Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/CV6AebDQr8We4rU6n-8Lus9hT_M.roa
File: CV6AebDQr8We4rU6n-8Lus9hT_M.roa (raw, json)
Hash identifier: 7VBzbbWPkQn1S7BjkSlcgnUSTCyEqjl1Enhu/R77U44=
Subject key identifier: 09:5E:80:79:B0:D0:AF:C5:9E:E2:B5:3A:9F:EF:0B:BA:CF:61:4F:F3
Certificate issuer: /CN=cdaaa0e082360360acda347664eb8314eb11da10
Certificate serial: 0188C30688775B188D6F63568A0258E39EC3
Authority key identifier: CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/CV6AebDQr8We4rU6n-8Lus9hT_M.roa
Signing time: Fri 16 Jun 2023 07:06:05 +0000
ROA not before: Fri 16 Jun 2023 07:06:05 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 1239
IP address blocks: 88.209.230.0/24 maxlen: 24
88.209.245.0/24 maxlen: 24
88.209.255.0/24 maxlen: 24
178.210.228.0/24 maxlen: 24
77.242.157.0/24 maxlen: 24
77.242.158.0/24 maxlen: 24
88.209.226.0/24 maxlen: 24
92.52.214.0/24 maxlen: 24
178.210.248.0/24 maxlen: 24
178.210.249.0/24 maxlen: 24
178.210.251.0/24 maxlen: 24
178.210.252.0/24 maxlen: 24
88.151.56.0/24 maxlen: 24
2.58.170.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:c3:06:88:77:5b:18:8d:6f:63:56:8a:02:58:e3:9e:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cdaaa0e082360360acda347664eb8314eb11da10
Validity
Not Before: Jun 16 07:06:05 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=095e8079b0d0afc59ee2b53a9fef0bbacf614ff3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:fb:d3:98:d0:75:d5:5a:f5:e5:4f:9e:67:7e:
95:cd:fa:68:d1:62:b1:60:83:f6:47:3c:18:a6:ca:
1e:12:56:7c:17:70:d4:c3:fb:63:66:65:7c:49:ff:
b5:25:7a:b8:27:84:63:a9:0c:9c:a1:10:5f:cc:af:
0e:4b:b8:7f:71:dd:9d:75:83:11:20:63:75:08:27:
3d:80:ea:eb:a7:d8:78:4e:5d:07:35:3a:42:09:9a:
e9:f9:03:64:c8:0a:ae:c0:14:e4:14:a8:f9:1e:99:
0a:ad:c2:30:8d:79:36:99:55:05:d0:f3:e7:81:d7:
1c:02:01:f8:63:2f:a0:f4:9b:ce:f1:81:89:d3:5a:
04:8b:17:0a:c9:7a:cf:aa:7b:1d:c6:5a:09:11:11:
c7:16:1c:44:6d:aa:96:58:7b:2a:20:5d:24:7d:3b:
22:93:e8:f8:98:ff:a3:ca:ad:60:9a:40:bf:2f:1e:
f1:da:71:c2:1e:db:dc:2c:a3:ee:f4:aa:00:e1:5d:
5b:a9:ae:7e:7c:ed:d2:9f:e6:4f:73:89:d8:b4:87:
fb:8f:f2:a5:bd:2a:d4:63:a3:2c:10:2c:7a:69:f3:
4c:1b:80:9a:2f:03:90:d2:9f:a9:80:92:d1:d2:33:
8a:25:f6:83:b9:e8:00:f3:cc:60:17:1f:0e:c2:5e:
18:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:5E:80:79:B0:D0:AF:C5:9E:E2:B5:3A:9F:EF:0B:BA:CF:61:4F:F3
X509v3 Authority Key Identifier:
keyid:CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/CV6AebDQr8We4rU6n-8Lus9hT_M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.58.170.0/24
77.242.157.0-77.242.158.255
88.151.56.0/24
88.209.226.0/24
88.209.230.0/24
88.209.245.0/24
88.209.255.0/24
92.52.214.0/24
178.210.228.0/24
178.210.248.0/23
178.210.251.0-178.210.252.255
Signature Algorithm: sha256WithRSAEncryption
53:9b:85:ce:1d:98:b2:ee:fa:ff:74:37:1b:51:8f:63:b7:0a:
ac:ce:ec:96:92:53:6a:c4:c7:a4:1b:88:74:8a:52:e7:2f:02:
05:c6:9f:a2:26:4e:da:56:00:d7:b0:36:73:c7:54:c8:07:99:
62:89:6e:7d:27:6a:c2:24:31:09:1a:15:6e:ce:a7:a8:cc:72:
c1:2a:80:80:20:c3:3c:a8:64:a3:8e:0a:bb:37:d6:ae:7d:ff:
a1:49:f5:8f:10:eb:f4:cb:62:9b:d7:79:17:01:9e:bd:88:a4:
2b:76:4c:3b:dc:ca:d1:da:2d:b9:37:61:d9:49:1e:cb:52:e5:
76:cb:ee:ea:ef:13:0f:af:bf:29:df:ce:f5:d0:65:be:b0:a2:
6a:a1:87:06:6c:cf:10:99:18:aa:72:76:03:0f:c1:9f:5a:eb:
57:a5:ce:34:0f:86:34:c7:fb:4f:6d:e0:78:33:8a:f6:57:5b:
70:99:7f:98:3f:ae:99:d2:fe:4e:87:a5:6c:67:61:9a:ef:6d:
a2:89:b2:b8:82:46:3a:0f:9b:a5:2f:93:52:ee:a6:e2:18:65:
59:1c:bb:dd:bc:fe:b1:c6:4e:b9:e1:ef:36:ea:65:f0:d8:f6:
a5:2b:4b:b7:9a:a3:b7:e4:21:95:55:3d:dc:a8:0b:2e:09:cd:
ef:bd:04:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:47:55 2024 by rpki-client on console-ams.rpki-client.org