Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/780e0b-4f02-4cd2-a4e3-e01a56f58d37/1/ZioP9FPBm6wnYthsGCWjCPTWHD8.roa
File: ZioP9FPBm6wnYthsGCWjCPTWHD8.roa (raw, json)
Hash identifier: edFLpgqjDgHTvAIUg+l5vMi38s09EW9zq1BLnZDsiwE=
Subject key identifier: 66:2A:0F:F4:53:C1:9B:AC:27:62:D8:6C:18:25:A3:08:F4:D6:1C:3F
Certificate issuer: /CN=2b95f682bc6d577dfc3c10ecee2718381fee3b23
Certificate serial: 09C0941A
Authority key identifier: 2B:95:F6:82:BC:6D:57:7D:FC:3C:10:EC:EE:27:18:38:1F:EE:3B:23
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K5X2grxtV338PBDs7icYOB_uOyM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/780e0b-4f02-4cd2-a4e3-e01a56f58d37/1/ZioP9FPBm6wnYthsGCWjCPTWHD8.roa
Signing time: Sat 01 Jan 2022 15:06:45 +0000
ROA not before: Sat 01 Jan 2022 15:06:45 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 61155
IP address blocks: 94.142.160.0/21 maxlen: 21
94.142.160.0/22 maxlen: 22
94.142.164.0/22 maxlen: 22
185.57.176.0/22 maxlen: 22
2a04:d3c0::/29 maxlen: 29
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 163615770 (0x9c0941a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b95f682bc6d577dfc3c10ecee2718381fee3b23
Validity
Not Before: Jan 1 15:06:45 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=662a0ff453c19bac2762d86c1825a308f4d61c3f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:7b:b3:7b:af:df:fe:98:23:2b:5f:1c:82:e3:
89:60:24:78:b8:47:98:f3:7f:f6:2c:ff:71:d0:de:
f3:d5:6a:5c:ae:dc:9d:f5:b5:0b:20:60:a6:a9:1a:
a6:92:7a:31:1b:55:0b:c5:48:bc:4d:ff:45:cd:fd:
33:cc:bf:b0:5e:44:f2:cd:81:9c:a7:47:d5:59:f6:
ec:60:76:e5:90:1f:c9:bb:17:67:52:86:3a:ae:ef:
1a:14:bd:e4:9c:3b:af:dc:11:96:81:ab:45:fb:2d:
a7:04:8e:42:bb:e1:da:9a:55:40:86:ac:a8:ec:28:
6f:b5:69:ef:23:28:bb:3c:6e:81:d5:ab:28:2a:76:
4c:6d:e9:b9:36:a0:8c:4b:65:80:be:dd:e7:62:6d:
c6:e4:bc:f4:a0:0f:a7:f1:21:d9:c3:f1:f9:7b:a9:
4a:2f:0a:64:5c:7e:7c:f1:b8:e8:84:0d:87:5b:88:
7e:56:68:ae:39:59:6d:f2:b4:2b:a7:6a:a3:8e:30:
38:28:bc:f9:bf:ac:99:62:66:d0:bd:64:4c:95:19:
0e:41:85:5d:4c:c4:bc:e6:f1:23:3c:22:1d:78:93:
e5:29:59:d5:2d:3c:03:e2:9f:21:7e:a4:68:34:a2:
9d:27:68:2e:98:69:f2:37:f1:8e:ea:94:b3:c0:7c:
cf:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:2A:0F:F4:53:C1:9B:AC:27:62:D8:6C:18:25:A3:08:F4:D6:1C:3F
X509v3 Authority Key Identifier:
keyid:2B:95:F6:82:BC:6D:57:7D:FC:3C:10:EC:EE:27:18:38:1F:EE:3B:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K5X2grxtV338PBDs7icYOB_uOyM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/780e0b-4f02-4cd2-a4e3-e01a56f58d37/1/ZioP9FPBm6wnYthsGCWjCPTWHD8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/780e0b-4f02-4cd2-a4e3-e01a56f58d37/1/K5X2grxtV338PBDs7icYOB_uOyM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.142.160.0/21
185.57.176.0/22
IPv6:
2a04:d3c0::/29
Signature Algorithm: sha256WithRSAEncryption
31:00:eb:04:5b:24:9e:11:a8:d1:44:f2:b9:50:c5:9a:8f:54:
14:74:9a:ab:7f:41:ba:d8:ac:59:57:a4:35:82:ef:94:33:07:
eb:ad:a9:a4:6f:ed:e8:22:aa:87:6e:b8:09:5c:90:cc:cd:0a:
6d:c3:5a:dd:d9:9b:0b:dc:40:a3:74:2c:bc:5c:9a:49:97:be:
58:19:84:94:eb:4d:dd:1f:1a:ad:b6:b5:90:a9:82:de:83:be:
bc:1f:32:4d:83:3a:08:da:e8:74:c9:d5:0a:2e:57:81:d3:79:
a6:ba:b5:e2:ca:a9:13:07:a0:26:52:c0:95:68:de:85:c3:ad:
70:ae:28:ab:30:59:c9:54:52:c4:95:79:85:cd:05:3f:de:2a:
da:08:fa:19:1e:ca:ab:fc:37:45:50:2d:49:b6:e5:4e:8e:69:
92:47:82:55:65:47:90:c9:b4:f2:18:6c:46:7c:49:66:af:7e:
46:65:f1:62:82:af:1b:af:ab:1b:3a:7e:c0:bc:20:34:17:d7:
0a:02:d9:01:bb:8f:27:4f:f4:f3:3c:84:78:58:f2:c4:5c:8f:
22:f3:cb:fa:63:c1:13:9a:84:58:bb:a8:32:df:5d:35:67:cc:
7c:60:11:91:80:9c:b9:2d:c0:ff:7e:06:c3:a5:b9:b7:4d:79:
ae:1d:a6:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:53:55 2024 by rpki-client on console-fra.rpki-client.org