Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/30ed3e-c4c4-4de8-b4f1-f11a39f26c3b/1/ZV7S98XbtG1iQHw1VtNxKFUY1eg.roa
File: ZV7S98XbtG1iQHw1VtNxKFUY1eg.roa (raw, json)
Hash identifier: ag4zqSkdLULqfaRNMnBh1o0hOWp8cASJtWD6QsMkh/Q=
Subject key identifier: 65:5E:D2:F7:C5:DB:B4:6D:62:40:7C:35:56:D3:71:28:55:18:D5:E8
Certificate issuer: /CN=5da3941c27cfe5c234c4bf221ecb2a579b2deaab
Certificate serial: 018964C0602CC4EE6555DD53AC67A1CFCD87
Authority key identifier: 5D:A3:94:1C:27:CF:E5:C2:34:C4:BF:22:1E:CB:2A:57:9B:2D:EA:AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XaOUHCfP5cI0xL8iHssqV5st6qs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/30ed3e-c4c4-4de8-b4f1-f11a39f26c3b/1/ZV7S98XbtG1iQHw1VtNxKFUY1eg.roa
Signing time: Mon 17 Jul 2023 16:47:56 +0000
ROA not before: Mon 17 Jul 2023 16:47:56 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 49505
IP address blocks: 45.134.25.0/24 maxlen: 24
45.132.128.0/24 maxlen: 24
45.132.129.0/24 maxlen: 24
185.188.41.0/24 maxlen: 24
45.146.24.0/24 maxlen: 24
45.152.116.0/24 maxlen: 24
45.152.117.0/24 maxlen: 24
2.56.138.0/24 maxlen: 24
45.134.24.0/24 maxlen: 24
45.131.47.0/24 maxlen: 24
176.222.57.0/24 maxlen: 24
176.222.56.0/24 maxlen: 24
176.222.59.0/24 maxlen: 24
45.146.27.0/24 maxlen: 24
45.146.25.0/24 maxlen: 24
45.149.129.0/24 maxlen: 24
2.59.49.0/24 maxlen: 24
45.133.31.0/24 maxlen: 24
45.89.231.0/24 maxlen: 24
91.236.121.0/24 maxlen: 24
45.138.213.0/24 maxlen: 24
45.138.214.0/24 maxlen: 24
91.206.68.0/24 maxlen: 24
45.147.15.0/24 maxlen: 24
45.147.12.0/24 maxlen: 24
45.147.13.0/24 maxlen: 24
45.147.14.0/24 maxlen: 24
45.153.224.0/24 maxlen: 24
45.153.225.0/24 maxlen: 24
45.153.226.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:64:c0:60:2c:c4:ee:65:55:dd:53:ac:67:a1:cf:cd:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5da3941c27cfe5c234c4bf221ecb2a579b2deaab
Validity
Not Before: Jul 17 16:47:56 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=655ed2f7c5dbb46d62407c3556d371285518d5e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:26:64:e1:00:55:ed:64:de:f7:a3:6d:60:a1:
4a:36:ce:4f:08:cd:eb:5a:56:aa:54:c2:7c:df:3d:
63:31:39:54:d1:86:c9:c1:66:dc:b6:51:16:d8:8c:
41:c1:3a:c6:5a:5e:5b:92:25:70:fc:b4:1f:08:1b:
a2:22:27:b3:ce:06:b1:14:87:c4:5f:6a:cc:20:40:
0e:f6:2f:d1:f8:81:65:3a:f4:8f:17:c1:e3:16:3c:
f4:81:e8:b4:51:d7:06:6d:f2:68:4d:02:94:59:46:
96:c9:34:d8:5c:17:8f:c9:f5:15:73:4c:d5:7e:d5:
19:f0:2d:1f:5a:3b:32:96:06:08:f6:c6:59:f0:b3:
da:01:43:0f:2f:33:58:a9:70:2a:a5:71:ab:fa:dd:
30:e6:f8:ef:9a:9c:2b:a4:c4:60:b5:db:90:15:e2:
a4:6b:c3:a0:03:f5:ed:63:8b:94:59:48:48:b7:ca:
12:f6:4c:6f:a6:1d:80:17:97:9b:58:97:00:65:49:
81:6f:6b:8d:9a:b9:ee:a4:cd:39:0c:a8:3e:ce:43:
63:c3:01:99:42:a8:d2:13:d9:bf:71:1b:5e:27:8b:
eb:c6:5a:8b:6e:21:19:2f:f4:25:c4:7d:94:51:7f:
57:7a:d9:1a:53:db:1b:4c:88:cb:76:d0:b2:56:52:
65:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:5E:D2:F7:C5:DB:B4:6D:62:40:7C:35:56:D3:71:28:55:18:D5:E8
X509v3 Authority Key Identifier:
keyid:5D:A3:94:1C:27:CF:E5:C2:34:C4:BF:22:1E:CB:2A:57:9B:2D:EA:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XaOUHCfP5cI0xL8iHssqV5st6qs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/30ed3e-c4c4-4de8-b4f1-f11a39f26c3b/1/ZV7S98XbtG1iQHw1VtNxKFUY1eg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/30ed3e-c4c4-4de8-b4f1-f11a39f26c3b/1/XaOUHCfP5cI0xL8iHssqV5st6qs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.56.138.0/24
2.59.49.0/24
45.89.231.0/24
45.131.47.0/24
45.132.128.0/23
45.133.31.0/24
45.134.24.0/23
45.138.213.0-45.138.214.255
45.146.24.0/23
45.146.27.0/24
45.147.12.0/22
45.149.129.0/24
45.152.116.0/23
45.153.224.0-45.153.226.255
91.206.68.0/24
91.236.121.0/24
176.222.56.0/23
176.222.59.0/24
185.188.41.0/24
Signature Algorithm: sha256WithRSAEncryption
1c:07:9e:f1:2f:a0:25:63:ef:d4:9c:f2:79:cf:04:f0:a1:c3:
c3:49:02:c9:85:02:9f:83:38:d7:6c:f3:13:e7:b2:5c:87:ae:
1a:88:d7:f8:a6:57:f7:4e:b7:ae:fb:68:7f:bd:88:59:1a:5e:
2c:6f:2f:73:99:1f:ae:fe:fe:3b:77:81:93:db:3d:72:ff:90:
11:fa:60:d1:65:bb:ac:22:e9:f3:9f:eb:b1:8d:50:de:45:a1:
3d:c8:ea:26:e7:75:66:18:99:f7:d7:9b:f7:82:10:bd:a0:06:
c7:65:c3:d9:c2:09:10:43:a5:94:0e:e3:9a:86:28:53:fa:8f:
e1:2c:2a:91:74:97:ef:9a:06:ca:74:02:3c:a4:1d:62:30:41:
b2:63:e5:0d:bb:a2:ea:ba:54:4f:f4:d1:46:47:b5:f7:26:bc:
73:4f:71:6e:9c:86:31:36:8f:3e:34:38:9c:85:ec:e3:4b:f7:
2b:b7:70:37:43:b0:7c:73:27:c9:0b:98:62:db:e3:7a:7c:3e:
25:80:32:2b:11:b6:46:f7:d5:a0:4a:b7:20:8d:c2:08:04:9b:
81:06:ad:f0:07:d3:5a:c1:94:eb:c5:8a:9f:df:e9:a4:0e:bc:
3b:d2:04:a4:94:18:a5:7d:7d:7b:54:c1:67:cf:90:66:a3:6a:
1a:14:93:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:47 2024 by rpki-client on console-fra.rpki-client.org