Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/BLQqHCqmivHedQWdqQTp9GZwQoE.roa
File: BLQqHCqmivHedQWdqQTp9GZwQoE.roa (raw, json)
Hash identifier: qtbfJ60ACc+1bjiDqGBldNxl2YQdl9/4RhnuD8iRF80=
Subject key identifier: 04:B4:2A:1C:2A:A6:8A:F1:DE:75:05:9D:A9:04:E9:F4:66:70:42:81
Certificate issuer: /CN=cdaaa0e082360360acda347664eb8314eb11da10
Certificate serial: 018654579FE0A654E1D6FA2BAA8E315D67BE
Authority key identifier: CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/BLQqHCqmivHedQWdqQTp9GZwQoE.roa
Signing time: Wed 15 Feb 2023 09:11:14 +0000
ROA not before: Wed 15 Feb 2023 09:11:14 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 211619
IP address blocks: 88.209.228.0/24 maxlen: 24
88.209.236.0/22 maxlen: 22
88.209.246.0/23 maxlen: 23
88.209.253.0/24 maxlen: 24
83.137.159.0/24 maxlen: 24
83.137.156.0/24 maxlen: 24
83.137.157.0/24 maxlen: 24
83.137.158.0/24 maxlen: 24
83.137.153.0/24 maxlen: 24
178.210.232.0/24 maxlen: 24
178.210.233.0/24 maxlen: 24
178.210.234.0/24 maxlen: 24
178.210.235.0/24 maxlen: 24
45.9.168.0/24 maxlen: 24
77.242.152.0/22 maxlen: 24
92.52.218.0/24 maxlen: 24
194.41.47.0/24 maxlen: 24
88.151.62.0/24 maxlen: 24
5.182.112.0/24 maxlen: 24
45.14.9.0/24 maxlen: 24
5.182.115.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:54:57:9f:e0:a6:54:e1:d6:fa:2b:aa:8e:31:5d:67:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cdaaa0e082360360acda347664eb8314eb11da10
Validity
Not Before: Feb 15 09:11:14 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=04b42a1c2aa68af1de75059da904e9f466704281
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:eb:4e:56:ad:25:40:68:2d:f9:8e:4e:47:a3:
24:33:b1:2c:da:50:c7:fc:21:9d:61:4d:34:5a:0a:
00:0a:1e:b2:ac:ab:ba:c8:b9:cf:f7:09:da:64:54:
a8:32:f8:af:5e:55:ba:f6:b9:3c:4a:3b:3e:4c:8c:
fd:30:f5:3a:14:cf:62:de:9b:89:6c:76:66:a8:b7:
26:83:6e:2f:fb:40:3d:c3:3f:18:8c:1e:e4:02:7f:
c7:7d:15:d5:b8:53:57:4d:9f:90:0f:45:db:dc:bc:
18:02:aa:05:ed:03:0c:ad:e1:14:10:5e:43:96:5e:
97:8a:44:f4:23:b9:23:84:ce:0a:41:1f:06:61:88:
64:d9:2c:6c:d7:3b:d7:8a:94:f5:08:1f:2a:c3:78:
44:33:54:42:2d:ed:ff:a9:96:fa:e2:03:4b:03:6d:
93:3f:f9:c0:a5:36:c3:36:d4:9b:aa:fa:09:59:89:
3a:ec:97:88:eb:6f:92:5d:76:a2:ff:cd:83:b9:e4:
7b:e9:46:54:be:84:08:30:3c:fb:17:d5:5b:b7:45:
a3:5e:67:92:27:79:f0:ac:e1:a9:41:af:47:a9:ac:
d0:be:4e:9a:dd:e0:72:8e:e9:10:33:bf:3c:32:f4:
6f:20:15:c1:21:49:4f:93:54:ea:f1:1a:91:3d:8e:
2c:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:B4:2A:1C:2A:A6:8A:F1:DE:75:05:9D:A9:04:E9:F4:66:70:42:81
X509v3 Authority Key Identifier:
keyid:CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/BLQqHCqmivHedQWdqQTp9GZwQoE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.182.112.0/24
5.182.115.0/24
45.9.168.0/24
45.14.9.0/24
77.242.152.0/22
83.137.153.0/24
83.137.156.0/22
88.151.62.0/24
88.209.228.0/24
88.209.236.0/22
88.209.246.0/23
88.209.253.0/24
92.52.218.0/24
178.210.232.0/22
194.41.47.0/24
Signature Algorithm: sha256WithRSAEncryption
32:29:2c:5f:fd:ee:bc:5f:e3:38:a6:f1:1d:86:7c:c2:c6:97:
4c:30:f7:7a:5a:7c:d8:27:85:e4:a4:50:f1:d3:a4:be:c8:3d:
a6:9e:e8:70:e9:e2:3c:fd:dd:fb:b4:51:de:18:41:c3:16:b3:
f6:96:5c:7a:ee:ca:77:29:84:3c:05:32:0f:ae:19:b3:d2:a3:
45:40:65:ce:35:97:bf:63:10:f8:bb:74:58:5e:3e:2c:d5:3b:
a4:29:e3:38:c2:06:77:cd:d4:11:65:cc:b1:e8:f2:47:12:dc:
08:7e:75:10:80:85:f1:a0:8d:da:8e:20:b0:f0:71:bd:83:3d:
45:3b:ba:72:d9:e8:1c:22:55:6e:84:33:6e:6d:da:28:9d:2f:
c5:0f:55:39:31:a1:4e:0a:6f:37:61:d7:42:f1:12:5a:2a:03:
d8:ed:d1:21:74:20:62:2e:a5:7c:9f:37:53:f5:9c:d9:c8:09:
fe:f1:88:8d:8f:94:8a:ba:59:61:ae:49:d9:bd:85:3e:56:96:
f9:76:25:23:03:ee:14:16:d9:e4:6c:c6:23:06:46:ab:9a:08:
14:18:18:21:76:98:a4:2d:f7:51:e1:c1:41:99:d0:b0:89:1b:
63:90:cc:31:94:96:b7:d6:3b:0c:9f:46:5d:c5:26:25:da:e5:
12:46:8d:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:47:55 2024 by rpki-client on console-ams.rpki-client.org