Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/48b407-6d94-49ae-a3d8-72c83128761b/1/FZAXgyYpm00SSGGtHIu4Ru6mjJ8.roa
File: FZAXgyYpm00SSGGtHIu4Ru6mjJ8.roa (raw, json)
Hash identifier: 9mNsjoKs1Swojy6fWXUr9+34u1XVF2qJzmbDT4CnCQ0=
Subject key identifier: 15:90:17:83:26:29:9B:4D:12:48:61:AD:1C:8B:B8:46:EE:A6:8C:9F
Certificate issuer: /CN=add353933674a5608f6d1ee2dab4f64c8bff8f39
Certificate serial: 16260116
Authority key identifier: AD:D3:53:93:36:74:A5:60:8F:6D:1E:E2:DA:B4:F6:4C:8B:FF:8F:39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rdNTkzZ0pWCPbR7i2rT2TIv_jzk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/48b407-6d94-49ae-a3d8-72c83128761b/1/FZAXgyYpm00SSGGtHIu4Ru6mjJ8.roa
Signing time: Mon 30 May 2022 10:56:15 +0000
ROA not before: Mon 30 May 2022 10:56:15 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 206509
IP address blocks: 194.46.32.0/19 maxlen: 19
91.84.0.0/15 maxlen: 16
194.46.64.0/19 maxlen: 19
194.46.80.0/20 maxlen: 20
212.104.128.0/19 maxlen: 19
212.108.80.0/21 maxlen: 21
212.108.88.0/22 maxlen: 22
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 371589398 (0x16260116)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=add353933674a5608f6d1ee2dab4f64c8bff8f39
Validity
Not Before: May 30 10:56:15 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=1590178326299b4d124861ad1c8bb846eea68c9f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:b3:75:76:59:c0:a8:81:69:a3:a3:3e:5c:86:
64:4e:a3:e8:80:de:ac:12:c6:2a:5b:6d:7c:6b:ce:
d0:56:8c:85:3b:02:7b:c5:d4:be:f8:8a:ef:0f:75:
6a:05:b1:63:67:6c:c4:c7:23:03:5b:17:30:ca:e8:
55:94:01:7c:c5:b8:8a:13:27:d5:48:10:9d:88:ff:
5d:ba:fb:89:1b:52:1a:5d:30:92:58:b9:cd:b7:bb:
30:11:e1:7b:6d:fb:be:b2:40:a0:10:29:c0:3b:dd:
35:75:bd:2e:f4:8e:43:d0:e9:ef:2b:e9:18:35:09:
3b:b4:41:3b:40:c5:ec:93:a5:ee:2f:18:e8:d1:31:
ae:7c:6c:63:e4:09:eb:62:d8:74:7a:c4:e5:f6:23:
ac:6e:b1:f2:45:fc:cc:85:4f:5a:19:7d:e3:be:1a:
46:5e:c3:21:ed:27:f8:2b:8d:99:be:e1:20:13:49:
43:b2:10:e6:19:05:6d:27:81:bc:2d:35:46:34:58:
7f:39:a7:c3:a1:a7:08:9e:7a:29:f6:48:f2:9f:a6:
b4:85:c7:10:dc:ea:27:00:8f:97:dd:ed:d3:de:63:
0a:cc:59:2d:f8:45:93:44:94:af:27:50:b4:10:24:
59:b8:9a:c5:e9:ac:be:c8:ee:07:8d:98:3e:b5:8f:
f5:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:90:17:83:26:29:9B:4D:12:48:61:AD:1C:8B:B8:46:EE:A6:8C:9F
X509v3 Authority Key Identifier:
keyid:AD:D3:53:93:36:74:A5:60:8F:6D:1E:E2:DA:B4:F6:4C:8B:FF:8F:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rdNTkzZ0pWCPbR7i2rT2TIv_jzk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/48b407-6d94-49ae-a3d8-72c83128761b/1/FZAXgyYpm00SSGGtHIu4Ru6mjJ8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/48b407-6d94-49ae-a3d8-72c83128761b/1/rdNTkzZ0pWCPbR7i2rT2TIv_jzk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.84.0.0/15
194.46.32.0-194.46.95.255
212.104.128.0/19
212.108.80.0-212.108.91.255
Signature Algorithm: sha256WithRSAEncryption
0f:f0:7d:22:d1:ae:97:c2:91:33:20:17:65:19:47:b3:bd:77:
66:52:8d:29:31:2e:88:d5:1b:bd:27:ce:27:76:e5:3a:c1:04:
39:70:70:fc:ac:06:24:c6:56:c1:44:45:95:d4:62:17:0d:12:
fe:a7:58:c9:c5:30:96:58:a3:72:8f:55:5a:5a:4d:8d:58:af:
9f:0e:76:19:ea:c5:fc:23:04:fc:a0:cc:16:eb:d6:01:db:f7:
19:0f:43:af:46:b8:ad:a7:ee:48:24:d2:41:ce:6b:eb:07:63:
ac:fe:6e:09:40:b7:17:74:d1:74:01:e9:c3:b8:71:7f:3e:18:
37:97:c1:18:63:ec:20:c0:21:b6:13:1b:ab:4b:51:34:bb:1a:
87:d2:d6:00:76:db:29:66:35:17:c2:df:0e:3f:b5:4c:35:17:
76:6b:1a:c9:b9:69:76:8d:b7:88:73:2c:25:95:1f:46:e4:cb:
eb:6a:4e:a5:58:d1:8e:bf:0c:13:2a:ef:ab:ca:fb:8b:5f:2e:
fe:84:89:fb:a3:45:db:65:cf:16:01:56:78:a4:d9:fc:08:67:
ff:ed:d1:72:c2:c5:c8:1e:0b:70:a6:6c:76:88:8e:ee:ce:da:
b0:7e:c3:a2:dc:5b:6b:f9:9f:7e:b6:c0:76:39:3c:14:7c:f5:
f9:04:bc:6d
-----BEGIN CERTIFICATE-----
MIIFEDCCA/igAwIBAgIEFiYBFjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhh
ZGQzNTM5MzM2NzRhNTYwOGY2ZDFlZTJkYWI0ZjY0YzhiZmY4ZjM5MB4XDTIyMDUz
MDEwNTYxNVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoMTU5MDE3ODMyNjI5
OWI0ZDEyNDg2MWFkMWM4YmI4NDZlZWE2OGM5ZjCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAKCzdXZZwKiBaaOjPlyGZE6j6IDerBLGKlttfGvO0FaMhTsC
e8XUvviK7w91agWxY2dsxMcjA1sXMMroVZQBfMW4ihMn1UgQnYj/Xbr7iRtSGl0w
kli5zbe7MBHhe237vrJAoBApwDvdNXW9LvSOQ9Dp7yvpGDUJO7RBO0DF7JOl7i8Y
6NExrnxsY+QJ62LYdHrE5fYjrG6x8kX8zIVPWhl9474aRl7DIe0n+CuNmb7hIBNJ
Q7IQ5hkFbSeBvC01RjRYfzmnw6GnCJ56KfZI8p+mtIXHENzqJwCPl93t095jCsxZ
LfhFk0SUrydQtBAkWbiaxemsvsjuB42YPrWP9d8CAwEAAaOCAiowggImMB0GA1Ud
DgQWBBQVkBeDJimbTRJIYa0ci7hG7qaMnzAfBgNVHSMEGDAWgBSt01OTNnSlYI9t
HuLatPZMi/+POTAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L3JkTlRrelowcFdDUGJSN2kyclQyVEl2X2p6ay5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvN2MvNDhiNDA3LTZkOTQtNDlhZS1hM2Q4LTcyYzgzMTI4NzYxYi8x
L0ZaQVhneVlwbTAwU1NHR3RISXU0UnU2bWpKOC5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvN2Mv
NDhiNDA3LTZkOTQtNDlhZS1hM2Q4LTcyYzgzMTI4NzYxYi8xL3JkTlRrelowcFdD
UGJSN2kyclQyVEl2X2p6ay5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBA
BggrBgEFBQcBBwEB/wQxMC8wLQQCAAEwJwMDAVtUMAwDBAXCLiADBAXCLkADBAXU
aIAwDAMEBNRsUAMEAtRsWDANBgkqhkiG9w0BAQsFAAOCAQEAD/B9ItGul8KRMyAX
ZRlHs713ZlKNKTEuiNUbvSfOJ3blOsEEOXBw/KwGJMZWwURFldRiFw0S/qdYycUw
llijco9VWlpNjVivnw52GerF/CME/KDMFuvWAdv3GQ9Dr0a4rafuSCTSQc5r6wdj
rP5uCUC3F3TRdAHpw7hxfz4YN5fBGGPsIMAhthMbq0tRNLsah9LWAHbbKWY1F8Lf
Dj+1TDUXdmsayblpdo23iHMsJZUfRuTL62pOpVjRjr8MEyrvq8r7i18u/oSJ+6NF
22XPFgFWeKTZ/Ahn/+3RcsLFyB4LcKZsdoiO7s7asH7Dotxba/mffrbAdjk8FHz1
+QS8bQ==
-----END CERTIFICATE-----
Generated at Wed Dec 27 18:41:24 2023 by rpki-client on console.sobornost.net