Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/48b407-6d94-49ae-a3d8-72c83128761b/1/Gfl_EQCGc0FvIN29INY8b8QiDhg.roa
File: Gfl_EQCGc0FvIN29INY8b8QiDhg.roa (raw, json)
Hash identifier: NugM8d6WUrgvOAr9WCtc2O6K+nEcSV+C2b59eED0drE=
Subject key identifier: 19:F9:7F:11:00:86:73:41:6F:20:DD:BD:20:D6:3C:6F:C4:22:0E:18
Certificate issuer: /CN=add353933674a5608f6d1ee2dab4f64c8bff8f39
Certificate serial: 018CC8DF61891EE546235CAE0D3FC265253C
Authority key identifier: AD:D3:53:93:36:74:A5:60:8F:6D:1E:E2:DA:B4:F6:4C:8B:FF:8F:39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rdNTkzZ0pWCPbR7i2rT2TIv_jzk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/48b407-6d94-49ae-a3d8-72c83128761b/1/Gfl_EQCGc0FvIN29INY8b8QiDhg.roa
Signing time: Tue 02 Jan 2024 06:32:11 +0000
ROA not before: Tue 02 Jan 2024 06:32:11 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 8851
IP address blocks: 91.84.0.0/18 maxlen: 18
194.46.32.0/19 maxlen: 19
91.84.128.0/17 maxlen: 17
194.46.64.0/19 maxlen: 19
91.85.0.0/16 maxlen: 16
194.46.80.0/20 maxlen: 20
212.104.128.0/19 maxlen: 19
212.108.80.0/21 maxlen: 21
212.108.88.0/22 maxlen: 22
91.84.96.0/19 maxlen: 19
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:df:61:89:1e:e5:46:23:5c:ae:0d:3f:c2:65:25:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=add353933674a5608f6d1ee2dab4f64c8bff8f39
Validity
Not Before: Jan 2 06:32:11 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=19f97f11008673416f20ddbd20d63c6fc4220e18
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:8c:da:05:76:2e:65:d8:4a:78:be:18:70:cc:
4e:07:9d:00:0a:5e:cf:4e:b0:f0:a4:ec:c9:bb:bb:
ba:3a:90:b9:e3:69:eb:41:38:4e:12:52:ae:25:52:
fc:ff:98:17:a3:b1:4a:b5:1c:6b:a7:ba:82:20:00:
12:4f:76:42:2e:41:dc:4c:29:10:10:b5:9a:84:0f:
13:d8:41:d4:ab:1b:c6:e2:64:8c:55:8b:9c:03:95:
69:f8:0f:5c:b2:64:3f:cb:b6:dc:d2:0f:68:06:f4:
ca:c1:b7:c4:38:b7:61:1d:b2:e8:44:e1:f0:40:c7:
35:2d:89:cd:89:d6:b3:5e:4a:ab:82:08:9a:61:3d:
d5:8e:b9:9e:35:43:5c:f1:bc:8d:a0:fd:4b:ff:77:
d0:82:e5:50:8a:2e:2a:3a:07:3f:cd:11:b3:92:8a:
19:1c:0b:14:68:5b:5b:91:2a:3c:b9:81:39:10:9e:
04:45:6a:0c:ef:86:c5:16:cf:d3:60:95:94:dd:57:
18:e4:b8:f5:ca:3f:c9:86:33:80:b7:62:50:09:57:
05:d4:4f:c3:be:9f:32:d5:e2:4f:3f:0f:31:6e:6d:
7f:c9:5f:d8:ea:34:f8:52:6c:d7:ec:87:bf:df:3a:
3c:15:aa:d5:63:47:29:54:23:d7:e7:65:00:29:5e:
a5:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:F9:7F:11:00:86:73:41:6F:20:DD:BD:20:D6:3C:6F:C4:22:0E:18
X509v3 Authority Key Identifier:
keyid:AD:D3:53:93:36:74:A5:60:8F:6D:1E:E2:DA:B4:F6:4C:8B:FF:8F:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rdNTkzZ0pWCPbR7i2rT2TIv_jzk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/48b407-6d94-49ae-a3d8-72c83128761b/1/Gfl_EQCGc0FvIN29INY8b8QiDhg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/48b407-6d94-49ae-a3d8-72c83128761b/1/rdNTkzZ0pWCPbR7i2rT2TIv_jzk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.84.0.0/18
91.84.96.0-91.85.255.255
194.46.32.0-194.46.95.255
212.104.128.0/19
212.108.80.0-212.108.91.255
Signature Algorithm: sha256WithRSAEncryption
7f:99:61:8f:53:c8:c6:b0:9e:f8:05:50:dd:65:67:19:78:e6:
56:d6:37:f7:99:e3:a7:24:fc:31:c6:c0:ef:73:69:f0:23:05:
38:48:8a:d6:f0:30:7e:ff:95:fe:69:6b:06:7c:17:f2:47:1a:
65:05:61:15:63:3d:aa:3d:e4:01:b2:3b:d1:a9:2a:de:75:6e:
75:fd:05:4e:54:73:ba:b7:b0:d2:ab:09:17:13:e5:a3:68:8e:
d7:fe:3a:11:52:f9:11:4c:94:f3:f7:bd:71:9f:c9:c9:10:ba:
34:de:bc:20:59:51:38:08:e8:eb:8e:96:99:6e:0e:2d:03:d0:
80:f2:0c:44:b6:c2:87:20:24:3b:7a:c7:64:95:2e:41:3c:8b:
9b:b0:8f:6a:08:9e:a6:f9:c1:b2:43:f0:34:f8:96:04:9b:f2:
09:98:2c:1e:2b:55:c8:24:a9:ef:20:1f:21:b7:4b:04:93:81:
7c:0d:bb:90:1c:72:25:b6:75:b9:06:3b:04:86:ae:d4:99:6d:
70:7e:d8:a6:c0:c4:01:5c:07:dc:0f:30:a1:6a:8c:30:30:1f:
7f:e9:e6:d9:03:8d:69:20:31:96:52:b7:b0:81:59:2d:70:6e:
7b:89:11:9d:0e:5e:be:00:74:fa:7b:51:f4:b0:92:66:a2:fa:
03:7f:1a:c8
-----BEGIN CERTIFICATE-----
MIIFLDCCBBSgAwIBAgISAYzI32GJHuVGI1yuDT/CZSU8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFkZDM1MzkzMzY3NGE1NjA4ZjZkMWVlMmRhYjRmNjRjOGJm
ZjhmMzkwHhcNMjQwMTAyMDYzMjExWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxOWY5N2YxMTAwODY3MzQxNmYyMGRkYmQyMGQ2M2M2ZmM0MjIwZTE4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlIzaBXYuZdhKeL4YcMxOB50ACl7P
TrDwpOzJu7u6OpC542nrQThOElKuJVL8/5gXo7FKtRxrp7qCIAAST3ZCLkHcTCkQ
ELWahA8T2EHUqxvG4mSMVYucA5Vp+A9csmQ/y7bc0g9oBvTKwbfEOLdhHbLoROHw
QMc1LYnNidazXkqrggiaYT3VjrmeNUNc8byNoP1L/3fQguVQii4qOgc/zRGzkooZ
HAsUaFtbkSo8uYE5EJ4ERWoM74bFFs/TYJWU3VcY5Lj1yj/JhjOAt2JQCVcF1E/D
vp8y1eJPPw8xbm1/yV/Y6jT4UmzX7Ie/3zo8FarVY0cpVCPX52UAKV6l+wIDAQAB
o4ICODCCAjQwHQYDVR0OBBYEFBn5fxEAhnNBbyDdvSDWPG/EIg4YMB8GA1UdIwQY
MBaAFK3TU5M2dKVgj20e4tq09kyL/485MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcmROVGt6WjBwV0NQYlI3aTJyVDJUSXZfanprLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yy80OGI0MDctNmQ5NC00OWFlLWEzZDgt
NzJjODMxMjg3NjFiLzEvR2ZsX0VRQ0djMEZ2SU4yOUlOWThiOFFpRGhnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Yy80OGI0MDctNmQ5NC00OWFlLWEzZDgtNzJjODMxMjg3NjFi
LzEvcmROVGt6WjBwV0NQYlI3aTJyVDJUSXZfanprLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CME4GCCsGAQUFBwEHAQH/BD8wPTA7BAIAATA1AwQGW1QAMAsD
BAVbVGADAwFbVDAMAwQFwi4gAwQFwi5AAwQF1GiAMAwDBATUbFADBALUbFgwDQYJ
KoZIhvcNAQELBQADggEBAH+ZYY9TyMawnvgFUN1lZxl45lbWN/eZ46ck/DHGwO9z
afAjBThIitbwMH7/lf5pawZ8F/JHGmUFYRVjPao95AGyO9GpKt51bnX9BU5Uc7q3
sNKrCRcT5aNojtf+OhFS+RFMlPP3vXGfyckQujTevCBZUTgI6OuOlpluDi0D0IDy
DES2wocgJDt6x2SVLkE8i5uwj2oInqb5wbJD8DT4lgSb8gmYLB4rVcgkqe8gHyG3
SwSTgXwNu5AcciW2dbkGOwSGrtSZbXB+2KbAxAFcB9wPMKFqjDAwH3/p5tkDjWkg
MZZSt7CBWS1wbnuJEZ0OXr4AdPp7UfSwkmai+gN/Gsg=
-----END CERTIFICATE-----
Generated at Tue Feb 27 00:59:46 2024 by rpki-client on console.sobornost.net