Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/I8I4Gl-Vac1uh6IY1-mq7RFw1N4.roa
File: I8I4Gl-Vac1uh6IY1-mq7RFw1N4.roa (raw, json)
Hash identifier: UtiN28cpwE8DAiJevnATR7lcbl4nEYwbTGYu0JdX+uA=
Subject key identifier: 23:C2:38:1A:5F:95:69:CD:6E:87:A2:18:D7:E9:AA:ED:11:70:D4:DE
Certificate issuer: /CN=cdaaa0e082360360acda347664eb8314eb11da10
Certificate serial: 01874CBA5C839BBE362ED0DC71B7A75550B6
Authority key identifier: CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/I8I4Gl-Vac1uh6IY1-mq7RFw1N4.roa
Signing time: Tue 04 Apr 2023 14:44:54 +0000
ROA not before: Tue 04 Apr 2023 14:44:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 211619
IP address blocks: 88.209.228.0/24 maxlen: 24
88.209.236.0/22 maxlen: 22
88.209.246.0/23 maxlen: 23
88.209.254.0/24 maxlen: 24
83.137.159.0/24 maxlen: 24
83.137.156.0/24 maxlen: 24
83.137.157.0/24 maxlen: 24
83.137.153.0/24 maxlen: 24
178.210.232.0/24 maxlen: 24
178.210.233.0/24 maxlen: 24
178.210.237.0/24 maxlen: 24
178.210.234.0/24 maxlen: 24
178.210.235.0/24 maxlen: 24
45.9.168.0/24 maxlen: 24
77.242.152.0/22 maxlen: 24
92.52.217.0/24 maxlen: 24
92.52.218.0/24 maxlen: 24
194.41.47.0/24 maxlen: 24
88.151.62.0/24 maxlen: 24
5.182.112.0/24 maxlen: 24
45.14.9.0/24 maxlen: 24
5.182.115.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:4c:ba:5c:83:9b:be:36:2e:d0:dc:71:b7:a7:55:50:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cdaaa0e082360360acda347664eb8314eb11da10
Validity
Not Before: Apr 4 14:44:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=23c2381a5f9569cd6e87a218d7e9aaed1170d4de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:cc:90:94:90:44:5b:3f:a0:33:2f:82:c2:eb:
db:da:c1:6d:0b:88:12:76:a6:b1:8f:51:16:a1:f1:
b3:bf:9f:27:88:6d:64:19:da:12:7b:38:4b:70:c0:
40:bf:d0:f7:c2:b8:39:93:cf:ec:32:0c:9b:1d:e6:
52:5b:59:49:93:5c:8e:1a:f6:aa:6c:89:d3:3a:b1:
e0:3e:bd:98:73:e0:08:73:6e:73:88:0c:64:b3:9b:
95:d5:2a:51:63:e7:b8:36:4e:53:16:11:c3:49:3f:
4b:38:ed:42:b2:4d:7e:cd:47:39:dc:98:3d:ea:ea:
ca:6c:47:aa:38:82:83:c9:22:02:0c:c5:f6:2c:e5:
37:50:52:6b:72:af:0d:cf:f8:5e:06:2f:5f:f5:91:
09:15:68:f1:72:e9:3b:25:40:d8:57:3a:18:01:7c:
33:b1:29:c9:f9:14:73:cb:b1:99:c3:6a:1f:04:f2:
d6:60:4b:4e:7b:86:a9:19:93:b1:ae:8c:07:38:60:
91:c5:ae:dd:54:1e:2e:c8:5c:a5:fc:86:ab:1c:e5:
78:29:8f:19:6a:45:76:f5:0a:24:91:85:1b:bb:f4:
a1:95:d4:62:2f:04:28:6b:37:6c:b9:3a:c9:8b:36:
1f:48:f4:c0:de:d5:c5:71:92:3e:94:55:cb:35:57:
75:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:C2:38:1A:5F:95:69:CD:6E:87:A2:18:D7:E9:AA:ED:11:70:D4:DE
X509v3 Authority Key Identifier:
keyid:CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/I8I4Gl-Vac1uh6IY1-mq7RFw1N4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.182.112.0/24
5.182.115.0/24
45.9.168.0/24
45.14.9.0/24
77.242.152.0/22
83.137.153.0/24
83.137.156.0/23
83.137.159.0/24
88.151.62.0/24
88.209.228.0/24
88.209.236.0/22
88.209.246.0/23
88.209.254.0/24
92.52.217.0-92.52.218.255
178.210.232.0/22
178.210.237.0/24
194.41.47.0/24
Signature Algorithm: sha256WithRSAEncryption
73:d4:1f:f7:1e:e3:c9:c1:f0:ab:8b:22:19:f3:f3:9f:eb:4e:
79:ca:55:48:cc:ce:ae:6b:51:d3:fd:15:04:a3:cd:0f:c6:3e:
cd:86:04:ef:5a:b7:17:8d:1f:2f:e4:c6:e5:d4:8e:5e:cf:69:
4f:d2:a2:d7:02:ac:b8:20:14:09:7e:7d:9a:40:bd:14:31:97:
09:d1:97:64:e7:fd:da:fb:c9:93:8b:a6:54:8f:23:4b:c7:52:
e5:6e:78:d5:a2:db:83:3a:2c:42:06:4c:7a:88:b2:41:ef:73:
c0:e6:33:b4:2c:23:64:7c:97:ed:16:31:b4:74:c9:24:27:81:
8a:d1:ef:0a:90:2e:d8:ac:5e:20:78:64:ac:ce:09:de:c5:c8:
34:7e:c2:21:93:66:e7:38:8f:fe:40:11:0f:a3:47:80:14:a2:
3d:36:9e:1d:f8:a4:92:bc:0f:1d:75:bf:61:81:67:37:fd:82:
91:f1:d3:c2:85:de:be:fe:a0:19:a8:54:ea:e2:ec:7a:3b:1c:
e4:4f:81:86:ae:b6:e0:41:77:f0:55:24:2e:4d:9f:2d:0a:50:
ea:cc:6c:d8:23:fd:7a:74:f7:2f:e2:80:7e:cf:0c:f7:2e:cf:
1c:e8:f4:64:1f:79:b7:82:a1:6a:7b:e2:97:f7:e1:fe:be:34:
27:45:f5:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:56:27 2024 by rpki-client on console-fra.rpki-client.org