Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/9eqpoBTM3htgRZyY6rkzTR03eUY.roa
File: 9eqpoBTM3htgRZyY6rkzTR03eUY.roa (raw, json)
Hash identifier: zC9sBUDBGLvrfh0L9lBEF/eVWSLz/4B2YYoAKUJ9Mpg=
Subject key identifier: F5:EA:A9:A0:14:CC:DE:1B:60:45:9C:98:EA:B9:33:4D:1D:37:79:46
Certificate issuer: /CN=cdaaa0e082360360acda347664eb8314eb11da10
Certificate serial: 018E9DF0740D1B47B64F2A19E88F75E35C5D
Authority key identifier: CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/9eqpoBTM3htgRZyY6rkzTR03eUY.roa
Signing time: Tue 02 Apr 2024 08:32:45 +0000
ROA not before: Tue 02 Apr 2024 08:32:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 42864
IP address blocks: 45.9.169.0/24 maxlen: 24
45.9.170.0/24 maxlen: 24
45.9.171.0/24 maxlen: 24
45.14.10.0/24 maxlen: 24
45.14.11.0/24 maxlen: 24
45.88.93.0/24 maxlen: 24
77.242.144.0/22 maxlen: 24
77.242.148.0/24 maxlen: 24
77.242.151.0/24 maxlen: 24
88.209.193.0/24 maxlen: 24
88.209.196.0/24 maxlen: 24
88.209.208.0/24 maxlen: 24
88.209.210.0/24 maxlen: 24
88.209.212.0/24 maxlen: 24
88.209.213.0/24 maxlen: 24
88.209.214.0/24 maxlen: 24
88.209.215.0/24 maxlen: 24
92.52.208.0/24 maxlen: 24
92.52.209.0/24 maxlen: 24
92.52.210.0/23 maxlen: 23
92.52.212.0/22 maxlen: 24
92.52.215.0/24 maxlen: 24
92.52.219.0/24 maxlen: 24
178.210.224.0/24 maxlen: 24
178.210.225.0/24 maxlen: 24
178.210.226.0/23 maxlen: 23
178.210.228.0/22 maxlen: 24
178.210.232.0/22 maxlen: 22
178.210.236.0/24 maxlen: 24
178.210.237.0/24 maxlen: 24
178.210.238.0/23 maxlen: 23
178.210.240.0/22 maxlen: 22
178.210.244.0/22 maxlen: 22
178.210.248.0/24 maxlen: 24
178.210.249.0/24 maxlen: 24
178.210.250.0/24 maxlen: 24
178.210.251.0/24 maxlen: 24
178.210.252.0/22 maxlen: 22
178.248.200.0/21 maxlen: 21
193.138.125.0/24 maxlen: 24
2a00:1f40::/29 maxlen: 29
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:9d:f0:74:0d:1b:47:b6:4f:2a:19:e8:8f:75:e3:5c:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cdaaa0e082360360acda347664eb8314eb11da10
Validity
Not Before: Apr 2 08:32:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f5eaa9a014ccde1b60459c98eab9334d1d377946
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:8a:eb:11:4a:74:3c:27:71:d5:70:4a:06:27:
30:f5:aa:fc:ee:7f:99:21:7c:7e:36:74:90:f1:1b:
b2:b7:b2:00:24:57:b8:22:1f:9c:c1:a0:60:7a:2c:
f3:ee:43:13:7c:55:01:b7:a4:8b:bf:9d:00:2d:da:
15:d1:fe:e5:a8:8f:9f:77:d3:b4:ad:78:bf:c2:45:
61:65:3d:80:27:6e:ab:80:b4:b4:e0:48:1c:b5:02:
ca:03:e9:f1:b7:a0:78:48:37:a1:17:cb:34:3f:f9:
57:54:cd:cb:56:8c:55:ae:2f:7c:ae:9d:fe:f3:6f:
ab:c7:4d:0f:5b:9e:df:e3:6f:84:c3:de:3c:3b:47:
12:55:c8:95:ac:36:b2:8b:3f:e4:3c:40:1a:05:49:
ca:ee:70:1a:f2:52:90:96:5e:40:fd:2a:90:68:82:
c9:a2:55:f4:7f:ee:09:c9:49:60:3b:55:80:f2:e7:
86:19:64:60:4d:21:7f:e7:04:a1:17:3f:fd:79:f1:
d2:16:72:83:a1:6e:1b:ec:5f:9c:73:29:80:39:81:
1a:80:ed:69:d1:15:4a:db:07:ab:7c:12:4f:04:59:
10:dc:46:f5:2b:97:1d:e8:26:9b:78:c5:4d:59:cc:
b3:9b:dc:fa:87:a6:f6:21:16:e2:e9:8d:84:72:89:
ab:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:EA:A9:A0:14:CC:DE:1B:60:45:9C:98:EA:B9:33:4D:1D:37:79:46
X509v3 Authority Key Identifier:
keyid:CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/9eqpoBTM3htgRZyY6rkzTR03eUY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.9.169.0-45.9.171.255
45.14.10.0/23
45.88.93.0/24
77.242.144.0-77.242.148.255
77.242.151.0/24
88.209.193.0/24
88.209.196.0/24
88.209.208.0/24
88.209.210.0/24
88.209.212.0/22
92.52.208.0/21
92.52.219.0/24
178.210.224.0/19
178.248.200.0/21
193.138.125.0/24
IPv6:
2a00:1f40::/29
Signature Algorithm: sha256WithRSAEncryption
3c:6f:22:14:c4:4c:09:a3:7c:a4:45:03:a2:94:4d:8d:de:37:
b1:70:1f:20:40:e5:ea:88:3c:92:90:2b:78:78:92:53:ad:85:
2c:93:01:71:18:45:06:9c:04:b9:a2:5e:f8:2d:45:cc:82:29:
a4:cc:b9:f2:7d:4e:d5:52:f0:ba:fa:85:ed:b9:b4:44:76:c3:
27:9e:9a:4e:37:c8:a9:45:be:15:ab:fa:84:00:1a:b8:8b:0d:
b1:d1:87:70:58:d7:b7:13:81:27:70:cd:02:63:72:79:e7:22:
39:e9:5c:67:be:d3:70:0e:ce:22:b4:54:61:96:60:da:40:b4:
66:1c:ff:ae:1f:93:16:bb:d1:00:9b:ce:16:b7:59:a1:ac:f3:
62:34:ea:da:72:2f:11:28:7a:7c:a5:ce:43:f6:9a:33:de:b3:
11:7a:e0:74:b5:19:bf:1a:e9:53:cd:ab:8e:8e:61:b1:21:2b:
57:2e:6f:a1:c4:64:28:86:07:4a:1f:8b:09:0c:45:10:82:1f:
ba:ce:62:57:ba:20:68:fc:e4:a9:3f:37:8c:54:14:29:7b:4f:
74:87:5a:25:c6:a0:36:a7:3b:c5:05:06:f4:b4:61:db:a2:0f:
fb:71:fb:80:60:db:13:c4:f9:ea:30:ee:89:a6:10:80:ce:cb:
29:2e:ac:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:47:55 2024 by rpki-client on console-ams.rpki-client.org