Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/f6ada1-7e8a-4b3e-b7e8-f8589f682691/1/1Ti1c5jxTSdOCyAf0jjgN_Fa1p4.roa
File: 1Ti1c5jxTSdOCyAf0jjgN_Fa1p4.roa (raw, json)
Hash identifier: TulL0ntAmOR4XvKjomTfKPkMMIA6YL7ZdX5qZ3aGABo=
Subject key identifier: D5:38:B5:73:98:F1:4D:27:4E:0B:20:1F:D2:38:E0:37:F1:5A:D6:9E
Certificate issuer: /CN=ccd76159bfd9e337523ee930f3df111d6bae7306
Certificate serial: 018CC8DE35F9A533D6E22C5C582E7E95D98C
Authority key identifier: CC:D7:61:59:BF:D9:E3:37:52:3E:E9:30:F3:DF:11:1D:6B:AE:73:06
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zNdhWb_Z4zdSPukw898RHWuucwY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/f6ada1-7e8a-4b3e-b7e8-f8589f682691/1/1Ti1c5jxTSdOCyAf0jjgN_Fa1p4.roa
Signing time: Tue 02 Jan 2024 06:30:55 +0000
ROA not before: Tue 02 Jan 2024 06:30:55 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 62240
IP address blocks: 194.59.222.0/24 maxlen: 24
212.107.25.0/24 maxlen: 24
88.218.187.0/24 maxlen: 24
45.87.124.0/24 maxlen: 24
45.87.125.0/24 maxlen: 24
45.87.127.0/24 maxlen: 24
84.252.69.0/24 maxlen: 24
45.128.124.0/24 maxlen: 24
194.60.76.0/24 maxlen: 24
88.218.184.0/24 maxlen: 24
88.218.186.0/24 maxlen: 24
88.218.185.0/24 maxlen: 24
2a0f:3101::/32 maxlen: 32
2a0d:3c46::/32 maxlen: 32
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:de:35:f9:a5:33:d6:e2:2c:5c:58:2e:7e:95:d9:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ccd76159bfd9e337523ee930f3df111d6bae7306
Validity
Not Before: Jan 2 06:30:55 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d538b57398f14d274e0b201fd238e037f15ad69e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:1c:40:22:93:0a:24:9a:39:20:24:be:ca:67:
02:b4:67:d7:d5:53:6c:ca:57:69:db:36:8a:73:93:
dd:83:43:e4:b6:1b:55:22:47:90:f2:ab:e3:d5:e9:
67:5c:55:12:24:24:57:99:0c:0e:a3:8e:fe:3e:03:
f0:6d:f3:84:47:1d:4e:f4:06:b5:7a:19:30:cc:80:
a7:3d:99:a0:87:15:16:fb:89:39:77:ce:8c:d5:d9:
08:bf:8e:55:dc:03:c0:a1:ae:4e:f2:75:a5:1b:1b:
f2:7f:92:33:62:1b:70:3a:ec:b4:7f:03:9a:48:9e:
29:69:24:32:b5:70:4e:1f:c5:cc:7f:b4:48:3c:3c:
7d:97:20:74:83:b1:66:22:b1:0d:80:61:4c:e6:89:
5b:6f:f9:eb:63:b5:39:ae:01:54:cf:86:43:e6:b7:
e7:00:3e:f9:94:0f:5a:89:4a:a1:d7:5b:68:bf:53:
02:cf:75:de:bd:c1:fe:50:13:12:4f:44:35:a0:57:
1a:7d:34:4a:62:d7:de:2c:e4:6c:52:c2:a9:8c:5b:
76:15:36:e0:a2:4f:f5:64:be:9d:89:6f:81:32:03:
7d:cf:11:26:16:ef:21:d6:c2:aa:47:28:09:d4:b6:
96:76:68:e1:04:4b:96:6b:2f:eb:d4:e9:08:7e:58:
0e:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:38:B5:73:98:F1:4D:27:4E:0B:20:1F:D2:38:E0:37:F1:5A:D6:9E
X509v3 Authority Key Identifier:
keyid:CC:D7:61:59:BF:D9:E3:37:52:3E:E9:30:F3:DF:11:1D:6B:AE:73:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zNdhWb_Z4zdSPukw898RHWuucwY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/f6ada1-7e8a-4b3e-b7e8-f8589f682691/1/1Ti1c5jxTSdOCyAf0jjgN_Fa1p4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/f6ada1-7e8a-4b3e-b7e8-f8589f682691/1/zNdhWb_Z4zdSPukw898RHWuucwY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.87.124.0/23
45.87.127.0/24
45.128.124.0/24
84.252.69.0/24
88.218.184.0/22
194.59.222.0/24
194.60.76.0/24
212.107.25.0/24
IPv6:
2a0d:3c46::/32
2a0f:3101::/32
Signature Algorithm: sha256WithRSAEncryption
08:32:28:86:3c:26:c5:e5:8e:bc:d7:59:d8:38:f2:04:3b:ed:
7b:11:1a:5b:d5:45:37:ba:a1:b7:32:28:e3:7e:20:b7:88:51:
04:b7:83:f4:ac:9c:60:69:cc:25:87:63:e0:4e:53:37:cd:2f:
ea:d0:9c:96:ae:62:96:5d:72:1e:85:36:9d:ec:b8:73:d7:38:
d4:5f:a1:4f:5b:c5:40:8b:ea:73:2f:bb:c9:be:37:0a:5c:e5:
3f:db:63:13:4b:9b:97:f4:a4:73:8f:e3:73:ef:9e:eb:b5:59:
b2:75:1d:04:ca:c7:01:7b:7d:24:cd:cd:9b:1a:de:e2:ce:77:
ad:b5:54:c3:df:d4:9e:37:a7:70:5d:c7:5a:47:2b:0d:ab:8b:
7b:cb:fc:fa:20:4d:6d:da:20:1f:b3:e8:d0:1a:49:ff:00:a7:
21:3d:a2:e2:dd:94:5e:2b:fb:49:30:8c:33:22:d5:60:2b:1c:
d8:20:a0:c0:ae:7b:d5:1c:ae:fa:11:50:78:a8:84:b0:e5:4d:
3b:94:37:05:0d:1b:97:01:c5:0b:cb:80:09:46:35:4d:05:81:
af:e4:fc:a9:6d:c4:21:3d:ed:d1:b1:6a:31:f4:18:97:dc:bb:
13:e7:96:ab:b9:43:01:29:3f:98:05:9c:ee:c9:13:ff:24:c8:
a6:c6:0f:9c
-----BEGIN CERTIFICATE-----
MIIFPTCCBCWgAwIBAgISAYzI3jX5pTPW4ixcWC5+ldmMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNjZDc2MTU5YmZkOWUzMzc1MjNlZTkzMGYzZGYxMTFkNmJh
ZTczMDYwHhcNMjQwMTAyMDYzMDU1WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkNTM4YjU3Mzk4ZjE0ZDI3NGUwYjIwMWZkMjM4ZTAzN2YxNWFkNjllMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1RxAIpMKJJo5ICS+ymcCtGfX1VNs
yldp2zaKc5Pdg0PkthtVIkeQ8qvj1elnXFUSJCRXmQwOo47+PgPwbfOERx1O9Aa1
ehkwzICnPZmghxUW+4k5d86M1dkIv45V3APAoa5O8nWlGxvyf5IzYhtwOuy0fwOa
SJ4paSQytXBOH8XMf7RIPDx9lyB0g7FmIrENgGFM5olbb/nrY7U5rgFUz4ZD5rfn
AD75lA9aiUqh11tov1MCz3XevcH+UBMST0Q1oFcafTRKYtfeLORsUsKpjFt2FTbg
ok/1ZL6diW+BMgN9zxEmFu8h1sKqRygJ1LaWdmjhBEuWay/r1OkIflgOBwIDAQAB
o4ICSTCCAkUwHQYDVR0OBBYEFNU4tXOY8U0nTgsgH9I44DfxWtaeMB8GA1UdIwQY
MBaAFMzXYVm/2eM3Uj7pMPPfER1rrnMGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvek5kaFdiX1o0emRTUHVrdzg5OFJIV3V1Y3dZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MC9mNmFkYTEtN2U4YS00YjNlLWI3ZTgt
Zjg1ODlmNjgyNjkxLzEvMVRpMWM1anhUU2RPQ3lBZjBqamdOX0ZhMXA0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MC9mNmFkYTEtN2U4YS00YjNlLWI3ZTgtZjg1ODlmNjgyNjkx
LzEvek5kaFdiX1o0emRTUHVrdzg5OFJIV3V1Y3dZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMF8GCCsGAQUFBwEHAQH/BFAwTjA2BAIAATAwAwQBLVd8AwQA
LVd/AwQALYB8AwQAVPxFAwQCWNq4AwQAwjveAwQAwjxMAwQA1GsZMBQEAgACMA4D
BQAqDTxGAwUAKg8xATANBgkqhkiG9w0BAQsFAAOCAQEACDIohjwmxeWOvNdZ2Djy
BDvtexEaW9VFN7qhtzIo434gt4hRBLeD9KycYGnMJYdj4E5TN80v6tCclq5ill1y
HoU2ney4c9c41F+hT1vFQIvqcy+7yb43ClzlP9tjE0ubl/Skc4/jc++e67VZsnUd
BMrHAXt9JM3Nmxre4s53rbVUw9/UnjencF3HWkcrDauLe8v8+iBNbdogH7Po0BpJ
/wCnIT2i4t2UXiv7STCMMyLVYCsc2CCgwK571Ryu+hFQeKiEsOVNO5Q3BQ0blwHF
C8uACUY1TQWBr+T8qW3EIT3t0bFqMfQYl9y7E+eWq7lDASk/mAWc7skT/yTIpsYP
nA==
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:08:46 2024 by rpki-client on console-ams.rpki-client.org