Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/zisDN_9c-aWE8XEH0zdyvm1Trpc.roa
File: zisDN_9c-aWE8XEH0zdyvm1Trpc.roa (raw, json)
Hash identifier: UFB3vAXdfeyYj/Nggns1MACfiHfPFV909PSB/pOxk4o=
Subject key identifier: CE:2B:03:37:FF:5C:F9:A5:84:F1:71:07:D3:37:72:BE:6D:53:AE:97
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 0185BF20402381A795FF117CAD4214E75838
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/zisDN_9c-aWE8XEH0zdyvm1Trpc.roa
Signing time: Tue 17 Jan 2023 09:47:19 +0000
ROA not before: Tue 17 Jan 2023 09:47:19 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 20454
IP address blocks: 81.161.237.0/24 maxlen: 24
87.121.58.0/24 maxlen: 24
93.123.81.0/24 maxlen: 24
87.120.5.0/24 maxlen: 24
176.125.252.0/22 maxlen: 24
94.156.182.0/23 maxlen: 24
94.154.174.0/23 maxlen: 24
194.59.30.0/23 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:bf:20:40:23:81:a7:95:ff:11:7c:ad:42:14:e7:58:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Jan 17 09:47:19 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ce2b0337ff5cf9a584f17107d33772be6d53ae97
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:cc:8b:55:04:4c:64:02:08:c0:ac:41:d0:65:
43:af:0e:b3:b5:da:0f:26:ed:94:02:6e:c6:3d:ef:
36:84:11:dd:1e:46:85:c1:d3:ee:31:8e:29:43:33:
30:d8:7d:71:11:b3:05:58:16:1a:35:12:e6:03:56:
f7:bf:a1:27:5a:d3:cc:58:2a:74:eb:c5:74:a4:81:
c4:67:64:1b:50:45:bd:7f:a9:20:95:e4:72:b8:8b:
4a:ca:24:6e:f6:da:d8:01:ec:d8:8c:15:06:d3:fa:
17:ed:fe:fa:11:54:12:d0:8a:96:f7:ca:f2:af:04:
92:47:b2:b0:ea:b9:14:c6:73:e9:40:f4:67:51:fe:
5e:b0:fc:f3:5e:ca:ac:b1:15:21:61:01:d0:96:16:
71:24:e6:84:65:00:1a:fc:2e:a1:94:44:5e:2c:01:
5d:68:14:62:cf:79:1c:13:32:74:22:1b:45:b0:46:
a1:07:13:73:23:1a:48:16:b4:14:3c:08:ab:29:ac:
ae:66:47:b4:ac:7b:09:d1:62:5d:8d:60:59:5d:5c:
85:5b:8b:08:bb:f6:c7:92:e4:cb:f8:93:78:38:40:
10:eb:f7:6b:3a:59:36:cf:3c:83:2b:91:90:19:89:
1e:0e:2f:f4:3a:da:b9:d5:a1:3f:31:5c:98:70:b2:
cb:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:2B:03:37:FF:5C:F9:A5:84:F1:71:07:D3:37:72:BE:6D:53:AE:97
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/zisDN_9c-aWE8XEH0zdyvm1Trpc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.161.237.0/24
87.120.5.0/24
87.121.58.0/24
93.123.81.0/24
94.154.174.0/23
94.156.182.0/23
176.125.252.0/22
194.59.30.0/23
Signature Algorithm: sha256WithRSAEncryption
6d:ce:d3:ea:8d:1b:96:7a:26:8c:49:c7:30:c4:80:85:81:ba:
0e:63:d0:c4:aa:d4:24:d0:32:6f:9f:8a:3e:98:46:9c:e8:4c:
a5:b7:f0:e7:2b:08:30:24:53:27:b9:26:9e:38:13:c9:13:ab:
70:2e:87:4f:57:4e:04:fc:97:09:b1:35:1b:f8:71:6a:6a:3e:
57:50:18:21:d4:7a:82:b0:33:53:65:b1:5d:32:98:c0:05:46:
55:4b:8f:15:10:c6:c8:53:71:3b:cd:ce:b6:e8:4a:52:8d:3f:
c2:33:ca:8a:4e:3d:9e:9d:bc:4e:8e:d0:db:91:b1:77:7c:4b:
67:2d:8a:23:5f:f2:c9:8e:4b:0b:42:a4:4d:ba:7a:c6:9c:56:
6c:11:ae:61:6f:2a:9c:c1:be:16:ed:d4:0e:a2:cd:af:78:4e:
18:2c:0a:63:96:0f:82:b8:6a:47:79:1a:3b:59:6d:e6:ca:65:
f2:72:9c:57:98:37:14:fa:28:b4:e5:a4:e2:68:b0:70:ee:0e:
39:ee:62:d8:85:97:c9:f7:bd:e3:1a:e6:56:2c:8b:cc:5b:bb:
2a:4e:e0:52:89:8c:3c:64:0d:77:02:d1:a3:b1:b9:68:27:cf:
7d:a0:98:b6:cb:4d:00:75:99:a2:40:74:21:1c:48:f5:d4:c3:
fb:e8:be:be
-----BEGIN CERTIFICATE-----
MIIFJzCCBA+gAwIBAgISAYW/IEAjgaeV/xF8rUIU51g4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIyYzRhYzNlM2M0M2Q3MGQwNTM0OWM4MTViYWFkZDM4YWQ3
NzVlOWQwHhcNMjMwMTE3MDk0NzE5WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjZTJiMDMzN2ZmNWNmOWE1ODRmMTcxMDdkMzM3NzJiZTZkNTNhZTk3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlsyLVQRMZAIIwKxB0GVDrw6ztdoP
Ju2UAm7GPe82hBHdHkaFwdPuMY4pQzMw2H1xEbMFWBYaNRLmA1b3v6EnWtPMWCp0
68V0pIHEZ2QbUEW9f6kgleRyuItKyiRu9trYAezYjBUG0/oX7f76EVQS0IqW98ry
rwSSR7Kw6rkUxnPpQPRnUf5esPzzXsqssRUhYQHQlhZxJOaEZQAa/C6hlEReLAFd
aBRiz3kcEzJ0IhtFsEahBxNzIxpIFrQUPAirKayuZke0rHsJ0WJdjWBZXVyFW4sI
u/bHkuTL+JN4OEAQ6/drOlk2zzyDK5GQGYkeDi/0Otq51aE/MVyYcLLLdwIDAQAB
o4ICMzCCAi8wHQYDVR0OBBYEFM4rAzf/XPmlhPFxB9M3cr5tU66XMB8GA1UdIwQY
MBaAFCLErD48Q9cNBTScgVuq3Titd16dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzct
Y2QzY2E1OTc1NzEyLzEvemlzRE5fOWMtYVdFOFhFSDB6ZHl2bTFUcnBjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzctY2QzY2E1OTc1NzEy
LzEvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEkGCCsGAQUFBwEHAQH/BDowODA2BAIAATAwAwQAUaHtAwQA
V3gFAwQAV3k6AwQAXXtRAwQBXpquAwQBXpy2AwQCsH38AwQBwjseMA0GCSqGSIb3
DQEBCwUAA4IBAQBtztPqjRuWeiaMSccwxICFgboOY9DEqtQk0DJvn4o+mEac6Eyl
t/DnKwgwJFMnuSaeOBPJE6twLodPV04E/JcJsTUb+HFqaj5XUBgh1HqCsDNTZbFd
MpjABUZVS48VEMbIU3E7zc626EpSjT/CM8qKTj2enbxOjtDbkbF3fEtnLYojX/LJ
jksLQqRNunrGnFZsEa5hbyqcwb4W7dQOos2veE4YLApjlg+CuGpHeRo7WW3mymXy
cpxXmDcU+ii05aTiaLBw7g457mLYhZfJ973jGuZWLIvMW7sqTuBSiYw8ZA13AtGj
sbloJ899oJi2y00AdZmiQHQhHEj11MP76L6+
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:46:44 2023 by rpki-client on console-ams.rpki-client.org