Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/BL7WjwmvIbwZkV6f_gWT8sid5-Q.roa
File: BL7WjwmvIbwZkV6f_gWT8sid5-Q.roa (raw, json)
Hash identifier: 9RIOM6KWwY0xuzOH66OJw4K78X3zTGWF3MT/lR8HQKA=
Subject key identifier: 04:BE:D6:8F:09:AF:21:BC:19:91:5E:9F:FE:05:93:F2:C8:9D:E7:E4
Certificate issuer: /CN=cdaaa0e082360360acda347664eb8314eb11da10
Certificate serial: 018764D9696DAD3117C056540C23D572A0D7
Authority key identifier: CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/BL7WjwmvIbwZkV6f_gWT8sid5-Q.roa
Signing time: Sun 09 Apr 2023 07:09:42 +0000
ROA not before: Sun 09 Apr 2023 07:09:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 42864
IP address blocks: 178.248.200.0/21 maxlen: 21
45.9.171.0/24 maxlen: 24
45.9.170.0/24 maxlen: 24
45.9.169.0/24 maxlen: 24
88.209.196.0/24 maxlen: 24
88.209.208.0/24 maxlen: 24
88.209.213.0/24 maxlen: 24
88.209.212.0/24 maxlen: 24
88.209.210.0/24 maxlen: 24
88.209.217.0/24 maxlen: 24
88.209.215.0/24 maxlen: 24
88.209.214.0/24 maxlen: 24
178.210.224.0/22 maxlen: 24
193.138.125.0/24 maxlen: 24
77.242.144.0/22 maxlen: 24
77.242.151.0/24 maxlen: 24
77.242.148.0/24 maxlen: 24
77.242.158.0/24 maxlen: 24
77.242.157.0/24 maxlen: 24
77.242.156.0/24 maxlen: 24
92.52.219.0/24 maxlen: 24
45.88.93.0/24 maxlen: 24
45.14.11.0/24 maxlen: 24
45.14.10.0/24 maxlen: 24
45.14.8.0/24 maxlen: 24
92.52.212.0/22 maxlen: 24
92.52.210.0/23 maxlen: 23
92.52.209.0/24 maxlen: 24
92.52.208.0/24 maxlen: 24
2a00:1f40::/29 maxlen: 29
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:64:d9:69:6d:ad:31:17:c0:56:54:0c:23:d5:72:a0:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cdaaa0e082360360acda347664eb8314eb11da10
Validity
Not Before: Apr 9 07:09:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=04bed68f09af21bc19915e9ffe0593f2c89de7e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:70:de:2b:f3:60:c6:f3:d1:ef:c8:31:e9:19:
7c:69:b3:f7:e9:44:3e:6f:30:65:ad:cb:d1:27:df:
d6:a8:46:ea:6e:5a:d3:55:48:c9:b9:6a:be:b3:1d:
7e:e5:74:0c:f6:70:fe:90:e0:f1:b6:b3:ad:23:00:
a2:54:3d:0d:25:7e:8e:32:4a:b1:dc:ac:69:7b:02:
a8:f9:e3:c5:c5:58:89:fd:06:ee:3d:36:3b:81:f5:
1a:ee:4c:30:59:2f:c5:ad:87:78:d7:ae:a7:00:a9:
b0:4d:7b:a8:38:af:10:06:73:ac:0a:59:3b:39:af:
8c:4a:21:b6:13:6b:83:7e:ab:cb:1c:c3:b5:f2:cf:
09:b6:65:50:86:16:5f:28:30:0b:81:36:d1:e1:5e:
8c:96:e0:bf:16:db:b8:ef:74:e9:6b:e7:c6:ec:79:
c3:fa:ba:7e:c3:71:68:47:7d:c6:7e:80:1d:09:d9:
56:60:fe:44:0e:37:c9:a6:13:49:34:30:04:69:48:
5b:f1:c4:0f:d9:56:04:47:b1:2c:b2:64:7e:ed:f9:
e0:1f:ac:b5:85:cc:96:bf:b2:ca:5a:e3:0f:cb:35:
ae:ca:20:78:5e:c5:c2:a7:cb:b6:ef:bf:44:7c:a1:
2e:6e:8e:3b:53:ce:72:8f:49:b9:80:a4:02:f4:29:
36:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:BE:D6:8F:09:AF:21:BC:19:91:5E:9F:FE:05:93:F2:C8:9D:E7:E4
X509v3 Authority Key Identifier:
keyid:CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/BL7WjwmvIbwZkV6f_gWT8sid5-Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.9.169.0-45.9.171.255
45.14.8.0/24
45.14.10.0/23
45.88.93.0/24
77.242.144.0-77.242.148.255
77.242.151.0/24
77.242.156.0-77.242.158.255
88.209.196.0/24
88.209.208.0/24
88.209.210.0/24
88.209.212.0/22
88.209.217.0/24
92.52.208.0/21
92.52.219.0/24
178.210.224.0/22
178.248.200.0/21
193.138.125.0/24
IPv6:
2a00:1f40::/29
Signature Algorithm: sha256WithRSAEncryption
44:7a:0d:55:75:84:64:c6:92:81:92:47:c0:10:1f:cd:f1:ba:
66:bd:12:6f:6a:7b:92:8f:e1:62:a0:e3:90:83:6b:a9:af:4b:
9e:0b:33:09:10:c5:04:07:6a:32:46:7c:f0:1c:5f:14:28:f5:
01:7b:c0:ac:c3:4f:62:52:73:83:55:08:1f:e3:6c:c9:31:37:
2f:0f:2d:fc:15:c3:8b:ff:f9:0e:db:ab:c2:4d:80:a7:8a:f2:
23:2c:64:46:7b:4b:e3:f8:22:49:8b:86:27:9d:67:9b:4b:8e:
d7:b4:be:63:a8:c7:53:73:be:1f:48:ee:c7:6e:9e:d5:b2:a7:
e8:25:a4:f1:ed:3b:c3:25:31:82:db:0c:bc:b1:50:97:42:c2:
62:23:97:8a:b5:30:48:01:32:bd:bf:c4:b1:0c:be:12:22:30:
d1:c5:a7:84:b0:6c:2f:20:2c:8f:eb:5e:7f:7a:ad:4d:ee:46:
2c:2e:50:ad:2d:f2:c5:88:8c:e2:c1:3d:b4:8b:1e:60:9c:cc:
7d:e5:d5:43:50:e3:08:38:32:2e:ae:ff:64:3d:aa:1a:e6:54:
c9:56:ce:b6:be:72:f3:f2:06:e7:02:c3:f0:5c:0f:fd:5e:6c:
f4:06:ba:98:b6:ce:97:97:17:02:67:21:89:f8:6d:5d:2c:0a:
82:bd:fa:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:56:27 2024 by rpki-client on console-fra.rpki-client.org