Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/GuTLAof8LZDXWuVU4M4eiW-YD-0.roa
File: GuTLAof8LZDXWuVU4M4eiW-YD-0.roa (raw, json)
Hash identifier: by4T4y9AzIw0TWf8dREdAEccfzfYMY6HVQnDP4Kr3NM=
Subject key identifier: 1A:E4:CB:02:87:FC:2D:90:D7:5A:E5:54:E0:CE:1E:89:6F:98:0F:ED
Certificate issuer: /CN=cdaaa0e082360360acda347664eb8314eb11da10
Certificate serial: 018DEB44C1FEF506A784B29A835125D9941D
Authority key identifier: CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/GuTLAof8LZDXWuVU4M4eiW-YD-0.roa
Signing time: Tue 27 Feb 2024 15:52:48 +0000
ROA not before: Tue 27 Feb 2024 15:52:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 42864
IP address blocks: 5.182.115.0/24 maxlen: 24
45.9.169.0/24 maxlen: 24
45.9.170.0/24 maxlen: 24
45.9.171.0/24 maxlen: 24
45.14.10.0/24 maxlen: 24
45.14.11.0/24 maxlen: 24
45.88.93.0/24 maxlen: 24
77.242.144.0/22 maxlen: 24
77.242.148.0/24 maxlen: 24
77.242.151.0/24 maxlen: 24
77.242.152.0/22 maxlen: 24
83.137.158.0/24 maxlen: 24
88.209.193.0/24 maxlen: 24
88.209.196.0/24 maxlen: 24
88.209.208.0/24 maxlen: 24
88.209.210.0/24 maxlen: 24
88.209.212.0/24 maxlen: 24
88.209.213.0/24 maxlen: 24
88.209.214.0/24 maxlen: 24
88.209.215.0/24 maxlen: 24
88.209.219.0/24 maxlen: 24
92.52.208.0/24 maxlen: 24
92.52.209.0/24 maxlen: 24
92.52.210.0/23 maxlen: 23
92.52.212.0/22 maxlen: 24
178.210.224.0/24 maxlen: 24
178.210.225.0/24 maxlen: 24
178.210.226.0/23 maxlen: 23
178.210.228.0/22 maxlen: 24
178.210.232.0/22 maxlen: 22
178.210.236.0/24 maxlen: 24
178.210.237.0/24 maxlen: 24
178.210.238.0/23 maxlen: 23
178.210.240.0/22 maxlen: 22
178.210.244.0/22 maxlen: 22
178.210.248.0/24 maxlen: 24
178.210.249.0/24 maxlen: 24
178.210.250.0/24 maxlen: 24
178.210.251.0/24 maxlen: 24
178.248.200.0/21 maxlen: 21
193.138.125.0/24 maxlen: 24
2a00:1f40::/29 maxlen: 29
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:eb:44:c1:fe:f5:06:a7:84:b2:9a:83:51:25:d9:94:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cdaaa0e082360360acda347664eb8314eb11da10
Validity
Not Before: Feb 27 15:52:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1ae4cb0287fc2d90d75ae554e0ce1e896f980fed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:16:0a:c6:1b:5d:72:88:b3:4f:c5:fa:e2:1b:
0a:9d:18:d4:f4:b6:b4:ac:19:18:2f:6e:7f:de:d5:
75:f9:b4:b3:74:92:e3:6e:f4:55:11:14:39:b6:66:
0d:18:2f:e1:bd:0e:8d:89:f8:8c:95:7b:0c:35:21:
8d:76:ec:ce:f5:f0:0f:16:52:23:92:be:93:41:35:
e2:bc:7d:f5:de:ef:6c:83:63:0e:df:6b:39:44:4d:
5e:a4:6e:de:cd:51:62:3a:6d:49:c3:40:cf:6e:4a:
f9:b8:2b:d7:1d:e3:b4:0d:7b:5a:7f:cf:ff:f4:88:
c2:d1:42:67:e4:7c:e2:d1:58:cc:90:3e:75:df:dd:
9b:ed:9b:b2:c6:d1:ff:1c:1a:32:6b:64:28:5c:30:
1b:63:0d:a9:3a:2a:d4:e9:99:8d:44:76:50:e8:b4:
3d:64:8b:58:f8:9f:07:62:4a:45:b4:e2:f3:e8:a4:
ce:33:09:87:7e:47:54:47:ba:a6:1c:f9:97:cf:a7:
27:8c:7e:03:96:90:95:af:fa:ab:48:97:91:75:4d:
32:e3:c4:12:83:08:94:56:5c:3b:35:69:53:8a:31:
9f:2b:b6:aa:e3:be:44:37:89:cb:cf:f1:1b:48:ea:
ce:0d:05:e0:c2:16:66:3a:b5:82:26:b0:1f:fe:26:
b2:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:E4:CB:02:87:FC:2D:90:D7:5A:E5:54:E0:CE:1E:89:6F:98:0F:ED
X509v3 Authority Key Identifier:
keyid:CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/GuTLAof8LZDXWuVU4M4eiW-YD-0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.182.115.0/24
45.9.169.0-45.9.171.255
45.14.10.0/23
45.88.93.0/24
77.242.144.0-77.242.148.255
77.242.151.0-77.242.155.255
83.137.158.0/24
88.209.193.0/24
88.209.196.0/24
88.209.208.0/24
88.209.210.0/24
88.209.212.0/22
88.209.219.0/24
92.52.208.0/21
178.210.224.0-178.210.251.255
178.248.200.0/21
193.138.125.0/24
IPv6:
2a00:1f40::/29
Signature Algorithm: sha256WithRSAEncryption
6b:ab:7e:e2:16:15:58:4c:7c:ee:19:29:d0:c4:e2:29:cb:2c:
75:e7:6c:92:d5:17:3e:69:1a:10:2b:b5:51:3f:0e:9c:b8:8d:
69:e9:c2:15:46:c2:fa:39:f3:45:fd:6a:3e:ef:5a:59:67:09:
e0:0c:b6:1b:57:79:db:03:62:1a:f3:51:21:7c:52:76:2f:99:
f5:1a:ab:4b:14:ee:4a:13:63:3e:dd:94:b3:f0:b5:24:56:72:
bc:5a:74:0a:13:d4:27:50:f9:65:a8:c6:e7:0d:79:9f:f5:b0:
d2:de:24:8d:a2:d3:cd:4e:e1:3e:fc:af:b4:6a:0d:15:dd:c1:
de:d1:4e:7a:cc:4a:7a:38:7f:a9:09:18:82:fb:e3:53:15:13:
7c:48:60:77:6b:2c:13:9f:b6:e5:a5:c2:0b:b2:3b:f8:3a:17:
f6:87:86:28:71:f0:ca:19:b8:eb:ff:30:c5:6f:9c:b1:0e:73:
7e:06:1f:d5:e8:5a:cc:be:ec:ef:72:57:d7:1d:43:c1:49:d1:
83:7d:18:c0:64:e4:d5:e1:ce:47:a3:f6:10:b0:c0:3d:77:79:
c1:ff:98:9d:1c:2a:b2:80:b1:7f:b4:74:64:2e:9b:30:d0:72:
8b:f5:a1:aa:9e:9e:54:85:4c:1a:e2:50:93:e8:64:49:be:b9:
bf:d1:4b:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:47:55 2024 by rpki-client on console-ams.rpki-client.org