Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/ZbGkJOIVDGXuwnh7HAgTibBHOk8.roa
File: ZbGkJOIVDGXuwnh7HAgTibBHOk8.roa (raw, json)
Hash identifier: szz5xkl6qpwMnGSoBJe4Pt6RMjNMAwPUOzDq5eenVxM=
Subject key identifier: 65:B1:A4:24:E2:15:0C:65:EE:C2:78:7B:1C:08:13:89:B0:47:3A:4F
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 0185DE6FFA4DB2F870E66EEF2034A03C7959
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/ZbGkJOIVDGXuwnh7HAgTibBHOk8.roa
Signing time: Mon 23 Jan 2023 11:42:38 +0000
ROA not before: Mon 23 Jan 2023 11:42:38 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 8100
IP address blocks: 87.120.192.0/23 maxlen: 24
87.121.36.0/23 maxlen: 24
87.121.38.0/24 maxlen: 24
87.121.60.0/22 maxlen: 24
87.120.218.0/23 maxlen: 24
87.120.220.0/23 maxlen: 24
94.154.160.0/23 maxlen: 24
94.154.173.0/24 maxlen: 24
93.123.39.0/24 maxlen: 24
94.156.237.0/24 maxlen: 24
194.55.226.0/24 maxlen: 24
94.156.238.0/24 maxlen: 24
93.123.68.0/22 maxlen: 24
93.123.76.0/22 maxlen: 24
93.123.85.0/24 maxlen: 24
93.123.80.0/24 maxlen: 24
93.123.86.0/23 maxlen: 24
94.156.168.0/23 maxlen: 24
94.156.176.0/22 maxlen: 24
94.156.180.0/23 maxlen: 24
93.123.24.0/24 maxlen: 24
194.48.249.0/24 maxlen: 24
93.123.30.0/23 maxlen: 24
93.123.26.0/23 maxlen: 24
87.120.64.0/23 maxlen: 24
87.120.96.0/23 maxlen: 24
87.120.100.0/22 maxlen: 24
93.123.112.0/22 maxlen: 24
93.123.116.0/23 maxlen: 24
93.123.119.0/24 maxlen: 24
87.120.32.0/22 maxlen: 24
193.25.219.0/24 maxlen: 24
87.120.46.0/23 maxlen: 24
94.156.2.0/24 maxlen: 24
94.156.8.0/24 maxlen: 24
91.92.16.0/24 maxlen: 24
91.92.21.0/24 maxlen: 24
91.92.26.0/23 maxlen: 24
193.58.121.0/24 maxlen: 24
193.58.123.0/24 maxlen: 24
94.156.131.0/24 maxlen: 24
94.156.152.0/24 maxlen: 24
94.156.154.0/23 maxlen: 24
91.92.67.0/24 maxlen: 24
94.156.78.0/23 maxlen: 24
37.139.130.0/23 maxlen: 24
212.87.205.0/24 maxlen: 24
87.121.146.0/23 maxlen: 24
178.215.236.0/24 maxlen: 24
178.215.238.0/24 maxlen: 24
87.121.163.0/24 maxlen: 24
87.121.69.0/24 maxlen: 24
185.252.177.0/24 maxlen: 24
87.121.103.0/24 maxlen: 24
87.121.114.0/23 maxlen: 24
31.13.252.0/22 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:de:6f:fa:4d:b2:f8:70:e6:6e:ef:20:34:a0:3c:79:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Jan 23 11:42:38 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=65b1a424e2150c65eec2787b1c081389b0473a4f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:6f:a7:17:39:ec:69:dd:8e:6f:54:48:15:70:
9a:f6:a9:59:50:58:e1:cd:11:78:d7:fc:30:c6:b5:
c7:16:08:5e:fa:00:f3:63:1f:de:73:6d:40:9b:4f:
ff:58:2e:33:d2:eb:f2:73:d1:42:5a:91:71:8c:2a:
24:6e:e0:58:30:57:31:d4:41:85:c8:5c:11:78:86:
f4:4d:6d:19:d2:4c:fb:6b:7c:2f:f2:9c:ed:8a:a8:
d0:53:6d:ca:36:aa:ea:16:b8:91:a5:14:7a:78:08:
69:00:05:bf:61:0c:3a:98:db:62:a8:b0:07:4d:d6:
d3:dc:82:40:e2:84:f1:f3:fe:b9:11:a5:1a:ee:22:
a7:56:c6:4f:7d:7f:a1:d3:18:67:f0:95:9f:21:f4:
e2:03:05:e5:5e:f8:86:20:a5:6a:a8:0a:0f:26:4b:
ad:7b:0e:fe:5c:76:3f:17:3a:c8:cb:68:31:5b:a8:
f5:7c:b0:27:0e:8f:e4:69:ea:49:cb:04:a6:73:97:
2a:c9:88:20:3b:e3:47:be:d0:ba:1a:21:3b:ca:de:
df:33:b6:35:5d:8e:81:55:00:34:ab:0a:68:42:c1:
83:18:71:b7:bb:bc:b4:98:17:32:7e:42:70:0a:04:
ea:42:6c:7b:7c:cc:d6:54:f6:73:7c:93:4e:78:db:
76:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:B1:A4:24:E2:15:0C:65:EE:C2:78:7B:1C:08:13:89:B0:47:3A:4F
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/ZbGkJOIVDGXuwnh7HAgTibBHOk8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.13.252.0/22
37.139.130.0/23
87.120.32.0/22
87.120.46.0/23
87.120.64.0/23
87.120.96.0/23
87.120.100.0/22
87.120.192.0/23
87.120.218.0-87.120.221.255
87.121.36.0-87.121.38.255
87.121.60.0/22
87.121.69.0/24
87.121.103.0/24
87.121.114.0/23
87.121.146.0/23
87.121.163.0/24
91.92.16.0/24
91.92.21.0/24
91.92.26.0/23
91.92.67.0/24
93.123.24.0/24
93.123.26.0/23
93.123.30.0/23
93.123.39.0/24
93.123.68.0/22
93.123.76.0-93.123.80.255
93.123.85.0-93.123.87.255
93.123.112.0-93.123.117.255
93.123.119.0/24
94.154.160.0/23
94.154.173.0/24
94.156.2.0/24
94.156.8.0/24
94.156.78.0/23
94.156.131.0/24
94.156.152.0/24
94.156.154.0/23
94.156.168.0/23
94.156.176.0-94.156.181.255
94.156.237.0-94.156.238.255
178.215.236.0/24
178.215.238.0/24
185.252.177.0/24
193.25.219.0/24
193.58.121.0/24
193.58.123.0/24
194.48.249.0/24
194.55.226.0/24
212.87.205.0/24
Signature Algorithm: sha256WithRSAEncryption
6d:0e:e0:bb:dd:43:c8:e9:44:70:cb:7a:48:e3:1e:68:eb:75:
31:7f:80:56:bf:66:02:b9:76:fb:61:bf:7d:54:69:0a:bf:02:
b3:4e:34:94:3d:e9:c6:fa:56:10:21:78:99:b2:c2:83:6a:78:
ca:47:c9:0d:46:e1:48:c8:fa:cc:f6:81:79:37:c4:5b:b3:6b:
c0:e1:f6:13:c3:0a:26:ad:0e:25:2a:a4:b0:a8:e0:d5:aa:5a:
69:4c:e2:37:22:eb:0d:3b:94:b5:67:31:44:70:59:52:34:59:
71:fd:6c:a4:42:4b:87:b5:4b:6f:ec:d5:a1:0c:7c:1f:88:c2:
3e:0d:f7:56:19:68:ae:c6:9a:ff:0f:fc:c4:4f:44:4a:cd:14:
99:d3:05:72:3a:f8:b1:4f:fb:24:7f:8b:d2:ad:24:f4:bd:11:
88:9c:0b:85:24:5e:d4:d4:54:82:45:6a:ab:cb:a0:6c:92:20:
4c:15:c0:a6:f7:f7:86:60:4b:02:00:ab:1a:a7:aa:b1:04:e7:
7f:21:b5:5e:41:5b:55:fb:e7:d4:e5:32:e6:ea:55:f5:ea:92:
81:02:35:58:c9:2c:08:aa:17:cb:9a:57:c9:6e:57:a5:e0:bd:
6c:74:cb:96:70:1c:54:1a:27:9b:98:40:26:05:1e:b5:62:dc:
01:8d:24:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:46:38 2023 by rpki-client on console-ams.rpki-client.org