Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/f6ada1-7e8a-4b3e-b7e8-f8589f682691/1/z1GZXh2TwtY1BkxA5ZdhLISgEGk.roa
File: z1GZXh2TwtY1BkxA5ZdhLISgEGk.roa (raw, json)
Hash identifier: j1ZhJrkerJJVcm/5jbXA9EHDwSe48XU2SVH//TrPQQQ=
Subject key identifier: CF:51:99:5E:1D:93:C2:D6:35:06:4C:40:E5:97:61:2C:84:A0:10:69
Certificate issuer: /CN=ccd76159bfd9e337523ee930f3df111d6bae7306
Certificate serial: 01877548F08DFCFC11CA8E619F38B58B97EE
Authority key identifier: CC:D7:61:59:BF:D9:E3:37:52:3E:E9:30:F3:DF:11:1D:6B:AE:73:06
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zNdhWb_Z4zdSPukw898RHWuucwY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/f6ada1-7e8a-4b3e-b7e8-f8589f682691/1/z1GZXh2TwtY1BkxA5ZdhLISgEGk.roa
Signing time: Wed 12 Apr 2023 11:45:27 +0000
ROA not before: Wed 12 Apr 2023 11:45:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 58061
IP address blocks: 194.93.3.0/24 maxlen: 24
91.243.189.0/24 maxlen: 24
77.83.193.0/24 maxlen: 24
213.139.203.0/24 maxlen: 24
212.107.26.0/24 maxlen: 24
78.142.238.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:75:48:f0:8d:fc:fc:11:ca:8e:61:9f:38:b5:8b:97:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ccd76159bfd9e337523ee930f3df111d6bae7306
Validity
Not Before: Apr 12 11:45:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=cf51995e1d93c2d635064c40e597612c84a01069
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:9f:39:a2:94:b2:56:bd:36:e3:50:13:78:ec:
c1:39:fd:86:a9:92:e6:8e:7a:ba:c1:f9:40:42:d5:
aa:83:e1:e9:11:38:ef:26:e5:18:d9:a2:6e:8c:46:
b1:05:51:aa:29:a7:4d:f9:a6:fd:ba:aa:d8:53:02:
24:32:5d:61:b5:40:eb:58:7d:95:27:a9:41:51:88:
55:09:45:ed:d1:5f:c5:f0:2f:63:62:39:61:d0:01:
f8:9c:25:b8:ab:79:cc:3e:95:20:84:76:2a:38:88:
9c:72:e2:49:66:d3:d3:6f:0b:bb:ed:50:ab:4b:a2:
d0:b7:08:9f:7a:83:4b:06:ba:18:5f:c1:7c:cd:7a:
9e:7b:2d:30:b7:96:f9:10:4c:7e:f3:8b:78:d1:cb:
ed:29:3a:49:4b:ed:e8:77:d8:ab:a0:e5:a2:32:1a:
2f:56:d8:0d:2a:27:42:b8:ef:a3:62:d0:23:63:38:
bc:1e:f7:eb:f3:95:41:ba:94:46:ca:b3:52:f5:bd:
fa:37:3d:f6:20:d1:66:56:e3:0a:24:f9:94:64:7e:
30:76:a8:60:a4:35:ba:96:d0:21:25:b7:7e:a8:d1:
91:67:57:1b:53:2b:fd:eb:2b:8e:30:ac:e5:1c:9a:
11:0a:92:a9:a3:fa:14:17:03:f2:77:02:14:a1:bf:
09:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:51:99:5E:1D:93:C2:D6:35:06:4C:40:E5:97:61:2C:84:A0:10:69
X509v3 Authority Key Identifier:
keyid:CC:D7:61:59:BF:D9:E3:37:52:3E:E9:30:F3:DF:11:1D:6B:AE:73:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zNdhWb_Z4zdSPukw898RHWuucwY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/f6ada1-7e8a-4b3e-b7e8-f8589f682691/1/z1GZXh2TwtY1BkxA5ZdhLISgEGk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/f6ada1-7e8a-4b3e-b7e8-f8589f682691/1/zNdhWb_Z4zdSPukw898RHWuucwY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.83.193.0/24
78.142.238.0/24
91.243.189.0/24
194.93.3.0/24
212.107.26.0/24
213.139.203.0/24
Signature Algorithm: sha256WithRSAEncryption
01:91:33:9e:a4:37:fc:6e:a8:2a:50:61:e7:85:9f:94:d8:e7:
05:cb:c9:17:31:c6:d5:42:e3:da:de:2f:7b:67:5d:fd:8c:9b:
cd:5c:0b:54:d0:80:75:44:89:a3:d6:69:66:15:1c:8f:f4:a5:
23:1f:39:ef:38:9a:8b:9f:0c:24:89:9b:89:57:1a:0e:5e:6f:
08:52:93:7f:04:29:4e:ff:77:2b:41:88:f7:33:fb:92:95:65:
fd:d5:18:87:bc:20:22:72:30:a0:e2:68:f4:01:d2:3b:4c:4a:
3e:d7:db:84:8c:23:f5:01:51:ad:8a:cb:f9:13:ff:0e:3d:98:
53:46:ab:f5:a5:7e:6c:ef:cd:9e:6b:f0:c1:38:51:0f:c9:20:
9d:ff:e5:1e:42:28:46:00:07:61:25:ab:e4:c1:35:f0:bc:0f:
70:55:d5:11:03:f8:fe:70:0a:b1:df:20:54:8d:b3:e2:c0:97:
5c:0c:95:25:bd:8e:be:fa:fe:08:11:91:f9:b2:d2:4f:d8:9e:
8f:ff:f8:7f:37:c1:17:f9:03:55:f8:10:e3:e4:90:27:32:bf:
bf:89:bb:11:64:25:0e:ef:94:eb:36:5f:4e:4b:99:36:b7:42:
26:b5:a3:57:6e:3e:74:95:7c:fb:b7:34:bc:cd:d3:93:af:ed:
93:15:9c:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:11 2023 by rpki-client on console-fra.rpki-client.org