Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/3SIzgGKbDJpBEzNdKpThb9WUhUI.roa
File: 3SIzgGKbDJpBEzNdKpThb9WUhUI.roa (raw, json)
Hash identifier: GvTJq5mwWke8H0O0331UmBl4njUYHZYPyZHZ/4rVsGc=
Subject key identifier: DD:22:33:80:62:9B:0C:9A:41:13:33:5D:2A:94:E1:6F:D5:94:85:42
Certificate issuer: /CN=cdaaa0e082360360acda347664eb8314eb11da10
Certificate serial: 01877F1B32D91E988D7BA26D796837575E6D
Authority key identifier: CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/3SIzgGKbDJpBEzNdKpThb9WUhUI.roa
Signing time: Fri 14 Apr 2023 09:31:41 +0000
ROA not before: Fri 14 Apr 2023 09:31:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 211619
IP address blocks: 88.209.228.0/24 maxlen: 24
88.209.236.0/22 maxlen: 22
88.209.246.0/23 maxlen: 23
88.209.254.0/24 maxlen: 24
83.137.159.0/24 maxlen: 24
83.137.156.0/24 maxlen: 24
83.137.157.0/24 maxlen: 24
83.137.153.0/24 maxlen: 24
178.210.232.0/24 maxlen: 24
178.210.233.0/24 maxlen: 24
178.210.237.0/24 maxlen: 24
178.210.234.0/24 maxlen: 24
178.210.235.0/24 maxlen: 24
45.9.168.0/24 maxlen: 24
77.242.152.0/22 maxlen: 24
92.52.217.0/24 maxlen: 24
92.52.218.0/24 maxlen: 24
194.41.47.0/24 maxlen: 24
88.151.62.0/24 maxlen: 24
5.182.112.0/24 maxlen: 24
5.182.115.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:7f:1b:32:d9:1e:98:8d:7b:a2:6d:79:68:37:57:5e:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cdaaa0e082360360acda347664eb8314eb11da10
Validity
Not Before: Apr 14 09:31:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=dd223380629b0c9a4113335d2a94e16fd5948542
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:30:c0:73:ba:30:84:bb:4d:13:a9:fa:ec:fb:
16:58:e7:d3:af:37:85:4d:09:b5:8e:d7:d4:21:61:
99:ed:71:62:7d:9e:11:6d:4f:d2:db:f3:ed:3b:2a:
e7:2c:50:89:82:5d:7e:c5:fa:b1:c5:69:36:49:cf:
c8:ee:95:64:44:66:46:aa:72:41:61:05:2f:38:a2:
23:59:40:4b:ba:3a:2e:68:c3:54:6a:1f:49:9e:d9:
d7:e3:ad:eb:3f:b4:4d:5f:ec:97:3f:7a:ef:9c:b5:
35:20:ed:cb:46:d1:5a:40:0a:11:cf:c9:ca:5e:cf:
90:17:21:57:9d:e6:fe:0b:21:f5:a0:0c:47:72:b8:
52:a8:a5:6f:ee:6b:f4:24:3a:dd:c4:59:0d:af:f6:
3b:45:33:03:ce:63:e3:bf:2d:22:16:9c:a3:f0:dc:
ef:90:af:82:d8:70:d1:fc:56:b7:16:03:e9:4b:d4:
53:49:23:27:77:1e:f7:27:e3:b2:13:39:a4:e8:e8:
f0:9b:48:a6:9d:fa:1a:04:67:18:96:61:f4:14:55:
94:a5:ec:22:15:a8:6b:5b:13:8f:2a:85:6b:40:65:
a3:42:d7:fc:02:8b:3f:56:77:ec:75:16:b4:bc:25:
ee:c0:02:ec:fa:60:e3:9f:db:bf:ee:96:d4:b2:c2:
7a:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:22:33:80:62:9B:0C:9A:41:13:33:5D:2A:94:E1:6F:D5:94:85:42
X509v3 Authority Key Identifier:
keyid:CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/3SIzgGKbDJpBEzNdKpThb9WUhUI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.182.112.0/24
5.182.115.0/24
45.9.168.0/24
77.242.152.0/22
83.137.153.0/24
83.137.156.0/23
83.137.159.0/24
88.151.62.0/24
88.209.228.0/24
88.209.236.0/22
88.209.246.0/23
88.209.254.0/24
92.52.217.0-92.52.218.255
178.210.232.0/22
178.210.237.0/24
194.41.47.0/24
Signature Algorithm: sha256WithRSAEncryption
ab:89:66:27:1d:11:34:b3:e2:65:0e:d5:8e:0c:a6:72:06:10:
b2:aa:b7:de:46:17:8d:e9:38:09:52:24:fe:c3:9e:4c:ba:4c:
8b:20:5e:39:23:3c:55:e8:5d:77:bb:ef:1f:ce:8e:6e:1a:98:
24:b4:77:d3:4b:38:37:d9:06:a5:c3:3a:90:07:4a:b9:df:91:
52:dc:5f:5d:d9:1c:79:9c:eb:44:22:f9:f0:9c:e9:c5:16:cb:
1f:1d:f3:26:fb:36:af:82:64:b9:5c:e4:da:20:aa:91:94:3b:
41:c5:68:cc:9b:45:28:39:e6:10:c9:6c:37:61:12:06:1f:fa:
90:44:3e:a9:45:62:4c:94:3b:5b:cb:3f:18:7d:fe:cb:9c:80:
29:d4:7e:d3:7b:67:76:78:30:1c:ea:f1:b0:a9:c7:cb:e6:84:
69:2b:3f:01:09:7c:97:e7:03:17:19:59:5b:f6:42:19:4a:ea:
6a:b6:37:17:b5:f4:47:17:02:a9:01:f1:01:05:0d:88:d6:18:
aa:7f:08:73:80:05:af:ed:8b:f3:a0:32:c7:5a:17:41:5e:e1:
7f:0f:b9:c0:c7:17:c7:3a:65:39:db:d0:66:e6:cc:b3:c2:0c:
ad:1f:ae:65:06:fb:05:f8:a6:29:89:af:07:9c:cb:e3:38:16:
79:00:f6:d5
-----BEGIN CERTIFICATE-----
MIIFYDCCBEigAwIBAgISAYd/GzLZHpiNe6JteWg3V15tMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNkYWFhMGUwODIzNjAzNjBhY2RhMzQ3NjY0ZWI4MzE0ZWIx
MWRhMTAwHhcNMjMwNDE0MDkzMTQxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkZDIyMzM4MDYyOWIwYzlhNDExMzMzNWQyYTk0ZTE2ZmQ1OTQ4NTQyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnDDAc7owhLtNE6n67PsWWOfTrzeF
TQm1jtfUIWGZ7XFifZ4RbU/S2/PtOyrnLFCJgl1+xfqxxWk2Sc/I7pVkRGZGqnJB
YQUvOKIjWUBLujouaMNUah9JntnX463rP7RNX+yXP3rvnLU1IO3LRtFaQAoRz8nK
Xs+QFyFXneb+CyH1oAxHcrhSqKVv7mv0JDrdxFkNr/Y7RTMDzmPjvy0iFpyj8Nzv
kK+C2HDR/Fa3FgPpS9RTSSMndx73J+OyEzmk6Ojwm0imnfoaBGcYlmH0FFWUpewi
FahrWxOPKoVrQGWjQtf8Aos/VnfsdRa0vCXuwALs+mDjn9u/7pbUssJ6lwIDAQAB
o4ICbDCCAmgwHQYDVR0OBBYEFN0iM4BimwyaQRMzXSqU4W/VlIVCMB8GA1UdIwQY
MBaAFM2qoOCCNgNgrNo0dmTrgxTrEdoQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvemFxZzRJSTJBMkNzMmpSMlpPdURGT3NSMmhBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZC81ODkxMjctMTA5Ni00YzkxLTk2Y2Mt
N2U0ZDZmNmY2ZTY2LzEvM1NJemdHS2JESnBCRXpOZEtwVGhiOVdVaFVJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZC81ODkxMjctMTA5Ni00YzkxLTk2Y2MtN2U0ZDZmNmY2ZTY2
LzEvemFxZzRJSTJBMkNzMmpSMlpPdURGT3NSMmhBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIGBBggrBgEFBQcBBwEB/wRyMHAwbgQCAAEwaAMEAAW2cAME
AAW2cwMEAC0JqAMEAk3ymAMEAFOJmQMEAVOJnAMEAFOJnwMEAFiXPgMEAFjR5AME
AljR7AMEAVjR9gMEAFjR/jAMAwQAXDTZAwQAXDTaAwQCstLoAwQAstLtAwQAwikv
MA0GCSqGSIb3DQEBCwUAA4IBAQCriWYnHRE0s+JlDtWODKZyBhCyqrfeRheN6TgJ
UiT+w55MukyLIF45IzxV6F13u+8fzo5uGpgktHfTSzg32QalwzqQB0q535FS3F9d
2Rx5nOtEIvnwnOnFFssfHfMm+zavgmS5XOTaIKqRlDtBxWjMm0UoOeYQyWw3YRIG
H/qQRD6pRWJMlDtbyz8Yff7LnIAp1H7Te2d2eDAc6vGwqcfL5oRpKz8BCXyX5wMX
GVlb9kIZSupqtjcXtfRHFwKpAfEBBQ2I1hiqfwhzgAWv7YvzoDLHWhdBXuF/D7nA
xxfHOmU529Bm5syzwgytH65lBvsF+KYpia8HnMvjOBZ5APbV
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:56:26 2024 by rpki-client on console-fra.rpki-client.org