Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/dc2912-c7b0-4df4-9aa8-65332b47f5eb/1/z9rxHHKy97RmPKBfHr3PeqMmuWM.roa
File: z9rxHHKy97RmPKBfHr3PeqMmuWM.roa (raw, json)
Hash identifier: dEW1mkh2eRbMMEZwTwKKPguL4+/xQ9tfJ7o9nhzasBE=
Subject key identifier: CF:DA:F1:1C:72:B2:F7:B4:66:3C:A0:5F:1E:BD:CF:7A:A3:26:B9:63
Certificate issuer: /CN=c089423af1be03027196d1f81df22992978cda6e
Certificate serial: 07F3DF58
Authority key identifier: C0:89:42:3A:F1:BE:03:02:71:96:D1:F8:1D:F2:29:92:97:8C:DA:6E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wIlCOvG-AwJxltH4HfIpkpeM2m4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/dc2912-c7b0-4df4-9aa8-65332b47f5eb/1/z9rxHHKy97RmPKBfHr3PeqMmuWM.roa
Signing time: Sat 07 May 2022 20:04:13 +0000
ROA not before: Sat 07 May 2022 20:04:13 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 55933
IP address blocks: 80.245.104.0/23 maxlen: 23
80.245.104.0/22 maxlen: 24
80.245.106.0/23 maxlen: 23
185.245.40.0/22 maxlen: 24
93.90.72.0/22 maxlen: 24
93.90.74.0/23 maxlen: 24
109.206.244.0/22 maxlen: 24
185.249.63.0/24 maxlen: 24
193.178.58.0/23 maxlen: 23
193.178.56.0/22 maxlen: 24
193.178.56.0/23 maxlen: 23
185.243.240.0/22 maxlen: 24
84.252.102.0/23 maxlen: 24
85.8.180.0/23 maxlen: 24
185.242.232.0/22 maxlen: 24
185.242.232.0/23 maxlen: 23
185.242.234.0/23 maxlen: 23
185.247.182.0/23 maxlen: 23
185.247.180.0/22 maxlen: 22
185.247.180.0/23 maxlen: 23
185.239.84.0/23 maxlen: 23
185.239.84.0/22 maxlen: 24
185.239.86.0/23 maxlen: 23
91.132.48.0/22 maxlen: 24
93.177.76.0/22 maxlen: 24
2a0c:f480::/29 maxlen: 29
2a0d:2480::/29 maxlen: 29
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 133422936 (0x7f3df58)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c089423af1be03027196d1f81df22992978cda6e
Validity
Not Before: May 7 20:04:13 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=cfdaf11c72b2f7b4663ca05f1ebdcf7aa326b963
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:8a:86:c7:76:7e:2b:a2:fe:03:89:8c:39:d2:
03:76:d9:aa:13:fc:28:a7:16:a6:a7:ef:39:3e:f9:
0d:42:d6:25:8a:be:d1:d2:6c:11:b3:53:c0:12:b5:
e5:8f:67:8c:73:50:b9:75:c3:3a:d5:56:f2:fd:79:
52:ba:40:e1:ad:35:69:2b:13:90:34:ff:90:26:dd:
b3:16:76:86:af:4a:f4:9d:9a:3f:af:30:2b:86:55:
0a:91:77:2d:e8:37:3a:55:e4:20:0d:02:b0:f8:0f:
36:30:6c:8c:e3:1a:96:05:9b:84:87:13:38:a5:a0:
a2:c1:86:ce:1c:0a:c4:c2:64:cd:40:98:1b:12:87:
99:d0:a0:b7:65:fb:66:df:d2:d0:76:64:ab:3f:c6:
a0:41:8f:57:a6:44:0d:ca:46:6a:1f:3f:8b:62:b8:
be:38:72:12:0a:f3:66:5c:5a:e8:23:19:85:fc:b9:
97:34:03:f5:4a:71:50:e5:55:86:2c:ce:0a:ec:7c:
ab:c4:9c:b1:0f:37:69:78:3c:ac:e8:ff:01:c5:ab:
92:f1:c2:22:22:6e:9b:d6:74:83:db:a0:d3:4b:8b:
dd:23:2f:75:d4:eb:66:4f:be:60:0d:c0:c9:b6:d7:
a6:48:fa:86:1d:9b:a9:0d:47:57:f8:50:86:ca:79:
c8:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:DA:F1:1C:72:B2:F7:B4:66:3C:A0:5F:1E:BD:CF:7A:A3:26:B9:63
X509v3 Authority Key Identifier:
keyid:C0:89:42:3A:F1:BE:03:02:71:96:D1:F8:1D:F2:29:92:97:8C:DA:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wIlCOvG-AwJxltH4HfIpkpeM2m4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/dc2912-c7b0-4df4-9aa8-65332b47f5eb/1/z9rxHHKy97RmPKBfHr3PeqMmuWM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/dc2912-c7b0-4df4-9aa8-65332b47f5eb/1/wIlCOvG-AwJxltH4HfIpkpeM2m4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.245.104.0/22
84.252.102.0/23
85.8.180.0/23
91.132.48.0/22
93.90.72.0/22
93.177.76.0/22
109.206.244.0/22
185.239.84.0/22
185.242.232.0/22
185.243.240.0/22
185.245.40.0/22
185.247.180.0/22
185.249.63.0/24
193.178.56.0/22
IPv6:
2a0c:f480::/29
2a0d:2480::/29
Signature Algorithm: sha256WithRSAEncryption
4b:3e:0f:18:48:d4:e5:4a:62:eb:b7:c5:f1:7a:a9:22:d5:93:
1e:18:3a:21:af:24:86:59:db:82:a4:ff:5b:e4:00:21:1b:57:
18:45:cc:1c:1a:70:83:56:1e:63:1a:de:8f:b9:a8:ab:9c:12:
65:95:d0:73:41:30:42:2c:a2:b1:6f:3b:1e:fc:7a:0a:d3:d6:
e4:b4:43:fc:d1:7c:f5:57:35:a0:63:e3:98:77:14:93:01:8c:
35:70:53:a1:2e:fe:3f:48:b2:cc:82:48:6e:da:a7:f9:7c:de:
67:58:c1:9e:e9:06:00:7e:3f:b8:1a:c6:b4:8d:cd:d5:34:e6:
28:b0:3d:3a:a5:84:dc:5e:e4:82:08:c8:bf:40:93:cc:03:14:
18:25:94:55:40:40:27:d0:b2:7b:49:c2:62:af:ec:68:05:45:
25:89:da:cf:9a:75:f8:61:68:49:88:eb:b0:4f:7f:9e:59:d8:
f2:65:5b:66:74:ea:c9:c4:a2:a2:68:7e:e1:7d:72:3e:55:9e:
90:a7:fd:65:1c:25:c6:ee:f1:8d:fd:32:b5:97:ba:ce:52:00:
47:f0:2c:19:13:c3:cd:9a:c4:2b:ac:77:a4:99:e2:13:9c:24:
0e:f4:27:b7:d7:3a:6a:cc:6e:88:30:67:b3:53:2e:d7:99:e6:
2b:34:50:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:49:20 2023 by rpki-client on console-ams.rpki-client.org