:aa:d3:59:86:78:38:ef:f4:65:ed:7a:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1d01f4dffd6fba66cdf8c374c9b0f047552705dd
Validity
Not Before: Jan 24 10:59:11 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4eb9d2d84541a2c7a6555eca4b6629a67050a284
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:c1:d6:d7:d5:01:83:f0:55:21:49:15:42:0b:
09:4a:ae:d8:91:21:50:b1:7d:26:e6:cb:1e:57:0e:
27:65:23:a9:74:d8:c0:bf:4f:48:af:9c:c5:91:0d:
65:6e:7a:89:41:df:cc:02:c1:54:ab:6b:d9:12:a8:
bb:76:3e:5a:eb:51:54:ee:5f:4d:c2:53:49:c5:5a:
97:83:b2:f2:4d:c9:d8:c7:44:49:84:87:51:b6:8d:
76:47:58:8c:e1:01:14:3e:c8:45:f1:42:e7:60:78:
54:7f:0f:f3:ae:31:eb:ab:fd:62:ac:2a:f2:1a:b3:
0c:e1:41:55:e8:8b:2e:fa:e6:ae:40:ff:41:45:15:
04:91:ce:ba:9d:93:7c:6a:24:2c:9d:02:1d:7b:4d:
16:06:48:d0:5a:b4:3c:01:4b:4a:ba:2b:5a:58:46:
58:1e:95:5e:69:b1:c7:58:c8:0b:a2:49:de:4e:54:
6d:f6:bc:ee:56:b8:31:af:c6:a1:34:56:7b:07:74:
d2:46:6d:57:c0:2a:b0:84:e4:3a:f8:1a:ce:d8:59:
4d:63:53:80:99:00:90:e9:70:7b:49:f2:8a:87:3b:
be:e6:34:49:f4:58:42:7a:b9:2e:e5:8b:02:5f:e7:
86:e0:61:b5:46:d3:39:b8:2b:b4:55:33:2d:0a:8b:
34:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:B9:D2:D8:45:41:A2:C7:A6:55:5E:CA:4B:66:29:A6:70:50:A2:84
X509v3 Authority Key Identifier:
keyid:1D:01:F4:DF:FD:6F:BA:66:CD:F8:C3:74:C9:B0:F0:47:55:27:05:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HQH03_1vumbN-MN0ybDwR1UnBd0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/b80384-f2fe-4456-9cae-fe4a02caef7f/1/TrnS2EVBosemVV7KS2YppnBQooQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/b80384-f2fe-4456-9cae-fe4a02caef7f/1/HQH03_1vumbN-MN0ybDwR1UnBd0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.164.128.0/17
62.169.154.0/24
86.54.0.0/16
193.108.168.0/23
194.62.44.0/22
194.164.97.0/24
194.164.114.0/24
194.164.181.0/24
195.26.224.0/19
195.200.0.0/19
212.32.0.0/17
213.254.160.0/19
217.29.192.0/20
217.154.0.0/16
IPv6:
2001:15e0::/32
Signature Algorithm: sha256WithRSAEncryption
32:61:12:ba:7e:21:11:c1:ba:a8:f3:07:3a:7d:55:fd:68:d8:
0c:8f:7f:df:f3:c6:fb:fc:a0:ea:f1:0c:b7:da:b4:07:64:67:
61:8d:ad:2c:4b:65:f6:9b:68:e3:81:3d:eb:47:50:80:b1:51:
15:07:f3:d2:f8:f4:65:13:9d:b9:08:59:1e:42:a8:78:a8:a0:
6f:2a:50:ca:e7:24:3a:8e:b4:95:7c:e9:80:41:29:59:35:68:
38:a6:0a:57:2c:b5:2c:de:ba:17:06:6c:08:6c:5b:31:4f:c2:
9e:b2:1d:3b:b9:4b:37:f8:88:5b:19:00:a3:33:a7:d5:69:bc:
2f:38:96:90:2c:ea:2d:17:7c:27:6c:e5:46:c2:2a:a1:08:24:
82:0d:7c:6b:79:40:8b:26:7f:e1:7d:95:0a:a8:88:ed:c5:c3:
2b:5a:cf:57:6b:de:db:69:97:21:04:69:1e:55:af:30:95:75:
9d:93:34:b5:08:f2:c3:ff:4d:54:21:9b:8a:c4:38:35:99:7c:
61:32:ad:65:d2:51:86:36:e3:30:a9:d1:20:5f:77:28:68:36:
38:d9:4d:66:c8:0d:52:f7:0c:99:70:ed:e2:f4:40:9f:e7:35:
aa:58:8a:60:f4:b2:30:77:9d:1f:cd:46:9d:09:c5:ad:b9:51:
ff:92:56:02
-----BEGIN CERTIFICATE-----
MIIFWDCCBECgAwIBAgISAY07H7tIqtNZhng47/Rl7XrEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFkMDFmNGRmZmQ2ZmJhNjZjZGY4YzM3NGM5YjBmMDQ3NTUy
NzA1ZGQwHhcNMjQwMTI0MTA1OTExWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0ZWI5ZDJkODQ1NDFhMmM3YTY1NTVlY2E0YjY2MjlhNjcwNTBhMjg0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh8HW19UBg/BVIUkVQgsJSq7YkSFQ
sX0m5sseVw4nZSOpdNjAv09Ir5zFkQ1lbnqJQd/MAsFUq2vZEqi7dj5a61FU7l9N
wlNJxVqXg7LyTcnYx0RJhIdRto12R1iM4QEUPshF8ULnYHhUfw/zrjHrq/1irCry
GrMM4UFV6Isu+uauQP9BRRUEkc66nZN8aiQsnQIde00WBkjQWrQ8AUtKuitaWEZY
HpVeabHHWMgLokneTlRt9rzuVrgxr8ahNFZ7B3TSRm1XwCqwhOQ6+BrO2FlNY1OA
mQCQ6XB7SfKKhzu+5jRJ9FhCerku5YsCX+eG4GG1RtM5uCu0VTMtCos0cQIDAQAB
o4ICZDCCAmAwHQYDVR0OBBYEFE650thFQaLHplVeyktmKaZwUKKEMB8GA1UdIwQY
MBaAFB0B9N/9b7pmzfjDdMmw8EdVJwXdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSFFIMDNfMXZ1bWJOLU1OMHliRHdSMVVuQmQwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZi9iODAzODQtZjJmZS00NDU2LTljYWUt
ZmU0YTAyY2FlZjdmLzEvVHJuUzJFVkJvc2VtVlY3S1MyWXBwbkJRb29RLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZi9iODAzODQtZjJmZS00NDU2LTljYWUtZmU0YTAyY2FlZjdm
LzEvSFFIMDNfMXZ1bWJOLU1OMHliRHdSMVVuQmQwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMHoGCCsGAQUFBwEHAQH/BGswaTBYBAIAATBSAwQHPqSAAwQA
PqmaAwMAVjYDBAHBbKgDBALCPiwDBADCpGEDBADCpHIDBADCpLUDBAXDGuADBAXD
yAADBAfUIAADBAXV/qADBATZHcADAwDZmjANBAIAAjAHAwUAIAEV4DANBgkqhkiG
9w0BAQsFAAOCAQEAMmESun4hEcG6qPMHOn1V/WjYDI9/3/PG+/yg6vEMt9q0B2Rn
YY2tLEtl9pto44E960dQgLFRFQfz0vj0ZROduQhZHkKoeKigbypQyuckOo60lXzp
gEEpWTVoOKYKVyy1LN66FwZsCGxbMU/CnrIdO7lLN/iIWxkAozOn1Wm8LziWkCzq
LRd8J2zlRsIqoQgkgg18a3lAiyZ/4X2VCqiI7cXDK1rPV2ve22mXIQRpHlWvMJV1
nZM0tQjyw/9NVCGbisQ4NZl8YTKtZdJRhjbjMKnRIF93KGg2ONlNZsgNUvcMmXDt
4vRAn+c1qliKYPSyMHedH81GnQnFrblR/5JWAg==
-----END CERTIFICATE-----
Generated at Thu Feb 1 19:04:42 2024 by rpki-client on console-fra.rpki-client.org