Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/56aee9-996c-438f-bb00-0dfa6b22eff2/1/ZgaMr45qlN6uwrVMs754u8KN3GU.roa
File: ZgaMr45qlN6uwrVMs754u8KN3GU.roa (raw, json)
Hash identifier: pGbtx4FGCPdNLCJXXnFdr4peyCSbplFSZNS2K8vjiVk=
Subject key identifier: 66:06:8C:AF:8E:6A:94:DE:AE:C2:B5:4C:B3:BE:78:BB:C2:8D:DC:65
Certificate issuer: /CN=4705d3c6a5b0512682cdfdf363b19a9c567f1f6c
Certificate serial: 0186747A293DDD46653907170801635B1870
Authority key identifier: 47:05:D3:C6:A5:B0:51:26:82:CD:FD:F3:63:B1:9A:9C:56:7F:1F:6C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RwXTxqWwUSaCzf3zY7GanFZ_H2w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/56aee9-996c-438f-bb00-0dfa6b22eff2/1/ZgaMr45qlN6uwrVMs754u8KN3GU.roa
Signing time: Tue 21 Feb 2023 14:56:48 +0000
ROA not before: Tue 21 Feb 2023 14:56:48 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 138968
IP address blocks: 2.57.240.0/22 maxlen: 22
85.208.212.0/22 maxlen: 22
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:74:7a:29:3d:dd:46:65:39:07:17:08:01:63:5b:18:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4705d3c6a5b0512682cdfdf363b19a9c567f1f6c
Validity
Not Before: Feb 21 14:56:48 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=66068caf8e6a94deaec2b54cb3be78bbc28ddc65
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:3f:2f:4f:cf:8c:0d:66:86:82:bd:d6:47:c8:
b1:d9:6e:27:6a:ca:5f:2a:4d:85:74:7d:66:43:da:
a7:2d:b6:64:ee:40:ec:51:88:e0:1b:ab:05:5b:87:
8b:c7:bb:03:e7:2b:d2:d0:93:ee:bd:c1:64:48:85:
25:04:8d:d7:df:29:55:77:9c:84:18:c5:9a:45:50:
23:c6:5d:a2:d8:df:ca:eb:ac:82:b8:94:02:02:62:
c6:d5:0b:44:00:98:0a:d7:52:b4:ea:2a:a2:59:d7:
2e:d0:ad:71:32:66:30:7b:28:65:2f:a7:12:07:3a:
30:c4:1e:8c:44:96:07:72:f5:75:7f:a4:48:c2:01:
3a:69:f1:86:61:0d:d3:24:ed:35:64:ab:60:7a:72:
42:f5:92:43:b8:fc:56:f9:58:f3:1b:aa:af:a0:30:
ad:9a:2d:08:85:4b:da:9a:05:99:2a:e7:a4:6b:c5:
61:1b:8b:15:07:d5:07:da:1a:66:74:71:f5:3e:35:
2c:9d:a1:6e:61:47:df:58:b3:b0:aa:f1:e5:22:2b:
21:35:90:c1:c6:a9:6d:a7:ca:64:a6:28:dd:ac:c7:
31:4b:a8:7d:1a:73:aa:70:05:00:9d:08:9d:08:be:
7a:1d:85:e3:51:81:2e:2d:fc:f3:c5:e4:8e:e4:3f:
b8:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:06:8C:AF:8E:6A:94:DE:AE:C2:B5:4C:B3:BE:78:BB:C2:8D:DC:65
X509v3 Authority Key Identifier:
keyid:47:05:D3:C6:A5:B0:51:26:82:CD:FD:F3:63:B1:9A:9C:56:7F:1F:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RwXTxqWwUSaCzf3zY7GanFZ_H2w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/56aee9-996c-438f-bb00-0dfa6b22eff2/1/ZgaMr45qlN6uwrVMs754u8KN3GU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/56aee9-996c-438f-bb00-0dfa6b22eff2/1/RwXTxqWwUSaCzf3zY7GanFZ_H2w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.57.240.0/22
85.208.212.0/22
Signature Algorithm: sha256WithRSAEncryption
68:79:38:9f:39:f1:98:b9:0e:18:de:cd:6d:46:5d:85:b3:cf:
78:23:09:62:3f:c9:86:a0:5c:b7:7c:6b:36:9e:09:28:3e:44:
fd:37:5a:84:c4:b6:e1:c5:04:a8:cc:6b:86:ad:8b:c8:5a:48:
21:96:5d:24:9e:1f:d3:0b:e9:2d:2a:dc:e7:e0:26:eb:17:3d:
59:92:d6:5f:68:cf:50:a9:f5:cd:df:9d:bf:aa:08:e6:45:64:
89:58:df:2b:48:5e:cb:5c:d6:10:ad:47:9f:dc:36:c3:81:42:
42:fb:be:45:f7:1c:a6:f2:04:86:19:60:25:bc:52:10:1b:4b:
5c:f3:77:30:5d:ac:b3:17:f2:e3:67:f2:22:12:6b:e9:c9:e2:
4d:9a:3c:9e:4d:bd:f0:4f:98:e3:7f:17:06:b6:22:0e:38:42:
5b:90:e5:25:71:68:3e:21:83:2a:70:69:96:10:d2:13:64:f6:
0c:2d:39:27:ed:1e:46:24:ad:62:9d:ed:17:22:fb:e0:61:fb:
13:fb:74:23:91:17:8e:f4:87:0c:53:ac:e9:49:dd:32:fc:95:
07:bb:68:d4:bc:89:ab:f2:a6:6a:cc:54:f6:9e:e2:7b:4c:21:
99:a9:2b:a8:46:a3:7f:a5:a4:1a:0a:00:6c:49:96:62:8a:d9:
10:cb:0a:4c
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYZ0eik93UZlOQcXCAFjWxhwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ3MDVkM2M2YTViMDUxMjY4MmNkZmRmMzYzYjE5YTljNTY3
ZjFmNmMwHhcNMjMwMjIxMTQ1NjQ4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2NjA2OGNhZjhlNmE5NGRlYWVjMmI1NGNiM2JlNzhiYmMyOGRkYzY1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5j8vT8+MDWaGgr3WR8ix2W4naspf
Kk2FdH1mQ9qnLbZk7kDsUYjgG6sFW4eLx7sD5yvS0JPuvcFkSIUlBI3X3ylVd5yE
GMWaRVAjxl2i2N/K66yCuJQCAmLG1QtEAJgK11K06iqiWdcu0K1xMmYweyhlL6cS
BzowxB6MRJYHcvV1f6RIwgE6afGGYQ3TJO01ZKtgenJC9ZJDuPxW+VjzG6qvoDCt
mi0IhUvamgWZKueka8VhG4sVB9UH2hpmdHH1PjUsnaFuYUffWLOwqvHlIishNZDB
xqltp8pkpijdrMcxS6h9GnOqcAUAnQidCL56HYXjUYEuLfzzxeSO5D+4gQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFGYGjK+OapTersK1TLO+eLvCjdxlMB8GA1UdIwQY
MBaAFEcF08alsFEmgs3982OxmpxWfx9sMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUndYVHhxV3dVU2FDemYzelk3R2FuRlpfSDJ3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi81NmFlZTktOTk2Yy00MzhmLWJiMDAt
MGRmYTZiMjJlZmYyLzEvWmdhTXI0NXFsTjZ1d3JWTXM3NTR1OEtOM0dVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNi81NmFlZTktOTk2Yy00MzhmLWJiMDAtMGRmYTZiMjJlZmYy
LzEvUndYVHhxV3dVU2FDemYzelk3R2FuRlpfSDJ3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCAjnwAwQC
VdDUMA0GCSqGSIb3DQEBCwUAA4IBAQBoeTifOfGYuQ4Y3s1tRl2Fs894IwliP8mG
oFy3fGs2ngkoPkT9N1qExLbhxQSozGuGrYvIWkghll0knh/TC+ktKtzn4CbrFz1Z
ktZfaM9QqfXN352/qgjmRWSJWN8rSF7LXNYQrUef3DbDgUJC+75F9xym8gSGGWAl
vFIQG0tc83cwXayzF/LjZ/IiEmvpyeJNmjyeTb3wT5jjfxcGtiIOOEJbkOUlcWg+
IYMqcGmWENITZPYMLTkn7R5GJK1ine0XIvvgYfsT+3QjkReO9IcMU6zpSd0y/JUH
u2jUvImr8qZqzFT2nuJ7TCGZqSuoRqN/paQaCgBsSZZiitkQywpM
-----END CERTIFICATE-----
Generated at Sat Apr 19 10:24:31 2025 by rpki-client