Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/zJiiBfF8abuRcc_0RWL2_U4n2KY.roa
File: zJiiBfF8abuRcc_0RWL2_U4n2KY.roa (raw, json)
Hash identifier: 95ra1uvfSv1u8vo0RbhFSejNC4CteA3Q2XMGy+SsV0o=
Subject key identifier: CC:98:A2:05:F1:7C:69:BB:91:71:CF:F4:45:62:F6:FD:4E:27:D8:A6
Certificate issuer: /CN=8bab30683859ec7e0206fe9265363e8e3971a9a8
Certificate serial: 018B67C5C4704D50EAC68D10782B3BACDC3C
Authority key identifier: 8B:AB:30:68:38:59:EC:7E:02:06:FE:92:65:36:3E:8E:39:71:A9:A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/zJiiBfF8abuRcc_0RWL2_U4n2KY.roa
Signing time: Wed 25 Oct 2023 16:58:15 +0000
ROA not before: Wed 25 Oct 2023 16:58:15 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 7018
IP address blocks: 185.255.99.0/24 maxlen: 24
195.138.103.0/24 maxlen: 24
195.138.104.0/24 maxlen: 24
185.15.136.0/23 maxlen: 24
45.67.117.0/24 maxlen: 24
185.243.140.0/22 maxlen: 24
94.231.198.0/24 maxlen: 24
194.56.153.0/24 maxlen: 24
185.212.11.0/24 maxlen: 24
194.180.238.0/24 maxlen: 24
91.242.103.0/24 maxlen: 24
185.40.105.0/24 maxlen: 24
194.213.10.0/24 maxlen: 24
194.242.28.0/23 maxlen: 24
195.149.127.0/24 maxlen: 24
185.173.247.0/24 maxlen: 24
89.32.126.0/24 maxlen: 24
193.46.211.0/24 maxlen: 24
92.118.108.0/24 maxlen: 24
176.126.223.0/24 maxlen: 24
91.242.71.0/24 maxlen: 24
45.149.160.0/22 maxlen: 24
91.242.72.0/23 maxlen: 24
91.242.75.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:67:c5:c4:70:4d:50:ea:c6:8d:10:78:2b:3b:ac:dc:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8bab30683859ec7e0206fe9265363e8e3971a9a8
Validity
Not Before: Oct 25 16:58:15 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=cc98a205f17c69bb9171cff44562f6fd4e27d8a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:0d:12:6a:dc:4b:be:65:ad:a1:6e:11:3e:ad:
8c:23:a0:ad:66:9b:84:32:37:fb:61:2b:e1:54:3a:
7a:7b:b2:75:39:d9:00:25:25:d7:76:28:4f:51:7f:
ae:fb:45:83:ae:c6:45:a4:d5:10:1a:40:e0:04:86:
a8:dc:1a:7c:e4:0d:b6:f4:1b:01:38:5d:37:70:8e:
c3:14:10:06:ab:ff:f4:d6:1d:80:0d:0e:df:d1:6f:
cb:64:66:fa:db:97:05:9f:2a:6e:1f:95:bd:fc:32:
80:ef:21:0e:3e:ce:19:6d:01:e7:6e:b3:c0:2e:d3:
04:49:cf:83:b1:71:e1:8b:e3:66:4c:64:c3:8b:c8:
9c:36:51:11:72:53:11:e8:ef:72:f1:4b:c4:21:70:
6e:ca:16:18:9c:8e:06:f6:17:f7:93:c5:01:38:cc:
f6:b2:69:c9:a5:76:96:33:4d:75:ac:0c:35:3b:0e:
41:62:35:44:56:65:47:1c:ed:7e:dd:c9:17:39:db:
92:bf:c4:a1:2c:29:af:4a:e6:a5:83:af:fb:4a:6d:
2f:8d:ea:81:87:0a:cd:6c:e8:fa:18:dd:e0:06:ef:
ba:26:8d:76:4a:f7:9a:75:56:89:9d:ba:79:9e:62:
2b:12:ef:ed:82:2b:00:9c:ab:4d:57:7d:37:1d:ac:
89:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:98:A2:05:F1:7C:69:BB:91:71:CF:F4:45:62:F6:FD:4E:27:D8:A6
X509v3 Authority Key Identifier:
keyid:8B:AB:30:68:38:59:EC:7E:02:06:FE:92:65:36:3E:8E:39:71:A9:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/zJiiBfF8abuRcc_0RWL2_U4n2KY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/i6swaDhZ7H4CBv6SZTY-jjlxqag.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.67.117.0/24
45.149.160.0/22
89.32.126.0/24
91.242.71.0-91.242.73.255
91.242.75.0/24
91.242.103.0/24
92.118.108.0/24
94.231.198.0/24
176.126.223.0/24
185.15.136.0/23
185.40.105.0/24
185.173.247.0/24
185.212.11.0/24
185.243.140.0/22
185.255.99.0/24
193.46.211.0/24
194.56.153.0/24
194.180.238.0/24
194.213.10.0/24
194.242.28.0/23
195.138.103.0-195.138.104.255
195.149.127.0/24
Signature Algorithm: sha256WithRSAEncryption
2c:a5:a8:d9:9d:6e:58:00:16:4c:22:3e:57:47:ca:47:07:1b:
cf:81:bd:9b:75:65:4e:2c:3f:38:16:b2:04:9c:21:d1:5b:bb:
f5:4a:7f:83:98:47:02:b5:f2:19:64:38:7f:40:4e:c1:85:4e:
c0:f5:ba:df:13:82:c5:f4:03:ba:d6:eb:fc:5b:12:06:d3:ba:
a9:a9:f3:84:ff:85:66:a1:5c:2c:c9:a7:43:27:87:31:2d:17:
a8:cd:9c:eb:f0:53:3f:e4:66:5c:3a:f2:fa:f7:5f:39:f3:6f:
c3:3f:e5:c3:21:98:d6:fc:45:e8:09:29:63:cd:4b:9e:34:16:
00:3e:7e:b0:ed:b0:32:fe:5c:2a:c4:e6:38:5b:3a:68:e7:7f:
9d:fc:f7:4f:6e:e4:8d:f5:c1:b0:92:ac:82:db:29:3a:05:3e:
79:23:f6:3c:48:31:da:05:e3:4a:ec:18:bc:74:4e:6c:b5:5a:
19:9b:32:3f:54:77:8a:6c:84:a3:e0:93:d4:5a:20:91:24:45:
e3:85:b2:05:ba:e3:3d:e3:7d:01:fa:e3:97:d7:a9:82:ef:6b:
7a:6c:67:5d:a6:50:74:74:c8:e6:de:63:f5:33:ff:a5:ee:d7:
ad:37:6b:40:c5:3a:5d:fe:85:de:5c:a0:b8:33:8c:3b:54:43:
ee:07:b4:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:00:27 2024 by rpki-client on console-ams.rpki-client.org