Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/f3539d-38cd-465e-a57d-dee2f650dd86/1/kzEGqu-NxczSkHIuRI35P6EQQCI.roa
File: kzEGqu-NxczSkHIuRI35P6EQQCI.roa (raw, json)
Hash identifier: hI0VzRX/lKsLH0GCq13IY/E33rTC6b/+73V8Z9Q83Aw=
Subject key identifier: 93:31:06:AA:EF:8D:C5:CC:D2:90:72:2E:44:8D:F9:3F:A1:10:40:22
Certificate issuer: /CN=ceb86983547113359bade1f3f38104091e3a6439
Certificate serial: 018D3FB39AAD8B9E4101A722FBE8D8B7A088
Authority key identifier: CE:B8:69:83:54:71:13:35:9B:AD:E1:F3:F3:81:04:09:1E:3A:64:39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zrhpg1RxEzWbreHz84EECR46ZDk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/f3539d-38cd-465e-a57d-dee2f650dd86/1/kzEGqu-NxczSkHIuRI35P6EQQCI.roa
Signing time: Thu 25 Jan 2024 08:19:11 +0000
ROA not before: Thu 25 Jan 2024 08:19:11 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 8612
IP address blocks: 82.84.0.0/15 maxlen: 24
82.85.26.128/26 maxlen: 26
82.85.53.0/26 maxlen: 26
82.85.53.64/26 maxlen: 26
84.220.0.0/16 maxlen: 24
84.221.0.0/16 maxlen: 24
94.32.0.0/14 maxlen: 14
94.32.115.0/24 maxlen: 24
193.43.2.0/24 maxlen: 24
193.43.3.180/30 maxlen: 30
193.43.3.184/29 maxlen: 29
193.43.3.192/26 maxlen: 26
193.207.24.0/21 maxlen: 24
193.207.48.0/20 maxlen: 24
193.207.64.0/18 maxlen: 24
193.207.96.0/20 maxlen: 21
193.207.128.0/17 maxlen: 22
195.130.224.0/19 maxlen: 19
212.123.64.0/19 maxlen: 19
213.205.0.0/18 maxlen: 18
213.205.0.251/32 maxlen: 32
217.73.208.0/20 maxlen: 21
217.133.0.0/16 maxlen: 16
217.133.170.0/24 maxlen: 24
2a01:7d0::/32 maxlen: 32
2a01:7d0:4800:1::/64 maxlen: 64
2a01:7d0:4811::/64 maxlen: 64
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:3f:b3:9a:ad:8b:9e:41:01:a7:22:fb:e8:d8:b7:a0:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ceb86983547113359bade1f3f38104091e3a6439
Validity
Not Before: Jan 25 08:19:11 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=933106aaef8dc5ccd290722e448df93fa1104022
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:6e:8b:65:8a:7c:d9:a4:74:6b:89:63:0c:64:
05:ad:e9:fc:c0:7c:2f:0b:a4:89:e5:e8:82:38:2f:
10:9a:d9:1c:0e:f2:fa:59:ee:e8:35:90:7e:0d:c5:
b1:16:90:56:a1:a4:e2:ca:94:c5:21:3b:9b:eb:5c:
e8:78:b3:a6:e8:ea:99:22:84:25:b1:ae:b3:1a:5b:
38:42:5d:84:52:0c:0f:64:bd:79:06:05:48:e7:a5:
82:1e:fd:7b:9c:85:a0:ad:51:4c:98:dc:3b:b2:81:
bf:36:c6:71:e4:39:a0:bd:97:32:fa:f5:5c:f1:21:
63:cd:32:97:39:fc:fd:bd:2f:48:f7:e4:c2:d4:65:
cc:1b:87:c7:fd:b7:e5:4d:c8:e7:d2:7e:5e:e8:f1:
fc:24:2c:5c:17:3b:8c:07:68:2a:e0:dd:e3:73:09:
8e:5e:3c:20:ea:28:79:f5:4a:fa:d3:80:c7:86:b3:
d4:33:2f:3b:b2:33:5f:66:6c:21:fc:6f:5b:16:9e:
e2:38:8b:82:63:12:d9:c0:56:77:c7:77:39:34:25:
6d:e6:77:72:2a:88:c3:37:16:d5:c5:52:05:5d:ec:
76:58:4f:45:4a:ee:46:9d:91:20:f5:56:85:7d:7c:
fd:8b:30:c7:96:1e:54:4d:b8:1a:a2:e4:3f:92:7d:
13:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:31:06:AA:EF:8D:C5:CC:D2:90:72:2E:44:8D:F9:3F:A1:10:40:22
X509v3 Authority Key Identifier:
keyid:CE:B8:69:83:54:71:13:35:9B:AD:E1:F3:F3:81:04:09:1E:3A:64:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zrhpg1RxEzWbreHz84EECR46ZDk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/f3539d-38cd-465e-a57d-dee2f650dd86/1/kzEGqu-NxczSkHIuRI35P6EQQCI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/f3539d-38cd-465e-a57d-dee2f650dd86/1/zrhpg1RxEzWbreHz84EECR46ZDk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.84.0.0/15
84.220.0.0/15
94.32.0.0/14
193.43.2.0/24
193.43.3.180-193.43.3.255
193.207.24.0/21
193.207.48.0-193.207.255.255
195.130.224.0/19
212.123.64.0/19
213.205.0.0/18
217.73.208.0/20
217.133.0.0/16
IPv6:
2a01:7d0::/32
Signature Algorithm: sha256WithRSAEncryption
13:27:1b:83:68:28:30:c3:08:81:1f:ff:0e:97:4a:de:93:14:
59:91:9a:44:91:38:cd:c2:74:04:46:87:6b:27:cb:f6:33:30:
0e:5e:8f:6a:dc:b7:1b:c0:f6:db:0f:2a:78:8e:0b:ea:33:c6:
f9:52:48:f5:51:da:22:a1:ad:74:5d:fe:de:44:37:cc:51:66:
0f:90:c1:56:bb:a7:1b:68:69:4d:4b:6c:17:db:ad:e1:43:ec:
79:44:d1:78:b9:49:8e:af:89:52:af:68:66:aa:ad:d0:1e:b7:
eb:1a:90:c8:eb:15:d0:e6:ec:44:9f:cb:37:db:dd:bf:d8:2b:
a0:ff:28:df:e5:c0:53:e8:7f:25:cb:9e:d1:41:45:d5:17:5b:
1b:d0:a3:60:18:43:9e:a4:66:72:f9:5a:ec:36:fb:1a:1e:52:
c6:8c:06:0a:01:6e:ed:12:2d:a1:1a:d4:88:50:e3:04:4d:bb:
6d:e2:b5:ea:15:0f:57:f0:ff:ef:2f:a0:9d:ae:8a:e3:df:0b:
7c:23:ed:bd:3f:73:d7:9c:26:fa:00:54:ba:a9:a7:15:1b:61:
90:39:cd:6e:a0:f3:59:e6:81:d9:f8:c0:d9:2e:8b:37:bd:54:
7c:ce:de:e6:9f:e3:21:e1:61:52:a8:19:bd:40:d1:bc:dd:33:
47:8d:4a:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 6 12:22:08 2024 by rpki-client on console-fra.rpki-client.org