Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/f3539d-38cd-465e-a57d-dee2f650dd86/1/zA_3Qy3rSYtggsjdRJSXUTSsL1w.roa
File: zA_3Qy3rSYtggsjdRJSXUTSsL1w.roa (raw, json)
Hash identifier: +HO1zN30vYn3L3LMi8TV5sE1Py3IcFQq1BL320GoCPE=
Subject key identifier: CC:0F:F7:43:2D:EB:49:8B:60:82:C8:DD:44:94:97:51:34:AC:2F:5C
Certificate issuer: /CN=ceb86983547113359bade1f3f38104091e3a6439
Certificate serial: 01833137479EFCD6E60C8B555C50FA4E67AE
Authority key identifier: CE:B8:69:83:54:71:13:35:9B:AD:E1:F3:F3:81:04:09:1E:3A:64:39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zrhpg1RxEzWbreHz84EECR46ZDk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/f3539d-38cd-465e-a57d-dee2f650dd86/1/zA_3Qy3rSYtggsjdRJSXUTSsL1w.roa
Signing time: Mon 12 Sep 2022 10:20:49 +0000
ROA not before: Mon 12 Sep 2022 10:20:49 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 8612
IP address blocks: 84.220.0.0/14 maxlen: 24
195.130.224.0/19 maxlen: 19
213.205.0.0/18 maxlen: 18
193.43.3.192/26 maxlen: 26
193.43.2.0/24 maxlen: 24
82.85.26.128/26 maxlen: 26
82.85.53.64/26 maxlen: 26
82.85.53.0/26 maxlen: 26
82.84.0.0/15 maxlen: 24
193.207.0.0/16 maxlen: 21
193.207.24.0/21 maxlen: 24
62.10.0.0/15 maxlen: 24
217.133.0.0/16 maxlen: 16
193.207.32.0/19 maxlen: 24
217.73.208.0/20 maxlen: 20
94.32.0.0/13 maxlen: 24
193.207.96.0/20 maxlen: 21
212.123.64.0/19 maxlen: 19
94.199.8.0/24 maxlen: 24
193.207.128.0/17 maxlen: 22
193.207.64.0/18 maxlen: 24
94.32.0.0/14 maxlen: 14
94.36.0.0/14 maxlen: 14
213.205.0.251/32 maxlen: 32
193.43.3.176/28 maxlen: 28
217.133.170.0/24 maxlen: 24
2a01:7d0:4800:1::/64 maxlen: 64
2a01:7d0::/32 maxlen: 32
2a01:7d0:4811::/64 maxlen: 64
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:31:37:47:9e:fc:d6:e6:0c:8b:55:5c:50:fa:4e:67:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ceb86983547113359bade1f3f38104091e3a6439
Validity
Not Before: Sep 12 10:20:49 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=cc0ff7432deb498b6082c8dd4494975134ac2f5c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:71:31:05:bd:ed:b4:84:58:c4:6d:fa:1c:5e:
06:bb:48:27:49:58:0a:e4:80:39:2d:53:51:57:48:
15:6c:4d:34:8d:e4:a3:61:66:6c:3a:07:01:bc:bd:
8f:d3:bb:da:4f:21:c1:9d:32:37:70:c2:ec:d3:69:
60:ed:b1:a9:33:47:7f:7a:d5:2b:0f:9f:ee:0d:f0:
f1:70:30:f9:1b:ad:7d:6a:c7:70:5b:68:d4:1c:20:
bb:e1:10:ae:f1:74:18:34:04:b3:f7:d0:1e:71:0c:
86:cb:9e:c1:af:ea:4c:fb:c3:02:67:9a:be:bc:da:
fa:f4:a4:f6:75:50:a2:a7:fe:1a:75:a7:10:b3:ae:
b3:47:4f:9c:a6:50:af:bf:02:34:3c:e1:14:73:bb:
ca:60:44:ec:f3:7f:99:ac:7f:fb:a4:f8:c8:ef:4d:
d4:fe:43:28:99:99:4e:fd:75:d0:41:a7:ef:fc:bb:
8a:31:7f:6d:f8:21:32:4e:c6:8a:e1:1b:3d:d9:f8:
c2:dc:d7:b4:d4:61:63:22:84:e6:17:c7:22:b8:7e:
f3:3a:96:40:93:b5:0b:ae:9e:01:4b:6c:18:5b:57:
e6:49:ce:de:fb:da:73:13:f0:12:80:40:0e:21:24:
11:b4:14:93:5f:5d:e5:3e:17:f2:6b:ce:ff:1f:a2:
e2:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:0F:F7:43:2D:EB:49:8B:60:82:C8:DD:44:94:97:51:34:AC:2F:5C
X509v3 Authority Key Identifier:
keyid:CE:B8:69:83:54:71:13:35:9B:AD:E1:F3:F3:81:04:09:1E:3A:64:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zrhpg1RxEzWbreHz84EECR46ZDk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/f3539d-38cd-465e-a57d-dee2f650dd86/1/zA_3Qy3rSYtggsjdRJSXUTSsL1w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/f3539d-38cd-465e-a57d-dee2f650dd86/1/zrhpg1RxEzWbreHz84EECR46ZDk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.10.0.0/15
82.84.0.0/15
84.220.0.0/14
94.32.0.0/13
94.199.8.0/24
193.43.2.0/24
193.43.3.176-193.43.3.255
193.207.0.0/16
195.130.224.0/19
212.123.64.0/19
213.205.0.0/18
217.73.208.0/20
217.133.0.0/16
IPv6:
2a01:7d0::/32
Signature Algorithm: sha256WithRSAEncryption
3a:71:9a:17:40:34:98:bd:b8:b6:58:88:eb:c9:45:93:97:8b:
ac:48:9d:03:b6:a2:03:ee:fc:ed:3a:ba:e7:5a:4f:56:15:ef:
54:93:28:dd:3b:60:fb:a3:e6:89:7a:c0:79:a5:4b:8d:98:aa:
1d:27:17:a9:54:2c:56:01:ea:23:47:3b:9f:bb:ed:91:2c:a8:
9b:6e:db:bd:fc:0a:df:5a:bc:3d:06:a4:2a:ac:e8:87:e7:98:
c9:e8:76:42:9b:b6:f5:06:4f:14:bc:08:87:ab:ad:d9:f0:25:
1f:94:0a:30:d5:65:0b:94:3c:55:b5:f2:ab:f7:33:a3:5e:a2:
3c:41:5a:d3:ba:dc:b5:97:65:dd:b2:1a:a9:f6:28:04:e7:43:
03:e0:61:ca:4f:f5:8e:8e:f0:3f:22:e2:9c:ff:ac:f7:a8:5d:
af:1b:6c:55:37:84:1c:4c:32:f6:93:a8:19:3d:6c:46:8e:c1:
0a:56:07:f6:a3:c9:5e:40:73:1c:77:c3:05:18:7e:5c:41:fc:
2f:f6:57:72:61:25:48:a8:e8:6d:5c:01:b8:6d:43:4b:2d:2f:
aa:88:da:7a:a6:b8:a6:da:af:ac:e9:89:ac:99:0a:4d:a3:cf:
35:56:f6:d8:d1:42:40:d2:13:0a:cd:6b:04:b2:dc:10:0d:2f:
e6:d0:84:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:23 2023 by rpki-client on console-fra.rpki-client.org