Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/xZP9dkGgP02cUJaHiN1TTzXFjgo.roa
File: xZP9dkGgP02cUJaHiN1TTzXFjgo.roa (raw, json)
Hash identifier: pYzgLENt8ahqsibBOBFh5/cm0h4LoWm0HxcOaxpyxYk=
Subject key identifier: C5:93:FD:76:41:A0:3F:4D:9C:50:96:87:88:DD:53:4F:35:C5:8E:0A
Certificate issuer: /CN=8bab30683859ec7e0206fe9265363e8e3971a9a8
Certificate serial: 01871970AA9F65B3C7E04B0D0B5F3AE317ED
Authority key identifier: 8B:AB:30:68:38:59:EC:7E:02:06:FE:92:65:36:3E:8E:39:71:A9:A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/xZP9dkGgP02cUJaHiN1TTzXFjgo.roa
Signing time: Sat 25 Mar 2023 15:43:46 +0000
ROA not before: Sat 25 Mar 2023 15:43:46 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 7029
IP address blocks: 193.30.30.0/24 maxlen: 24
195.138.108.0/24 maxlen: 24
195.138.107.0/24 maxlen: 24
195.138.111.0/24 maxlen: 24
195.138.112.0/24 maxlen: 24
195.138.114.0/24 maxlen: 24
195.138.118.0/24 maxlen: 24
185.180.145.0/24 maxlen: 24
195.138.120.0/24 maxlen: 24
193.46.220.0/24 maxlen: 24
91.201.107.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:19:70:aa:9f:65:b3:c7:e0:4b:0d:0b:5f:3a:e3:17:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8bab30683859ec7e0206fe9265363e8e3971a9a8
Validity
Not Before: Mar 25 15:43:46 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c593fd7641a03f4d9c50968788dd534f35c58e0a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:62:53:3a:a1:9d:41:42:a6:74:db:54:de:16:
a4:ba:6e:bd:69:1c:80:25:f3:e3:f9:1c:4f:7d:89:
61:c3:b7:59:0d:10:bf:6e:3d:7e:c3:00:19:50:5b:
ef:b2:63:24:b5:c8:32:d3:25:e5:45:95:8d:f7:de:
f8:db:70:8b:c6:c7:3b:51:19:e6:2e:3b:be:ff:19:
ff:c2:ca:dc:31:cb:f5:dc:e7:16:99:ac:a3:96:a6:
06:8b:74:99:0b:ae:a7:6d:9f:bc:ac:72:07:2b:c7:
08:b9:cc:08:d5:b1:44:29:a8:17:50:85:df:8b:40:
4c:e9:f4:9a:c6:e7:01:67:f4:b9:64:0d:d3:11:7b:
6d:3a:e3:ed:8a:bf:ec:65:f6:a1:7d:8e:55:67:8c:
94:82:5c:77:d4:88:1a:ad:7d:01:67:89:94:41:ac:
2c:17:46:6f:c5:e4:4f:ef:1c:b7:02:06:75:96:e1:
00:59:89:83:9b:82:ed:09:15:86:82:63:6d:d0:63:
47:9a:06:b9:5d:64:81:8e:76:da:16:e2:76:e1:0c:
f1:05:a4:45:e0:e9:22:e2:19:cd:a5:a8:ec:4f:70:
8d:6a:20:3c:f0:7a:c1:5f:df:29:da:d3:10:38:a9:
e5:56:7a:d8:fc:47:e6:cd:a9:43:9c:d8:c9:ff:66:
fb:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:93:FD:76:41:A0:3F:4D:9C:50:96:87:88:DD:53:4F:35:C5:8E:0A
X509v3 Authority Key Identifier:
keyid:8B:AB:30:68:38:59:EC:7E:02:06:FE:92:65:36:3E:8E:39:71:A9:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/xZP9dkGgP02cUJaHiN1TTzXFjgo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/i6swaDhZ7H4CBv6SZTY-jjlxqag.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.201.107.0/24
185.180.145.0/24
193.30.30.0/24
193.46.220.0/24
195.138.107.0-195.138.108.255
195.138.111.0-195.138.112.255
195.138.114.0/24
195.138.118.0/24
195.138.120.0/24
Signature Algorithm: sha256WithRSAEncryption
a1:dc:cd:30:ad:65:9e:c2:ac:b5:21:60:11:f0:e3:f1:f6:24:
d2:1a:4f:d3:9c:b7:04:82:0f:16:55:20:d8:1a:04:55:54:c1:
66:63:f9:89:48:d8:1b:c8:40:f5:b2:03:7f:0b:95:e4:75:e2:
e6:60:e1:fd:01:07:21:2e:d0:3e:72:e0:80:fa:48:20:b1:37:
3f:b3:c9:35:87:14:ba:af:95:57:e5:d8:fa:bf:a1:63:11:ec:
f4:79:12:3b:50:61:63:61:bc:0b:79:ff:4d:b9:0c:2a:ac:5d:
32:df:6e:e5:70:1b:df:1d:74:36:0d:03:02:15:1d:89:51:b1:
2c:68:56:1c:a5:12:ae:2a:21:9d:2d:96:d6:2a:1b:39:8a:26:
c6:2b:7c:bf:ff:65:9c:f3:6e:b8:e1:ac:e8:e6:2e:1e:1f:da:
69:79:12:51:bd:73:f3:90:ca:ce:75:eb:cf:11:ad:6f:7b:8e:
e9:af:cf:86:71:b4:ea:d1:78:ad:4a:a9:48:0f:51:49:b0:6d:
23:d1:63:5c:bd:3b:c0:d7:cb:ad:06:31:42:db:9e:3a:32:55:
0c:e8:00:da:0f:35:a2:6c:ad:e8:96:28:7c:70:3d:89:c7:6f:
b0:5f:42:b8:85:b9:5a:3d:de:55:32:0f:d8:c0:3b:d9:2a:60:
47:db:aa:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:00:27 2024 by rpki-client on console-ams.rpki-client.org