Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/517694-c8a1-458b-9cf2-6c7e5685890c/1/ZOU-Q-BZiAMNPVX6FMeGEFXtUDA.roa
File: ZOU-Q-BZiAMNPVX6FMeGEFXtUDA.roa (raw, json)
Hash identifier: JmHyiCuXs5oB8SKw1oINSn4c/jb2milM990XDUylFfw=
Subject key identifier: 64:E5:3E:43:E0:59:88:03:0D:3D:55:FA:14:C7:86:10:55:ED:50:30
Certificate issuer: /CN=1f4738389cb3b998ec4fa6d4272f8dd799fbc4a9
Certificate serial: 0539FB53
Authority key identifier: 1F:47:38:38:9C:B3:B9:98:EC:4F:A6:D4:27:2F:8D:D7:99:FB:C4:A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H0c4OJyzuZjsT6bUJy-N15n7xKk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/517694-c8a1-458b-9cf2-6c7e5685890c/1/ZOU-Q-BZiAMNPVX6FMeGEFXtUDA.roa
Signing time: Fri 27 May 2022 13:29:53 +0000
ROA not before: Fri 27 May 2022 13:29:53 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 61317
IP address blocks: 91.208.69.0/24 maxlen: 24
91.208.73.0/24 maxlen: 24
91.213.200.0/24 maxlen: 24
194.156.151.0/24 maxlen: 24
194.156.150.0/24 maxlen: 24
194.156.150.0/23 maxlen: 24
45.83.238.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 87685971 (0x539fb53)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f4738389cb3b998ec4fa6d4272f8dd799fbc4a9
Validity
Not Before: May 27 13:29:53 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=64e53e43e05988030d3d55fa14c7861055ed5030
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:8a:58:75:92:2c:ce:ca:46:f7:db:68:bd:82:
fa:ba:5a:2b:03:de:7d:04:18:79:66:68:9a:84:ba:
37:60:9e:80:b3:a0:10:d4:0a:51:4c:35:81:64:4a:
ef:37:ec:0c:35:64:9d:9c:f7:ff:69:dc:70:59:64:
ba:d6:4f:80:4d:bc:a2:65:d8:46:d8:93:67:40:71:
c7:d3:f7:fe:eb:79:9d:2d:e9:b9:9a:9c:12:59:1e:
5f:17:ad:06:25:3b:b5:22:75:09:55:a6:be:f9:5f:
9d:16:01:40:86:cf:df:0d:0b:cb:d5:26:3c:3a:d2:
74:44:94:df:88:4d:9b:8d:57:81:b4:92:33:7c:a2:
ee:ee:88:49:3d:86:5f:82:9a:c7:ae:4f:12:58:ca:
c2:51:43:b2:b7:a6:b0:a8:c2:e3:43:8f:48:f3:e9:
64:0d:0e:e6:1b:91:5d:82:0a:b3:2c:49:ce:9b:2d:
aa:91:10:5f:d6:35:2c:0c:ed:33:5b:26:ea:24:ff:
db:61:d4:15:bc:74:e8:6d:ea:65:d0:1c:9c:fb:c6:
84:49:db:60:1f:4f:a2:55:2e:b9:39:d1:a6:a0:75:
12:f7:9c:49:6a:5f:42:a4:c1:42:c4:13:6a:16:82:
46:3c:3c:2a:26:a8:5b:ad:b9:a8:e5:61:15:e9:e8:
42:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:E5:3E:43:E0:59:88:03:0D:3D:55:FA:14:C7:86:10:55:ED:50:30
X509v3 Authority Key Identifier:
keyid:1F:47:38:38:9C:B3:B9:98:EC:4F:A6:D4:27:2F:8D:D7:99:FB:C4:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H0c4OJyzuZjsT6bUJy-N15n7xKk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/517694-c8a1-458b-9cf2-6c7e5685890c/1/ZOU-Q-BZiAMNPVX6FMeGEFXtUDA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/517694-c8a1-458b-9cf2-6c7e5685890c/1/H0c4OJyzuZjsT6bUJy-N15n7xKk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.83.238.0/24
91.208.69.0/24
91.208.73.0/24
91.213.200.0/24
194.156.150.0/23
Signature Algorithm: sha256WithRSAEncryption
0e:83:98:5f:ed:e8:37:4d:36:39:9f:9d:d3:f5:34:ee:b8:e1:
77:a9:af:d0:07:45:d8:ae:24:9d:2f:8d:fa:5c:62:4a:3c:f5:
8f:ae:d2:9d:7c:2d:fe:c1:00:ef:8e:a2:b9:a1:f4:10:1b:1a:
24:d8:45:5d:e8:ae:71:90:9e:f6:83:64:07:10:1f:75:02:eb:
1d:63:8c:3e:2f:83:ea:13:b5:df:85:f2:51:32:c9:0f:7f:c1:
b5:96:a1:e8:88:e5:12:2d:f7:4f:88:d7:aa:5c:d7:1e:01:4f:
b2:1f:64:e4:c2:cc:08:6e:e4:b0:56:c8:11:8e:8a:53:f2:4a:
df:5a:22:65:e5:5e:55:0f:9d:24:6a:02:ca:5b:48:c4:72:a0:
9b:52:4f:d9:df:c9:84:5d:43:fc:a6:fd:17:a5:4f:76:fb:db:
6b:0a:86:09:3b:e1:f7:cc:84:b0:a1:99:ba:35:70:f2:84:72:
12:80:bd:f1:98:34:69:04:a6:7b:7b:6a:ec:31:2f:1b:19:54:
79:77:59:ad:a2:5b:cd:54:bf:09:65:9b:e5:f1:da:86:f8:2e:
8d:fa:14:38:e1:2c:99:ac:1f:97:80:46:3f:b5:65:9f:87:9c:
6a:c7:94:2b:d0:2e:aa:8a:b7:3b:35:d3:75:24:44:38:6c:5d:
ad:df:aa:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:35:13 2024 by rpki-client on console-fra.rpki-client.org