Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/1-TETFgUWaYdlzpFi-WZfp7woKZU.roa
File: 1-TETFgUWaYdlzpFi-WZfp7woKZU.roa (raw, json)
Hash identifier: rxqdd5Z63e+jfJtub9uVn8EGuSNhOn+Gfd2lC3a6HWQ=
Subject key identifier: F9:31:13:16:05:16:69:87:65:CE:91:62:F9:66:5F:A7:BC:28:29:95
Certificate issuer: /CN=cdaaa0e082360360acda347664eb8314eb11da10
Certificate serial: 0183DA52B46DB054DF7EA4057BF835A3F67B
Authority key identifier: CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/1-TETFgUWaYdlzpFi-WZfp7woKZU.roa
Signing time: Sat 15 Oct 2022 06:26:36 +0000
ROA not before: Sat 15 Oct 2022 06:26:36 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 60721
IP address blocks: 92.52.214.0/24 maxlen: 24
88.209.255.0/24 maxlen: 24
178.210.248.0/24 maxlen: 24
88.151.63.0/24 maxlen: 24
88.209.201.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:da:52:b4:6d:b0:54:df:7e:a4:05:7b:f8:35:a3:f6:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cdaaa0e082360360acda347664eb8314eb11da10
Validity
Not Before: Oct 15 06:26:36 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f93113160516698765ce9162f9665fa7bc282995
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:58:7c:a7:80:9a:36:1a:15:79:f9:a5:7f:19:
1c:27:83:e1:20:80:da:1d:38:4a:7f:9f:08:37:77:
b9:ba:98:d5:9e:2d:34:29:da:71:9b:5e:fa:26:3d:
a8:45:3b:0c:af:35:44:08:a6:ae:25:94:cf:ae:c2:
12:72:ad:1d:1d:79:f4:8f:9f:d9:12:14:3f:2c:0c:
51:64:33:06:cf:f9:77:cc:e0:f6:d1:8c:72:2b:81:
04:6b:a2:60:0b:99:de:46:b3:e5:e6:67:d9:29:28:
2a:fb:ad:12:78:ca:50:43:8d:4d:6a:83:b1:9e:00:
f7:43:0a:77:3e:d0:69:0c:22:21:6f:65:44:da:2c:
57:a9:0b:03:f7:34:81:74:a7:90:4e:71:e3:c7:d8:
d2:6a:27:59:d8:24:8a:4a:5a:74:4d:59:93:31:ae:
b1:a4:b3:65:15:e3:ab:5a:84:de:27:5d:a4:95:00:
4b:e2:3b:81:4e:a3:77:72:81:9a:06:1e:57:d4:bf:
e9:38:a5:cb:64:dc:a5:36:0f:85:42:17:09:22:0a:
14:04:a1:a0:5c:f6:ff:e3:2d:dd:fe:1a:a7:50:9b:
c4:73:32:83:f2:b7:3c:4e:7e:36:87:de:80:f9:0c:
bd:fd:72:f5:db:76:f4:3e:84:77:ed:2e:82:43:93:
54:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:31:13:16:05:16:69:87:65:CE:91:62:F9:66:5F:A7:BC:28:29:95
X509v3 Authority Key Identifier:
keyid:CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/1-TETFgUWaYdlzpFi-WZfp7woKZU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.151.63.0/24
88.209.201.0/24
88.209.255.0/24
92.52.214.0/24
178.210.248.0/24
Signature Algorithm: sha256WithRSAEncryption
a5:7e:3e:92:36:83:6d:af:86:b2:bf:1a:75:ba:83:ce:c6:fe:
45:c7:88:e0:38:1f:08:5a:65:14:6c:98:00:a4:2e:0c:83:ad:
81:67:e6:4b:0c:4c:f9:07:14:06:26:b6:27:ab:87:9b:20:6f:
d2:33:59:a0:37:5e:97:81:ca:20:4d:65:f7:ab:a1:a4:85:8e:
c4:e8:8a:db:c4:b2:4e:13:cb:81:bb:04:ba:5e:dd:ea:ba:3a:
6b:e2:b4:94:f8:fe:cd:7c:42:b7:12:90:0e:b8:c3:04:81:90:
16:c1:a9:f5:1d:71:18:82:a6:19:3b:03:b6:46:bd:3a:10:07:
66:46:39:eb:1d:86:05:49:56:d0:6e:bb:5c:1c:f6:ca:7f:66:
6e:82:3d:c3:3d:25:f8:33:78:03:e9:bf:c8:68:b1:e1:f8:e6:
bf:96:7e:08:7b:c5:a1:67:8e:88:cb:90:88:43:85:92:ba:0e:
ae:6a:d2:70:23:3f:93:93:fd:b5:10:29:31:ce:57:b4:d0:6b:
09:40:3c:8f:90:4b:7b:5d:44:03:56:be:41:e0:86:2c:8f:1c:
01:a7:fb:a0:f7:27:3c:12:d4:89:71:af:1d:43:00:6f:49:f2:
ca:0f:90:df:ee:95:85:fd:9e:68:b4:fe:10:3a:0f:aa:af:83:
91:a3:e1:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:47:54 2024 by rpki-client on console-ams.rpki-client.org