Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/4bba7c-a81f-40e1-8814-65daad632957/1/ZOaaeR50tn5CJPmREAsYfDYOOpg.roa
File: ZOaaeR50tn5CJPmREAsYfDYOOpg.roa (raw, json)
Hash identifier: C0D2+X/eUH47l2kACo8LyMCaGSF7RmvIrczXL080gyQ=
Subject key identifier: 64:E6:9A:79:1E:74:B6:7E:42:24:F9:91:10:0B:18:7C:36:0E:3A:98
Certificate issuer: /CN=942588b91da9cca81b49e603a988e2b1eabddc98
Certificate serial: 01856E8B0B3F9EDB155344758206102C4CA2
Authority key identifier: 94:25:88:B9:1D:A9:CC:A8:1B:49:E6:03:A9:88:E2:B1:EA:BD:DC:98
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lCWIuR2pzKgbSeYDqYjiseq93Jg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/4bba7c-a81f-40e1-8814-65daad632957/1/ZOaaeR50tn5CJPmREAsYfDYOOpg.roa
Signing time: Sun 01 Jan 2023 18:14:44 +0000
ROA not before: Sun 01 Jan 2023 18:14:44 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 15596
IP address blocks: 31.42.112.0/20 maxlen: 20
31.42.120.0/21 maxlen: 24
91.210.144.0/22 maxlen: 22
89.251.24.0/22 maxlen: 22
89.251.20.0/22 maxlen: 22
193.110.20.0/22 maxlen: 22
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:8b:0b:3f:9e:db:15:53:44:75:82:06:10:2c:4c:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=942588b91da9cca81b49e603a988e2b1eabddc98
Validity
Not Before: Jan 1 18:14:44 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=64e69a791e74b67e4224f991100b187c360e3a98
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:52:bc:bc:5f:bc:79:e1:86:17:b8:86:c2:56:
62:70:a0:d6:73:44:9f:ae:5b:ef:2f:38:ee:62:4a:
b3:b1:6f:65:32:40:5d:f9:d6:d7:68:fd:ce:1c:82:
c8:e7:f4:61:a0:a2:b4:1c:7e:ed:cd:b4:4e:a2:94:
4a:c4:4c:6a:36:a4:91:10:48:0d:28:94:b1:c5:ae:
b1:71:6d:d5:d4:24:71:4e:14:99:d8:3b:a5:2a:be:
72:fe:3b:60:33:9a:03:b1:ec:c5:00:4c:03:a8:8a:
4c:de:bd:1b:df:a9:c5:74:78:6e:e7:d3:0e:e3:23:
7e:47:d9:58:b4:15:78:5f:df:57:17:06:6a:38:cd:
a3:30:c7:c8:fe:37:cb:b2:1c:33:89:42:07:8f:cd:
2a:1a:a6:cc:f4:a9:89:6d:e0:ab:53:5c:c8:0b:cd:
32:4d:4a:f6:1f:84:f6:da:3e:65:0b:7f:2a:c7:25:
c1:99:89:bf:46:48:3c:1e:f0:21:b4:29:19:ee:ba:
bd:60:04:05:cf:2d:df:9c:cb:7a:e5:5d:c9:83:98:
b0:3e:7f:df:3c:ff:eb:fc:38:87:ef:14:59:ed:e5:
7a:65:bb:55:dc:e4:f2:12:d2:de:13:65:d5:f8:7c:
d8:37:60:63:4a:e1:db:5e:44:65:51:38:5e:aa:34:
9e:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:E6:9A:79:1E:74:B6:7E:42:24:F9:91:10:0B:18:7C:36:0E:3A:98
X509v3 Authority Key Identifier:
keyid:94:25:88:B9:1D:A9:CC:A8:1B:49:E6:03:A9:88:E2:B1:EA:BD:DC:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lCWIuR2pzKgbSeYDqYjiseq93Jg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/4bba7c-a81f-40e1-8814-65daad632957/1/ZOaaeR50tn5CJPmREAsYfDYOOpg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/4bba7c-a81f-40e1-8814-65daad632957/1/lCWIuR2pzKgbSeYDqYjiseq93Jg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.42.112.0/20
89.251.20.0-89.251.27.255
91.210.144.0/22
193.110.20.0/22
Signature Algorithm: sha256WithRSAEncryption
00:3d:d6:0a:6b:cc:17:80:ee:b4:30:21:f6:ab:89:57:02:fc:
e0:cb:e3:51:ce:18:e1:d0:fc:49:a6:e7:c2:89:d0:63:39:3f:
eb:d4:7f:bf:d0:8a:ee:d1:af:8f:2d:b9:04:c7:1d:3f:a7:21:
21:ae:c7:d2:76:1d:69:d2:36:e0:9d:cc:d7:08:57:f7:65:2a:
56:d9:5d:a2:83:04:31:86:fe:92:68:7e:db:6c:9c:58:f1:95:
a8:ff:05:3b:e3:0c:f7:19:3a:47:11:8b:96:d5:b7:dc:f6:27:
c6:c5:8c:e8:21:20:1c:a4:8b:41:1b:0e:8b:d9:7c:eb:ee:ba:
c0:53:aa:d3:7b:ed:5d:6b:08:fc:e1:73:24:92:a5:1e:10:11:
cd:8e:7b:e7:0d:1e:62:4a:f5:29:49:19:ef:96:29:c3:7e:ea:
20:8c:de:68:53:5e:0c:14:b6:b9:e6:42:e3:00:e8:48:ad:15:
9b:6d:f3:ff:13:2a:67:62:cd:a6:11:6f:0f:2b:6d:fa:1a:20:
a2:d4:a5:fb:b1:60:47:93:bf:32:b0:c5:11:e7:d3:d9:39:f9:
0c:46:26:41:77:42:8d:3e:a0:57:6e:55:35:70:73:2e:85:13:
9a:cc:35:1d:30:3c:9a:8d:34:fc:a4:fd:df:fd:02:03:6b:22:
63:73:b6:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:19:49 2024 by rpki-client on console-ams.rpki-client.org