Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/d6b874-aea8-4b7e-b0d2-69b953c9d5aa/1/zoosozWH-HYm0OUkyYHMKaY-cZg.roa
File: zoosozWH-HYm0OUkyYHMKaY-cZg.roa (raw, json)
Hash identifier: 0U3hfZKy3ssLeh1Qunr1cnmzVzTqNkxZIKZSA8pJpYo=
Subject key identifier: CE:8A:2C:A3:35:87:F8:76:26:D0:E5:24:C9:81:CC:29:A6:3E:71:98
Certificate issuer: /CN=542f633f76e8d8aaeaa32b5ace16a3db3943d80c
Certificate serial: 3746250C
Authority key identifier: 54:2F:63:3F:76:E8:D8:AA:EA:A3:2B:5A:CE:16:A3:DB:39:43:D8:0C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VC9jP3bo2Krqoytazhaj2zlD2Aw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/d6b874-aea8-4b7e-b0d2-69b953c9d5aa/1/zoosozWH-HYm0OUkyYHMKaY-cZg.roa
Signing time: Sat 01 Jan 2022 10:04:58 +0000
ROA not before: Sat 01 Jan 2022 10:04:58 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 9121
IP address blocks: 188.125.174.0/24 maxlen: 24
188.125.175.0/24 maxlen: 24
188.125.173.0/24 maxlen: 24
188.125.163.0/24 maxlen: 24
188.125.164.0/24 maxlen: 24
188.125.165.0/24 maxlen: 24
188.125.166.0/24 maxlen: 24
188.125.160.0/24 maxlen: 24
188.125.161.0/24 maxlen: 24
188.125.162.0/24 maxlen: 24
188.125.170.0/24 maxlen: 24
188.125.171.0/24 maxlen: 24
188.125.172.0/24 maxlen: 24
188.125.167.0/24 maxlen: 24
188.125.168.0/24 maxlen: 24
188.125.169.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 927343884 (0x3746250c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=542f633f76e8d8aaeaa32b5ace16a3db3943d80c
Validity
Not Before: Jan 1 10:04:58 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ce8a2ca33587f87626d0e524c981cc29a63e7198
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:bc:8b:55:ca:17:d5:a2:44:30:b2:1a:8a:35:
71:0a:be:2e:37:af:0b:19:ab:7c:1b:bd:8e:3c:73:
11:83:0c:fb:49:a2:ee:e9:19:eb:e1:17:b6:0a:f3:
3a:38:63:db:01:13:7f:09:54:7d:50:61:55:90:74:
4e:f3:db:ea:86:d8:e4:83:92:bd:e2:19:35:7d:db:
5f:f0:6a:11:cd:6c:4d:c0:61:70:47:dd:0d:fc:71:
1d:bf:2b:7d:d6:99:36:a3:90:b7:bf:7e:a9:36:af:
7c:6e:1c:6c:0d:8d:ce:a1:2d:eb:8e:48:f2:e8:91:
ab:e9:70:41:3e:a9:92:84:77:6b:3e:6d:f7:74:45:
a4:da:76:6d:0a:e2:2f:58:4e:48:da:44:c9:b4:6d:
d4:2e:17:a7:58:73:fa:70:72:e3:d5:a7:ad:8c:e6:
03:f3:02:54:9c:e6:9e:74:4e:33:a0:f7:7d:b2:37:
4e:6d:5d:f1:e5:2b:c8:3d:37:3b:4c:49:60:cc:b7:
2f:58:2f:5d:c3:70:3d:f0:ae:2e:bc:e0:5c:11:d9:
43:5c:83:a5:2c:1f:67:9b:8d:6c:0e:a5:55:7e:7c:
7f:eb:8d:6a:ca:90:51:75:67:b5:7d:ad:06:41:c6:
a1:78:3e:ae:74:d7:81:ba:93:c2:09:14:38:50:c9:
3d:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:8A:2C:A3:35:87:F8:76:26:D0:E5:24:C9:81:CC:29:A6:3E:71:98
X509v3 Authority Key Identifier:
keyid:54:2F:63:3F:76:E8:D8:AA:EA:A3:2B:5A:CE:16:A3:DB:39:43:D8:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VC9jP3bo2Krqoytazhaj2zlD2Aw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/d6b874-aea8-4b7e-b0d2-69b953c9d5aa/1/zoosozWH-HYm0OUkyYHMKaY-cZg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/d6b874-aea8-4b7e-b0d2-69b953c9d5aa/1/VC9jP3bo2Krqoytazhaj2zlD2Aw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.125.160.0/20
Signature Algorithm: sha256WithRSAEncryption
55:70:8c:aa:47:63:8f:6c:7c:59:4b:86:87:0e:ab:af:a0:21:
2e:b9:2f:79:05:2a:c5:65:eb:fe:4d:62:44:a6:82:74:8d:37:
6c:76:ba:d2:12:07:d5:75:7c:ca:da:3b:d3:43:cb:c0:40:bd:
1b:ed:93:f3:47:06:21:79:bb:91:c0:6c:8b:ae:74:e4:c7:ec:
17:5c:da:8b:0c:95:ef:b5:99:81:a2:ea:9d:2d:78:83:5b:4f:
15:94:6c:c0:bd:c3:2f:59:13:01:43:a0:6f:42:43:fc:2a:c7:
52:8a:42:3b:be:77:c7:a4:71:71:50:df:47:ea:03:2a:da:08:
88:1d:7b:06:d9:e9:28:ec:e1:22:c8:93:a7:a6:72:7f:34:6f:
41:c5:55:57:97:93:b1:fd:52:fb:c2:3e:80:09:1d:ca:0a:73:
9c:d4:ef:dd:be:54:c2:79:52:52:32:85:99:92:39:5d:a4:eb:
e6:76:b2:fd:13:4d:66:db:a5:c8:4f:dd:55:34:85:17:25:3e:
68:13:13:82:fc:76:f2:1c:68:8b:46:f7:99:c2:1e:d9:9b:ed:
0c:7b:27:57:6a:08:95:75:67:7e:b9:75:bf:3a:ea:20:6d:0a:
e4:9f:01:ec:17:5e:d0:75:81:da:2d:69:68:eb:c7:a5:1e:25:
08:20:b4:e3
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEN0YlDDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg1
NDJmNjMzZjc2ZThkOGFhZWFhMzJiNWFjZTE2YTNkYjM5NDNkODBjMB4XDTIyMDEw
MTEwMDQ1OFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoY2U4YTJjYTMzNTg3
Zjg3NjI2ZDBlNTI0Yzk4MWNjMjlhNjNlNzE5ODCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAK68i1XKF9WiRDCyGoo1cQq+LjevCxmrfBu9jjxzEYMM+0mi
7ukZ6+EXtgrzOjhj2wETfwlUfVBhVZB0TvPb6obY5IOSveIZNX3bX/BqEc1sTcBh
cEfdDfxxHb8rfdaZNqOQt79+qTavfG4cbA2NzqEt645I8uiRq+lwQT6pkoR3az5t
93RFpNp2bQriL1hOSNpEybRt1C4Xp1hz+nBy49WnrYzmA/MCVJzmnnROM6D3fbI3
Tm1d8eUryD03O0xJYMy3L1gvXcNwPfCuLrzgXBHZQ1yDpSwfZ5uNbA6lVX58f+uN
asqQUXVntX2tBkHGoXg+rnTXgbqTwgkUOFDJPbECAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBTOiiyjNYf4dibQ5STJgcwppj5xmDAfBgNVHSMEGDAWgBRUL2M/dujYquqj
K1rOFqPbOUPYDDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L1ZDOWpQM2JvMktycW95dGF6aGFqMnpsRDJBdy5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvYWUvZDZiODc0LWFlYTgtNGI3ZS1iMGQyLTY5Yjk1M2M5ZDVhYS8x
L3pvb3NveldILUhZbTBPVWt5WUhNS2FZLWNaZy5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYWUv
ZDZiODc0LWFlYTgtNGI3ZS1iMGQyLTY5Yjk1M2M5ZDVhYS8xL1ZDOWpQM2JvMkty
cW95dGF6aGFqMnpsRDJBdy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEBLx9oDANBgkqhkiG9w0BAQsFAAOC
AQEAVXCMqkdjj2x8WUuGhw6rr6AhLrkveQUqxWXr/k1iRKaCdI03bHa60hIH1XV8
yto700PLwEC9G+2T80cGIXm7kcBsi6505MfsF1zaiwyV77WZgaLqnS14g1tPFZRs
wL3DL1kTAUOgb0JD/CrHUopCO753x6RxcVDfR+oDKtoIiB17BtnpKOzhIsiTp6Zy
fzRvQcVVV5eTsf1S+8I+gAkdygpznNTv3b5UwnlSUjKFmZI5XaTr5nay/RNNZtul
yE/dVTSFFyU+aBMTgvx28hxoi0b3mcIe2ZvtDHsnV2oIlXVnfrl1vzrqIG0K5J8B
7Bde0HWB2i1paOvHpR4lCCC04w==
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:38:25 2024 by rpki-client on console-ams.rpki-client.org