Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/M5_bNMx0BlaLwj7XlubP5azbGWo.roa
File: M5_bNMx0BlaLwj7XlubP5azbGWo.roa (raw, json)
Hash identifier: y4R0FLX8djgYBNCG/UIJBD1WPy9ZISGCCYD02B7GyHU=
Subject key identifier: 33:9F:DB:34:CC:74:06:56:8B:C2:3E:D7:96:E6:CF:E5:AC:DB:19:6A
Certificate issuer: /CN=cdaaa0e082360360acda347664eb8314eb11da10
Certificate serial: 018CC3B6BCBB4C4801F1EC6F3374B8DFD859
Authority key identifier: CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/M5_bNMx0BlaLwj7XlubP5azbGWo.roa
Signing time: Mon 01 Jan 2024 06:29:42 +0000
ROA not before: Mon 01 Jan 2024 06:29:42 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 61317
IP address blocks: 88.209.245.0/24 maxlen: 24
88.209.244.0/24 maxlen: 24
178.210.236.0/24 maxlen: 24
88.209.192.0/24 maxlen: 24
88.209.194.0/24 maxlen: 24
88.209.211.0/24 maxlen: 24
88.209.207.0/24 maxlen: 24
88.209.209.0/24 maxlen: 24
88.209.225.0/24 maxlen: 24
88.209.222.0/24 maxlen: 24
88.209.221.0/24 maxlen: 24
88.209.224.0/24 maxlen: 24
88.151.56.0/24 maxlen: 24
88.151.59.0/24 maxlen: 24
88.151.61.0/24 maxlen: 24
2.58.171.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:b6:bc:bb:4c:48:01:f1:ec:6f:33:74:b8:df:d8:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cdaaa0e082360360acda347664eb8314eb11da10
Validity
Not Before: Jan 1 06:29:42 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=339fdb34cc7406568bc23ed796e6cfe5acdb196a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:3d:46:d8:12:fd:e9:e2:41:b4:d9:0e:86:1e:
aa:59:9b:1f:da:2c:3e:eb:b1:65:d7:a2:39:3c:40:
ed:4a:6b:2b:50:29:cb:c0:5b:dc:66:84:99:0d:06:
84:b8:dd:03:89:d2:63:a7:4e:5a:62:46:27:4f:64:
98:70:d5:53:b8:51:4d:02:bd:1b:48:c6:07:cc:6d:
f6:fe:3c:04:3d:17:43:5d:d0:29:f4:3f:b9:f5:ea:
87:5b:83:d2:e4:b3:fc:0c:30:c5:7d:f9:d5:a3:e0:
0f:57:11:c2:8b:dc:22:ea:cb:c0:34:74:76:f7:9c:
f4:bd:9d:3c:d3:09:12:de:c6:ec:0b:da:4c:cc:26:
45:60:11:5d:25:b7:f4:b9:6b:78:92:9a:60:3f:3d:
21:d4:21:dc:70:7f:42:1a:05:33:75:aa:79:d8:03:
d6:ca:f3:45:51:b6:b1:1a:d5:66:d1:d6:39:b0:9f:
f3:2d:ee:b0:7a:5e:73:b4:55:a7:9c:9d:5b:68:01:
94:6e:cf:5f:3b:d9:62:01:9c:c1:74:1d:d0:a9:33:
f8:b5:9b:c9:90:26:16:8a:c7:7b:a7:f5:77:be:20:
02:25:d2:5c:73:47:ed:b4:f6:5b:cd:22:3f:43:fa:
f7:7b:a5:4d:ce:22:74:17:0f:f7:93:68:42:1f:fa:
14:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:9F:DB:34:CC:74:06:56:8B:C2:3E:D7:96:E6:CF:E5:AC:DB:19:6A
X509v3 Authority Key Identifier:
keyid:CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/M5_bNMx0BlaLwj7XlubP5azbGWo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.58.171.0/24
88.151.56.0/24
88.151.59.0/24
88.151.61.0/24
88.209.192.0/24
88.209.194.0/24
88.209.207.0/24
88.209.209.0/24
88.209.211.0/24
88.209.221.0-88.209.222.255
88.209.224.0/23
88.209.244.0/23
178.210.236.0/24
Signature Algorithm: sha256WithRSAEncryption
53:49:a7:e8:8d:7c:aa:67:8f:50:cf:af:f2:25:f8:64:f7:fd:
01:04:50:ac:6b:a7:1a:44:ed:97:94:95:2b:1c:7a:d9:6b:2e:
c0:dc:d2:45:61:44:84:6d:2e:f3:48:6d:c0:c0:a3:25:72:f0:
9e:28:5d:74:be:8c:e4:1b:de:bb:50:f6:65:56:d6:0f:5b:a4:
67:ac:f4:4c:fe:20:82:c9:ca:06:75:5b:cd:14:6a:b2:12:2f:
32:7d:13:7c:82:52:84:27:3f:e4:78:e0:af:62:37:5a:9c:f2:
58:95:00:a8:f9:9d:14:cf:ef:3f:b1:92:cd:b7:c3:97:cf:91:
6c:88:9c:60:6f:78:bc:c6:c5:d8:e8:95:d4:97:39:16:84:8a:
eb:1c:52:85:51:8c:c3:c9:97:01:cb:31:dd:c9:48:ae:81:40:
d1:bb:ac:19:39:bb:df:dc:a0:7a:ab:ca:8a:f2:78:23:b5:f0:
db:77:3c:3f:3f:a5:f9:ea:2e:58:c7:66:58:bb:35:54:60:1f:
be:3a:cb:bb:01:6e:cf:28:87:e9:0a:8b:62:24:a8:10:ab:8b:
8d:17:f3:2a:4b:5b:1e:8c:37:a2:78:2c:d5:98:8a:47:aa:94:
69:6c:8f:5e:ff:0e:9f:c4:c9:1e:a3:b3:ea:23:99:58:b1:11:
98:66:bb:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:47:55 2024 by rpki-client on console-ams.rpki-client.org