Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/f251ed-5967-4ddd-932b-7d40b7c8fb01/1/3zZk-SKnSNHD_7_bY8TT71bbDBs.roa
File: 3zZk-SKnSNHD_7_bY8TT71bbDBs.roa (raw, json)
Hash identifier: jjDnHp4uX8EIFRpXShcAtZmg3tXYH4+3GKQNMMFrgYQ=
Subject key identifier: DF:36:64:F9:22:A7:48:D1:C3:FF:BF:DB:63:C4:D3:EF:56:DB:0C:1B
Certificate issuer: /CN=32a77427c03709b339a95b0ad9a4ac9d2c92c903
Certificate serial: 1018D8B0
Authority key identifier: 32:A7:74:27:C0:37:09:B3:39:A9:5B:0A:D9:A4:AC:9D:2C:92:C9:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Mqd0J8A3CbM5qVsK2aSsnSySyQM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/f251ed-5967-4ddd-932b-7d40b7c8fb01/1/3zZk-SKnSNHD_7_bY8TT71bbDBs.roa
Signing time: Tue 24 May 2022 15:31:13 +0000
ROA not before: Tue 24 May 2022 15:31:13 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 43666
IP address blocks: 91.197.182.0/24 maxlen: 24
91.197.180.0/22 maxlen: 22
91.197.180.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 270063792 (0x1018d8b0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=32a77427c03709b339a95b0ad9a4ac9d2c92c903
Validity
Not Before: May 24 15:31:13 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=df3664f922a748d1c3ffbfdb63c4d3ef56db0c1b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:e3:dc:8f:14:9a:38:09:bc:77:13:ce:95:a6:
2b:c5:cb:a1:7e:c1:c1:a4:e3:44:ed:69:10:c2:b8:
c2:d6:47:0f:dd:c1:e8:1f:8c:1b:e2:68:db:34:3d:
1a:12:bc:2a:82:cb:c5:d9:60:cd:08:81:e7:5d:ae:
60:bc:90:94:64:7d:e1:9a:d2:7c:f3:52:b2:12:82:
e2:d2:73:94:2d:33:5a:3b:6c:a5:be:d2:ef:14:2d:
c5:2d:ce:15:8d:e8:ab:7a:d0:b7:14:96:0d:f2:be:
d8:f8:4c:8b:56:34:f2:07:77:e6:53:c3:e9:92:3d:
3b:e3:b7:53:19:5f:24:b7:58:9f:7c:c9:a1:e8:3f:
9b:41:ae:8d:f1:e6:25:9f:59:c0:e7:12:8b:65:4c:
2c:21:49:2c:0d:79:2c:61:14:17:96:55:ca:55:01:
70:52:79:83:77:b6:2f:1e:43:2c:49:37:c9:7f:3e:
3c:bf:bb:80:1e:9e:0a:6e:49:1e:f0:cf:6f:87:15:
19:ab:7d:20:2f:49:2e:2c:de:95:22:36:85:32:f7:
3c:ad:cb:48:6e:5f:05:9e:8d:e0:9a:7a:07:ac:9b:
fc:8a:da:b7:4a:92:f5:49:74:aa:12:02:db:aa:69:
17:59:43:dc:2b:00:ef:e2:68:49:aa:21:95:45:e1:
06:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:36:64:F9:22:A7:48:D1:C3:FF:BF:DB:63:C4:D3:EF:56:DB:0C:1B
X509v3 Authority Key Identifier:
keyid:32:A7:74:27:C0:37:09:B3:39:A9:5B:0A:D9:A4:AC:9D:2C:92:C9:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Mqd0J8A3CbM5qVsK2aSsnSySyQM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/f251ed-5967-4ddd-932b-7d40b7c8fb01/1/3zZk-SKnSNHD_7_bY8TT71bbDBs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/f251ed-5967-4ddd-932b-7d40b7c8fb01/1/Mqd0J8A3CbM5qVsK2aSsnSySyQM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.197.180.0/22
Signature Algorithm: sha256WithRSAEncryption
1c:ee:79:ba:90:df:2d:b8:10:4a:d9:1e:82:9d:78:b1:09:49:
49:f7:29:25:b3:ec:03:de:6e:c6:c6:d8:4c:cc:af:29:dd:5c:
c8:14:60:93:84:2c:71:e9:cf:61:7d:bc:cd:04:a2:d1:83:b8:
fa:08:66:4d:46:7a:d6:49:c9:e5:36:e9:c1:fd:c8:2b:ca:11:
31:66:3c:75:49:5e:b7:a8:c4:43:57:e6:9a:4b:69:f0:d3:d9:
82:60:45:5c:bd:83:55:74:fc:4e:bc:6d:cf:85:b0:15:e0:c6:
1e:d5:9c:ae:00:b2:1d:6a:26:13:ff:e7:66:8e:32:ea:e8:30:
26:cf:bb:29:db:0b:05:d6:03:49:26:18:05:ab:a2:3c:23:c3:
27:c8:5f:61:7a:24:b3:99:50:ef:40:be:d6:07:d9:8c:53:c8:
df:ca:7d:f4:92:bf:2d:aa:ee:b5:4e:c0:5a:c1:5d:f2:74:67:
32:66:ab:b4:ce:f0:40:9c:a6:f8:a8:0e:6a:2a:0b:64:17:7a:
4b:90:3f:e1:01:dd:bd:36:d3:69:11:fd:0b:26:f9:3f:f8:dc:
9b:65:43:01:b3:89:e9:35:30:35:e7:7c:6d:c2:cb:55:50:d6:
40:d5:b0:c1:12:04:0c:09:e2:a6:e3:35:73:6f:9f:e1:f8:5e:
c5:9d:31:e6
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEEBjYsDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygz
MmE3NzQyN2MwMzcwOWIzMzlhOTViMGFkOWE0YWM5ZDJjOTJjOTAzMB4XDTIyMDUy
NDE1MzExM1oXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoZGYzNjY0ZjkyMmE3
NDhkMWMzZmZiZmRiNjNjNGQzZWY1NmRiMGMxYjCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAOfj3I8UmjgJvHcTzpWmK8XLoX7BwaTjRO1pEMK4wtZHD93B
6B+MG+Jo2zQ9GhK8KoLLxdlgzQiB512uYLyQlGR94ZrSfPNSshKC4tJzlC0zWjts
pb7S7xQtxS3OFY3oq3rQtxSWDfK+2PhMi1Y08gd35lPD6ZI9O+O3UxlfJLdYn3zJ
oeg/m0GujfHmJZ9ZwOcSi2VMLCFJLA15LGEUF5ZVylUBcFJ5g3e2Lx5DLEk3yX8+
PL+7gB6eCm5JHvDPb4cVGat9IC9JLizelSI2hTL3PK3LSG5fBZ6N4Jp6B6yb/Ira
t0qS9Ul0qhIC26ppF1lD3CsA7+JoSaohlUXhBsECAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBTfNmT5IqdI0cP/v9tjxNPvVtsMGzAfBgNVHSMEGDAWgBQyp3QnwDcJszmp
WwrZpKydLJLJAzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L01xZDBKOEEzQ2JNNXFWc0syYVNzblN5U3lRTS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvOWMvZjI1MWVkLTU5NjctNGRkZC05MzJiLTdkNDBiN2M4ZmIwMS8x
LzN6WmstU0tuU05IRF83X2JZOFRUNzFiYkRCcy5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOWMv
ZjI1MWVkLTU5NjctNGRkZC05MzJiLTdkNDBiN2M4ZmIwMS8xL01xZDBKOEEzQ2JN
NXFWc0syYVNzblN5U3lRTS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAlvFtDANBgkqhkiG9w0BAQsFAAOC
AQEAHO55upDfLbgQStkegp14sQlJSfcpJbPsA95uxsbYTMyvKd1cyBRgk4QscenP
YX28zQSi0YO4+ghmTUZ61knJ5Tbpwf3IK8oRMWY8dUlet6jEQ1fmmktp8NPZgmBF
XL2DVXT8Trxtz4WwFeDGHtWcrgCyHWomE//nZo4y6ugwJs+7KdsLBdYDSSYYBaui
PCPDJ8hfYXoks5lQ70C+1gfZjFPI38p99JK/LarutU7AWsFd8nRnMmartM7wQJym
+KgOaioLZBd6S5A/4QHdvTbTaRH9Cyb5P/jcm2VDAbOJ6TUwNed8bcLLVVDWQNWw
wRIEDAnipuM1c2+f4fhexZ0x5g==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:53 2024 by rpki-client on console-fra.rpki-client.org