Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/0zJ9-r3yJzySj8qvuElqw8EU8Mg.roa
File: 0zJ9-r3yJzySj8qvuElqw8EU8Mg.roa (raw, json)
Hash identifier: Npbp6fUVjgdd3RYvR6X+IzOUPDt7i4+SwtHqCLhNn8s=
Subject key identifier: D3:32:7D:FA:BD:F2:27:3C:92:8F:CA:AF:B8:49:6A:C3:C1:14:F0:C8
Certificate issuer: /CN=cdaaa0e082360360acda347664eb8314eb11da10
Certificate serial: 0187E0DEE4F5BD305666863825E809877D8B
Authority key identifier: CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/0zJ9-r3yJzySj8qvuElqw8EU8Mg.roa
Signing time: Wed 03 May 2023 09:08:36 +0000
ROA not before: Wed 03 May 2023 09:08:36 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 42864
IP address blocks: 178.248.200.0/21 maxlen: 21
45.9.171.0/24 maxlen: 24
45.9.170.0/24 maxlen: 24
45.9.169.0/24 maxlen: 24
88.209.196.0/24 maxlen: 24
88.209.193.0/24 maxlen: 24
88.209.208.0/24 maxlen: 24
88.209.213.0/24 maxlen: 24
88.209.212.0/24 maxlen: 24
88.209.210.0/24 maxlen: 24
88.209.217.0/24 maxlen: 24
88.209.215.0/24 maxlen: 24
88.209.214.0/24 maxlen: 24
178.210.224.0/22 maxlen: 24
193.138.125.0/24 maxlen: 24
77.242.144.0/22 maxlen: 24
77.242.151.0/24 maxlen: 24
77.242.148.0/24 maxlen: 24
77.242.156.0/24 maxlen: 24
92.52.219.0/24 maxlen: 24
45.88.93.0/24 maxlen: 24
45.14.11.0/24 maxlen: 24
45.14.10.0/24 maxlen: 24
45.14.8.0/24 maxlen: 24
92.52.212.0/22 maxlen: 24
92.52.210.0/23 maxlen: 23
92.52.209.0/24 maxlen: 24
92.52.208.0/24 maxlen: 24
2a00:1f40::/29 maxlen: 29
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:e0:de:e4:f5:bd:30:56:66:86:38:25:e8:09:87:7d:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cdaaa0e082360360acda347664eb8314eb11da10
Validity
Not Before: May 3 09:08:36 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d3327dfabdf2273c928fcaafb8496ac3c114f0c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:3b:ce:ba:49:a9:0c:97:7a:ce:6d:b6:52:0a:
3c:4b:07:1a:14:cf:6a:c0:a0:c8:22:d7:5e:44:79:
58:80:a0:55:60:f7:ca:f9:07:0c:e2:21:1b:be:a4:
cc:25:19:9a:50:c9:d2:2a:d0:3f:4c:4a:88:5c:db:
f2:00:a3:a9:3d:0a:9a:d9:06:c1:ec:f5:af:44:53:
c7:af:db:a9:b5:70:6b:6b:b8:08:84:9a:18:96:8b:
3f:2d:60:1f:23:03:e1:84:fd:59:be:6c:c8:a8:fe:
00:f9:f0:e6:b0:72:8e:3f:b8:63:fd:c3:47:a1:9f:
a0:15:22:ec:7f:7e:75:1a:d4:6f:64:42:dd:21:da:
06:9e:c5:c7:75:5f:b7:15:d1:5e:c1:78:09:76:e9:
5a:8a:75:58:ab:55:00:72:d2:8d:f9:f6:ff:d8:d4:
14:6c:fe:02:3f:e7:d7:9b:83:01:74:f3:61:8d:20:
87:2b:5d:7a:42:61:52:46:24:ef:7a:c7:59:22:45:
ae:db:69:a7:59:fb:97:80:01:c5:b9:f2:9f:41:de:
94:db:1b:56:e0:5d:87:3a:60:30:cc:6f:98:c4:00:
2c:2d:9c:4d:e8:8b:d6:5f:79:83:4e:64:67:25:a6:
3b:54:24:1f:5b:34:86:b8:80:8b:3d:9d:1f:63:32:
3e:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:32:7D:FA:BD:F2:27:3C:92:8F:CA:AF:B8:49:6A:C3:C1:14:F0:C8
X509v3 Authority Key Identifier:
keyid:CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/0zJ9-r3yJzySj8qvuElqw8EU8Mg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.9.169.0-45.9.171.255
45.14.8.0/24
45.14.10.0/23
45.88.93.0/24
77.242.144.0-77.242.148.255
77.242.151.0/24
77.242.156.0/24
88.209.193.0/24
88.209.196.0/24
88.209.208.0/24
88.209.210.0/24
88.209.212.0/22
88.209.217.0/24
92.52.208.0/21
92.52.219.0/24
178.210.224.0/22
178.248.200.0/21
193.138.125.0/24
IPv6:
2a00:1f40::/29
Signature Algorithm: sha256WithRSAEncryption
06:a5:63:3d:55:0c:c5:b3:13:2f:91:27:38:22:1e:9b:da:fb:
f4:62:20:ac:95:90:fb:14:ba:d0:66:e5:36:fd:e7:d2:3a:4d:
d2:1f:2d:b8:11:72:17:11:bf:de:3b:bc:64:7f:b4:8a:33:92:
02:40:08:b8:59:03:b4:54:ce:b9:72:d4:8b:2c:cb:5a:14:0e:
1d:0c:43:cc:0e:7d:d1:3d:91:d5:3a:19:ca:85:ee:51:f6:99:
c0:92:50:0f:4a:81:72:1b:4d:43:5b:50:aa:d9:51:e5:8d:e9:
59:40:c0:2b:5a:62:00:25:19:07:c7:83:9c:91:c9:1c:50:10:
a2:ea:5a:8d:16:4e:08:e0:7f:b1:c0:b7:a9:56:0e:c3:01:28:
a4:64:d6:23:0a:29:d1:38:d3:a9:68:5b:ed:25:f8:a7:e0:07:
cc:e3:c6:99:4e:78:aa:f9:3e:77:6e:c1:08:9f:da:ce:96:a4:
63:a5:92:f5:63:76:6e:48:ce:a7:fb:28:07:9b:89:1e:ad:a9:
65:30:65:ae:82:c4:45:58:d9:51:a3:ca:a4:00:07:15:51:17:
e6:31:13:3d:c7:b3:a0:c5:fe:fa:d9:74:95:c9:16:94:66:92:
0e:99:75:15:54:7e:ba:85:f2:b0:8e:38:f6:22:57:f3:4d:a1:
4f:52:1b:36
-----BEGIN CERTIFICATE-----
MIIFhjCCBG6gAwIBAgISAYfg3uT1vTBWZoY4JegJh32LMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNkYWFhMGUwODIzNjAzNjBhY2RhMzQ3NjY0ZWI4MzE0ZWIx
MWRhMTAwHhcNMjMwNTAzMDkwODM2WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkMzMyN2RmYWJkZjIyNzNjOTI4ZmNhYWZiODQ5NmFjM2MxMTRmMGM4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3DvOukmpDJd6zm22Ugo8SwcaFM9q
wKDIItdeRHlYgKBVYPfK+QcM4iEbvqTMJRmaUMnSKtA/TEqIXNvyAKOpPQqa2QbB
7PWvRFPHr9uptXBra7gIhJoYlos/LWAfIwPhhP1ZvmzIqP4A+fDmsHKOP7hj/cNH
oZ+gFSLsf351GtRvZELdIdoGnsXHdV+3FdFewXgJdulainVYq1UActKN+fb/2NQU
bP4CP+fXm4MBdPNhjSCHK116QmFSRiTvesdZIkWu22mnWfuXgAHFufKfQd6U2xtW
4F2HOmAwzG+YxAAsLZxN6IvWX3mDTmRnJaY7VCQfWzSGuICLPZ0fYzI+EQIDAQAB
o4ICkjCCAo4wHQYDVR0OBBYEFNMyffq98ic8ko/Kr7hJasPBFPDIMB8GA1UdIwQY
MBaAFM2qoOCCNgNgrNo0dmTrgxTrEdoQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvemFxZzRJSTJBMkNzMmpSMlpPdURGT3NSMmhBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZC81ODkxMjctMTA5Ni00YzkxLTk2Y2Mt
N2U0ZDZmNmY2ZTY2LzEvMHpKOS1yM3lKenlTajhxdnVFbHF3OEVVOE1nLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZC81ODkxMjctMTA5Ni00YzkxLTk2Y2MtN2U0ZDZmNmY2ZTY2
LzEvemFxZzRJSTJBMkNzMmpSMlpPdURGT3NSMmhBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIGnBggrBgEFBQcBBwEB/wSBlzCBlDCBggQCAAEwfDAMAwQA
LQmpAwQCLQmoAwQALQ4IAwQBLQ4KAwQALVhdMAwDBARN8pADBABN8pQDBABN8pcD
BABN8pwDBABY0cEDBABY0cQDBABY0dADBABY0dIDBAJY0dQDBABY0dkDBANcNNAD
BABcNNsDBAKy0uADBAOy+MgDBADBin0wDQQCAAIwBwMFAyoAH0AwDQYJKoZIhvcN
AQELBQADggEBAAalYz1VDMWzEy+RJzgiHpva+/RiIKyVkPsUutBm5Tb959I6TdIf
LbgRchcRv947vGR/tIozkgJACLhZA7RUzrly1Issy1oUDh0MQ8wOfdE9kdU6GcqF
7lH2mcCSUA9KgXIbTUNbUKrZUeWN6VlAwCtaYgAlGQfHg5yRyRxQEKLqWo0WTgjg
f7HAt6lWDsMBKKRk1iMKKdE406loW+0l+KfgB8zjxplOeKr5PnduwQif2s6WpGOl
kvVjdm5Izqf7KAebiR6tqWUwZa6CxEVY2VGjyqQABxVRF+YxEz3Hs6DF/vrZdJXJ
FpRmkg6ZdRVUfrqF8rCOOPYiV/NNoU9SGzY=
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:47:54 2024 by rpki-client on console-ams.rpki-client.org