Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/PMM1Ax_zbOalMZ_WHw7AKwE_rFg.roa
File: PMM1Ax_zbOalMZ_WHw7AKwE_rFg.roa (raw, json)
Hash identifier: Snr+FbO49Ev3JZ2VFevKzD+4SxxkGMway4AFY0/QodY=
Subject key identifier: 3C:C3:35:03:1F:F3:6C:E6:A5:31:9F:D6:1F:0E:C0:2B:01:3F:AC:58
Certificate issuer: /CN=cdaaa0e082360360acda347664eb8314eb11da10
Certificate serial: 018A40A93333826C6B655ACDB55351D69ED5
Authority key identifier: CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/PMM1Ax_zbOalMZ_WHw7AKwE_rFg.roa
Signing time: Tue 29 Aug 2023 09:39:05 +0000
ROA not before: Tue 29 Aug 2023 09:39:05 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 5065
IP address blocks: 83.137.159.0/24 maxlen: 24
178.210.231.0/24 maxlen: 24
178.210.230.0/24 maxlen: 24
88.209.195.0/24 maxlen: 24
77.242.156.0/24 maxlen: 24
2.58.168.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:40:a9:33:33:82:6c:6b:65:5a:cd:b5:53:51:d6:9e:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cdaaa0e082360360acda347664eb8314eb11da10
Validity
Not Before: Aug 29 09:39:05 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3cc335031ff36ce6a5319fd61f0ec02b013fac58
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:5c:f2:47:e8:c0:39:62:a6:71:35:1f:48:c6:
8c:06:b7:f7:8e:5c:9d:95:7c:f1:05:94:48:a1:24:
99:73:7a:51:fe:6c:fe:74:b0:88:54:cf:7d:3c:af:
fa:6d:c2:e6:88:d7:4b:91:f6:3b:b3:ad:b4:61:19:
cc:c1:4c:c0:21:b7:24:b5:4b:27:73:34:0c:6f:db:
b9:9e:e9:32:c5:f0:5b:f8:84:8e:13:59:fe:96:70:
ca:2a:85:72:a3:cc:ce:6c:78:28:35:7b:eb:a6:28:
ff:c1:85:02:3a:01:26:3c:72:42:50:0a:db:8c:5a:
ca:c3:47:32:90:50:ec:87:f8:77:cf:56:f9:72:03:
18:48:13:03:de:58:32:2c:f4:7f:37:b6:18:42:87:
1f:93:ef:e5:6d:d4:ba:ab:40:e7:14:5b:f1:8c:61:
2e:84:d3:cc:f8:29:0f:ad:79:9c:d5:27:79:04:36:
d8:7b:08:77:39:c9:4c:25:d6:44:04:59:e6:80:64:
64:5c:be:02:ef:f5:bc:22:86:d1:8c:70:22:97:15:
84:26:e5:16:7d:0d:20:b4:76:53:17:a4:93:fb:83:
82:1f:9f:d1:58:ca:aa:26:a6:5c:b3:22:73:9c:be:
f5:ac:65:9d:0a:9a:7e:4f:c5:c1:31:3c:80:5e:48:
df:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:C3:35:03:1F:F3:6C:E6:A5:31:9F:D6:1F:0E:C0:2B:01:3F:AC:58
X509v3 Authority Key Identifier:
keyid:CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/PMM1Ax_zbOalMZ_WHw7AKwE_rFg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.58.168.0/24
77.242.156.0/24
83.137.159.0/24
88.209.195.0/24
178.210.230.0/23
Signature Algorithm: sha256WithRSAEncryption
35:38:83:4a:ba:92:28:1e:e8:c9:0f:9b:36:17:bc:62:95:97:
8e:8a:18:ba:cf:26:cc:c2:30:a4:48:ce:19:77:0a:c7:48:3f:
8a:f6:24:ea:51:97:5f:93:7a:08:04:5b:87:54:27:8b:94:4b:
ba:1c:57:26:f5:97:01:df:d6:df:af:2c:57:4b:d1:7e:49:12:
4d:29:ba:6b:e4:8e:2c:48:71:b5:9c:da:b0:25:30:8c:df:39:
19:d4:cb:ab:b0:23:9e:aa:26:87:db:a9:2f:db:e6:de:8b:1b:
b6:ca:92:c6:71:3d:4a:7a:3c:f1:fb:39:2e:fc:0e:39:7b:cc:
c4:e5:35:78:3d:e3:46:0e:5d:97:b2:53:92:b8:fe:ed:dc:e8:
66:26:1a:85:58:cb:c5:4b:c5:2d:11:1b:46:09:93:14:07:10:
85:55:09:64:43:52:a8:99:ed:ac:43:0a:25:b8:3c:bd:af:e6:
08:b3:5c:cf:20:0f:e3:34:20:9e:6a:f3:af:8d:54:d0:bf:92:
c2:24:72:60:e8:e9:6e:0f:c0:83:31:55:df:9d:85:3e:cb:2f:
26:e3:8c:9e:dd:18:51:33:43:30:fa:7c:2f:81:1b:af:0f:fc:
e8:0a:2d:e9:f2:be:c5:24:41:80:0e:df:64:03:4f:66:ba:f1:
44:0e:3c:df
-----BEGIN CERTIFICATE-----
MIIFFTCCA/2gAwIBAgISAYpAqTMzgmxrZVrNtVNR1p7VMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNkYWFhMGUwODIzNjAzNjBhY2RhMzQ3NjY0ZWI4MzE0ZWIx
MWRhMTAwHhcNMjMwODI5MDkzOTA1WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzY2MzMzUwMzFmZjM2Y2U2YTUzMTlmZDYxZjBlYzAyYjAxM2ZhYzU4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt1zyR+jAOWKmcTUfSMaMBrf3jlyd
lXzxBZRIoSSZc3pR/mz+dLCIVM99PK/6bcLmiNdLkfY7s620YRnMwUzAIbcktUsn
czQMb9u5nukyxfBb+ISOE1n+lnDKKoVyo8zObHgoNXvrpij/wYUCOgEmPHJCUArb
jFrKw0cykFDsh/h3z1b5cgMYSBMD3lgyLPR/N7YYQocfk+/lbdS6q0DnFFvxjGEu
hNPM+CkPrXmc1Sd5BDbYewh3OclMJdZEBFnmgGRkXL4C7/W8IobRjHAilxWEJuUW
fQ0gtHZTF6ST+4OCH5/RWMqqJqZcsyJznL71rGWdCpp+T8XBMTyAXkjfzQIDAQAB
o4ICITCCAh0wHQYDVR0OBBYEFDzDNQMf82zmpTGf1h8OwCsBP6xYMB8GA1UdIwQY
MBaAFM2qoOCCNgNgrNo0dmTrgxTrEdoQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvemFxZzRJSTJBMkNzMmpSMlpPdURGT3NSMmhBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZC81ODkxMjctMTA5Ni00YzkxLTk2Y2Mt
N2U0ZDZmNmY2ZTY2LzEvUE1NMUF4X3piT2FsTVpfV0h3N0FLd0VfckZnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZC81ODkxMjctMTA5Ni00YzkxLTk2Y2MtN2U0ZDZmNmY2ZTY2
LzEvemFxZzRJSTJBMkNzMmpSMlpPdURGT3NSMmhBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDcGCCsGAQUFBwEHAQH/BCgwJjAkBAIAATAeAwQAAjqoAwQA
TfKcAwQAU4mfAwQAWNHDAwQBstLmMA0GCSqGSIb3DQEBCwUAA4IBAQA1OINKupIo
HujJD5s2F7xilZeOihi6zybMwjCkSM4ZdwrHSD+K9iTqUZdfk3oIBFuHVCeLlEu6
HFcm9ZcB39bfryxXS9F+SRJNKbpr5I4sSHG1nNqwJTCM3zkZ1MursCOeqiaH26kv
2+beixu2ypLGcT1Kejzx+zku/A45e8zE5TV4PeNGDl2XslOSuP7t3OhmJhqFWMvF
S8UtERtGCZMUBxCFVQlkQ1Kome2sQwoluDy9r+YIs1zPIA/jNCCeavOvjVTQv5LC
JHJg6OluD8CDMVXfnYU+yy8m44ye3RhRM0Mw+nwvgRuvD/zoCi3p8r7FJEGADt9k
A09muvFEDjzf
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:56:27 2024 by rpki-client on console-fra.rpki-client.org