Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/8897fd-1862-4393-aa4b-447617a4a744/1/zUXZcGz-shtdKfuc4r7pRiL7eZw.roa
File: zUXZcGz-shtdKfuc4r7pRiL7eZw.roa (raw, json)
Hash identifier: vcg7ci/aEI4ZsMSpxg9RRLtfQZFe5/QuWbT/C/PO0Cc=
Subject key identifier: CD:45:D9:70:6C:FE:B2:1B:5D:29:FB:9C:E2:BE:E9:46:22:FB:79:9C
Certificate issuer: /CN=7d7b4bcabeb29605ea511de973e4675c4b8a29df
Certificate serial: 0188522C72FDF5F4D695B85E9723EFE8F56B
Authority key identifier: 7D:7B:4B:CA:BE:B2:96:05:EA:51:1D:E9:73:E4:67:5C:4B:8A:29:DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fXtLyr6ylgXqUR3pc-RnXEuKKd8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/8897fd-1862-4393-aa4b-447617a4a744/1/zUXZcGz-shtdKfuc4r7pRiL7eZw.roa
Signing time: Thu 25 May 2023 09:10:24 +0000
ROA not before: Thu 25 May 2023 09:10:24 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 198482
IP address blocks: 151.237.0.0/24 maxlen: 24
151.237.0.0/20 maxlen: 20
151.237.1.0/24 maxlen: 24
151.237.2.0/24 maxlen: 24
151.237.3.0/24 maxlen: 24
151.237.4.0/24 maxlen: 24
151.237.8.0/24 maxlen: 24
151.237.9.0/24 maxlen: 24
151.237.10.0/24 maxlen: 24
151.237.11.0/24 maxlen: 24
151.237.5.0/24 maxlen: 24
151.237.6.0/24 maxlen: 24
151.237.7.0/24 maxlen: 24
85.187.208.0/24 maxlen: 24
85.187.209.0/24 maxlen: 24
85.187.210.0/24 maxlen: 24
85.187.211.0/24 maxlen: 24
85.187.212.0/24 maxlen: 24
85.187.213.0/24 maxlen: 24
85.187.214.0/24 maxlen: 24
85.187.215.0/24 maxlen: 24
85.187.221.0/24 maxlen: 24
85.187.220.0/24 maxlen: 24
151.237.94.0/23 maxlen: 23
151.237.12.0/24 maxlen: 24
151.237.13.0/24 maxlen: 24
151.237.14.0/24 maxlen: 24
151.237.15.0/24 maxlen: 24
195.234.98.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:52:2c:72:fd:f5:f4:d6:95:b8:5e:97:23:ef:e8:f5:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d7b4bcabeb29605ea511de973e4675c4b8a29df
Validity
Not Before: May 25 09:10:24 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=cd45d9706cfeb21b5d29fb9ce2bee94622fb799c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:7f:af:13:ec:fe:f9:39:d2:9c:02:1b:83:c6:
94:01:1b:f8:65:36:a5:55:b6:02:b9:5a:9e:47:0a:
45:c3:5f:ab:3a:c9:80:08:71:15:e0:36:6e:e6:47:
17:56:7e:f0:c3:8a:7c:a5:87:90:30:07:83:35:de:
d9:7a:8d:d5:96:16:a6:52:6f:0c:2a:f1:4c:b1:98:
4b:e1:c2:84:dd:ae:ce:43:33:3e:fc:07:fe:db:22:
37:77:3f:ab:ca:ac:3a:42:63:84:b9:de:ae:c1:de:
83:2c:d8:a5:02:12:7d:c9:d9:ea:9f:56:0b:01:15:
6f:11:fc:31:b1:83:28:8b:e7:33:84:7e:be:36:09:
aa:05:be:ab:05:eb:6b:5a:53:f5:4c:e5:df:22:ab:
45:a1:b1:4e:03:85:5f:e2:9c:43:72:3f:95:1a:1e:
00:c6:19:60:be:b4:ea:ec:47:4b:39:22:8b:23:8f:
56:6f:ea:5d:a9:06:e6:65:27:5e:5f:35:68:22:a9:
b6:a3:b0:49:89:a5:bf:32:f8:59:e4:0b:0b:73:b0:
d2:35:5e:01:58:a9:9b:38:96:02:9b:95:e3:79:d3:
3a:c6:3b:a1:e1:d3:88:7d:fa:3f:eb:3d:4e:d9:09:
e5:14:cf:b3:4a:2e:cf:76:88:e2:a8:3d:8f:75:c2:
5b:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:45:D9:70:6C:FE:B2:1B:5D:29:FB:9C:E2:BE:E9:46:22:FB:79:9C
X509v3 Authority Key Identifier:
keyid:7D:7B:4B:CA:BE:B2:96:05:EA:51:1D:E9:73:E4:67:5C:4B:8A:29:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fXtLyr6ylgXqUR3pc-RnXEuKKd8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/8897fd-1862-4393-aa4b-447617a4a744/1/zUXZcGz-shtdKfuc4r7pRiL7eZw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/8897fd-1862-4393-aa4b-447617a4a744/1/fXtLyr6ylgXqUR3pc-RnXEuKKd8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.187.208.0/21
85.187.220.0/23
151.237.0.0/20
151.237.94.0/23
195.234.98.0/24
Signature Algorithm: sha256WithRSAEncryption
29:2b:10:0e:f7:10:67:86:a1:af:44:7e:23:f8:68:a6:a1:5c:
c6:87:ec:c3:2e:6f:29:ff:31:a8:f2:92:1a:58:fa:ae:96:9d:
40:0f:12:fe:c6:21:9b:76:15:58:8d:97:38:f9:a4:c8:0f:7c:
9e:c8:09:bd:d0:34:8a:bd:ec:e1:ba:78:81:26:6f:0d:44:98:
29:1e:f3:3b:3a:7b:5b:1f:d4:e0:1e:6d:c3:9a:55:c9:0b:5c:
ea:4c:25:53:fc:f0:d4:0e:6b:e8:c6:3f:8b:29:d8:c3:86:d6:
48:78:c4:fc:7e:a5:93:cd:bc:94:e2:e3:b1:03:a6:56:99:c9:
7f:74:80:a5:14:f0:55:85:f1:08:1c:9d:23:0c:10:d4:4d:d9:
13:00:25:ff:f3:65:b7:a5:8d:2c:0d:d1:61:21:bb:2f:18:38:
ed:23:9c:5d:4b:5b:95:fc:45:34:56:54:bc:d4:ca:97:ac:69:
b6:d9:93:ed:1c:8c:e8:39:1e:fe:e3:d3:b5:48:a0:46:a0:93:
32:a1:90:2a:25:68:21:23:45:c3:29:73:a0:de:97:70:8e:a0:
58:0a:25:50:3f:8c:85:85:bd:98:74:00:19:38:90:32:8e:9c:
df:39:5a:8c:3e:b8:7e:14:e5:fe:6a:07:d6:b2:ea:97:53:dc:
49:56:33:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:30:31 2024 by rpki-client on console-fra.rpki-client.org