Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/4SHE0-FNoXtm4jN_r-H9TAkWOO8.roa
File: 4SHE0-FNoXtm4jN_r-H9TAkWOO8.roa (raw, json)
Hash identifier: brzqBCqXrzsv/pj79nxxMBkFhzlZc7q+jPZbEocNW2w=
Subject key identifier: E1:21:C4:D3:E1:4D:A1:7B:66:E2:33:7F:AF:E1:FD:4C:09:16:38:EF
Certificate issuer: /CN=cdaaa0e082360360acda347664eb8314eb11da10
Certificate serial: 018B85089D294CB212589068443F62DE06A2
Authority key identifier: CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/4SHE0-FNoXtm4jN_r-H9TAkWOO8.roa
Signing time: Tue 31 Oct 2023 09:20:16 +0000
ROA not before: Tue 31 Oct 2023 09:20:16 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 88.209.232.0/22 maxlen: 24
178.210.228.0/24 maxlen: 24
178.210.250.0/24 maxlen: 24
77.242.150.0/24 maxlen: 24
88.151.56.0/23 maxlen: 24
88.151.62.0/24 maxlen: 24
88.209.200.0/24 maxlen: 24
88.209.211.0/24 maxlen: 24
88.209.217.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:85:08:9d:29:4c:b2:12:58:90:68:44:3f:62:de:06:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cdaaa0e082360360acda347664eb8314eb11da10
Validity
Not Before: Oct 31 09:20:16 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e121c4d3e14da17b66e2337fafe1fd4c091638ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:19:48:7f:56:c9:65:47:19:65:ea:f7:16:25:
1f:f5:52:5e:88:e9:56:78:eb:96:fd:88:27:1e:dd:
a3:fe:a6:95:41:4b:75:b1:9e:25:d3:a5:10:bb:7f:
1e:8d:63:b5:d3:5d:42:6e:ac:e3:d8:9b:ed:9c:6e:
61:92:1f:f4:8b:4b:2c:b9:32:a5:78:19:e8:59:41:
1f:a3:4b:58:54:e6:02:7b:01:a3:97:4c:38:e1:7b:
5e:5f:6c:1d:8a:8b:4c:4b:c5:10:74:bf:bb:a7:e2:
25:30:74:81:ef:eb:36:94:fa:4b:94:8f:c1:3f:85:
a0:7d:de:35:d9:e3:64:57:9b:a2:1b:d1:b7:99:01:
90:fb:4d:0d:69:0b:41:e9:87:4e:bc:1c:e5:38:9e:
c6:21:38:a1:eb:0b:0c:b1:e4:69:fe:94:26:98:33:
13:c9:8f:8f:aa:c5:14:c5:86:33:8e:a6:70:97:99:
2f:bb:75:91:76:76:65:69:e1:be:c9:e2:e1:08:46:
ab:9c:86:4d:98:5f:79:b4:94:62:c9:23:8f:ca:24:
75:40:ff:ce:3d:f5:b4:da:2e:8c:1c:93:cc:39:aa:
5b:1e:8b:0a:d8:90:ea:cc:c0:85:5a:ea:0c:af:60:
45:a3:b6:11:50:ea:6c:d3:68:8a:02:bb:88:51:7e:
a0:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:21:C4:D3:E1:4D:A1:7B:66:E2:33:7F:AF:E1:FD:4C:09:16:38:EF
X509v3 Authority Key Identifier:
keyid:CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/4SHE0-FNoXtm4jN_r-H9TAkWOO8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.242.150.0/24
88.151.56.0/23
88.151.62.0/24
88.209.200.0/24
88.209.211.0/24
88.209.217.0/24
88.209.232.0/22
178.210.228.0/24
178.210.250.0/24
Signature Algorithm: sha256WithRSAEncryption
74:da:83:7a:5e:c5:38:73:ea:31:89:84:4f:48:9d:03:b8:b9:
bd:0c:3e:f9:04:d0:e8:70:90:63:7a:da:24:10:2b:dc:8b:6e:
7b:12:21:b5:b7:10:f2:ce:5c:9d:07:ce:53:6c:1b:a8:f9:53:
1f:ec:1e:be:de:46:e3:1d:af:1d:19:0a:6a:2c:4e:6c:c8:ec:
df:fa:58:b4:43:cf:b0:8a:20:28:cb:14:f9:9d:08:0d:da:25:
a1:26:cf:69:90:0c:cd:88:29:4d:dd:ec:99:19:3e:0f:b2:df:
1b:fe:c7:97:c9:fe:23:40:a7:b4:ae:a9:44:97:54:2c:91:13:
61:8c:0c:a3:5f:08:2c:0d:47:f5:28:3e:3d:2f:da:44:1f:c7:
80:a7:0d:ac:6f:e0:42:47:dc:c9:e8:b2:a0:b2:2d:08:39:23:
fa:4a:ec:cb:9b:73:69:1e:c7:09:d9:bb:45:88:3b:82:e8:53:
90:28:f6:6f:8f:cf:fe:60:d3:5b:cc:88:ce:27:7b:c0:71:ab:
ee:58:f7:a4:53:41:12:91:8a:98:0c:4e:b2:69:0a:b6:e6:e3:
21:e2:51:40:0b:56:19:ae:fd:4e:a7:9b:a9:cf:85:bc:16:94:
9d:29:b6:4e:82:ca:9d:b2:bc:30:a4:41:e1:5c:96:5d:d2:f9:
55:cf:47:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:56:26 2024 by rpki-client on console-fra.rpki-client.org