Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/30ed3e-c4c4-4de8-b4f1-f11a39f26c3b/1/Zjsiakvgp8X7bihTh1x1VEWEdhU.roa
File: Zjsiakvgp8X7bihTh1x1VEWEdhU.roa (raw, json)
Hash identifier: xfdq7OP1J/Q8u9PBjQOKFeLr4fnFfjzVKkTegK7n3hY=
Subject key identifier: 66:3B:22:6A:4B:E0:A7:C5:FB:6E:28:53:87:5C:75:54:45:84:76:15
Certificate issuer: /CN=5da3941c27cfe5c234c4bf221ecb2a579b2deaab
Certificate serial: 0189B0D680ACB75C9C3F35585DF76D766103
Authority key identifier: 5D:A3:94:1C:27:CF:E5:C2:34:C4:BF:22:1E:CB:2A:57:9B:2D:EA:AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XaOUHCfP5cI0xL8iHssqV5st6qs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/30ed3e-c4c4-4de8-b4f1-f11a39f26c3b/1/Zjsiakvgp8X7bihTh1x1VEWEdhU.roa
Signing time: Tue 01 Aug 2023 11:23:14 +0000
ROA not before: Tue 01 Aug 2023 11:23:14 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 62240
IP address blocks: 92.119.192.0/24 maxlen: 24
45.159.85.0/24 maxlen: 24
45.153.227.0/24 maxlen: 24
193.32.164.0/24 maxlen: 24
193.32.166.0/24 maxlen: 24
193.32.165.0/24 maxlen: 24
45.142.37.0/24 maxlen: 24
45.129.130.0/24 maxlen: 24
45.129.129.0/24 maxlen: 24
45.129.131.0/24 maxlen: 24
193.32.167.0/24 maxlen: 24
45.136.69.0/24 maxlen: 24
45.136.68.0/24 maxlen: 24
193.36.231.0/24 maxlen: 24
45.138.4.0/24 maxlen: 24
176.222.58.0/24 maxlen: 24
45.138.6.0/24 maxlen: 24
45.138.5.0/24 maxlen: 24
45.146.26.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:b0:d6:80:ac:b7:5c:9c:3f:35:58:5d:f7:6d:76:61:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5da3941c27cfe5c234c4bf221ecb2a579b2deaab
Validity
Not Before: Aug 1 11:23:14 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=663b226a4be0a7c5fb6e2853875c755445847615
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:16:dd:45:63:27:98:97:95:77:98:22:06:8b:
ca:9e:10:ba:f6:15:99:46:b6:fa:8f:ce:92:8a:ff:
e4:3f:3a:f8:cf:7f:0f:65:08:11:cf:a3:dc:97:8e:
93:36:3e:84:2e:38:85:f8:ac:48:a5:2c:29:b3:a2:
4c:3e:16:ad:ce:29:dc:2c:ad:52:63:19:2c:69:cc:
14:9b:16:6a:0b:03:91:37:71:7e:43:dd:c9:de:35:
3f:ad:dd:10:c9:a3:d2:3e:f8:5c:ff:45:fc:f9:f9:
fe:7c:0f:39:24:d4:71:fa:c3:ee:8d:48:d4:7d:93:
a9:91:74:32:24:cd:1e:f9:77:94:6e:da:a1:fa:87:
f9:19:6b:0d:8e:f8:70:96:22:61:2c:81:5a:9a:22:
72:a3:1a:01:f4:a0:af:43:a6:79:c9:b0:e1:c6:b6:
c6:68:9e:93:f2:09:7d:90:85:24:9c:de:80:40:06:
e7:b4:97:34:37:7f:7d:93:25:22:a0:76:2a:8d:65:
1b:7f:29:f5:1c:3d:a8:11:37:ca:22:21:88:8e:50:
cd:fa:3c:9b:a1:1f:8f:b8:30:7a:db:e9:d1:eb:81:
9c:23:da:5a:30:9f:80:31:dd:a2:44:1b:b1:dd:93:
25:53:9a:49:ad:9b:d6:23:12:ec:5e:48:01:80:a4:
74:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:3B:22:6A:4B:E0:A7:C5:FB:6E:28:53:87:5C:75:54:45:84:76:15
X509v3 Authority Key Identifier:
keyid:5D:A3:94:1C:27:CF:E5:C2:34:C4:BF:22:1E:CB:2A:57:9B:2D:EA:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XaOUHCfP5cI0xL8iHssqV5st6qs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/30ed3e-c4c4-4de8-b4f1-f11a39f26c3b/1/Zjsiakvgp8X7bihTh1x1VEWEdhU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/30ed3e-c4c4-4de8-b4f1-f11a39f26c3b/1/XaOUHCfP5cI0xL8iHssqV5st6qs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.129.129.0-45.129.131.255
45.136.68.0/23
45.138.4.0-45.138.6.255
45.142.37.0/24
45.146.26.0/24
45.153.227.0/24
45.159.85.0/24
92.119.192.0/24
176.222.58.0/24
193.32.164.0/22
193.36.231.0/24
Signature Algorithm: sha256WithRSAEncryption
9b:88:02:12:96:a6:a6:f4:ad:09:09:60:b0:d1:07:36:65:b6:
fb:ae:bb:7d:66:70:90:0d:93:2f:f4:b3:90:e7:9a:2d:ab:c8:
6b:ef:79:50:33:91:0c:93:c5:8e:31:91:08:b1:44:69:21:82:
4f:bb:23:46:d3:a3:85:bd:13:e3:dc:2a:f9:00:3e:4c:62:fb:
d0:27:c5:2a:49:9f:dc:39:22:27:09:05:32:59:d2:b8:d5:fc:
a7:bf:52:13:3e:7a:aa:ee:37:a9:44:f8:08:ba:fe:9f:40:b5:
be:17:25:d6:89:3c:73:6f:9c:56:61:68:b3:82:88:66:3b:87:
6b:85:ad:fd:f9:ea:bf:4a:32:d8:88:e1:fd:12:04:37:85:be:
e5:c4:75:94:c3:19:a0:e3:d1:5b:51:39:f6:d9:8b:c0:9f:71:
a6:f9:16:28:24:69:80:8c:f8:62:57:8c:15:ad:45:3c:8f:84:
a1:06:bf:12:dc:91:b9:75:bc:77:5d:a8:4f:d2:e7:01:fd:90:
e0:1f:b0:64:dd:07:38:88:3a:89:e4:6c:2a:5b:e8:76:2b:a8:
65:7d:ef:e2:b5:5b:34:1e:fd:c1:d5:bb:89:09:42:4c:81:92:
37:88:cd:27:3d:d2:9c:43:da:c9:4a:97:72:66:05:0f:27:a8:
73:6f:ed:19
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgISAYmw1oCst1ycPzVYXfdtdmEDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVkYTM5NDFjMjdjZmU1YzIzNGM0YmYyMjFlY2IyYTU3OWIy
ZGVhYWIwHhcNMjMwODAxMTEyMzE0WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2NjNiMjI2YTRiZTBhN2M1ZmI2ZTI4NTM4NzVjNzU1NDQ1ODQ3NjE1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyBbdRWMnmJeVd5giBovKnhC69hWZ
Rrb6j86Siv/kPzr4z38PZQgRz6Pcl46TNj6ELjiF+KxIpSwps6JMPhatzincLK1S
YxksacwUmxZqCwORN3F+Q93J3jU/rd0QyaPSPvhc/0X8+fn+fA85JNRx+sPujUjU
fZOpkXQyJM0e+XeUbtqh+of5GWsNjvhwliJhLIFamiJyoxoB9KCvQ6Z5ybDhxrbG
aJ6T8gl9kIUknN6AQAbntJc0N399kyUioHYqjWUbfyn1HD2oETfKIiGIjlDN+jyb
oR+PuDB62+nR64GcI9paMJ+AMd2iRBux3ZMlU5pJrZvWIxLsXkgBgKR0WQIDAQAB
o4ICVTCCAlEwHQYDVR0OBBYEFGY7ImpL4KfF+24oU4dcdVRFhHYVMB8GA1UdIwQY
MBaAFF2jlBwnz+XCNMS/Ih7LKlebLeqrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWGFPVUhDZlA1Y0kweEw4aUhzc3FWNXN0NnFzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MC8zMGVkM2UtYzRjNC00ZGU4LWI0ZjEt
ZjExYTM5ZjI2YzNiLzEvWmpzaWFrdmdwOFg3YmloVGgxeDFWRVdFZGhVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84MC8zMGVkM2UtYzRjNC00ZGU4LWI0ZjEtZjExYTM5ZjI2YzNi
LzEvWGFPVUhDZlA1Y0kweEw4aUhzc3FWNXN0NnFzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMGsGCCsGAQUFBwEHAQH/BFwwWjBYBAIAATBSMAwDBAAtgYED
BAItgYADBAEtiEQwDAMEAi2KBAMEAC2KBgMEAC2OJQMEAC2SGgMEAC2Z4wMEAC2f
VQMEAFx3wAMEALDeOgMEAsEgpAMEAMEk5zANBgkqhkiG9w0BAQsFAAOCAQEAm4gC
EpampvStCQlgsNEHNmW2+667fWZwkA2TL/SzkOeaLavIa+95UDORDJPFjjGRCLFE
aSGCT7sjRtOjhb0T49wq+QA+TGL70CfFKkmf3DkiJwkFMlnSuNX8p79SEz56qu43
qUT4CLr+n0C1vhcl1ok8c2+cVmFos4KIZjuHa4Wt/fnqv0oy2Ijh/RIEN4W+5cR1
lMMZoOPRW1E59tmLwJ9xpvkWKCRpgIz4YleMFa1FPI+EoQa/EtyRuXW8d12oT9Ln
Af2Q4B+wZN0HOIg6ieRsKlvodiuoZX3v4rVbNB79wdW7iQlCTIGSN4jNJz3SnEPa
yUqXcmYFDyeoc2/tGQ==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:47 2024 by rpki-client on console-fra.rpki-client.org