Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/K8f4--941y-CZQ8tttIQwi_scy8.roa
File: K8f4--941y-CZQ8tttIQwi_scy8.roa (raw, json)
Hash identifier: 4yJT9DhONMiI9JzkBWudlfDXCubz3G8RuAgqZw9MB7E=
Subject key identifier: 2B:C7:F8:FB:EF:78:D7:2F:82:65:0F:2D:B6:D2:10:C2:2F:EC:73:2F
Certificate issuer: /CN=cdaaa0e082360360acda347664eb8314eb11da10
Certificate serial: 0183FFF074CEFF9529F5BF1C8E54DFC1BA22
Authority key identifier: CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/K8f4--941y-CZQ8tttIQwi_scy8.roa
Signing time: Sat 22 Oct 2022 13:44:52 +0000
ROA not before: Sat 22 Oct 2022 13:44:52 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 42864
IP address blocks: 88.209.227.0/24 maxlen: 24
178.210.224.0/21 maxlen: 21
83.137.159.0/24 maxlen: 24
193.138.125.0/24 maxlen: 24
178.248.200.0/21 maxlen: 21
45.9.171.0/24 maxlen: 24
45.9.170.0/24 maxlen: 24
45.9.169.0/24 maxlen: 24
178.210.236.0/24 maxlen: 24
77.242.144.0/20 maxlen: 20
88.209.192.0/21 maxlen: 24
88.209.208.0/20 maxlen: 24
88.209.225.0/24 maxlen: 24
88.209.224.0/24 maxlen: 24
92.52.219.0/24 maxlen: 24
45.14.10.0/24 maxlen: 24
45.14.8.0/24 maxlen: 24
92.52.212.0/22 maxlen: 24
92.52.210.0/23 maxlen: 23
92.52.209.0/24 maxlen: 24
92.52.208.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:ff:f0:74:ce:ff:95:29:f5:bf:1c:8e:54:df:c1:ba:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cdaaa0e082360360acda347664eb8314eb11da10
Validity
Not Before: Oct 22 13:44:52 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=2bc7f8fbef78d72f82650f2db6d210c22fec732f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:d4:03:94:ad:ee:c9:3b:d7:21:a8:bf:23:47:
4e:9d:91:15:c7:b2:9d:0f:4f:53:fd:72:05:86:29:
0c:b5:1c:3b:b8:55:f1:44:e3:d4:b7:6f:e6:c6:5b:
c2:b7:47:77:e9:df:30:50:a4:10:7e:9e:4e:c0:96:
bd:15:78:8b:c0:ff:2a:3f:7c:c6:de:18:f2:3a:86:
96:ea:49:42:03:67:8e:55:f9:75:2c:18:1b:13:5a:
7f:3b:c6:eb:40:a9:53:2c:e8:7d:1d:ce:ef:ef:82:
9d:50:7c:7f:e7:f5:77:e1:2d:ff:79:47:a8:64:60:
2f:13:2b:48:e4:8a:a0:fe:ac:16:60:62:61:c3:02:
81:55:55:85:98:17:27:85:e9:89:ba:03:a2:ca:24:
6d:61:2d:e7:4a:77:42:84:ff:ab:4a:5a:91:ef:fd:
9d:ce:17:42:d2:87:8f:7a:a2:97:94:58:e0:4f:42:
16:f0:4a:f3:cd:a0:49:5a:fe:77:0b:02:2b:a1:47:
b8:2d:89:84:bb:f1:a0:6c:8f:5c:8c:fc:68:b6:58:
85:5e:a4:c3:f2:40:70:d2:85:11:0b:33:c5:01:ac:
54:f2:34:44:25:4c:9c:22:d1:42:c7:94:7c:70:62:
26:fe:e5:34:3d:07:a3:8c:84:21:eb:05:53:fd:de:
db:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:C7:F8:FB:EF:78:D7:2F:82:65:0F:2D:B6:D2:10:C2:2F:EC:73:2F
X509v3 Authority Key Identifier:
keyid:CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/K8f4--941y-CZQ8tttIQwi_scy8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.9.169.0-45.9.171.255
45.14.8.0/24
45.14.10.0/24
77.242.144.0/20
83.137.159.0/24
88.209.192.0/21
88.209.208.0-88.209.225.255
88.209.227.0/24
92.52.208.0/21
92.52.219.0/24
178.210.224.0/21
178.210.236.0/24
178.248.200.0/21
193.138.125.0/24
Signature Algorithm: sha256WithRSAEncryption
4e:40:f0:75:52:98:8d:3c:0e:4e:f7:74:93:22:38:fc:84:8f:
e6:e4:0f:20:3b:84:92:21:9a:e3:dc:58:8e:8a:78:f6:d4:5d:
45:9c:de:4f:fc:1b:cb:31:95:f9:de:d9:0a:1d:1b:03:ee:90:
52:70:dd:e5:6c:92:cc:d8:17:fd:7d:71:af:be:16:5c:e1:60:
7e:3a:b6:fb:7a:bd:75:5e:13:be:92:04:b3:9d:cf:80:93:2a:
3e:2d:34:5f:91:2a:b7:18:3c:c2:c2:55:95:64:66:d9:92:e5:
91:63:17:5a:2e:00:7d:6c:3b:dc:b1:67:20:a6:3f:12:f4:2a:
67:fd:be:91:37:56:7a:6a:79:7d:43:29:13:18:4d:27:d3:b7:
32:de:aa:56:f5:a9:81:93:e4:dd:e9:93:61:48:1e:d1:1c:e3:
c3:6c:98:1f:71:e2:8b:f8:83:c4:6b:7d:7e:5e:89:b5:f2:4b:
45:59:a7:10:db:ce:40:9a:0b:97:a0:28:94:db:fa:01:4f:f4:
62:bf:83:da:ed:90:dc:ad:e1:bc:2f:a1:c1:08:2e:19:2c:d9:
c3:eb:82:5b:10:bd:73:96:83:bd:a7:4c:76:f1:cb:ed:87:e2:
f0:3a:6f:58:3e:de:36:62:94:bb:a7:22:79:04:4c:d7:89:d1:
a3:14:73:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:56:27 2024 by rpki-client on console-fra.rpki-client.org