Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/caf5ea-626e-455a-8708-f5ca8fa7270d/1/l1EZ4D2Mddi8B4mpMo4Yl0QdSuU.roa
File: l1EZ4D2Mddi8B4mpMo4Yl0QdSuU.roa (raw, json)
Hash identifier: acf1W0exLK2ER7gQnCF0lRnM0+cFi0ib8IX91tR9nnI=
Subject key identifier: 97:51:19:E0:3D:8C:75:D8:BC:07:89:A9:32:8E:18:97:44:1D:4A:E5
Certificate issuer: /CN=b9f1d5b06f5701555ff5888154dd141b48896117
Certificate serial: 018A849FE477114821D46A897AE8A513904C
Authority key identifier: B9:F1:D5:B0:6F:57:01:55:5F:F5:88:81:54:DD:14:1B:48:89:61:17
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ufHVsG9XAVVf9YiBVN0UG0iJYRc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/caf5ea-626e-455a-8708-f5ca8fa7270d/1/l1EZ4D2Mddi8B4mpMo4Yl0QdSuU.roa
Signing time: Mon 11 Sep 2023 14:23:05 +0000
ROA not before: Mon 11 Sep 2023 14:23:05 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 207967
IP address blocks: 176.114.84.0/22 maxlen: 22
176.114.88.0/24 maxlen: 24
176.114.90.0/24 maxlen: 24
176.114.89.0/24 maxlen: 24
176.114.92.0/22 maxlen: 22
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:84:9f:e4:77:11:48:21:d4:6a:89:7a:e8:a5:13:90:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9f1d5b06f5701555ff5888154dd141b48896117
Validity
Not Before: Sep 11 14:23:05 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=975119e03d8c75d8bc0789a9328e1897441d4ae5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:21:b8:ad:2d:6f:ef:31:78:5b:bd:69:1a:5d:
e5:1c:10:b3:86:f2:e9:c9:f8:ce:a0:3d:e1:26:b9:
0c:42:d8:37:5a:4f:bb:17:b9:75:1d:9e:3d:0c:d7:
42:7e:7a:21:35:60:8d:97:9d:ec:12:af:79:de:0d:
29:81:3b:92:5f:b6:ed:f7:06:0d:83:b8:9c:fe:96:
08:5a:a8:aa:b0:43:a1:df:c9:71:94:c9:84:ae:54:
e8:b3:7e:da:e2:ea:93:1c:ca:fd:a4:90:fa:09:1c:
fa:cd:eb:f5:46:03:4f:c1:b9:01:6e:a5:57:79:45:
d5:0c:1b:9c:11:78:de:37:48:61:dc:58:7d:87:c5:
e1:2d:18:52:cc:b0:28:05:a8:c9:0e:6a:8a:7c:90:
e7:cc:3d:5d:20:02:ea:0e:5e:dd:4f:dc:db:d7:25:
58:44:d6:ab:6b:89:d2:2d:30:d5:2c:86:dd:04:3c:
a1:05:75:e3:27:cf:bb:12:18:52:a6:2e:e8:8a:0d:
67:cc:4f:f2:bc:40:bd:74:21:e2:a7:c7:4b:5c:ae:
dc:1a:39:9a:8f:c7:5b:8a:67:90:1e:fb:b8:43:4b:
ca:ac:f9:95:34:e8:5e:ab:03:1c:33:12:e6:6f:45:
46:15:fb:2d:3a:64:9d:99:ec:0e:74:e7:fd:e6:6d:
ec:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:51:19:E0:3D:8C:75:D8:BC:07:89:A9:32:8E:18:97:44:1D:4A:E5
X509v3 Authority Key Identifier:
keyid:B9:F1:D5:B0:6F:57:01:55:5F:F5:88:81:54:DD:14:1B:48:89:61:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ufHVsG9XAVVf9YiBVN0UG0iJYRc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/caf5ea-626e-455a-8708-f5ca8fa7270d/1/l1EZ4D2Mddi8B4mpMo4Yl0QdSuU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/caf5ea-626e-455a-8708-f5ca8fa7270d/1/ufHVsG9XAVVf9YiBVN0UG0iJYRc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.114.84.0-176.114.90.255
176.114.92.0/22
Signature Algorithm: sha256WithRSAEncryption
5e:73:c1:a1:2a:2d:47:bb:4b:24:6f:d5:d4:98:f1:18:da:01:
ce:fa:54:73:1a:ec:f9:f0:b5:e8:03:52:d3:ca:d0:b7:1a:54:
78:14:b3:2f:d6:f2:75:43:f0:3a:5e:10:72:8a:11:4b:bb:8f:
65:73:1e:6d:ef:1f:92:46:8e:67:d8:af:ae:cc:72:0e:16:53:
5e:83:1b:f0:0a:e1:6f:f2:1c:f8:c5:4e:19:d8:82:6f:d7:31:
cd:bc:e9:5e:f1:f2:03:83:e6:f1:cb:1c:ae:36:8d:cd:19:d9:
87:ac:ef:ee:2e:c5:b9:67:8d:64:30:4a:96:47:e1:dd:e2:6c:
57:1e:f3:c5:b7:71:84:75:d9:2f:85:5d:0f:70:32:5b:50:00:
00:7d:7f:e3:d5:8f:69:86:e5:5d:35:bf:b6:36:64:5d:58:92:
b5:ff:f4:53:92:2e:92:b6:e7:d8:07:97:88:97:9c:2a:59:bd:
71:53:e8:c0:86:84:4a:34:ca:f5:eb:60:71:28:bf:3d:15:54:
e1:c4:9b:33:f7:af:6c:1b:a2:0c:ee:6b:be:2e:5e:48:11:41:
c1:b1:f3:ae:c0:04:8c:7f:2e:f1:c6:17:b1:01:ec:24:d9:a0:
61:f4:07:ca:6d:e8:8e:fc:80:7a:75:c3:aa:48:c1:6e:69:eb:
8b:93:f2:2a
-----BEGIN CERTIFICATE-----
MIIFCzCCA/OgAwIBAgISAYqEn+R3EUgh1GqJeuilE5BMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI5ZjFkNWIwNmY1NzAxNTU1ZmY1ODg4MTU0ZGQxNDFiNDg4
OTYxMTcwHhcNMjMwOTExMTQyMzA1WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5NzUxMTllMDNkOGM3NWQ4YmMwNzg5YTkzMjhlMTg5NzQ0MWQ0YWU1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApiG4rS1v7zF4W71pGl3lHBCzhvLp
yfjOoD3hJrkMQtg3Wk+7F7l1HZ49DNdCfnohNWCNl53sEq953g0pgTuSX7bt9wYN
g7ic/pYIWqiqsEOh38lxlMmErlTos37a4uqTHMr9pJD6CRz6zev1RgNPwbkBbqVX
eUXVDBucEXjeN0hh3Fh9h8XhLRhSzLAoBajJDmqKfJDnzD1dIALqDl7dT9zb1yVY
RNara4nSLTDVLIbdBDyhBXXjJ8+7EhhSpi7oig1nzE/yvEC9dCHip8dLXK7cGjma
j8dbimeQHvu4Q0vKrPmVNOheqwMcMxLmb0VGFfstOmSdmewOdOf95m3scQIDAQAB
o4ICFzCCAhMwHQYDVR0OBBYEFJdRGeA9jHXYvAeJqTKOGJdEHUrlMB8GA1UdIwQY
MBaAFLnx1bBvVwFVX/WIgVTdFBtIiWEXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdWZIVnNHOVhBVlZmOVlpQlZOMFVHMGlKWVJjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMS9jYWY1ZWEtNjI2ZS00NTVhLTg3MDgt
ZjVjYThmYTcyNzBkLzEvbDFFWjREMk1kZGk4QjRtcE1vNFlsMFFkU3VVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMS9jYWY1ZWEtNjI2ZS00NTVhLTg3MDgtZjVjYThmYTcyNzBk
LzEvdWZIVnNHOVhBVlZmOVlpQlZOMFVHMGlKWVJjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIAATAUMAwDBAKwclQD
BACwcloDBAKwclwwDQYJKoZIhvcNAQELBQADggEBAF5zwaEqLUe7SyRv1dSY8Rja
Ac76VHMa7PnwtegDUtPK0LcaVHgUsy/W8nVD8DpeEHKKEUu7j2VzHm3vH5JGjmfY
r67Mcg4WU16DG/AK4W/yHPjFThnYgm/XMc286V7x8gOD5vHLHK42jc0Z2Yes7+4u
xblnjWQwSpZH4d3ibFce88W3cYR12S+FXQ9wMltQAAB9f+PVj2mG5V01v7Y2ZF1Y
krX/9FOSLpK259gHl4iXnCpZvXFT6MCGhEo0yvXrYHEovz0VVOHEmzP3r2wbogzu
a74uXkgRQcGx867ABIx/LvHGF7EB7CTZoGH0B8pt6I78gHp1w6pIwW5p64uT8io=
-----END CERTIFICATE-----
Generated at Mon Apr 28 01:22:55 2025 by rpki-client