Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/7230bd-0c7c-4a02-adb9-9bbb42fa8ced/1/ZjB7O8_pfP-pAybdJxRx2T0UcFI.roa
File: ZjB7O8_pfP-pAybdJxRx2T0UcFI.roa (raw, json)
Hash identifier: bobzE8jF01kCaoDTeyiOkJblrKziCHj8Uu6gbNCDdfo=
Subject key identifier: 66:30:7B:3B:CF:E9:7C:FF:A9:03:26:DD:27:14:71:D9:3D:14:70:52
Certificate issuer: /CN=429361cd181d86ef54ebe2fc91a80ec534ceac78
Certificate serial: 018CC34962B9F4B57FBD3D7394BEF6EABBBD
Authority key identifier: 42:93:61:CD:18:1D:86:EF:54:EB:E2:FC:91:A8:0E:C5:34:CE:AC:78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QpNhzRgdhu9U6-L8kagOxTTOrHg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/7230bd-0c7c-4a02-adb9-9bbb42fa8ced/1/ZjB7O8_pfP-pAybdJxRx2T0UcFI.roa
Signing time: Mon 01 Jan 2024 04:30:15 +0000
ROA not before: Mon 01 Jan 2024 04:30:15 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 200845
IP address blocks: 185.198.48.0/24 maxlen: 24
94.103.245.0/24 maxlen: 24
94.103.244.0/24 maxlen: 24
45.138.246.0/24 maxlen: 24
45.138.245.0/24 maxlen: 24
45.138.244.0/24 maxlen: 24
45.138.253.0/24 maxlen: 24
45.138.252.0/24 maxlen: 24
62.122.35.0/24 maxlen: 24
62.122.34.0/24 maxlen: 24
62.122.33.0/24 maxlen: 24
45.138.247.0/24 maxlen: 24
62.122.32.0/24 maxlen: 24
45.138.255.0/24 maxlen: 24
45.138.254.0/24 maxlen: 24
185.25.52.0/24 maxlen: 24
185.193.105.0/24 maxlen: 24
185.193.104.0/24 maxlen: 24
185.193.107.0/24 maxlen: 24
185.193.106.0/24 maxlen: 24
185.195.37.0/24 maxlen: 24
185.195.36.0/24 maxlen: 24
185.192.73.0/24 maxlen: 24
45.10.112.0/24 maxlen: 24
45.10.114.0/24 maxlen: 24
45.10.113.0/24 maxlen: 24
45.10.115.0/24 maxlen: 24
185.195.111.0/24 maxlen: 24
185.195.110.0/24 maxlen: 24
185.195.109.0/24 maxlen: 24
185.195.108.0/24 maxlen: 24
194.5.29.0/24 maxlen: 24
194.5.28.0/24 maxlen: 24
194.5.33.0/24 maxlen: 24
194.5.32.0/24 maxlen: 24
194.59.196.0/24 maxlen: 24
185.192.117.0/24 maxlen: 24
185.192.119.0/24 maxlen: 24
193.8.244.0/24 maxlen: 24
185.194.62.0/24 maxlen: 24
185.194.61.0/24 maxlen: 24
185.194.60.0/24 maxlen: 24
193.8.249.0/24 maxlen: 24
193.8.247.0/24 maxlen: 24
185.194.63.0/24 maxlen: 24
193.8.255.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:49:62:b9:f4:b5:7f:bd:3d:73:94:be:f6:ea:bb:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=429361cd181d86ef54ebe2fc91a80ec534ceac78
Validity
Not Before: Jan 1 04:30:15 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=66307b3bcfe97cffa90326dd271471d93d147052
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:1a:ca:de:e4:f7:3d:f0:39:94:60:47:f6:99:
c2:1b:80:c1:ed:88:0e:9f:a5:4e:e4:31:ea:bf:8c:
96:92:cc:ae:f6:51:96:57:26:59:92:36:ad:8f:9b:
7d:c2:75:39:28:08:ec:39:34:72:6e:69:41:81:9e:
a0:26:ef:41:f6:38:9e:f4:5c:c4:6a:e3:4b:40:e9:
1f:da:e2:77:18:53:08:42:e6:a1:86:6b:60:97:ad:
95:67:d4:7e:d6:19:c9:41:95:d2:06:08:6d:74:a7:
f9:c3:18:0e:4a:c1:dd:fe:ac:13:07:67:7f:83:80:
16:26:6b:8f:0b:43:1e:5a:00:72:e7:aa:6e:53:7d:
47:b4:79:d7:68:14:4e:6d:20:e8:58:22:3e:94:7c:
75:10:92:f4:0a:a4:f2:90:9b:f6:bd:9a:89:51:f0:
21:c4:63:87:be:09:6a:a0:ce:98:88:a8:84:a0:4c:
59:93:cf:b5:ed:13:e3:f3:29:7f:5b:c3:5a:74:fb:
53:f7:66:df:98:5b:1d:5a:f8:be:7e:1f:2a:c4:0b:
05:20:f7:28:62:dd:ff:fc:8f:b5:53:58:c5:82:23:
f9:a6:6c:80:56:5f:41:bc:ea:67:65:fa:20:8f:74:
67:1c:d9:65:0c:fa:0c:24:17:e5:7d:c8:df:cf:b7:
f4:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:30:7B:3B:CF:E9:7C:FF:A9:03:26:DD:27:14:71:D9:3D:14:70:52
X509v3 Authority Key Identifier:
keyid:42:93:61:CD:18:1D:86:EF:54:EB:E2:FC:91:A8:0E:C5:34:CE:AC:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QpNhzRgdhu9U6-L8kagOxTTOrHg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/7230bd-0c7c-4a02-adb9-9bbb42fa8ced/1/ZjB7O8_pfP-pAybdJxRx2T0UcFI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/7230bd-0c7c-4a02-adb9-9bbb42fa8ced/1/QpNhzRgdhu9U6-L8kagOxTTOrHg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.10.112.0/22
45.138.244.0/22
45.138.252.0/22
62.122.32.0/22
94.103.244.0/23
185.25.52.0/24
185.192.73.0/24
185.192.117.0/24
185.192.119.0/24
185.193.104.0/22
185.194.60.0/22
185.195.36.0/23
185.195.108.0/22
185.198.48.0/24
193.8.244.0/24
193.8.247.0/24
193.8.249.0/24
193.8.255.0/24
194.5.28.0/23
194.5.32.0/23
194.59.196.0/24
Signature Algorithm: sha256WithRSAEncryption
09:73:ce:92:b5:29:88:11:bc:cd:72:57:46:9d:77:bb:09:5c:
e2:08:c4:54:72:0e:52:d2:58:00:01:da:28:9c:98:7c:e6:6f:
a6:4b:86:c2:01:11:6e:8a:bb:c1:4d:c2:11:2b:f2:84:0a:30:
e7:cc:cf:02:90:7d:33:b2:4a:f2:a1:7c:54:98:7e:3a:73:a4:
0b:36:23:f4:13:75:cf:51:13:e0:be:7c:fe:a7:f4:ff:93:7d:
8e:c3:d2:b6:d1:c3:80:a3:77:c3:2e:ea:e0:6c:9c:e9:d7:69:
c9:6e:68:2f:58:e5:f2:2c:c2:a3:2d:84:3a:53:ca:59:c3:b0:
3e:67:1f:04:a5:5a:5a:6c:da:16:d0:35:4b:96:d4:e5:55:8b:
ed:74:0f:23:05:4d:26:09:95:fe:9b:e5:b1:89:c7:4d:cf:d4:
43:a6:f8:58:8c:72:8c:80:81:63:26:e0:a3:ff:e9:ca:45:d3:
fd:96:eb:5b:88:46:72:aa:cf:bb:dc:aa:c1:8f:5a:f4:5b:49:
f7:35:e9:44:bc:68:7f:47:cf:75:49:ac:9e:f4:5b:78:7d:09:
20:79:41:eb:4d:5e:50:7d:d0:4f:ce:f8:89:2b:75:ba:82:6c:
f2:5b:07:ee:d1:d8:a4:aa:7b:ea:c3:2d:e9:db:8d:03:8f:bc:
a1:99:b9:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:57:34 2024 by rpki-client on console-fra.rpki-client.org