Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/ZapRv9Tw58nu3asyg_pPXmql9S0.roa
File: ZapRv9Tw58nu3asyg_pPXmql9S0.roa (raw, json)
Hash identifier: w34OOoMVOukM3mW/M0EhiZsSNROP1B60VNN1erwvlWQ=
Subject key identifier: 65:AA:51:BF:D4:F0:E7:C9:EE:DD:AB:32:83:FA:4F:5E:6A:A5:F5:2D
Certificate issuer: /CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Certificate serial: 0188DC1FAF3F3F1862E53876BF189EC6C5BE
Authority key identifier: 36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/ZapRv9Tw58nu3asyg_pPXmql9S0.roa
Signing time: Wed 21 Jun 2023 04:04:03 +0000
ROA not before: Wed 21 Jun 2023 04:04:03 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 0
IP address blocks: 185.241.210.0/23 maxlen: 24
188.241.214.0/24 maxlen: 24
93.115.254.0/23 maxlen: 24
188.213.203.0/24 maxlen: 24
213.232.92.0/24 maxlen: 24
45.156.159.0/24 maxlen: 24
45.156.157.0/24 maxlen: 24
89.33.85.0/24 maxlen: 24
185.255.169.0/24 maxlen: 24
185.255.170.0/23 maxlen: 24
185.255.170.0/24 maxlen: 24
89.35.154.0/24 maxlen: 24
89.35.155.0/24 maxlen: 24
188.212.132.0/24 maxlen: 24
188.212.133.0/24 maxlen: 24
188.212.158.0/24 maxlen: 24
87.247.148.0/24 maxlen: 24
87.247.150.0/24 maxlen: 24
87.247.149.0/24 maxlen: 24
87.247.151.0/24 maxlen: 24
188.240.230.0/24 maxlen: 24
188.240.232.0/24 maxlen: 24
188.240.233.0/24 maxlen: 24
91.188.204.0/24 maxlen: 24
91.188.206.0/24 maxlen: 24
91.188.207.0/24 maxlen: 24
89.37.63.0/24 maxlen: 24
185.135.143.0/24 maxlen: 24
185.103.72.0/24 maxlen: 24
185.238.10.0/24 maxlen: 24
188.241.110.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:dc:1f:af:3f:3f:18:62:e5:38:76:bf:18:9e:c6:c5:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Validity
Not Before: Jun 21 04:04:03 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=65aa51bfd4f0e7c9eeddab3283fa4f5e6aa5f52d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:00:60:43:3b:2a:68:c1:13:b9:b1:3c:b2:10:
ff:91:64:68:9d:ad:8e:88:76:c5:88:60:95:83:46:
9f:bb:96:04:2d:3a:98:82:cb:4d:c4:c6:7b:c6:b2:
8b:30:ca:5f:9d:1e:89:47:cf:d3:68:31:0b:fb:cc:
77:17:de:f1:c9:9a:58:37:42:66:4d:29:4e:43:88:
89:78:e0:7b:f3:c6:72:1d:b1:7d:b4:14:fd:8c:b7:
45:76:62:28:34:31:22:30:fe:dc:9d:45:b2:25:b5:
25:94:fc:c3:ce:ef:6a:64:1d:bc:c6:45:c8:68:fa:
4a:f8:a2:c6:e0:82:39:c1:93:37:5c:2f:60:09:87:
70:73:42:9e:11:5b:84:c6:94:15:2e:50:ce:68:9d:
10:df:e8:63:fa:d4:c0:8d:f9:f3:c5:c9:95:52:82:
da:31:fd:9f:69:71:1a:31:66:d3:c8:02:b4:c6:0f:
95:b6:29:dc:d6:0b:a3:d8:45:35:33:21:2b:76:92:
3b:cb:bc:c2:5e:86:54:93:fc:f5:ae:d3:98:f0:c4:
a5:c8:0c:9f:75:59:db:6d:de:90:41:c4:95:f6:f2:
61:cf:ac:6a:0e:45:66:fe:24:b3:39:7b:ea:ac:99:
b0:2c:cc:67:26:68:b4:99:8b:a9:ae:0d:76:df:63:
98:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:AA:51:BF:D4:F0:E7:C9:EE:DD:AB:32:83:FA:4F:5E:6A:A5:F5:2D
X509v3 Authority Key Identifier:
keyid:36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/ZapRv9Tw58nu3asyg_pPXmql9S0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.156.157.0/24
45.156.159.0/24
87.247.148.0/22
89.33.85.0/24
89.35.154.0/23
89.37.63.0/24
91.188.204.0/24
91.188.206.0/23
93.115.254.0/23
185.103.72.0/24
185.135.143.0/24
185.238.10.0/24
185.241.210.0/23
185.255.169.0-185.255.171.255
188.212.132.0/23
188.212.158.0/24
188.213.203.0/24
188.240.230.0/24
188.240.232.0/23
188.241.110.0/24
188.241.214.0/24
213.232.92.0/24
Signature Algorithm: sha256WithRSAEncryption
2d:9c:1a:4e:f8:42:4b:cd:9c:05:b7:02:a5:76:15:a2:ed:d6:
d3:46:08:d2:17:c9:23:94:38:e9:e9:a5:de:be:2f:09:09:27:
6e:2d:34:66:dc:cc:9f:bf:82:06:62:07:0c:e4:1f:73:d4:29:
ac:92:05:40:c8:18:fa:df:b3:11:98:26:8c:89:01:41:9b:c1:
6a:bc:ab:eb:58:da:b7:79:cb:6c:91:20:16:5f:12:e9:3f:a0:
a1:3f:26:a7:5a:5b:8f:e0:44:97:85:8f:34:01:4d:35:64:2c:
2e:9b:45:8c:13:1b:6c:f4:79:62:7a:40:65:82:f8:ae:1e:71:
93:9d:9f:9a:8d:8d:84:67:c8:0b:80:c9:f7:5e:8c:d3:58:4e:
3a:3c:df:4f:20:fa:c1:52:f4:18:5e:36:02:49:d4:10:99:78:
05:03:57:78:d0:3b:23:be:51:8a:28:8b:1e:52:dd:ff:2c:d9:
c6:4b:62:77:28:cf:86:9f:45:20:c7:87:0f:d9:fd:16:15:db:
f5:5c:5d:ba:5a:65:8f:85:52:e9:12:14:20:d8:95:a6:28:98:
6e:81:4b:0f:0b:2e:14:fc:aa:e9:eb:23:c4:01:ef:ca:e2:99:
9b:5c:ad:f0:3b:1b:49:cc:39:5f:4b:f7:8e:85:f6:6a:e9:7b:
63:0c:c0:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:41:11 2024 by rpki-client on console-ams.rpki-client.org