Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/Z3WFMUCs6vtBKNXmGlJIszVRmII.roa
File: Z3WFMUCs6vtBKNXmGlJIszVRmII.roa (raw, json)
Hash identifier: exVJzDB34ivJlLTk0MKxDjTdpsGi7rMsPoJwuRi0CI4=
Subject key identifier: 67:75:85:31:40:AC:EA:FB:41:28:D5:E6:1A:52:48:B3:35:51:98:82
Certificate issuer: /CN=6f75e4e94b5cb74517b7b01568015da9e6eecdb6
Certificate serial: 018BA36CC4517CB9E87D587B8B3F8EA13AC7
Authority key identifier: 6F:75:E4:E9:4B:5C:B7:45:17:B7:B0:15:68:01:5D:A9:E6:EE:CD:B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b3Xk6Utct0UXt7AVaAFdqebuzbY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/Z3WFMUCs6vtBKNXmGlJIszVRmII.roa
Signing time: Mon 06 Nov 2023 06:58:15 +0000
ROA not before: Mon 06 Nov 2023 06:58:15 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 95.82.0.0/21 maxlen: 24
95.82.8.0/21 maxlen: 24
176.221.16.0/21 maxlen: 21
176.221.24.0/22 maxlen: 24
176.221.24.0/21 maxlen: 21
176.221.28.0/22 maxlen: 24
37.128.248.0/22 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:a3:6c:c4:51:7c:b9:e8:7d:58:7b:8b:3f:8e:a1:3a:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f75e4e94b5cb74517b7b01568015da9e6eecdb6
Validity
Not Before: Nov 6 06:58:15 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6775853140aceafb4128d5e61a5248b335519882
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:af:6e:b4:4f:06:dd:7d:72:95:6d:c9:7a:7a:
e8:09:8a:f8:1e:49:0c:14:62:2d:f4:a1:f7:42:2b:
dc:1e:89:3f:e8:8d:7e:c7:09:f4:b7:2b:cb:ed:94:
3c:ad:b3:ab:3d:af:56:96:83:fd:b4:0f:e2:b4:81:
71:e6:c3:ec:6b:06:fc:4e:fa:18:59:3d:88:cb:91:
84:c8:e6:b5:c4:15:a0:51:36:b2:e7:d6:ad:65:a5:
ac:59:5a:1b:6a:2b:8e:9b:8e:c6:bf:40:ae:84:ac:
94:44:c7:79:45:f8:aa:08:47:56:8a:a8:59:9d:c7:
ab:3c:1d:e8:cb:31:a5:be:d9:d7:49:b0:28:2e:a3:
2d:23:3e:7d:0a:e0:ef:96:58:20:29:e2:39:05:f1:
78:95:6f:a5:76:86:01:0d:2a:4e:9c:d8:11:62:5d:
e8:56:82:03:2c:be:5f:93:99:a4:73:f7:ee:26:c8:
18:09:ae:82:35:e8:49:7e:5b:49:f6:46:19:c3:e4:
d8:07:71:07:80:21:b4:1b:73:b9:25:8c:09:6c:05:
1d:9b:46:c1:cf:3a:c0:12:34:47:13:67:92:41:6b:
7a:22:de:87:8b:3a:bf:e4:f2:b4:ba:dd:2a:ca:af:
68:2a:57:b8:6e:48:f0:d5:69:f3:96:78:a1:cf:04:
f5:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:75:85:31:40:AC:EA:FB:41:28:D5:E6:1A:52:48:B3:35:51:98:82
X509v3 Authority Key Identifier:
keyid:6F:75:E4:E9:4B:5C:B7:45:17:B7:B0:15:68:01:5D:A9:E6:EE:CD:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3Xk6Utct0UXt7AVaAFdqebuzbY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/Z3WFMUCs6vtBKNXmGlJIszVRmII.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/b3Xk6Utct0UXt7AVaAFdqebuzbY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.128.248.0/22
95.82.0.0/20
176.221.16.0/20
Signature Algorithm: sha256WithRSAEncryption
0a:74:8b:4a:ef:6c:4f:30:c9:ee:e1:b9:a6:b5:3c:33:09:0d:
59:40:80:a5:b1:d7:7c:ed:d4:6b:42:12:50:6b:d8:10:80:09:
32:8f:6f:38:e8:c0:29:d2:b3:19:ad:85:1b:65:d4:4a:7b:29:
ae:60:8a:a0:fa:8a:8d:bd:86:0c:b7:b7:fd:e2:f8:bb:82:f9:
de:68:19:a9:fb:d2:a5:2f:2f:59:c8:50:9a:61:a0:e3:2d:b3:
6d:24:7a:d5:9d:d5:29:ac:8f:29:d2:f9:b2:f9:e5:7f:b2:59:
96:46:fb:ec:2f:b1:3b:ff:0e:1a:c7:f1:7d:67:94:c0:08:6d:
ee:89:b4:d7:b1:62:58:1f:45:5d:68:a3:1a:81:0e:26:09:28:
98:e1:47:52:39:55:19:23:f1:3f:fc:55:e8:5e:c6:d0:c0:dd:
7b:e2:ac:a6:34:86:bb:17:f1:b7:bf:44:16:f1:38:9f:42:43:
f8:08:14:61:72:f5:9d:d6:24:ae:3f:88:3b:a2:37:42:be:11:
b6:34:a4:67:81:3a:3c:42:38:81:8f:87:84:68:da:8e:28:d0:
16:bb:9f:35:5d:36:76:86:6b:4b:18:41:13:bc:a2:e6:99:9e:
7e:4f:37:6f:4f:f4:2b:6e:f1:b8:d4:22:4f:2b:33:da:56:74:
3d:39:8b:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:25:13 2025 by rpki-client