Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/f6ada1-7e8a-4b3e-b7e8-f8589f682691/1/zgJTk-gSNhlsZqS_fNQhhPBfQ5w.roa
File: zgJTk-gSNhlsZqS_fNQhhPBfQ5w.roa (raw, json)
Hash identifier: XsL61fg8B+KFUoDoohJ8VhhFP7jAr1C3FAbozx/+L6A=
Subject key identifier: CE:02:53:93:E8:12:36:19:6C:66:A4:BF:7C:D4:21:84:F0:5F:43:9C
Certificate issuer: /CN=ccd76159bfd9e337523ee930f3df111d6bae7306
Certificate serial: 0181F46A8E3E04D6661B6393B4D8A4DE2CE7
Authority key identifier: CC:D7:61:59:BF:D9:E3:37:52:3E:E9:30:F3:DF:11:1D:6B:AE:73:06
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zNdhWb_Z4zdSPukw898RHWuucwY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/f6ada1-7e8a-4b3e-b7e8-f8589f682691/1/zgJTk-gSNhlsZqS_fNQhhPBfQ5w.roa
Signing time: Tue 12 Jul 2022 21:57:12 +0000
ROA not before: Tue 12 Jul 2022 21:57:12 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 58061
IP address blocks: 194.93.3.0/24 maxlen: 24
91.243.189.0/24 maxlen: 24
77.83.193.0/24 maxlen: 24
194.147.88.0/24 maxlen: 24
213.139.203.0/24 maxlen: 24
194.169.86.0/24 maxlen: 24
212.107.26.0/24 maxlen: 24
78.142.238.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:81:f4:6a:8e:3e:04:d6:66:1b:63:93:b4:d8:a4:de:2c:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ccd76159bfd9e337523ee930f3df111d6bae7306
Validity
Not Before: Jul 12 21:57:12 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ce025393e81236196c66a4bf7cd42184f05f439c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:87:02:0a:3a:2c:8f:5e:fb:8d:74:6b:08:88:
d9:f0:09:1f:d2:7e:a2:0c:dc:73:42:ae:a1:95:dd:
f1:10:55:92:bb:df:a7:6b:a6:ac:70:d9:1c:61:9a:
71:dd:7c:42:a9:99:d0:37:ab:f0:e7:32:1a:5e:59:
19:ee:50:5e:b2:1c:18:9a:7a:9f:a0:eb:1b:66:88:
c0:b3:89:ca:6e:86:c3:e7:f0:55:75:5d:06:a0:fe:
78:d0:4c:0a:42:30:7c:90:3d:ff:df:75:3a:98:1b:
e6:70:8a:68:39:98:b2:a3:fb:4d:99:b2:53:c0:bc:
c9:92:d0:20:07:59:f8:1f:24:62:0a:4a:c4:f0:1d:
b6:ad:e7:fc:a6:56:5c:50:b4:10:7b:44:d1:e6:b7:
b5:40:a3:3b:09:94:41:56:8a:dc:1d:05:f6:f3:9b:
b7:ab:c1:79:a4:fe:7c:3d:c6:60:9a:2c:6f:99:be:
69:ba:80:37:18:44:6f:6c:e2:14:99:33:0b:86:e3:
28:41:50:e3:65:c8:34:06:0f:9c:0e:df:54:05:d2:
8a:4c:52:62:50:da:00:11:79:15:20:79:72:74:31:
ed:e4:f4:a3:53:4d:fd:4c:fc:04:54:a0:15:5f:6d:
65:41:60:53:fa:32:8a:78:c5:1c:9f:48:17:60:2a:
2b:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:02:53:93:E8:12:36:19:6C:66:A4:BF:7C:D4:21:84:F0:5F:43:9C
X509v3 Authority Key Identifier:
keyid:CC:D7:61:59:BF:D9:E3:37:52:3E:E9:30:F3:DF:11:1D:6B:AE:73:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zNdhWb_Z4zdSPukw898RHWuucwY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/f6ada1-7e8a-4b3e-b7e8-f8589f682691/1/zgJTk-gSNhlsZqS_fNQhhPBfQ5w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/f6ada1-7e8a-4b3e-b7e8-f8589f682691/1/zNdhWb_Z4zdSPukw898RHWuucwY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.83.193.0/24
78.142.238.0/24
91.243.189.0/24
194.93.3.0/24
194.147.88.0/24
194.169.86.0/24
212.107.26.0/24
213.139.203.0/24
Signature Algorithm: sha256WithRSAEncryption
42:eb:57:ad:a4:fa:86:04:e7:30:18:e1:7e:8a:7e:49:d3:9e:
b1:24:03:4a:39:9f:a6:4a:17:75:e8:3e:a0:79:82:f3:f2:5e:
9f:1f:03:4f:ce:b8:0a:cb:d6:86:fa:e3:5d:43:05:12:f2:da:
4a:5f:cd:56:07:10:27:73:8f:9b:d1:d3:40:6a:2d:d7:39:a6:
d7:90:cf:68:ee:49:bd:ba:69:9d:3c:7b:b8:7d:28:1c:c7:37:
74:fd:4a:40:96:0c:07:62:ab:5f:76:8d:6b:af:42:cd:ed:9c:
54:0f:e2:d4:92:a8:4c:4b:f6:52:f6:db:f6:c9:a8:d1:4b:7e:
c7:14:59:4e:ed:0a:13:0d:b7:88:d3:dc:b3:09:f3:7a:c6:65:
99:09:6e:c3:9c:b4:b5:b3:e2:04:35:2f:5f:e2:7a:51:30:72:
a5:bf:64:3c:41:6f:a8:3d:c2:f7:93:f4:83:e2:81:0b:20:f5:
2a:44:b3:0c:f5:06:c5:25:d9:53:3a:b9:05:7d:3d:e7:70:42:
74:ab:5b:e6:81:99:8e:26:f2:92:b4:94:7a:1b:4a:e5:4d:74:
ab:6c:bd:af:24:c1:15:87:02:af:2f:dd:b2:62:04:aa:4e:25:
61:c2:0f:68:9e:d2:27:60:cd:ca:88:c8:c0:e0:de:07:0f:e9:
ec:c3:20:7e
-----BEGIN CERTIFICATE-----
MIIFJzCCBA+gAwIBAgISAYH0ao4+BNZmG2OTtNik3iznMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNjZDc2MTU5YmZkOWUzMzc1MjNlZTkzMGYzZGYxMTFkNmJh
ZTczMDYwHhcNMjIwNzEyMjE1NzEyWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjZTAyNTM5M2U4MTIzNjE5NmM2NmE0YmY3Y2Q0MjE4NGYwNWY0MzljMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjIcCCjosj177jXRrCIjZ8Akf0n6i
DNxzQq6hld3xEFWSu9+na6ascNkcYZpx3XxCqZnQN6vw5zIaXlkZ7lBeshwYmnqf
oOsbZojAs4nKbobD5/BVdV0GoP540EwKQjB8kD3/33U6mBvmcIpoOZiyo/tNmbJT
wLzJktAgB1n4HyRiCkrE8B22ref8plZcULQQe0TR5re1QKM7CZRBVorcHQX285u3
q8F5pP58PcZgmixvmb5puoA3GERvbOIUmTMLhuMoQVDjZcg0Bg+cDt9UBdKKTFJi
UNoAEXkVIHlydDHt5PSjU039TPwEVKAVX21lQWBT+jKKeMUcn0gXYCordwIDAQAB
o4ICMzCCAi8wHQYDVR0OBBYEFM4CU5PoEjYZbGakv3zUIYTwX0OcMB8GA1UdIwQY
MBaAFMzXYVm/2eM3Uj7pMPPfER1rrnMGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvek5kaFdiX1o0emRTUHVrdzg5OFJIV3V1Y3dZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MC9mNmFkYTEtN2U4YS00YjNlLWI3ZTgt
Zjg1ODlmNjgyNjkxLzEvemdKVGstZ1NOaGxzWnFTX2ZOUWhoUEJmUTV3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MC9mNmFkYTEtN2U4YS00YjNlLWI3ZTgtZjg1ODlmNjgyNjkx
LzEvek5kaFdiX1o0emRTUHVrdzg5OFJIV3V1Y3dZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEkGCCsGAQUFBwEHAQH/BDowODA2BAIAATAwAwQATVPBAwQA
To7uAwQAW/O9AwQAwl0DAwQAwpNYAwQAwqlWAwQA1GsaAwQA1YvLMA0GCSqGSIb3
DQEBCwUAA4IBAQBC61etpPqGBOcwGOF+in5J056xJANKOZ+mShd16D6geYLz8l6f
HwNPzrgKy9aG+uNdQwUS8tpKX81WBxAnc4+b0dNAai3XOabXkM9o7km9ummdPHu4
fSgcxzd0/UpAlgwHYqtfdo1rr0LN7ZxUD+LUkqhMS/ZS9tv2yajRS37HFFlO7QoT
DbeI09yzCfN6xmWZCW7DnLS1s+IENS9f4npRMHKlv2Q8QW+oPcL3k/SD4oELIPUq
RLMM9QbFJdlTOrkFfT3ncEJ0q1vmgZmOJvKStJR6G0rlTXSrbL2vJMEVhwKvL92y
YgSqTiVhwg9ontInYM3KiMjA4N4HD+nswyB+
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:29:18 2024 by rpki-client on console-fra.rpki-client.org