Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/3rrJHWy7ttWAFQIs6ATYX5UVQ9M.roa
File: 3rrJHWy7ttWAFQIs6ATYX5UVQ9M.roa (raw, json)
Hash identifier: mRg0n0IHUF4g+R3JtZcDwSoVrZx1F3xyPiGsIz8WMO8=
Subject key identifier: DE:BA:C9:1D:6C:BB:B6:D5:80:15:02:2C:E8:04:D8:5F:95:15:43:D3
Certificate issuer: /CN=cdaaa0e082360360acda347664eb8314eb11da10
Certificate serial: 0188B98B7196C2CBC550D55E65634AE6A3FE
Authority key identifier: CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/3rrJHWy7ttWAFQIs6ATYX5UVQ9M.roa
Signing time: Wed 14 Jun 2023 10:55:03 +0000
ROA not before: Wed 14 Jun 2023 10:55:03 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 178.210.228.0/24 maxlen: 24
178.210.250.0/24 maxlen: 24
88.151.56.0/23 maxlen: 24
77.242.159.0/24 maxlen: 24
88.209.211.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:b9:8b:71:96:c2:cb:c5:50:d5:5e:65:63:4a:e6:a3:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cdaaa0e082360360acda347664eb8314eb11da10
Validity
Not Before: Jun 14 10:55:03 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=debac91d6cbbb6d58015022ce804d85f951543d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:a5:2a:c1:82:84:ed:55:7e:3a:94:49:06:fc:
74:30:12:8a:40:30:c4:74:62:aa:12:56:95:d8:8b:
a0:ba:10:fc:c4:11:9a:be:54:aa:dd:da:fc:47:8a:
ae:cf:3e:24:3e:07:97:7f:fa:4a:49:02:bc:00:b4:
77:df:29:1c:fc:3a:f8:7a:9f:b6:81:db:24:6c:6f:
ad:c5:7c:3f:08:3c:a1:ce:6e:67:8b:db:a5:dc:de:
49:b8:4c:94:ba:0e:6f:55:fd:e6:04:9b:4b:4e:dc:
b8:8a:94:b2:ea:1c:d1:ef:54:6e:45:48:ca:44:23:
6d:3c:da:10:1f:fa:8f:d4:f2:6e:c0:0d:55:ed:06:
c2:76:4b:ad:a8:b0:24:78:6c:88:a1:31:88:8f:c3:
13:8c:7c:24:7a:f0:b3:a2:f5:e4:eb:98:51:ca:d0:
54:6d:fa:90:62:cc:34:e2:c8:e7:5a:7b:df:5b:82:
31:a8:8a:be:1f:0a:c8:8b:7b:7f:87:bf:f7:55:29:
fd:b9:76:1b:3d:23:d5:70:90:31:62:57:8d:4a:18:
a8:01:18:54:fb:f7:63:5f:e9:65:d8:9c:94:9a:11:
58:0a:be:39:b0:32:24:1d:d0:ee:cb:12:2c:a1:4b:
db:d1:16:5c:98:51:38:44:67:6b:b2:ec:82:0b:fd:
16:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:BA:C9:1D:6C:BB:B6:D5:80:15:02:2C:E8:04:D8:5F:95:15:43:D3
X509v3 Authority Key Identifier:
keyid:CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/3rrJHWy7ttWAFQIs6ATYX5UVQ9M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.242.159.0/24
88.151.56.0/23
88.209.211.0/24
178.210.228.0/24
178.210.250.0/24
Signature Algorithm: sha256WithRSAEncryption
2c:76:b5:53:c8:4d:55:a1:d8:cc:8d:f5:3c:58:94:24:9b:30:
e9:f4:c8:51:20:d0:0a:af:9e:c9:59:8e:0b:b7:e5:dc:d5:79:
f3:82:f8:c2:93:4f:e6:0f:fc:4c:c5:84:49:dc:ac:95:d2:76:
ba:1c:56:dc:77:99:75:bb:e9:a6:2b:88:44:3c:90:09:b1:86:
89:18:87:2c:52:7e:8d:35:cc:b1:3a:80:98:89:89:ac:80:81:
38:7f:27:98:55:26:f6:f6:dd:10:25:8f:c6:18:b0:cc:b8:a1:
0f:4a:e1:86:d5:07:d4:4f:14:44:3b:b2:d9:fb:a5:01:36:94:
8c:e7:6b:96:65:df:93:dc:f3:16:af:38:26:d0:f5:ff:e5:f4:
a9:b4:a6:c8:78:be:47:fb:ce:d3:41:2c:2a:4d:8a:e3:d4:db:
52:44:6a:2e:a5:9a:09:42:3c:30:7b:68:01:71:40:99:99:a9:
e3:0d:39:44:8a:96:cb:58:32:c5:ac:d7:f6:50:80:e6:df:46:
a5:9d:54:25:c7:fc:2d:01:43:c1:39:f2:d2:90:e7:bc:04:32:
61:43:c2:4e:5b:2a:00:f4:37:14:1a:77:c0:dd:5c:b4:b2:a2:
1f:1d:23:89:ff:5c:c0:b3:a4:82:e3:f0:2d:6e:b8:38:8c:d1:
d4:64:28:90
-----BEGIN CERTIFICATE-----
MIIFFTCCA/2gAwIBAgISAYi5i3GWwsvFUNVeZWNK5qP+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNkYWFhMGUwODIzNjAzNjBhY2RhMzQ3NjY0ZWI4MzE0ZWIx
MWRhMTAwHhcNMjMwNjE0MTA1NTAzWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkZWJhYzkxZDZjYmJiNmQ1ODAxNTAyMmNlODA0ZDg1Zjk1MTU0M2QzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApaUqwYKE7VV+OpRJBvx0MBKKQDDE
dGKqElaV2IuguhD8xBGavlSq3dr8R4quzz4kPgeXf/pKSQK8ALR33ykc/Dr4ep+2
gdskbG+txXw/CDyhzm5ni9ul3N5JuEyUug5vVf3mBJtLTty4ipSy6hzR71RuRUjK
RCNtPNoQH/qP1PJuwA1V7QbCdkutqLAkeGyIoTGIj8MTjHwkevCzovXk65hRytBU
bfqQYsw04sjnWnvfW4IxqIq+HwrIi3t/h7/3VSn9uXYbPSPVcJAxYleNShioARhU
+/djX+ll2JyUmhFYCr45sDIkHdDuyxIsoUvb0RZcmFE4RGdrsuyCC/0WUwIDAQAB
o4ICITCCAh0wHQYDVR0OBBYEFN66yR1su7bVgBUCLOgE2F+VFUPTMB8GA1UdIwQY
MBaAFM2qoOCCNgNgrNo0dmTrgxTrEdoQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvemFxZzRJSTJBMkNzMmpSMlpPdURGT3NSMmhBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZC81ODkxMjctMTA5Ni00YzkxLTk2Y2Mt
N2U0ZDZmNmY2ZTY2LzEvM3JySkhXeTd0dFdBRlFJczZBVFlYNVVWUTlNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZC81ODkxMjctMTA5Ni00YzkxLTk2Y2MtN2U0ZDZmNmY2ZTY2
LzEvemFxZzRJSTJBMkNzMmpSMlpPdURGT3NSMmhBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDcGCCsGAQUFBwEHAQH/BCgwJjAkBAIAATAeAwQATfKfAwQB
WJc4AwQAWNHTAwQAstLkAwQAstL6MA0GCSqGSIb3DQEBCwUAA4IBAQAsdrVTyE1V
odjMjfU8WJQkmzDp9MhRINAKr57JWY4Lt+Xc1XnzgvjCk0/mD/xMxYRJ3KyV0na6
HFbcd5l1u+mmK4hEPJAJsYaJGIcsUn6NNcyxOoCYiYmsgIE4fyeYVSb29t0QJY/G
GLDMuKEPSuGG1QfUTxREO7LZ+6UBNpSM52uWZd+T3PMWrzgm0PX/5fSptKbIeL5H
+87TQSwqTYrj1NtSRGoupZoJQjwwe2gBcUCZmanjDTlEipbLWDLFrNf2UIDm30al
nVQlx/wtAUPBOfLSkOe8BDJhQ8JOWyoA9DcUGnfA3Vy0sqIfHSOJ/1zAs6SC4/At
brg4jNHUZCiQ
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:56:26 2024 by rpki-client on console-fra.rpki-client.org