Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/zTep06jk0_d4UAqLcdylndGJB5c.roa
File: zTep06jk0_d4UAqLcdylndGJB5c.roa (raw, json)
Hash identifier: glMrIzvHH67FjxtWaa6nenbn/8pJGJOIddl9WuWZfYU=
Subject key identifier: CD:37:A9:D3:A8:E4:D3:F7:78:50:0A:8B:71:DC:A5:9D:D1:89:07:97
Certificate issuer: /CN=b1a7b0d8de8251d36d7c83faf6bc7efec73b5034
Certificate serial: 018E61CB1E3009F39785C551C8B031D5F99B
Authority key identifier: B1:A7:B0:D8:DE:82:51:D3:6D:7C:83:FA:F6:BC:7E:FE:C7:3B:50:34
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/saew2N6CUdNtfIP69rx-_sc7UDQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/zTep06jk0_d4UAqLcdylndGJB5c.roa
Signing time: Thu 21 Mar 2024 16:14:45 +0000
ROA not before: Thu 21 Mar 2024 16:14:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 35913
IP address blocks: 45.154.196.0/22 maxlen: 24
77.83.241.0/24 maxlen: 24
77.83.243.0/24 maxlen: 24
85.202.162.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:61:cb:1e:30:09:f3:97:85:c5:51:c8:b0:31:d5:f9:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1a7b0d8de8251d36d7c83faf6bc7efec73b5034
Validity
Not Before: Mar 21 16:14:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=cd37a9d3a8e4d3f778500a8b71dca59dd1890797
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:eb:71:76:83:47:b9:dd:30:65:19:1e:9b:6c:
1f:4f:41:20:78:c4:2e:46:0a:a7:56:ad:8e:ca:d2:
cb:31:d7:5d:32:f2:77:cb:70:db:27:58:f5:b0:19:
52:a0:2c:2d:72:43:90:08:4c:0c:80:0e:4a:93:a5:
89:a8:e6:81:25:65:f3:e1:86:b5:62:b2:cd:2b:fe:
6d:5a:3b:0e:4a:28:31:75:79:5f:04:5d:91:ff:47:
ff:4f:3b:ad:37:02:fa:53:ed:ea:b1:59:e9:78:4e:
8d:ef:22:e0:21:2a:9e:72:43:73:fe:2c:a0:48:09:
08:ad:5e:c8:19:16:64:8e:7c:8e:a5:c4:7a:62:9f:
7a:74:21:83:a0:30:ce:3d:e4:a4:bf:80:f3:b7:b6:
fb:e6:72:b9:79:54:c6:cf:cb:2e:6e:90:e3:ac:75:
aa:42:71:ce:9a:4e:5f:1f:7c:04:ef:ac:fb:86:fc:
93:3b:4b:35:5c:a6:6f:37:c8:fa:08:a9:c1:89:b5:
d7:27:40:8d:65:b3:e9:50:51:fa:b5:cd:90:b3:dc:
2f:0d:08:9a:1a:30:82:e3:08:a6:53:dc:7e:46:22:
fc:36:c8:3a:52:89:c8:eb:59:6f:7a:bd:b7:13:65:
86:37:40:46:e6:c8:db:c4:a1:6f:b4:f0:d1:8d:13:
c3:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:37:A9:D3:A8:E4:D3:F7:78:50:0A:8B:71:DC:A5:9D:D1:89:07:97
X509v3 Authority Key Identifier:
keyid:B1:A7:B0:D8:DE:82:51:D3:6D:7C:83:FA:F6:BC:7E:FE:C7:3B:50:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/saew2N6CUdNtfIP69rx-_sc7UDQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/zTep06jk0_d4UAqLcdylndGJB5c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/saew2N6CUdNtfIP69rx-_sc7UDQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.154.196.0/22
77.83.241.0/24
77.83.243.0/24
85.202.162.0/24
Signature Algorithm: sha256WithRSAEncryption
1f:3d:92:30:30:5a:80:d2:99:d4:55:4a:ea:12:2c:6f:a5:84:
d5:3c:13:26:32:c9:06:e8:98:fc:25:e9:16:90:ff:56:60:f9:
84:72:83:ec:a0:05:83:64:d9:74:d1:0b:78:7b:42:e2:94:57:
9b:0c:57:48:68:2f:db:8c:f3:8d:b5:58:3d:ef:04:5b:96:7f:
5a:4a:bf:44:08:ca:48:67:1c:45:c2:5e:7d:e2:dc:71:c0:8e:
36:a2:86:d7:9c:43:24:9c:66:e7:63:2b:74:20:84:d4:d5:5f:
dc:4b:18:cc:92:97:57:9d:83:ee:bd:07:3a:d2:ac:41:dd:09:
48:cf:8c:f3:76:29:ec:f2:36:70:70:6d:b9:ae:22:5d:d5:2c:
ab:8d:07:a3:5a:bc:24:87:f5:38:68:35:0a:b3:c2:54:38:eb:
2d:d0:1a:82:37:7c:b3:ab:aa:a5:b4:ef:07:5f:4c:ba:31:2b:
0b:27:97:64:5b:02:a4:6c:4b:82:47:8f:3d:88:21:89:fd:84:
84:64:f1:ac:24:c1:b3:7f:6f:f2:88:64:5f:28:8c:ab:59:b3:
eb:17:bd:3e:46:96:d4:1f:09:06:b3:15:13:ac:b9:fd:cf:29:
0c:67:10:11:13:46:a4:31:5e:de:14:38:d6:06:10:01:68:0c:
b5:60:7d:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:52:44 2025 by rpki-client