Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/8lwAw1ocU0qCB-nJ6fN0JdcLb8o.roa
File: 8lwAw1ocU0qCB-nJ6fN0JdcLb8o.roa (raw, json)
Hash identifier: SVuRxyHaQTFMQ8VQ+rTKd+ViXU3x5qmwmZAXUfJ0Q8M=
Subject key identifier: F2:5C:00:C3:5A:1C:53:4A:82:07:E9:C9:E9:F3:74:25:D7:0B:6F:CA
Certificate issuer: /CN=cdaaa0e082360360acda347664eb8314eb11da10
Certificate serial: 018A3C376B4FFC29AFA897DC45AE86EE6CBA
Authority key identifier: CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/8lwAw1ocU0qCB-nJ6fN0JdcLb8o.roa
Signing time: Mon 28 Aug 2023 12:56:19 +0000
ROA not before: Mon 28 Aug 2023 12:56:19 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 88.209.245.0/24 maxlen: 24
77.242.150.0/24 maxlen: 24
88.209.195.0/24 maxlen: 24
77.242.156.0/24 maxlen: 24
77.242.159.0/24 maxlen: 24
88.209.211.0/24 maxlen: 24
88.209.217.0/24 maxlen: 24
178.210.250.0/24 maxlen: 24
88.151.57.0/24 maxlen: 24
88.151.58.0/24 maxlen: 24
88.151.56.0/23 maxlen: 24
88.151.63.0/24 maxlen: 24
2.58.168.0/24 maxlen: 24
2.58.170.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:3c:37:6b:4f:fc:29:af:a8:97:dc:45:ae:86:ee:6c:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cdaaa0e082360360acda347664eb8314eb11da10
Validity
Not Before: Aug 28 12:56:19 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f25c00c35a1c534a8207e9c9e9f37425d70b6fca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:7a:67:fe:27:1a:a7:e6:04:ea:3a:06:cf:ca:
eb:94:fa:60:0e:30:26:6d:c0:92:f6:90:44:ca:ff:
73:2a:4d:6b:e4:ac:37:b3:ec:82:5d:16:af:7a:92:
3e:38:fd:8e:29:1f:72:06:83:36:80:57:54:63:b9:
60:f5:16:72:a4:c1:27:48:6a:01:4d:6a:df:1a:18:
1c:61:fa:89:92:18:65:d9:94:01:39:26:ca:64:ca:
a3:4b:c0:ae:ed:32:be:cb:4a:5a:cf:39:7c:3a:57:
c2:b7:d4:fb:c5:cb:ee:05:5b:4c:ef:5d:46:32:a1:
00:ca:8d:80:03:63:40:74:df:fe:a3:49:e3:f2:6b:
b8:7d:c0:13:19:1b:ab:1a:4d:76:7c:2c:ff:82:69:
18:4e:41:48:38:03:54:51:bb:c8:c2:18:8f:69:bc:
b9:10:ca:ec:de:7a:00:7e:9c:ea:1e:b7:04:10:79:
d0:52:92:e7:60:20:c0:c4:98:1e:3c:17:58:0a:01:
1f:0c:93:ab:ff:ab:d8:09:0a:11:c3:90:56:da:39:
d5:c2:7e:d8:53:eb:89:98:39:4e:6b:c0:de:73:77:
10:ab:52:a1:d3:0c:40:ad:e7:36:88:c3:a3:f7:83:
3b:d7:fc:06:f0:36:b7:f8:9d:b7:49:eb:0b:0d:bb:
d0:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:5C:00:C3:5A:1C:53:4A:82:07:E9:C9:E9:F3:74:25:D7:0B:6F:CA
X509v3 Authority Key Identifier:
keyid:CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/8lwAw1ocU0qCB-nJ6fN0JdcLb8o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.58.168.0/24
2.58.170.0/24
77.242.150.0/24
77.242.156.0/24
77.242.159.0/24
88.151.56.0-88.151.58.255
88.151.63.0/24
88.209.195.0/24
88.209.211.0/24
88.209.217.0/24
88.209.245.0/24
178.210.250.0/24
Signature Algorithm: sha256WithRSAEncryption
24:71:63:4b:4b:99:23:16:27:8d:c0:af:ef:b5:cd:e7:96:23:
ea:ed:84:42:4f:a1:64:a4:69:82:4b:c6:d8:3b:23:31:73:55:
7b:2f:e2:53:44:2c:7b:20:b1:39:56:5e:d0:e2:95:b2:d7:39:
4d:d5:31:ab:29:46:c7:b8:6b:1c:22:5a:2a:75:47:68:af:da:
4d:44:63:f2:9b:58:02:d0:fd:30:57:00:28:bc:13:2e:dd:9b:
94:e6:01:e8:3f:53:47:34:bf:58:a8:0d:17:f5:50:0f:72:5d:
d5:d6:5c:b9:3a:6d:60:88:58:5f:2c:d0:66:3e:62:c7:e4:a8:
5b:f2:81:c7:2c:54:a9:fa:84:5f:e1:7c:75:56:a3:88:a8:b6:
5d:46:f0:49:bb:90:fa:72:fb:d3:5e:95:06:cf:9b:33:8c:76:
88:47:dd:a8:61:07:60:2a:5e:9f:5d:9d:84:80:16:d5:c8:7c:
09:30:b0:5b:71:39:67:42:ab:60:83:a2:b0:ad:ea:d3:7e:83:
0a:ce:03:41:37:93:3a:42:4d:ce:da:a7:68:b4:56:5b:e2:2f:
f2:0e:7b:6b:01:42:cd:cd:32:42:60:b2:8f:7b:fe:1c:40:0c:
03:4c:b9:ba:fc:3b:80:7d:5b:00:29:5b:1c:8b:9c:bd:b0:d6:
2b:90:50:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:56:27 2024 by rpki-client on console-fra.rpki-client.org