Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/b80384-f2fe-4456-9cae-fe4a02caef7f/1/nGaQofGWgeHt6fmnqROD9qdrwjY.roa
File: nGaQofGWgeHt6fmnqROD9qdrwjY.roa (raw, json)
Hash identifier: LOdxzX1k8cWXgv4Uft/Y0Ifi6l2E2Nm1d1ayIZ/ZWcI=
Subject key identifier: 9C:66:90:A1:F1:96:81:E1:ED:E9:F9:A7:A9:13:83:F6:A7:6B:C2:36
Certificate issuer: /CN=1d01f4dffd6fba66cdf8c374c9b0f047552705dd
Certificate serial: 01856BCA2EE73E37FCE20E15B83ED78EEBD8
Authority key identifier: 1D:01:F4:DF:FD:6F:BA:66:CD:F8:C3:74:C9:B0:F0:47:55:27:05:DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HQH03_1vumbN-MN0ybDwR1UnBd0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/b80384-f2fe-4456-9cae-fe4a02caef7f/1/nGaQofGWgeHt6fmnqROD9qdrwjY.roa
Signing time: Sun 01 Jan 2023 05:24:50 +0000
ROA not before: Sun 01 Jan 2023 05:24:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 8897
IP address blocks: 62.164.128.0/17 maxlen: 21
62.164.144.0/21 maxlen: 21
194.154.32.0/19 maxlen: 19
2001:15e0::/32 maxlen: 32
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6b:ca:2e:e7:3e:37:fc:e2:0e:15:b8:3e:d7:8e:eb:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1d01f4dffd6fba66cdf8c374c9b0f047552705dd
Validity
Not Before: Jan 1 05:24:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9c6690a1f19681e1ede9f9a7a91383f6a76bc236
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:88:cf:a2:84:31:e6:ef:58:54:0d:12:46:ac:
9e:ab:25:3b:3c:55:a9:c7:40:6f:88:20:fe:fe:53:
e5:1c:c3:1c:ba:67:37:ae:88:92:4a:8e:ad:1c:c0:
85:32:54:89:65:c7:0c:e1:76:99:54:e1:f1:85:26:
3d:78:5f:29:dd:00:7c:d3:6b:8e:95:29:41:03:f9:
0d:36:3e:c6:6b:33:08:f6:31:4f:ff:91:8c:0e:92:
c4:29:de:51:37:63:ea:9a:0a:e8:4e:f2:57:3d:db:
78:97:15:8e:42:ee:47:87:4f:18:41:bc:6d:a0:76:
f1:f4:ea:d8:58:f9:3a:25:0b:0f:0d:d7:3a:61:5c:
c9:e4:d9:d6:c1:95:34:79:1f:4e:79:23:7a:7c:27:
45:9e:14:c6:c4:34:b3:d1:0f:48:b8:9a:45:93:7a:
7a:75:5d:b9:c2:83:c0:3d:0e:83:35:e5:97:b1:0f:
b5:73:57:87:a9:29:cc:7a:73:ee:34:2a:a9:52:55:
56:3e:f0:bf:c7:bd:11:5d:3f:4b:c4:8c:28:ba:97:
d4:39:c5:44:40:57:dc:a1:2c:cc:a1:ea:7a:82:a3:
ba:b5:68:6a:98:c6:0a:1d:ac:03:c3:d4:8a:a9:1b:
26:5c:5a:78:1c:8d:ae:af:a8:ea:f0:59:f1:76:5c:
e5:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:66:90:A1:F1:96:81:E1:ED:E9:F9:A7:A9:13:83:F6:A7:6B:C2:36
X509v3 Authority Key Identifier:
keyid:1D:01:F4:DF:FD:6F:BA:66:CD:F8:C3:74:C9:B0:F0:47:55:27:05:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HQH03_1vumbN-MN0ybDwR1UnBd0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/b80384-f2fe-4456-9cae-fe4a02caef7f/1/nGaQofGWgeHt6fmnqROD9qdrwjY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/b80384-f2fe-4456-9cae-fe4a02caef7f/1/HQH03_1vumbN-MN0ybDwR1UnBd0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.164.128.0/17
194.154.32.0/19
IPv6:
2001:15e0::/32
Signature Algorithm: sha256WithRSAEncryption
3f:b5:6b:27:1a:ce:f1:c0:76:18:27:b3:d7:0e:64:20:b6:85:
7b:f7:9b:5e:5c:a8:89:81:a3:3c:8a:3d:cb:da:d7:22:e1:8d:
3c:e0:e0:1a:22:c4:dd:01:2b:ee:13:73:15:14:9f:aa:e2:31:
46:c9:00:3d:73:d6:9f:d9:84:cc:68:59:67:e1:c9:1f:e9:36:
3c:c4:22:1d:c7:bd:69:b9:2a:80:4a:a9:83:16:b9:4e:2c:0f:
1b:6c:08:36:c8:ab:90:90:44:49:01:0e:39:b1:f3:17:16:08:
cd:28:ac:a8:57:cc:36:04:7f:cb:26:09:36:1f:8a:0c:f2:94:
80:c6:b1:a4:99:52:77:fa:94:39:6d:46:1f:bd:e5:9b:d7:9c:
a7:63:f9:37:de:8c:46:32:81:ba:71:7a:9a:b7:4b:f4:85:f7:
04:18:39:84:2b:b2:c7:19:2c:fd:af:ff:c9:cb:38:0e:c5:d8:
af:36:61:da:00:52:d4:9c:43:b9:92:72:c0:24:a5:e1:a3:cb:
6f:21:81:7b:cf:fd:b9:41:f4:1c:35:97:02:6e:dd:99:97:ad:
82:c2:02:0c:0e:e5:7f:73:50:70:4b:ad:53:0e:d7:a4:fd:de:
48:1e:c4:5d:ac:e3:8e:84:99:f8:74:63:b0:9e:9b:32:6f:1c:
d6:3a:51:7c
-----BEGIN CERTIFICATE-----
MIIFEjCCA/qgAwIBAgISAYVryi7nPjf84g4VuD7XjuvYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFkMDFmNGRmZmQ2ZmJhNjZjZGY4YzM3NGM5YjBmMDQ3NTUy
NzA1ZGQwHhcNMjMwMTAxMDUyNDUwWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5YzY2OTBhMWYxOTY4MWUxZWRlOWY5YTdhOTEzODNmNmE3NmJjMjM2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgojPooQx5u9YVA0SRqyeqyU7PFWp
x0BviCD+/lPlHMMcumc3roiSSo6tHMCFMlSJZccM4XaZVOHxhSY9eF8p3QB802uO
lSlBA/kNNj7GazMI9jFP/5GMDpLEKd5RN2PqmgroTvJXPdt4lxWOQu5Hh08YQbxt
oHbx9OrYWPk6JQsPDdc6YVzJ5NnWwZU0eR9OeSN6fCdFnhTGxDSz0Q9IuJpFk3p6
dV25woPAPQ6DNeWXsQ+1c1eHqSnMenPuNCqpUlVWPvC/x70RXT9LxIwoupfUOcVE
QFfcoSzMoep6gqO6tWhqmMYKHawDw9SKqRsmXFp4HI2ur6jq8Fnxdlzl4wIDAQAB
o4ICHjCCAhowHQYDVR0OBBYEFJxmkKHxloHh7en5p6kTg/ana8I2MB8GA1UdIwQY
MBaAFB0B9N/9b7pmzfjDdMmw8EdVJwXdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSFFIMDNfMXZ1bWJOLU1OMHliRHdSMVVuQmQwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZi9iODAzODQtZjJmZS00NDU2LTljYWUt
ZmU0YTAyY2FlZjdmLzEvbkdhUW9mR1dnZUh0NmZtbnFST0Q5cWRyd2pZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZi9iODAzODQtZjJmZS00NDU2LTljYWUtZmU0YTAyY2FlZjdm
LzEvSFFIMDNfMXZ1bWJOLU1OMHliRHdSMVVuQmQwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQHPqSAAwQF
wpogMA0EAgACMAcDBQAgARXgMA0GCSqGSIb3DQEBCwUAA4IBAQA/tWsnGs7xwHYY
J7PXDmQgtoV795teXKiJgaM8ij3L2tci4Y084OAaIsTdASvuE3MVFJ+q4jFGyQA9
c9af2YTMaFln4ckf6TY8xCIdx71puSqASqmDFrlOLA8bbAg2yKuQkERJAQ45sfMX
FgjNKKyoV8w2BH/LJgk2H4oM8pSAxrGkmVJ3+pQ5bUYfveWb15ynY/k33oxGMoG6
cXqat0v0hfcEGDmEK7LHGSz9r//JyzgOxdivNmHaAFLUnEO5knLAJKXho8tvIYF7
z/25QfQcNZcCbt2Zl62CwgIMDuV/c1BwS61TDtek/d5IHsRdrOOOhJn4dGOwnpsy
bxzWOlF8
Generated at Wed Dec 6 15:33:53 2023 by rpki-client on console-ams.rpki-client.org