Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/tZZ-sI6JQiPQKU7twipQnNLs0jQ.roa
File: tZZ-sI6JQiPQKU7twipQnNLs0jQ.roa (raw, json)
Hash identifier: kR3wDzyvBJleZj/+SA82i3AvtoMH+/zeWkUYQae/jVg=
Subject key identifier: B5:96:7E:B0:8E:89:42:23:D0:29:4E:ED:C2:2A:50:9C:D2:EC:D2:34
Certificate issuer: /CN=2ac3daa1b14850f2e61c592b2191915a5e65a478
Certificate serial: 01899C6EDF7C5611CC413324C358F67053A1
Authority key identifier: 2A:C3:DA:A1:B1:48:50:F2:E6:1C:59:2B:21:91:91:5A:5E:65:A4:78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/tZZ-sI6JQiPQKU7twipQnNLs0jQ.roa
Signing time: Fri 28 Jul 2023 12:17:39 +0000
ROA not before: Fri 28 Jul 2023 12:17:39 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 31732
IP address blocks: 188.209.155.0/24 maxlen: 24
185.151.236.0/22 maxlen: 24
188.253.8.0/21 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:9c:6e:df:7c:56:11:cc:41:33:24:c3:58:f6:70:53:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ac3daa1b14850f2e61c592b2191915a5e65a478
Validity
Not Before: Jul 28 12:17:39 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b5967eb08e894223d0294eedc22a509cd2ecd234
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:68:3c:7f:ee:4d:90:da:31:df:a1:19:cf:5b:
1f:ba:12:b9:ae:00:92:d2:fb:ef:48:78:7b:ab:b1:
bc:12:3b:fe:c6:71:4b:f9:13:bb:1b:e5:9d:1c:46:
6a:ca:83:1c:0a:0a:1d:87:e2:0b:92:29:33:6e:a1:
70:b0:b5:48:1f:d0:a5:1e:a4:9e:17:7b:de:cf:83:
19:b1:5a:44:d5:62:e4:52:b6:5c:9f:7a:df:ee:c4:
61:72:d8:37:2e:dc:56:63:b2:99:8c:49:f5:e0:9f:
a9:d9:20:46:bf:0b:5c:05:0f:82:af:cb:7b:3b:d7:
86:9c:7a:74:36:18:86:82:56:f5:20:80:df:95:91:
25:03:92:6d:63:0f:50:36:cd:58:79:8a:48:09:53:
f0:30:2c:8b:22:6c:27:2a:50:81:a4:ad:fd:37:b5:
74:41:7d:e4:4d:28:6f:3a:c0:62:1e:37:6f:1e:24:
08:9f:c6:45:cf:f7:5b:33:d8:77:34:5f:4e:e2:64:
0b:76:0e:f6:db:f7:82:fc:ed:92:31:77:fd:b8:b0:
42:2d:54:63:df:09:fb:7f:21:85:a7:ea:fe:08:55:
5b:10:4c:e2:e9:e9:c0:6f:4d:fe:c2:ac:5b:8a:24:
13:25:26:d4:40:c5:29:50:9a:ba:82:39:db:c6:c8:
21:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:96:7E:B0:8E:89:42:23:D0:29:4E:ED:C2:2A:50:9C:D2:EC:D2:34
X509v3 Authority Key Identifier:
keyid:2A:C3:DA:A1:B1:48:50:F2:E6:1C:59:2B:21:91:91:5A:5E:65:A4:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/tZZ-sI6JQiPQKU7twipQnNLs0jQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/KsPaobFIUPLmHFkrIZGRWl5lpHg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.151.236.0/22
188.209.155.0/24
188.253.8.0/21
Signature Algorithm: sha256WithRSAEncryption
60:54:59:cd:84:f3:4f:3c:80:3a:41:19:67:90:3e:43:08:07:
87:09:80:42:ba:63:25:1a:77:30:45:6e:25:be:30:88:d4:4c:
8b:9e:e5:73:30:e9:c7:a8:ab:fc:9a:ad:14:0f:c4:f4:45:5e:
64:96:d1:4e:f7:89:3e:7d:e0:ee:5a:59:dd:ed:93:2d:be:4b:
11:c3:cc:0a:d8:32:4a:3f:9c:17:85:0e:5c:02:17:08:02:93:
78:fe:a8:3e:9b:5f:12:cd:e5:d2:99:fa:1d:f8:46:06:15:7d:
dc:46:d7:23:89:9f:3b:73:5d:ba:4c:40:c5:6f:1f:00:5a:8b:
e7:d2:ac:d6:a6:07:b9:cf:23:93:ca:f2:1c:c5:34:37:31:88:
30:15:f1:ba:c5:c0:7f:f5:f9:c9:d1:12:a0:61:94:4e:00:d9:
6a:d5:58:e7:5e:a5:54:41:da:4b:e0:82:02:65:bc:fe:02:7f:
9c:92:06:f5:94:46:34:6d:02:cf:ba:a0:da:e7:80:19:ed:1b:
85:cc:80:12:bc:f0:77:36:98:8a:fa:b2:12:91:ce:14:b1:0f:
9a:a5:49:cb:da:67:c5:97:c6:eb:6e:ad:0b:63:cd:fd:0a:9c:
43:5a:17:d3:fe:9c:8f:9b:b2:5e:4c:72:f0:9c:a9:8c:d6:2b:
b4:6d:f4:d6
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAYmcbt98VhHMQTMkw1j2cFOhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhYzNkYWExYjE0ODUwZjJlNjFjNTkyYjIxOTE5MTVhNWU2
NWE0NzgwHhcNMjMwNzI4MTIxNzM5WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiNTk2N2ViMDhlODk0MjIzZDAyOTRlZWRjMjJhNTA5Y2QyZWNkMjM0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAumg8f+5NkNox36EZz1sfuhK5rgCS
0vvvSHh7q7G8Ejv+xnFL+RO7G+WdHEZqyoMcCgodh+ILkikzbqFwsLVIH9ClHqSe
F3vez4MZsVpE1WLkUrZcn3rf7sRhctg3LtxWY7KZjEn14J+p2SBGvwtcBQ+Cr8t7
O9eGnHp0NhiGglb1IIDflZElA5JtYw9QNs1YeYpICVPwMCyLImwnKlCBpK39N7V0
QX3kTShvOsBiHjdvHiQIn8ZFz/dbM9h3NF9O4mQLdg722/eC/O2SMXf9uLBCLVRj
3wn7fyGFp+r+CFVbEEzi6enAb03+wqxbiiQTJSbUQMUpUJq6gjnbxsghdwIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFLWWfrCOiUIj0ClO7cIqUJzS7NI0MB8GA1UdIwQY
MBaAFCrD2qGxSFDy5hxZKyGRkVpeZaR4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS3NQYW9iRklVUExtSEZrcklaR1JXbDVscEhnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MC80MDViYmQtNTkxMy00ZTk1LThlNzUt
ZmUwNjU5MTc2YTU2LzEvdFpaLXNJNkpRaVBRS1U3dHdpcFFuTkxzMGpRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83MC80MDViYmQtNTkxMy00ZTk1LThlNzUtZmUwNjU5MTc2YTU2
LzEvS3NQYW9iRklVUExtSEZrcklaR1JXbDVscEhnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQCuZfsAwQA
vNGbAwQDvP0IMA0GCSqGSIb3DQEBCwUAA4IBAQBgVFnNhPNPPIA6QRlnkD5DCAeH
CYBCumMlGncwRW4lvjCI1EyLnuVzMOnHqKv8mq0UD8T0RV5kltFO94k+feDuWlnd
7ZMtvksRw8wK2DJKP5wXhQ5cAhcIApN4/qg+m18SzeXSmfod+EYGFX3cRtcjiZ87
c126TEDFbx8AWovn0qzWpge5zyOTyvIcxTQ3MYgwFfG6xcB/9fnJ0RKgYZROANlq
1VjnXqVUQdpL4IICZbz+An+ckgb1lEY0bQLPuqDa54AZ7RuFzIASvPB3NpiK+rIS
kc4UsQ+apUnL2mfFl8brbq0LY839CpxDWhfT/pyPm7JeTHLwnKmM1iu0bfTW
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:34:35 2024 by rpki-client on console-fra.rpki-client.org