Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/2J-whaQ4P38LGQcqScwO1WENxoQ.roa
File: 2J-whaQ4P38LGQcqScwO1WENxoQ.roa (raw, json)
Hash identifier: PZKDmXc6ZrEUCjOJMHWxh0QGiDxLI7DqvPrJtN9M0UQ=
Subject key identifier: D8:9F:B0:85:A4:38:3F:7F:0B:19:07:2A:49:CC:0E:D5:61:0D:C6:84
Certificate issuer: /CN=cdaaa0e082360360acda347664eb8314eb11da10
Certificate serial: 0182B69555EB38B225F13D60F2B8718BF575
Authority key identifier: CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/2J-whaQ4P38LGQcqScwO1WENxoQ.roa
Signing time: Fri 19 Aug 2022 14:50:16 +0000
ROA not before: Fri 19 Aug 2022 14:50:16 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 834
IP address blocks: 88.209.231.0/24 maxlen: 24
88.209.232.0/22 maxlen: 22
83.137.152.0/24 maxlen: 24
83.137.154.0/23 maxlen: 24
178.210.252.0/24 maxlen: 24
88.151.61.0/24 maxlen: 24
88.151.63.0/24 maxlen: 24
88.209.204.0/24 maxlen: 32
88.209.204.0/22 maxlen: 24
88.209.200.0/22 maxlen: 32
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:b6:95:55:eb:38:b2:25:f1:3d:60:f2:b8:71:8b:f5:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cdaaa0e082360360acda347664eb8314eb11da10
Validity
Not Before: Aug 19 14:50:16 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d89fb085a4383f7f0b19072a49cc0ed5610dc684
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:cf:d8:0d:e5:15:3f:62:8e:e4:62:70:bc:9b:
61:03:2e:b7:23:fb:21:e8:fc:49:27:84:d6:96:61:
76:e3:0c:2f:13:66:40:2d:45:9c:29:68:a2:a1:d8:
bd:dd:cd:92:03:50:5a:41:61:ce:e0:e8:be:a5:c7:
68:b4:41:cd:6d:83:5c:18:b4:cf:77:56:84:70:e9:
80:c6:3c:1c:fb:08:5b:72:88:17:c9:bc:0e:dc:b1:
5c:4b:5c:2f:d1:89:0a:1f:f4:04:f9:d9:0f:a0:11:
94:f2:0b:66:3b:a3:10:af:ef:f8:91:aa:4d:bc:3d:
7f:27:80:c8:14:70:1b:8b:09:38:dc:c5:47:e6:53:
62:b5:96:cf:3c:a9:44:d0:0e:10:24:80:54:94:18:
53:93:30:62:d7:1d:9a:cb:b8:dc:ad:47:82:a6:f7:
55:94:74:0d:12:dd:21:6b:41:51:40:e8:64:93:67:
34:e6:76:2a:4a:03:3a:b3:56:2a:c8:9c:d9:2a:d5:
b4:51:2a:f0:1e:47:22:9e:f7:1f:7b:c2:d3:a0:26:
43:c6:13:51:db:5f:a9:a4:5b:34:19:be:4d:1e:e5:
73:21:d7:e3:85:7a:04:11:9f:07:0e:1a:13:34:ae:
74:a7:8b:85:7a:ea:f2:0e:19:d6:d0:b2:b4:58:93:
b2:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:9F:B0:85:A4:38:3F:7F:0B:19:07:2A:49:CC:0E:D5:61:0D:C6:84
X509v3 Authority Key Identifier:
keyid:CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/2J-whaQ4P38LGQcqScwO1WENxoQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.137.152.0/24
83.137.154.0/23
88.151.61.0/24
88.151.63.0/24
88.209.200.0/21
88.209.231.0-88.209.235.255
178.210.252.0/24
Signature Algorithm: sha256WithRSAEncryption
56:03:3c:20:41:e9:ba:8c:f4:fc:35:82:0b:63:11:31:43:03:
96:de:fc:19:f7:e6:21:76:22:3f:59:32:37:f5:b3:c1:05:67:
16:0a:53:f3:51:0b:47:d1:34:e5:0c:4f:e6:3d:1f:76:1e:77:
8d:ea:c8:b7:fb:44:17:55:f0:09:2d:f5:ef:82:7c:c7:a0:32:
46:37:09:31:83:e6:96:56:fc:e2:2d:54:41:47:85:a0:18:97:
8a:a4:1d:72:f4:35:55:2e:8c:69:47:72:c5:eb:bf:ab:d4:8c:
83:83:84:61:b9:4c:4f:c7:ad:ea:4c:ce:62:9c:07:ee:b0:5e:
23:c4:29:f6:da:53:b7:fe:a4:3d:f0:b0:c0:ce:44:46:6c:b6:
bd:15:cc:7c:7e:94:7d:d4:e4:dc:ee:e6:ac:b0:d1:02:75:bd:
1c:f4:37:cf:42:17:df:82:8c:a7:d9:29:ca:42:f9:04:37:18:
43:7a:94:76:4a:47:9c:f7:c1:46:73:fc:66:9f:38:aa:e3:81:
82:be:52:70:3f:76:c1:56:61:0b:9f:75:fc:a0:9c:92:54:dd:
63:15:07:92:43:47:1f:66:e1:ce:9a:2e:ef:70:7b:bc:25:ce:
46:1d:5e:83:c0:7a:36:55:05:bc:c9:17:66:10:0c:d5:8e:ad:
d2:96:db:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:56:26 2024 by rpki-client on console-fra.rpki-client.org