Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/QZG2GpPUAKlHfki_NcI7ZS1O4AE.roa
File: QZG2GpPUAKlHfki_NcI7ZS1O4AE.roa (raw, json)
Hash identifier: RA1bGlhYcRqFRLeAu3AEDVYyGoRXDFt9lHMIKmanppQ=
Subject key identifier: 41:91:B6:1A:93:D4:00:A9:47:7E:48:BF:35:C2:3B:65:2D:4E:E0:01
Certificate issuer: /CN=2ac3daa1b14850f2e61c592b2191915a5e65a478
Certificate serial: 13A27971
Authority key identifier: 2A:C3:DA:A1:B1:48:50:F2:E6:1C:59:2B:21:91:91:5A:5E:65:A4:78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/QZG2GpPUAKlHfki_NcI7ZS1O4AE.roa
Signing time: Sun 06 Feb 2022 07:24:01 +0000
ROA not before: Sun 06 Feb 2022 07:24:01 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 61317
IP address blocks: 85.8.164.0/22 maxlen: 24
212.90.100.0/22 maxlen: 24
185.248.184.0/22 maxlen: 24
185.220.236.0/22 maxlen: 24
188.253.0.0/23 maxlen: 24
91.132.59.0/24 maxlen: 24
212.87.192.0/22 maxlen: 24
185.234.144.0/22 maxlen: 24
185.59.115.0/24 maxlen: 24
82.115.16.0/24 maxlen: 24
82.115.20.0/23 maxlen: 24
82.115.18.0/23 maxlen: 24
82.115.24.0/22 maxlen: 24
185.129.108.0/23 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 329415025 (0x13a27971)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ac3daa1b14850f2e61c592b2191915a5e65a478
Validity
Not Before: Feb 6 07:24:01 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=4191b61a93d400a9477e48bf35c23b652d4ee001
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:9c:3b:4f:9f:45:9e:6e:99:8b:9b:c1:ff:22:
e4:51:ff:fd:41:ce:e6:ac:c2:81:a3:c1:1c:b0:f4:
c3:dd:de:5d:88:63:96:3b:5b:6f:8d:8e:13:bd:10:
bc:23:02:70:48:0f:0a:12:81:a3:4e:c6:54:f9:bb:
f2:52:51:7c:f1:9d:cb:9d:bc:18:01:21:12:e9:8b:
28:27:3f:f9:05:75:73:63:2a:8c:bd:e9:78:a6:9d:
71:87:9d:a0:98:3e:5c:e6:57:17:09:38:5f:8c:92:
35:8f:2d:da:49:63:b9:da:67:98:f5:c7:df:c4:3d:
e6:4b:06:3f:8c:63:b7:6f:b9:ac:5d:f8:17:2a:ad:
39:a9:0a:34:ac:da:98:e7:88:c7:5a:6e:6c:38:be:
d0:da:58:95:51:21:50:cd:05:c3:64:37:c2:62:80:
28:0c:e2:c2:f7:3a:14:9e:34:63:bc:29:0e:11:81:
1a:79:c7:c5:8f:14:24:56:5a:1b:84:4b:af:a9:0d:
6d:e9:9f:78:37:0c:ee:5f:93:b7:99:86:3a:b3:1d:
16:b9:b0:b5:d2:a9:60:77:08:79:60:d8:20:b9:b9:
09:95:ed:13:df:8a:ac:b6:d2:53:81:94:1e:2b:2d:
17:04:2b:b9:54:cd:f9:e1:0f:2c:a7:7e:c9:db:76:
c7:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:91:B6:1A:93:D4:00:A9:47:7E:48:BF:35:C2:3B:65:2D:4E:E0:01
X509v3 Authority Key Identifier:
keyid:2A:C3:DA:A1:B1:48:50:F2:E6:1C:59:2B:21:91:91:5A:5E:65:A4:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/QZG2GpPUAKlHfki_NcI7ZS1O4AE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/KsPaobFIUPLmHFkrIZGRWl5lpHg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.115.16.0/24
82.115.18.0-82.115.21.255
82.115.24.0/22
85.8.164.0/22
91.132.59.0/24
185.59.115.0/24
185.129.108.0/23
185.220.236.0/22
185.234.144.0/22
185.248.184.0/22
188.253.0.0/23
212.87.192.0/22
212.90.100.0/22
Signature Algorithm: sha256WithRSAEncryption
2f:42:24:20:a4:d6:97:74:f7:c7:aa:6d:6b:b8:c8:d9:c9:e5:
e3:c6:64:47:e2:f2:f9:7d:46:ed:88:15:f5:d3:e5:33:f5:65:
b8:12:da:1f:0e:eb:fe:08:89:6a:d4:f4:9b:b4:ce:dc:b5:20:
b9:c6:8d:7a:36:33:00:4e:37:1a:94:f9:2e:bc:9c:cc:78:6c:
a4:94:9a:28:29:85:42:31:1b:ac:85:bc:7e:78:02:e1:af:12:
c1:5f:bb:25:c3:d4:2e:ce:12:ba:03:5e:58:bf:24:1d:e1:8a:
73:fb:82:80:8b:51:da:f2:72:e7:60:df:86:c1:99:94:6a:dc:
64:74:3b:04:c9:3c:4c:59:c9:70:38:9b:c0:6b:0b:42:bb:46:
28:89:a2:cc:ab:dc:8c:9f:54:ff:74:c5:92:98:45:1c:ef:36:
0b:0e:56:a7:59:58:37:f7:ba:58:5c:2f:13:41:34:a5:54:29:
a3:15:ba:f7:fd:e7:b0:3c:35:ae:c0:22:c1:43:3c:00:cf:7d:
f0:25:26:05:77:32:c6:a6:f6:3e:b3:1f:90:ea:a9:3d:9a:f6:
8c:e1:d5:d1:ef:fb:3f:db:1a:2b:f7:b7:65:5c:65:54:04:b1:
de:d3:38:bc:60:0f:e1:3e:14:86:32:f2:70:32:8b:29:51:6b:
92:07:43:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:57:42 2023 by rpki-client on console-fra.rpki-client.org