Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/pzjl5n3FqGfzIiyVu0hh8o-YKxE.roa
File: pzjl5n3FqGfzIiyVu0hh8o-YKxE.roa (raw, json)
Hash identifier: e531x/Q0bMUGvZ+Z6lE9FiVzr1ZfZXBv7bARqQ27jTc=
Subject key identifier: A7:38:E5:E6:7D:C5:A8:67:F3:22:2C:95:BB:48:61:F2:8F:98:2B:11
Certificate issuer: /CN=2ac3daa1b14850f2e61c592b2191915a5e65a478
Certificate serial: 13AB08F1
Authority key identifier: 2A:C3:DA:A1:B1:48:50:F2:E6:1C:59:2B:21:91:91:5A:5E:65:A4:78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/pzjl5n3FqGfzIiyVu0hh8o-YKxE.roa
Signing time: Tue 08 Feb 2022 21:59:06 +0000
ROA not before: Tue 08 Feb 2022 21:59:06 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 31732
IP address blocks: 212.90.100.0/22 maxlen: 24
185.220.236.0/22 maxlen: 24
45.139.6.0/23 maxlen: 24
193.36.72.0/23 maxlen: 23
193.36.84.0/23 maxlen: 23
46.249.97.0/24 maxlen: 24
46.249.98.0/23 maxlen: 23
46.249.104.0/21 maxlen: 21
46.249.100.0/22 maxlen: 22
46.249.112.0/21 maxlen: 21
45.150.140.0/22 maxlen: 22
188.209.155.0/24 maxlen: 24
82.115.0.0/21 maxlen: 24
185.59.114.0/23 maxlen: 24
185.129.108.0/22 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 329976049 (0x13ab08f1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ac3daa1b14850f2e61c592b2191915a5e65a478
Validity
Not Before: Feb 8 21:59:06 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a738e5e67dc5a867f3222c95bb4861f28f982b11
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:90:3c:93:21:32:ee:75:66:86:a1:8c:87:dc:
a3:1c:bb:e1:5a:13:28:3b:3d:29:33:cc:0f:be:c3:
54:1c:34:16:a8:a7:64:08:d2:55:c8:f0:69:e3:6b:
57:73:c1:29:db:b8:12:51:44:23:7b:dc:57:25:ee:
72:62:b0:93:39:ac:a9:67:47:74:fe:33:05:69:af:
ce:e6:55:bb:86:30:fe:5f:3b:fc:51:3c:13:82:8d:
6f:53:d3:e2:f6:4a:a7:53:5b:6f:84:9a:25:e3:8e:
93:20:ff:8e:e0:7a:d6:ba:88:87:15:69:a4:fb:ed:
8a:ac:41:df:f9:ea:c4:e5:9a:cb:20:f5:ed:16:e6:
63:db:d8:f5:9e:4d:46:03:e1:68:92:47:99:6f:80:
32:cb:ab:f9:87:5d:0c:25:98:b9:9d:cc:1c:e2:c9:
eb:06:05:71:d3:18:a2:54:68:8e:85:80:17:9b:7b:
ac:6a:ac:1c:fe:7c:d2:03:9b:bc:a0:d9:0f:4f:0c:
3c:f1:7b:0a:93:df:10:3a:4f:44:ba:d8:03:4b:83:
ee:44:b1:0b:c5:8d:a3:4a:00:f8:da:c1:c8:26:0f:
bb:e4:44:06:96:b3:ee:96:cf:b5:93:7d:2f:4d:6d:
1e:b4:80:f6:9c:8d:fa:9e:78:00:9b:fd:56:f5:6a:
3d:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:38:E5:E6:7D:C5:A8:67:F3:22:2C:95:BB:48:61:F2:8F:98:2B:11
X509v3 Authority Key Identifier:
keyid:2A:C3:DA:A1:B1:48:50:F2:E6:1C:59:2B:21:91:91:5A:5E:65:A4:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/pzjl5n3FqGfzIiyVu0hh8o-YKxE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/KsPaobFIUPLmHFkrIZGRWl5lpHg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.139.6.0/23
45.150.140.0/22
46.249.97.0-46.249.119.255
82.115.0.0/21
185.59.114.0/23
185.129.108.0/22
185.220.236.0/22
188.209.155.0/24
193.36.72.0/23
193.36.84.0/23
212.90.100.0/22
Signature Algorithm: sha256WithRSAEncryption
0d:fb:75:3c:53:e0:63:af:63:83:47:89:4e:64:b1:6d:af:1a:
d2:f8:30:e2:e4:92:12:4a:20:f1:db:6e:b1:d2:75:fe:00:60:
e9:ef:6c:0e:24:de:fa:03:c0:bc:76:2f:97:0e:d4:0d:f4:a5:
c2:81:5c:a9:9b:d6:ac:7f:21:46:09:4c:80:91:8f:21:eb:6e:
5b:60:62:1d:c9:59:d1:fe:45:33:a2:6e:89:c5:11:86:c3:fe:
cd:87:5c:01:14:04:db:2c:7f:d1:ca:ab:f0:82:1d:3d:17:64:
23:50:c0:bf:ad:47:ef:ee:db:97:e6:7b:10:e9:55:17:da:5c:
4d:00:88:4a:21:9b:65:6f:8f:5b:1a:ef:f9:48:fd:c9:f5:10:
07:20:ca:fa:26:b2:5c:3d:3a:94:ca:b9:84:e5:dd:4d:dc:ca:
c8:3c:7d:ca:bf:8b:e3:eb:c6:a6:5e:bb:40:5a:61:79:53:8d:
a2:ac:70:bf:25:bc:74:51:0a:ee:4f:61:e0:a3:7f:be:b9:0e:
90:5b:46:58:77:bc:1b:37:33:b7:7a:3f:2e:81:59:77:dc:28:
a9:1b:31:80:b3:91:0a:f9:f3:ec:68:6f:e1:68:b7:05:9a:53:
65:66:82:68:03:78:18:bc:66:d4:3f:96:dd:5a:26:0a:70:3f:
f1:ad:f3:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:01:25 2023 by rpki-client on console-ams.rpki-client.org