Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/706fa8-52a2-4ed2-a2e1-04e4e4dc5fba/1/zb7HZgyhwhucEhK7UuASuk8P-WY.roa
File: zb7HZgyhwhucEhK7UuASuk8P-WY.roa (raw, json)
Hash identifier: SmCBBAdXFw6LjVK+wlTyzOkm5JDeF49BWfqta4GoBwA=
Subject key identifier: CD:BE:C7:66:0C:A1:C2:1B:9C:12:12:BB:52:E0:12:BA:4F:0F:F9:66
Certificate issuer: /CN=b2df00f38cced92197993076cb3685bf32bc5e69
Certificate serial: 018CC94ACA313924F08204FC036223F763BC
Authority key identifier: B2:DF:00:F3:8C:CE:D9:21:97:99:30:76:CB:36:85:BF:32:BC:5E:69
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/st8A84zO2SGXmTB2yzaFvzK8Xmk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/706fa8-52a2-4ed2-a2e1-04e4e4dc5fba/1/zb7HZgyhwhucEhK7UuASuk8P-WY.roa
Signing time: Tue 02 Jan 2024 08:29:30 +0000
ROA not before: Tue 02 Jan 2024 08:29:30 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 28941
IP address blocks: 185.103.112.0/24 maxlen: 24
185.103.112.0/22 maxlen: 22
185.103.115.0/24 maxlen: 24
185.103.114.0/24 maxlen: 24
185.103.113.0/24 maxlen: 24
2a04:c8c0::/29 maxlen: 29
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:4a:ca:31:39:24:f0:82:04:fc:03:62:23:f7:63:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2df00f38cced92197993076cb3685bf32bc5e69
Validity
Not Before: Jan 2 08:29:30 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=cdbec7660ca1c21b9c1212bb52e012ba4f0ff966
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:1c:4d:d4:c6:a4:18:cf:93:f0:db:18:81:e8:
cc:2e:34:a7:e0:60:48:d0:df:f6:a8:c6:bd:50:73:
85:43:f8:47:e9:7a:f2:cb:ad:f6:fd:b3:9d:1e:53:
1b:bd:b4:47:35:52:2b:db:3e:95:4e:8c:9d:74:a1:
9d:81:50:4f:9e:4d:84:2e:22:dc:be:81:25:59:0c:
f9:64:ac:a1:70:33:57:e0:3b:6e:28:4b:88:36:f4:
a0:2b:40:92:21:6d:ca:8e:c9:ff:ca:5e:17:10:1e:
3b:e3:cb:36:f8:94:06:1e:e7:18:07:25:ba:2b:54:
4c:77:7e:f7:2d:a4:16:10:1b:3e:f5:bf:a0:41:b1:
78:51:6a:c3:fc:85:c6:5c:f1:48:27:ac:e4:36:1a:
b1:c7:ad:f7:3d:aa:9f:65:6e:24:92:c1:63:12:78:
62:11:a7:48:6d:2c:4a:39:bf:7d:e3:c8:e2:07:a6:
f6:b4:8c:06:b3:bc:45:5b:0a:f3:f6:92:6b:e5:fe:
87:2b:14:23:7a:91:cd:3a:f0:70:d2:29:60:89:79:
4e:6e:ae:0b:2a:7c:d0:6c:ae:b2:47:63:ce:0e:d2:
5c:7d:fe:21:dc:92:9a:a0:d0:90:e1:17:84:d2:17:
60:62:6f:e7:a1:ce:b3:ba:17:29:e7:28:82:5d:74:
b8:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:BE:C7:66:0C:A1:C2:1B:9C:12:12:BB:52:E0:12:BA:4F:0F:F9:66
X509v3 Authority Key Identifier:
keyid:B2:DF:00:F3:8C:CE:D9:21:97:99:30:76:CB:36:85:BF:32:BC:5E:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/st8A84zO2SGXmTB2yzaFvzK8Xmk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/706fa8-52a2-4ed2-a2e1-04e4e4dc5fba/1/zb7HZgyhwhucEhK7UuASuk8P-WY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/706fa8-52a2-4ed2-a2e1-04e4e4dc5fba/1/st8A84zO2SGXmTB2yzaFvzK8Xmk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.103.112.0/22
IPv6:
2a04:c8c0::/29
Signature Algorithm: sha256WithRSAEncryption
80:46:5a:c9:2c:1c:43:5d:6e:9e:34:d3:f7:46:35:17:75:17:
7c:29:a3:ba:0f:0c:57:a1:a7:ea:12:34:4c:1c:b3:00:ce:f3:
7b:d1:50:0e:e0:f1:7f:9f:4b:32:a8:33:15:99:2e:56:03:55:
cc:39:d2:20:f1:12:97:e4:d8:de:f7:67:a1:28:13:eb:08:1a:
e6:fe:1d:89:fb:f5:27:49:e0:be:4d:e0:33:06:38:b4:a4:9f:
a4:d0:5f:f5:24:37:8f:2a:52:ee:2c:23:ac:31:9e:41:e3:e8:
e5:96:60:38:91:36:63:9b:67:5b:bb:aa:d4:0f:0f:87:df:94:
bf:40:3a:96:0d:52:30:3b:eb:8a:87:3a:95:5c:8f:34:ef:d6:
02:b0:e0:5a:43:cd:e6:d3:da:c9:8e:d3:26:d6:88:b6:10:d3:
ef:37:24:25:8e:5a:7c:0a:6f:96:fc:70:5c:ff:3e:d3:11:81:
d7:31:db:86:e1:6c:8f:4a:ac:18:f9:e0:03:e4:e3:1d:71:cf:
74:49:79:30:7e:6c:a1:75:7a:e6:6f:59:f7:30:07:a9:25:ee:
3e:c3:f9:41:ff:f9:22:b2:9a:a1:d2:cd:f1:5f:03:82:39:80:
61:ca:46:16:58:a4:a3:75:97:77:94:7a:df:71:5e:f1:a9:67:
51:1a:50:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:00:23 2025 by rpki-client