Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/zaeRLIeyvstFKLTYDaQ23gussgs.roa
File: zaeRLIeyvstFKLTYDaQ23gussgs.roa (raw, json)
Hash identifier: lZOOG1oXH0j7bxZMnbGt1O+4BTV49N9eL2uFYYNpn9k=
Subject key identifier: CD:A7:91:2C:87:B2:BE:CB:45:28:B4:D8:0D:A4:36:DE:0B:AC:B2:0B
Certificate issuer: /CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Certificate serial: 01888B38C0BB62A18A8C2976EB1BECA31B5E
Authority key identifier: 36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/zaeRLIeyvstFKLTYDaQ23gussgs.roa
Signing time: Mon 05 Jun 2023 11:02:12 +0000
ROA not before: Mon 05 Jun 2023 11:02:12 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 0
IP address blocks: 188.212.132.0/24 maxlen: 24
188.212.133.0/24 maxlen: 24
188.212.158.0/24 maxlen: 24
87.247.148.0/24 maxlen: 24
87.247.150.0/24 maxlen: 24
188.240.230.0/24 maxlen: 24
188.240.232.0/24 maxlen: 24
185.241.209.0/24 maxlen: 24
185.241.210.0/23 maxlen: 24
188.241.214.0/24 maxlen: 24
91.188.204.0/24 maxlen: 24
89.37.63.0/24 maxlen: 24
93.115.254.0/23 maxlen: 24
188.213.203.0/24 maxlen: 24
45.156.157.0/24 maxlen: 24
185.135.143.0/24 maxlen: 24
185.255.169.0/24 maxlen: 24
185.255.170.0/24 maxlen: 24
185.103.72.0/24 maxlen: 24
185.238.10.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:8b:38:c0:bb:62:a1:8a:8c:29:76:eb:1b:ec:a3:1b:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Validity
Not Before: Jun 5 11:02:12 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=cda7912c87b2becb4528b4d80da436de0bacb20b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:b9:fe:ae:e4:c5:9d:f4:76:7d:9f:34:17:cb:
65:a0:bf:29:ae:d4:e8:78:3b:5e:63:e0:70:3d:e6:
df:ba:d6:92:e8:bc:dc:3c:90:d5:9c:f6:e3:5d:3e:
83:cb:3c:97:e5:ef:5a:cd:d1:5e:79:d2:1b:c2:7a:
ce:fa:35:07:ff:01:57:c0:09:88:96:21:f1:20:f1:
59:fe:12:db:8b:f4:37:6f:7d:bb:cc:fc:5c:4a:23:
c9:88:80:9f:e5:bc:74:c8:73:9e:d1:f5:9a:3d:0d:
e9:69:5b:48:a2:4d:50:92:6d:74:e6:3a:da:82:df:
b3:34:24:54:27:ba:e6:2c:9a:dd:64:f6:25:76:82:
7c:54:81:2e:89:7d:22:b7:6a:50:a3:b2:79:f6:e7:
5a:ef:0f:18:10:7d:d7:f8:db:93:78:76:38:fe:47:
56:7e:28:74:d6:8a:45:09:7c:61:20:77:88:55:9d:
4c:9b:cc:6c:02:3b:39:a2:da:0c:1f:84:53:3b:9d:
38:23:98:83:45:d7:eb:bf:b5:ba:2b:18:29:24:20:
d6:1e:21:08:0e:c5:40:2f:fd:a8:83:d1:51:36:3b:
73:c5:1c:f6:6f:f2:2f:bf:6d:14:95:9a:ce:46:fc:
12:9c:4b:e0:b7:39:04:91:77:29:be:cb:0e:18:15:
8c:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:A7:91:2C:87:B2:BE:CB:45:28:B4:D8:0D:A4:36:DE:0B:AC:B2:0B
X509v3 Authority Key Identifier:
keyid:36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/zaeRLIeyvstFKLTYDaQ23gussgs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.156.157.0/24
87.247.148.0/24
87.247.150.0/24
89.37.63.0/24
91.188.204.0/24
93.115.254.0/23
185.103.72.0/24
185.135.143.0/24
185.238.10.0/24
185.241.209.0-185.241.211.255
185.255.169.0-185.255.170.255
188.212.132.0/23
188.212.158.0/24
188.213.203.0/24
188.240.230.0/24
188.240.232.0/24
188.241.214.0/24
Signature Algorithm: sha256WithRSAEncryption
0e:05:63:df:88:44:43:bf:70:d9:5a:71:77:b1:a4:c0:6b:fb:
8e:29:c8:3c:96:6b:2f:ba:9c:5e:c4:fa:1a:0c:6d:22:49:80:
9f:a0:66:e2:aa:1e:a1:36:cb:77:60:9a:9e:74:df:a8:ce:42:
3d:49:f0:67:7c:b8:bc:eb:31:87:50:45:f6:f3:f3:0f:ce:6c:
8a:1b:ee:a7:f3:4e:92:01:c3:6d:dc:a5:70:1d:09:27:7e:09:
a9:13:2e:ef:b0:e7:9a:4a:df:15:64:11:61:6f:9d:50:50:d7:
2d:2a:94:f8:78:2a:c4:24:73:46:33:74:94:d2:2d:3f:c6:36:
e9:2f:48:6b:d0:7e:88:73:47:8b:58:c2:04:8c:62:21:ba:f7:
66:7b:39:11:79:64:be:b1:74:07:4c:2a:63:f2:b6:d0:1f:1c:
eb:ce:84:44:69:cd:d1:11:d8:f0:ff:2a:ad:7e:da:86:22:8b:
74:af:3a:4d:11:a6:26:13:5f:64:b9:84:8f:bb:7c:17:e8:f3:
78:ed:1f:7d:26:a9:00:72:89:24:e9:11:f0:7e:ea:ac:7a:80:
f8:75:fd:aa:26:3b:71:62:45:0c:93:47:08:99:27:dd:35:c9:
4c:99:1f:19:33:d2:9b:79:d1:71:b9:0c:81:23:cf:70:6f:83:
5e:28:bf:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:51:49 2024 by rpki-client on console-fra.rpki-client.org