Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/d3cce6-b47b-4d06-a30f-eb2411d212ab/1/KzgQQptXTFEt-hVXgil8qrNpZuQ.roa
File: KzgQQptXTFEt-hVXgil8qrNpZuQ.roa (raw, json)
Hash identifier: 5EGXE18A3HCHLTAGkmV6+xClUPWLWjOS6eg/7PW4VMM=
Subject key identifier: 2B:38:10:42:9B:57:4C:51:2D:FA:15:57:82:29:7C:AA:B3:69:66:E4
Certificate issuer: /CN=852ece9c9a324d45c35f9559f329d8869dab53ba
Certificate serial: 0A178B06
Authority key identifier: 85:2E:CE:9C:9A:32:4D:45:C3:5F:95:59:F3:29:D8:86:9D:AB:53:BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hS7OnJoyTUXDX5VZ8ynYhp2rU7o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/d3cce6-b47b-4d06-a30f-eb2411d212ab/1/KzgQQptXTFEt-hVXgil8qrNpZuQ.roa
Signing time: Wed 09 Mar 2022 12:38:12 +0000
ROA not before: Wed 09 Mar 2022 12:38:12 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 41269
IP address blocks: 193.47.166.0/24 maxlen: 24
193.238.108.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 169315078 (0xa178b06)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=852ece9c9a324d45c35f9559f329d8869dab53ba
Validity
Not Before: Mar 9 12:38:12 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=2b3810429b574c512dfa155782297caab36966e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:c5:b2:6c:8f:ad:d3:c4:6b:ae:1f:da:b1:1b:
d3:ed:f3:20:00:66:29:29:1f:c3:d3:00:a4:75:b3:
a2:29:6f:ca:3c:d7:8d:36:4b:36:29:4c:39:a9:69:
c9:1e:a1:ea:94:2c:f6:2f:32:09:09:50:f5:59:cc:
53:ad:cc:03:cd:5e:11:ef:0a:fc:4b:fb:53:f4:c1:
74:cf:6b:70:15:5c:2b:6c:9e:4e:0b:9f:79:8f:9e:
64:3d:0d:4b:c3:b0:39:e5:63:b2:5d:3a:c7:18:5e:
78:a7:88:c1:ae:e0:e8:f8:f4:ec:40:0a:4f:23:d7:
d7:1d:69:e8:62:cf:78:6e:4c:b7:df:12:11:68:f5:
96:c0:c3:d4:41:f5:40:32:cd:32:cb:0c:7f:9b:38:
86:ab:33:41:12:ea:df:10:72:9c:cd:c4:ee:a6:eb:
d4:b0:dd:46:01:5e:ee:d4:96:a6:e6:6d:84:ae:28:
ff:40:1a:be:ac:b5:47:bb:b9:3b:00:be:00:02:86:
bb:71:18:67:18:32:c2:d7:e7:93:d6:71:c4:a1:c9:
08:45:6d:ec:9f:36:24:81:1c:5c:52:21:4a:7d:b1:
04:98:91:6d:65:b0:81:50:51:6c:56:1c:a5:d5:51:
c1:32:f4:42:79:b7:71:f5:8b:87:1f:85:67:20:14:
78:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:38:10:42:9B:57:4C:51:2D:FA:15:57:82:29:7C:AA:B3:69:66:E4
X509v3 Authority Key Identifier:
keyid:85:2E:CE:9C:9A:32:4D:45:C3:5F:95:59:F3:29:D8:86:9D:AB:53:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hS7OnJoyTUXDX5VZ8ynYhp2rU7o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/d3cce6-b47b-4d06-a30f-eb2411d212ab/1/KzgQQptXTFEt-hVXgil8qrNpZuQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/d3cce6-b47b-4d06-a30f-eb2411d212ab/1/hS7OnJoyTUXDX5VZ8ynYhp2rU7o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.47.166.0/24
193.238.108.0/24
Signature Algorithm: sha256WithRSAEncryption
a4:1e:36:df:c8:90:9c:b3:9a:f2:49:aa:5e:14:75:94:3a:93:
46:fa:7d:b7:c6:9e:b4:b7:d9:9c:38:07:90:91:c9:e2:9b:5b:
91:f9:51:01:02:0b:6d:7e:96:f7:fd:76:ff:e7:f7:da:bf:41:
9c:bc:15:45:01:16:8d:26:5a:2e:b0:76:1c:4f:b8:48:e2:09:
35:2b:f9:7a:8f:b4:ca:11:aa:a2:5c:8c:ca:ba:5a:98:98:a5:
60:16:9b:76:ed:20:04:01:36:37:31:83:09:e0:da:53:f4:3a:
b0:bf:ba:9b:6d:3d:e1:49:b2:0e:bb:00:51:22:c6:19:a3:77:
73:04:ef:1a:29:43:1d:6b:df:70:1e:ef:9c:ed:b4:fc:5a:fc:
23:64:1f:ba:31:b4:a2:c1:b2:9e:85:f1:de:d8:49:78:ac:5c:
e1:21:42:6e:f6:5d:b5:98:88:38:ba:5b:e1:2a:5b:3d:ff:64:
07:d9:99:fe:05:bc:97:7c:75:78:29:3e:69:76:1a:cd:9e:e8:
d7:99:ce:7c:80:5a:db:22:88:fc:9e:20:86:28:3e:5b:1c:9c:
d1:3a:05:25:41:27:56:8f:6e:4f:4a:cd:d6:09:7e:fb:ba:b6:
ec:aa:6e:a3:21:77:cb:60:70:b1:74:94:49:38:5d:87:2d:b6:
be:1d:21:32
-----BEGIN CERTIFICATE-----
MIIE9TCCA92gAwIBAgIECheLBjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg4
NTJlY2U5YzlhMzI0ZDQ1YzM1Zjk1NTlmMzI5ZDg4NjlkYWI1M2JhMB4XDTIyMDMw
OTEyMzgxMloXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoMmIzODEwNDI5YjU3
NGM1MTJkZmExNTU3ODIyOTdjYWFiMzY5NjZlNDCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBANHFsmyPrdPEa64f2rEb0+3zIABmKSkfw9MApHWzoilvyjzX
jTZLNilMOalpyR6h6pQs9i8yCQlQ9VnMU63MA81eEe8K/Ev7U/TBdM9rcBVcK2ye
TgufeY+eZD0NS8OwOeVjsl06xxheeKeIwa7g6Pj07EAKTyPX1x1p6GLPeG5Mt98S
EWj1lsDD1EH1QDLNMssMf5s4hqszQRLq3xBynM3E7qbr1LDdRgFe7tSWpuZthK4o
/0Aavqy1R7u5OwC+AAKGu3EYZxgywtfnk9ZxxKHJCEVt7J82JIEcXFIhSn2xBJiR
bWWwgVBRbFYcpdVRwTL0Qnm3cfWLhx+FZyAUeOUCAwEAAaOCAg8wggILMB0GA1Ud
DgQWBBQrOBBCm1dMUS36FVeCKXyqs2lm5DAfBgNVHSMEGDAWgBSFLs6cmjJNRcNf
lVnzKdiGnatTujAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L2hTN09uSm95VFVYRFg1Vlo4eW5ZaHAyclU3by5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvMzgvZDNjY2U2LWI0N2ItNGQwNi1hMzBmLWViMjQxMWQyMTJhYi8x
L0t6Z1FRcHRYVEZFdC1oVlhnaWw4cXJOcFp1US5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMzgv
ZDNjY2U2LWI0N2ItNGQwNi1hMzBmLWViMjQxMWQyMTJhYi8xL2hTN09uSm95VFVY
RFg1Vlo4eW5ZaHAyclU3by5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAl
BggrBgEFBQcBBwEB/wQWMBQwEgQCAAEwDAMEAMEvpgMEAMHubDANBgkqhkiG9w0B
AQsFAAOCAQEApB4238iQnLOa8kmqXhR1lDqTRvp9t8aetLfZnDgHkJHJ4ptbkflR
AQILbX6W9/12/+f32r9BnLwVRQEWjSZaLrB2HE+4SOIJNSv5eo+0yhGqolyMyrpa
mJilYBabdu0gBAE2NzGDCeDaU/Q6sL+6m2094UmyDrsAUSLGGaN3cwTvGilDHWvf
cB7vnO20/Fr8I2QfujG0osGynoXx3thJeKxc4SFCbvZdtZiIOLpb4SpbPf9kB9mZ
/gW8l3x1eCk+aXYazZ7o15nOfIBa2yKI/J4ghig+Wxyc0ToFJUEnVo9uT0rN1gl+
+7q27KpuoyF3y2BwsXSUSThdhy22vh0hMg==
-----END CERTIFICATE-----
Generated at Sun Apr 6 12:37:07 2025 by rpki-client