Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/a1ae70-7996-4687-a0d7-5e0f4ab809bb/1/zE7hiPsmOmSe4fV0R1p3YkQXNjE.roa
File: zE7hiPsmOmSe4fV0R1p3YkQXNjE.roa (raw, json)
Hash identifier: hyWd/IoJOKtvDE0KxJvro5FZBsCRmcZ9W7DQ9s1ktlc=
Subject key identifier: CC:4E:E1:88:FB:26:3A:64:9E:E1:F5:74:47:5A:77:62:44:17:36:31
Certificate issuer: /CN=743e447edb8a5e0e1b1d7f5cdc287c364a5fb0b5
Certificate serial: 01837C046E3109C2ED98CDCCCFEA9E103E77
Authority key identifier: 74:3E:44:7E:DB:8A:5E:0E:1B:1D:7F:5C:DC:28:7C:36:4A:5F:B0:B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dD5EftuKXg4bHX9c3Ch8NkpfsLU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/a1ae70-7996-4687-a0d7-5e0f4ab809bb/1/zE7hiPsmOmSe4fV0R1p3YkQXNjE.roa
Signing time: Mon 26 Sep 2022 22:56:48 +0000
ROA not before: Mon 26 Sep 2022 22:56:48 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 7018
IP address blocks: 155.193.32.0/19 maxlen: 19
155.193.160.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:7c:04:6e:31:09:c2:ed:98:cd:cc:cf:ea:9e:10:3e:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=743e447edb8a5e0e1b1d7f5cdc287c364a5fb0b5
Validity
Not Before: Sep 26 22:56:48 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=cc4ee188fb263a649ee1f574475a776244173631
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:92:a0:13:10:b7:5b:d8:9c:dd:d9:c6:2f:fc:
98:38:9b:9e:bd:04:a1:12:40:36:8f:bc:87:3a:9b:
88:37:2a:fc:fd:c8:e5:5e:59:26:8d:66:08:05:1b:
56:3c:14:5a:82:2f:66:d5:22:d5:5d:a5:8f:d4:f0:
69:96:6c:5e:81:eb:2b:41:73:bf:f6:66:62:96:b3:
20:2c:d8:11:c3:50:47:d3:1b:f3:88:bf:b9:68:54:
fe:c3:96:e2:0b:78:83:35:af:07:bf:45:dc:5d:3e:
d1:85:4e:6f:3a:2f:33:6c:51:1a:5e:84:98:6d:1d:
c0:51:33:ea:a4:a9:cc:4e:52:1b:4b:58:75:c7:51:
34:da:e9:13:72:b2:85:7b:f4:f4:27:43:0a:a7:8f:
8b:b2:2f:d0:4d:7a:c2:98:fe:87:c6:b1:32:05:2d:
8f:ff:36:66:a7:9b:de:04:35:4d:78:22:cd:26:74:
f9:f2:9b:f2:25:54:e1:35:e1:52:80:56:8b:30:b3:
61:81:bd:51:ca:d2:5b:fe:2b:54:a4:8e:40:97:ff:
8c:f4:d3:06:fc:53:c4:1c:27:a1:ca:c2:ce:08:91:
e0:45:5a:2c:27:73:1f:26:d2:af:f5:25:82:1b:2a:
e7:74:ef:fe:34:9e:5a:5e:3d:de:7c:35:14:39:b1:
95:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:4E:E1:88:FB:26:3A:64:9E:E1:F5:74:47:5A:77:62:44:17:36:31
X509v3 Authority Key Identifier:
keyid:74:3E:44:7E:DB:8A:5E:0E:1B:1D:7F:5C:DC:28:7C:36:4A:5F:B0:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dD5EftuKXg4bHX9c3Ch8NkpfsLU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/a1ae70-7996-4687-a0d7-5e0f4ab809bb/1/zE7hiPsmOmSe4fV0R1p3YkQXNjE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/a1ae70-7996-4687-a0d7-5e0f4ab809bb/1/dD5EftuKXg4bHX9c3Ch8NkpfsLU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
155.193.32.0/19
155.193.160.0/24
Signature Algorithm: sha256WithRSAEncryption
1e:cd:c1:5d:71:78:0b:22:96:6d:d3:b6:79:72:5b:f8:a7:9f:
87:5b:41:72:97:47:73:88:53:d5:a0:12:ad:c2:69:97:de:54:
33:82:4b:17:64:88:27:49:6b:55:71:95:4f:e7:20:ba:3e:9a:
f8:ad:04:f1:53:5c:2c:9f:ca:ff:d8:09:39:4d:00:67:5b:fd:
88:cf:62:4e:af:dc:f3:35:d4:dd:68:5d:16:26:65:2a:1f:9b:
a8:28:95:76:36:60:a1:ba:d7:2a:f8:57:fa:e4:e0:11:66:d5:
41:c4:d9:f5:67:b2:53:2d:b3:e6:a0:4f:aa:26:ed:bd:32:91:
ce:6f:e0:0d:95:49:c6:73:ab:ab:0a:1c:c5:75:84:13:31:f0:
a3:f8:79:23:5b:17:34:43:f5:08:fc:16:c2:9e:69:50:6e:da:
24:ea:04:3c:2c:45:7a:23:f9:11:08:36:d2:c1:11:15:de:23:
de:40:0b:72:3d:8c:5a:6e:bd:29:1c:a8:22:02:1b:fc:14:78:
3f:22:5e:98:09:dc:7a:a9:10:2f:6c:15:d6:86:3b:aa:88:2d:
a1:7d:68:6a:12:67:00:2d:82:4e:48:1d:14:0f:3e:7d:8b:c1:
14:1c:13:96:4d:a0:b1:50:fe:c8:ea:e9:32:92:a0:f2:9d:67:
69:c8:ef:02
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYN8BG4xCcLtmM3Mz+qeED53MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc0M2U0NDdlZGI4YTVlMGUxYjFkN2Y1Y2RjMjg3YzM2NGE1
ZmIwYjUwHhcNMjIwOTI2MjI1NjQ4WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjYzRlZTE4OGZiMjYzYTY0OWVlMWY1NzQ0NzVhNzc2MjQ0MTczNjMxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqJKgExC3W9ic3dnGL/yYOJuevQSh
EkA2j7yHOpuINyr8/cjlXlkmjWYIBRtWPBRagi9m1SLVXaWP1PBplmxegesrQXO/
9mZilrMgLNgRw1BH0xvziL+5aFT+w5biC3iDNa8Hv0XcXT7RhU5vOi8zbFEaXoSY
bR3AUTPqpKnMTlIbS1h1x1E02ukTcrKFe/T0J0MKp4+Lsi/QTXrCmP6HxrEyBS2P
/zZmp5veBDVNeCLNJnT58pvyJVThNeFSgFaLMLNhgb1RytJb/itUpI5Al/+M9NMG
/FPEHCehysLOCJHgRVosJ3MfJtKv9SWCGyrndO/+NJ5aXj3efDUUObGVnQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFMxO4Yj7JjpknuH1dEdad2JEFzYxMB8GA1UdIwQY
MBaAFHQ+RH7bil4OGx1/XNwofDZKX7C1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZEQ1RWZ0dUtYZzRiSFg5YzNDaDhOa3Bmc0xVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NS9hMWFlNzAtNzk5Ni00Njg3LWEwZDct
NWUwZjRhYjgwOWJiLzEvekU3aGlQc21PbVNlNGZWMFIxcDNZa1FYTmpFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83NS9hMWFlNzAtNzk5Ni00Njg3LWEwZDctNWUwZjRhYjgwOWJi
LzEvZEQ1RWZ0dUtYZzRiSFg5YzNDaDhOa3Bmc0xVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQFm8EgAwQA
m8GgMA0GCSqGSIb3DQEBCwUAA4IBAQAezcFdcXgLIpZt07Z5clv4p5+HW0Fyl0dz
iFPVoBKtwmmX3lQzgksXZIgnSWtVcZVP5yC6Ppr4rQTxU1wsn8r/2Ak5TQBnW/2I
z2JOr9zzNdTdaF0WJmUqH5uoKJV2NmChutcq+Ff65OARZtVBxNn1Z7JTLbPmoE+q
Ju29MpHOb+ANlUnGc6urChzFdYQTMfCj+HkjWxc0Q/UI/BbCnmlQbtok6gQ8LEV6
I/kRCDbSwREV3iPeQAtyPYxabr0pHKgiAhv8FHg/Il6YCdx6qRAvbBXWhjuqiC2h
fWhqEmcALYJOSB0UDz59i8EUHBOWTaCxUP7I6ukykqDynWdpyO8C
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:35:15 2024 by rpki-client on console-fra.rpki-client.org