Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/6w5rd-3Y087LKTy11ZKGNNuzuJw.roa
File: 6w5rd-3Y087LKTy11ZKGNNuzuJw.roa (raw, json)
Hash identifier: T/kAsU+BHPuy9glt5rtLrM2aCzhJI79GYDMb3bT1Eu4=
Subject key identifier: EB:0E:6B:77:ED:D8:D3:CE:CB:29:3C:B5:D5:92:86:34:DB:B3:B8:9C
Certificate issuer: /CN=cdaaa0e082360360acda347664eb8314eb11da10
Certificate serial: 0183D682C080CA2675DE92F1772011563937
Authority key identifier: CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/6w5rd-3Y087LKTy11ZKGNNuzuJw.roa
Signing time: Fri 14 Oct 2022 12:40:36 +0000
ROA not before: Fri 14 Oct 2022 12:40:36 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 834
IP address blocks: 88.209.231.0/24 maxlen: 24
88.209.232.0/22 maxlen: 22
88.209.240.0/22 maxlen: 22
83.137.152.0/24 maxlen: 24
83.137.154.0/23 maxlen: 24
178.210.252.0/24 maxlen: 24
88.151.61.0/24 maxlen: 24
88.151.63.0/24 maxlen: 24
88.209.204.0/22 maxlen: 24
88.209.200.0/22 maxlen: 32
88.209.205.0/24 maxlen: 24
88.209.206.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:d6:82:c0:80:ca:26:75:de:92:f1:77:20:11:56:39:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cdaaa0e082360360acda347664eb8314eb11da10
Validity
Not Before: Oct 14 12:40:36 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=eb0e6b77edd8d3cecb293cb5d5928634dbb3b89c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:2a:73:4d:42:e6:92:19:31:e3:d8:0a:c5:d0:
e9:13:49:40:08:45:8f:13:38:53:cc:96:09:67:19:
e7:2a:6e:27:3d:48:94:28:2f:41:cc:97:21:a4:14:
0a:7c:ad:c4:d6:dc:e1:98:c1:8f:58:54:1b:72:e6:
cc:33:b1:4f:72:96:bc:51:9a:d7:4d:72:44:33:d0:
92:4c:d1:63:bd:f6:c8:47:2f:39:7b:79:b6:1c:ee:
c4:53:23:b8:93:11:0d:7c:75:d0:fa:68:b5:c1:3e:
63:41:e6:c3:49:9b:e6:d9:f8:af:97:d7:70:46:36:
49:6c:a8:97:c9:c4:0a:3d:8b:33:84:97:8c:61:e3:
5d:06:59:65:ee:12:49:9f:e1:79:64:2c:40:87:38:
99:73:de:38:34:02:19:c7:cf:fd:9f:1a:59:0a:45:
35:12:f2:eb:65:44:53:c7:8b:a1:a0:8c:78:84:f7:
ac:6b:17:03:22:40:77:2a:a1:ab:31:6b:1b:26:85:
db:81:08:9b:c9:1e:7c:e3:6e:96:8b:40:d2:b0:13:
c3:f2:25:3a:dd:dd:c6:a4:bb:73:91:b4:ef:5c:06:
b2:7d:3c:0b:7f:73:6c:c9:66:82:af:0c:17:0a:2a:
a5:33:c2:ff:e9:52:6c:72:7e:11:c4:67:b5:85:ac:
68:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:0E:6B:77:ED:D8:D3:CE:CB:29:3C:B5:D5:92:86:34:DB:B3:B8:9C
X509v3 Authority Key Identifier:
keyid:CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/6w5rd-3Y087LKTy11ZKGNNuzuJw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.137.152.0/24
83.137.154.0/23
88.151.61.0/24
88.151.63.0/24
88.209.200.0/21
88.209.231.0-88.209.235.255
88.209.240.0/22
178.210.252.0/24
Signature Algorithm: sha256WithRSAEncryption
a6:65:da:2b:bc:7e:90:2e:90:eb:47:ab:d0:88:d3:57:27:69:
86:44:d2:eb:5c:24:5c:0b:89:2e:b4:80:86:c5:d1:65:c2:3a:
d7:d9:84:8a:07:90:fe:3c:7a:ed:9a:62:b4:4b:2e:3c:a3:7e:
9f:f9:59:c1:fd:45:66:c0:e3:84:de:b3:ec:c3:d4:fe:7c:e6:
0e:b1:03:d5:8a:03:d6:b2:b7:1d:5f:c2:e4:e0:b1:98:5b:3d:
78:df:7c:15:d7:1e:d5:8d:a2:1f:8d:0d:ff:a8:d4:be:34:7b:
fa:24:a2:bd:ac:2c:ae:13:7a:ab:a7:21:66:76:e4:ad:32:66:
ae:0f:78:cb:83:45:95:7f:04:33:de:45:38:29:8e:9b:ba:e7:
ea:57:d3:b4:a5:72:b5:5e:0c:1a:33:ed:ec:e2:02:20:c0:06:
2e:96:f2:7e:6e:6c:f7:b3:d8:73:a9:f6:45:c8:a6:24:e5:e5:
ee:05:cb:aa:1c:8e:45:94:7c:10:09:b5:d2:bb:ea:0f:6c:75:
f2:cf:de:5e:00:76:b4:f3:ed:96:81:2a:37:de:6b:b2:e3:3a:
18:d5:42:77:52:61:a2:ee:76:ae:6a:b0:81:2c:35:ed:31:4a:
89:5f:ec:5f:69:3c:df:7a:b3:90:15:ca:9f:3c:10:53:f7:bd:
d4:9a:05:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:47:54 2024 by rpki-client on console-ams.rpki-client.org