Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/a9c0b7-a23a-458f-8f64-ba37511404c2/1/ZEs65px7lwvqDtG3ytGTS4jFdKE.roa
File: ZEs65px7lwvqDtG3ytGTS4jFdKE.roa (raw, json)
Hash identifier: 1/ncJ53/e6v5bxZQSX6mvOYC8Os5Wi530/ihRh5EPO4=
Subject key identifier: 64:4B:3A:E6:9C:7B:97:0B:EA:0E:D1:B7:CA:D1:93:4B:88:C5:74:A1
Certificate issuer: /CN=c592786ced6ce597585468bb4f36b31cf6acec6e
Certificate serial: 01856D01C6780E91A2DA25A5FB93FC1FD544
Authority key identifier: C5:92:78:6C:ED:6C:E5:97:58:54:68:BB:4F:36:B3:1C:F6:AC:EC:6E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xZJ4bO1s5ZdYVGi7TzazHPas7G4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/a9c0b7-a23a-458f-8f64-ba37511404c2/1/ZEs65px7lwvqDtG3ytGTS4jFdKE.roa
Signing time: Sun 01 Jan 2023 11:05:10 +0000
ROA not before: Sun 01 Jan 2023 11:05:10 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 29286
IP address blocks: 84.247.148.0/24 maxlen: 24
84.247.146.0/24 maxlen: 24
84.247.151.0/24 maxlen: 24
84.247.152.0/24 maxlen: 24
84.247.168.0/24 maxlen: 24
84.247.169.0/24 maxlen: 24
84.247.173.0/24 maxlen: 24
81.88.68.0/23 maxlen: 23
81.88.70.0/24 maxlen: 24
81.88.67.0/24 maxlen: 24
81.88.74.0/23 maxlen: 23
81.88.73.0/24 maxlen: 24
81.88.76.0/24 maxlen: 24
81.88.78.0/24 maxlen: 24
81.88.79.0/24 maxlen: 24
84.247.130.0/24 maxlen: 24
84.247.132.0/24 maxlen: 24
84.247.145.0/24 maxlen: 24
84.247.142.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:01:c6:78:0e:91:a2:da:25:a5:fb:93:fc:1f:d5:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c592786ced6ce597585468bb4f36b31cf6acec6e
Validity
Not Before: Jan 1 11:05:10 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=644b3ae69c7b970bea0ed1b7cad1934b88c574a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:53:aa:67:b8:ee:fc:f9:d9:18:0e:9e:c0:45:
35:4c:04:cf:41:5a:72:70:0f:8d:f2:0c:e1:dd:5a:
b2:3f:78:c1:31:c4:5b:dd:20:42:e0:46:60:8a:1a:
92:55:c6:a4:5b:4d:61:99:5d:c3:d6:89:82:65:a8:
4b:a3:da:4c:72:b3:33:29:2b:9c:db:2e:9c:41:51:
72:df:32:f3:4a:a9:e9:b5:ad:5d:9b:a2:2a:98:50:
eb:9d:96:6c:4c:24:6f:8f:22:4c:28:e5:e1:36:92:
54:3a:e2:cc:fd:28:66:3c:12:34:53:dd:75:dc:29:
ef:f5:81:5f:10:af:99:f2:df:68:07:bb:b4:e6:2c:
73:05:06:d4:c4:1e:75:7e:dd:9d:45:f4:0e:0c:b1:
d9:a5:d6:20:cc:7c:34:b6:14:04:68:90:ff:0b:f5:
5f:34:ca:23:28:6f:c7:c5:a3:0c:8a:76:17:f6:1b:
82:a8:c9:48:da:ca:7b:d5:a3:0e:f6:fd:e8:73:7a:
b1:4e:bc:2c:3d:a1:17:2c:14:4c:5c:29:22:21:9c:
52:fb:4c:2d:8f:c0:72:37:32:e5:7b:0f:fb:87:e9:
1b:94:bd:d6:0c:df:ca:f9:96:57:bc:fd:1d:47:78:
9d:bf:15:e4:c1:1b:d5:57:0e:4c:a2:42:99:d4:e3:
e7:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:4B:3A:E6:9C:7B:97:0B:EA:0E:D1:B7:CA:D1:93:4B:88:C5:74:A1
X509v3 Authority Key Identifier:
keyid:C5:92:78:6C:ED:6C:E5:97:58:54:68:BB:4F:36:B3:1C:F6:AC:EC:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xZJ4bO1s5ZdYVGi7TzazHPas7G4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/a9c0b7-a23a-458f-8f64-ba37511404c2/1/ZEs65px7lwvqDtG3ytGTS4jFdKE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/a9c0b7-a23a-458f-8f64-ba37511404c2/1/xZJ4bO1s5ZdYVGi7TzazHPas7G4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.88.67.0-81.88.70.255
81.88.73.0-81.88.76.255
81.88.78.0/23
84.247.130.0/24
84.247.132.0/24
84.247.142.0/24
84.247.145.0-84.247.146.255
84.247.148.0/24
84.247.151.0-84.247.152.255
84.247.168.0/23
84.247.173.0/24
Signature Algorithm: sha256WithRSAEncryption
3a:f3:8b:8b:0f:8c:32:47:88:76:dd:53:bc:4a:1d:fa:4b:17:
86:9b:85:9f:df:29:9d:61:1a:b6:f6:94:50:f0:d8:70:df:cd:
02:d6:b5:e6:e9:6d:6f:6f:a3:0d:73:20:29:3d:f7:07:df:2c:
97:04:56:48:b6:e3:b4:79:59:c0:11:cb:97:fc:ec:0a:b8:33:
e2:2a:d8:74:52:5b:64:24:9c:42:df:a9:4a:3f:b7:6a:df:d9:
31:84:4c:c7:1d:b5:15:7b:3e:fb:78:87:15:7f:cf:35:43:0a:
d3:4c:af:58:ab:ec:e6:e5:1a:28:60:82:4f:e8:86:96:79:cc:
ac:7b:b5:cc:b6:bd:bb:1c:4c:60:f7:c4:42:7e:ee:49:d1:81:
28:52:5a:34:fe:10:1f:fe:3d:76:09:4b:bd:e2:96:9a:f7:a6:
98:5d:b0:15:49:8f:8b:91:2d:65:0c:b8:14:df:df:55:7e:eb:
ba:5b:7e:0c:36:4a:02:95:75:a4:46:95:32:35:ac:52:7b:06:
83:b0:73:75:42:9a:e7:a0:cb:0d:11:aa:13:73:7a:81:d2:5a:
3f:71:b8:ce:66:68:98:ba:d9:de:aa:00:fd:73:c1:96:b2:cd:
a2:2b:5f:77:80:09:7d:a2:4a:9c:48:e6:72:99:48:4a:d8:a0:
0d:8f:ed:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:38:23 2024 by rpki-client on console-ams.rpki-client.org