Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/1-Op7HNhx_jQ_h2sR93uer-8J7HU.roa
File: 1-Op7HNhx_jQ_h2sR93uer-8J7HU.roa (raw, json)
Hash identifier: 8BLk0f4io2V+MD0c15CcdW7FmNt5CMIB1bcTPLSR8do=
Subject key identifier: F8:EA:7B:1C:D8:71:FE:34:3F:87:6B:11:F7:7B:9E:AF:EF:09:EC:75
Certificate issuer: /CN=cdaaa0e082360360acda347664eb8314eb11da10
Certificate serial: 01863A82B3DFF44AE5712C6EAD4EE012714C
Authority key identifier: CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/1-Op7HNhx_jQ_h2sR93uer-8J7HU.roa
Signing time: Fri 10 Feb 2023 08:48:09 +0000
ROA not before: Fri 10 Feb 2023 08:48:09 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 211619
IP address blocks: 88.209.228.0/24 maxlen: 24
88.209.236.0/22 maxlen: 22
88.209.246.0/23 maxlen: 23
88.209.253.0/24 maxlen: 24
83.137.156.0/24 maxlen: 24
83.137.157.0/24 maxlen: 24
83.137.158.0/24 maxlen: 24
83.137.153.0/24 maxlen: 24
178.210.232.0/24 maxlen: 24
178.210.233.0/24 maxlen: 24
178.210.234.0/24 maxlen: 24
178.210.235.0/24 maxlen: 24
45.9.168.0/24 maxlen: 24
77.242.152.0/22 maxlen: 22
92.52.218.0/24 maxlen: 24
194.41.47.0/24 maxlen: 24
88.151.62.0/24 maxlen: 24
5.182.112.0/24 maxlen: 24
45.14.9.0/24 maxlen: 24
5.182.115.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:3a:82:b3:df:f4:4a:e5:71:2c:6e:ad:4e:e0:12:71:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cdaaa0e082360360acda347664eb8314eb11da10
Validity
Not Before: Feb 10 08:48:09 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f8ea7b1cd871fe343f876b11f77b9eafef09ec75
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:93:be:e5:e6:5c:21:4e:e0:ef:4a:7b:d4:1d:
09:0c:83:d7:dc:8f:70:91:91:a7:09:f0:35:32:ef:
16:82:78:3c:f2:36:67:40:5d:5b:b2:e5:f3:f3:d5:
61:58:df:f0:0e:3f:b5:27:70:9a:74:21:92:ba:b3:
b7:93:09:48:32:5e:ac:56:6a:b2:d9:9b:13:09:1b:
67:db:7b:9e:32:ea:1e:1a:cc:a0:f8:85:c5:51:3a:
3b:bb:7c:76:ec:5e:d7:5b:6a:33:ff:d7:04:fb:3d:
2c:6a:db:4f:8f:6a:00:41:e9:ec:78:75:5c:4c:a1:
b9:dd:49:b7:cb:b3:36:ff:90:55:55:c7:69:36:28:
cd:ea:f7:e1:46:33:0d:c3:a1:3c:13:33:a7:cb:e6:
9c:bf:cc:f9:0d:9b:40:44:c7:39:ff:8f:cf:51:fd:
90:1d:2c:76:01:f8:bc:5a:29:fb:ee:a8:b7:31:fb:
e7:43:28:b7:6d:d4:8c:8c:09:a3:11:d6:37:01:2d:
d7:ac:f3:bb:68:eb:85:f8:b6:9c:e4:86:e7:7b:46:
4f:82:ba:d0:fb:c3:4b:ab:1b:23:be:77:db:06:0c:
a8:84:56:ce:c4:58:e6:60:c0:38:f9:b7:8c:d5:e2:
f0:a4:d4:0d:a8:d2:84:55:2a:42:2d:9b:23:99:ad:
5f:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:EA:7B:1C:D8:71:FE:34:3F:87:6B:11:F7:7B:9E:AF:EF:09:EC:75
X509v3 Authority Key Identifier:
keyid:CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/1-Op7HNhx_jQ_h2sR93uer-8J7HU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.182.112.0/24
5.182.115.0/24
45.9.168.0/24
45.14.9.0/24
77.242.152.0/22
83.137.153.0/24
83.137.156.0-83.137.158.255
88.151.62.0/24
88.209.228.0/24
88.209.236.0/22
88.209.246.0/23
88.209.253.0/24
92.52.218.0/24
178.210.232.0/22
194.41.47.0/24
Signature Algorithm: sha256WithRSAEncryption
34:bd:ea:d6:a9:85:80:2d:65:66:e8:57:47:40:ea:a7:0d:bd:
d9:63:38:b1:08:ee:a8:ad:a4:45:1f:4f:89:64:4a:e6:89:69:
97:f8:66:c2:92:d5:b1:2b:e8:3b:cb:20:99:73:a6:d5:ac:59:
c0:79:47:24:55:05:dd:e3:07:23:2d:40:cd:77:86:e9:03:8c:
87:ec:23:92:1b:08:38:82:fd:c1:63:3f:4a:30:f1:67:2c:67:
eb:4f:49:9b:8a:f7:04:42:ec:80:e3:ba:02:c0:56:dc:b0:b4:
9a:4c:3c:b5:9e:cf:6f:e2:52:d7:9c:39:b1:a5:fc:36:bb:19:
22:b1:5b:21:d0:a0:9a:86:eb:ad:38:2b:3d:16:a0:38:aa:40:
bc:b6:66:e3:31:4a:a5:c2:92:da:f5:96:a9:29:1b:3d:00:3a:
83:76:ef:fb:74:f7:c7:aa:5b:d4:44:04:52:88:c7:bb:6a:04:
f7:76:90:b6:c3:33:56:46:97:76:12:b6:e5:3b:71:1c:45:e9:
bb:f9:a2:28:78:f2:06:a7:73:1d:53:b8:34:fd:52:f9:e1:97:
3e:3c:51:6c:fd:01:04:0e:ee:54:6f:db:9c:2b:9d:c1:b5:02:
2b:b9:da:8c:b0:56:7f:53:74:2e:1b:ec:aa:32:ca:8f:78:63:
71:5a:ff:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 07:10:35 2025 by rpki-client