Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/572oQCeaWwyzEaqyg-szANY47zw.roa
File: 572oQCeaWwyzEaqyg-szANY47zw.roa (raw, json)
Hash identifier: fFyHq+7ydTVzb9C3SD17JroFvSd2t93LuSXBzfcLBuI=
Subject key identifier: E7:BD:A8:40:27:9A:5B:0C:B3:11:AA:B2:83:EB:33:00:D6:38:EF:3C
Certificate issuer: /CN=cdaaa0e082360360acda347664eb8314eb11da10
Certificate serial: 018A59DB15359D28B3AC35B327BDF919B786
Authority key identifier: CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/572oQCeaWwyzEaqyg-szANY47zw.roa
Signing time: Sun 03 Sep 2023 07:04:04 +0000
ROA not before: Sun 03 Sep 2023 07:04:04 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 88.209.245.0/24 maxlen: 24
88.209.249.0/24 maxlen: 24
178.210.250.0/24 maxlen: 24
77.242.150.0/24 maxlen: 24
88.151.56.0/23 maxlen: 24
88.151.63.0/24 maxlen: 24
77.242.159.0/24 maxlen: 24
88.209.201.0/24 maxlen: 24
88.209.211.0/24 maxlen: 24
88.209.217.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:59:db:15:35:9d:28:b3:ac:35:b3:27:bd:f9:19:b7:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cdaaa0e082360360acda347664eb8314eb11da10
Validity
Not Before: Sep 3 07:04:04 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e7bda840279a5b0cb311aab283eb3300d638ef3c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:f4:02:5d:6f:03:90:69:23:f1:04:35:28:6f:
31:41:9a:f6:53:05:88:84:91:b5:fa:84:89:0a:3a:
ce:e2:c1:4b:bd:55:51:79:ca:12:b0:ac:85:fb:f7:
09:f1:50:ba:c8:0a:10:43:22:2a:05:bc:73:da:c8:
04:0a:26:3c:52:e5:ed:73:df:84:e6:73:c7:f7:83:
ed:69:fe:ff:63:fe:7d:e0:ca:8d:be:92:7f:ce:14:
fb:66:0f:0b:60:ef:1f:2c:1c:cb:11:aa:77:16:b9:
c1:a1:3c:c2:84:86:0f:b9:97:5e:a7:c5:5f:08:45:
b0:6a:c5:6d:52:30:ea:fc:e3:16:04:d5:d1:3e:c9:
1f:9a:6f:a4:8a:b2:81:17:f0:b0:b6:a8:0f:11:94:
74:d0:bc:e7:47:85:d8:25:18:4c:07:a7:32:38:25:
84:5c:ec:cb:dc:87:31:0a:18:a9:74:5b:73:d1:cc:
09:57:52:52:c4:3f:e8:df:e6:c2:e2:16:a5:7e:0f:
bf:9b:55:05:be:fa:88:b2:82:fb:21:d9:67:7e:04:
1f:74:49:e3:a6:d3:9c:15:70:6d:df:59:6b:f7:cf:
0f:d2:6b:2e:42:f8:d3:40:cd:b1:11:c1:f6:8f:6d:
be:88:f3:9e:bd:5b:69:57:a3:bc:3b:74:e2:fe:21:
d7:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:BD:A8:40:27:9A:5B:0C:B3:11:AA:B2:83:EB:33:00:D6:38:EF:3C
X509v3 Authority Key Identifier:
keyid:CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/572oQCeaWwyzEaqyg-szANY47zw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.242.150.0/24
77.242.159.0/24
88.151.56.0/23
88.151.63.0/24
88.209.201.0/24
88.209.211.0/24
88.209.217.0/24
88.209.245.0/24
88.209.249.0/24
178.210.250.0/24
Signature Algorithm: sha256WithRSAEncryption
b0:ca:c2:03:8f:02:61:15:1d:45:0d:4a:84:7f:a4:52:0a:96:
59:a9:60:68:79:78:d7:7c:01:b1:1b:b7:3c:d7:9f:ab:da:09:
10:2d:73:fb:a6:fc:92:9d:ba:24:7a:34:7f:13:00:66:89:1d:
05:04:9f:2e:b9:54:eb:4a:dd:eb:20:98:a5:7b:9d:7a:67:71:
d4:d6:81:2d:bf:97:e2:23:28:53:4a:a1:b0:b7:e7:44:f1:36:
90:5d:3f:dd:be:5e:03:81:14:8c:45:ea:6f:eb:8e:bc:f8:81:
90:20:26:bb:33:a2:64:5a:79:84:56:5a:95:5f:d1:ca:cf:3a:
9b:6b:02:2e:bf:84:e9:6a:bd:cd:cf:0a:16:70:15:27:f5:13:
20:28:79:b5:ff:9e:18:6e:4a:c3:6e:2d:29:fd:c3:62:19:ed:
4b:82:b8:b1:c3:db:8e:48:e3:0a:d7:b3:ae:bd:b6:c9:78:79:
14:71:d4:f2:f1:1f:1e:ab:cb:1b:14:d1:e9:5c:c0:78:8a:dc:
f2:dd:39:84:4f:05:ca:b0:6b:da:da:8c:82:a5:82:80:c5:0a:
34:6a:ee:ef:fa:01:f3:b7:71:f5:1a:ff:2e:d1:65:94:d1:81:
97:23:88:b1:b2:aa:86:3a:84:69:34:3f:d9:be:18:63:9f:bf:
a4:64:8a:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:56:27 2024 by rpki-client on console-fra.rpki-client.org