Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/OlM-CIXyDRg8QykAqEAFvMCVayM.roa
File: OlM-CIXyDRg8QykAqEAFvMCVayM.roa (raw, json)
Hash identifier: hipjcPZOzA9k60i7lu5cGmKnoUgM+2JG9eiYFpYOgkU=
Subject key identifier: 3A:53:3E:08:85:F2:0D:18:3C:43:29:00:A8:40:05:BC:C0:95:6B:23
Certificate issuer: /CN=cdaaa0e082360360acda347664eb8314eb11da10
Certificate serial: 0187C347EB10BE89D3DBA90FCFAA822DEDDA
Authority key identifier: CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/OlM-CIXyDRg8QykAqEAFvMCVayM.roa
Signing time: Thu 27 Apr 2023 15:14:43 +0000
ROA not before: Thu 27 Apr 2023 15:14:43 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 88.209.248.0/24 maxlen: 24
88.209.249.0/24 maxlen: 24
178.210.236.0/24 maxlen: 24
88.151.56.0/24 maxlen: 24
88.151.61.0/24 maxlen: 24
88.209.209.0/24 maxlen: 24
5.182.113.0/24 maxlen: 24
88.209.216.0/24 maxlen: 24
88.209.225.0/24 maxlen: 24
88.209.221.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:c3:47:eb:10:be:89:d3:db:a9:0f:cf:aa:82:2d:ed:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cdaaa0e082360360acda347664eb8314eb11da10
Validity
Not Before: Apr 27 15:14:43 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3a533e0885f20d183c432900a84005bcc0956b23
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:58:5d:ce:73:a5:54:05:ef:95:02:d1:6d:11:
55:c4:8b:44:85:4b:e2:b1:d5:87:71:b9:6f:1d:38:
64:2d:ce:62:92:3b:aa:10:c1:84:ac:0b:a0:c6:3f:
42:e6:35:b2:b0:a8:87:f2:b0:af:ef:94:94:d2:89:
0c:a6:de:65:a3:21:7b:dc:20:e1:6f:ef:24:38:2a:
9d:6e:4b:98:95:f8:78:5c:ae:72:bd:a2:ba:23:52:
05:3f:8d:ac:4c:a5:84:36:5c:67:9e:a7:61:f7:29:
f7:82:14:5c:c6:98:a3:1e:3f:f3:3c:57:4f:91:26:
9b:6c:38:d6:d2:af:0b:5b:a6:d0:d2:2a:0a:88:ff:
29:dc:7a:d5:bc:0c:ae:35:5d:09:5d:67:45:eb:aa:
7e:e0:d9:44:1e:04:50:2d:0c:28:82:29:b2:0f:c8:
97:8e:e5:19:5c:78:c9:07:d5:b1:1f:2e:87:41:8e:
45:77:fc:af:1e:ca:ca:60:e4:de:fa:8b:0f:59:16:
a8:18:8c:9f:ef:0e:42:eb:85:f7:9e:be:5b:fc:f1:
58:6c:21:2d:d7:6b:52:8c:d5:8b:52:e7:08:96:b9:
96:fa:87:64:bc:6b:f1:ee:ab:ce:80:16:ed:ad:f7:
ad:a4:ec:90:2a:9c:f3:b6:9f:50:ce:b2:61:31:b0:
2e:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:53:3E:08:85:F2:0D:18:3C:43:29:00:A8:40:05:BC:C0:95:6B:23
X509v3 Authority Key Identifier:
keyid:CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/OlM-CIXyDRg8QykAqEAFvMCVayM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.182.113.0/24
88.151.56.0/24
88.151.61.0/24
88.209.209.0/24
88.209.216.0/24
88.209.221.0/24
88.209.225.0/24
88.209.248.0/23
178.210.236.0/24
Signature Algorithm: sha256WithRSAEncryption
5f:33:da:01:15:4c:65:c1:82:8a:f8:86:6b:49:9d:dc:b5:3e:
3e:cd:0b:8c:55:66:66:cb:27:51:40:cb:fd:5c:d5:a9:ec:7c:
a2:33:34:45:e7:5e:bd:c3:58:71:bf:d7:31:83:59:36:0a:1c:
c8:7d:1e:2e:53:e8:a1:31:2f:93:b8:9a:0f:34:3e:37:5f:4a:
06:54:f1:2c:29:cc:ff:4c:62:79:93:1f:e4:de:da:6f:d6:79:
39:9e:c0:68:8f:9c:c0:eb:34:b2:33:d2:d9:e4:20:fc:e2:bb:
c5:72:ca:de:ac:63:2b:e2:89:06:7a:c6:6a:6b:e9:c1:bc:c3:
e3:66:e6:0d:31:c2:73:75:0c:86:77:c6:41:aa:19:c6:5a:44:
13:f7:88:78:51:2c:62:cc:ad:5f:d4:1f:5d:3c:b3:67:10:61:
97:a5:f5:97:58:ad:5a:ea:f1:92:d7:fd:54:cb:e6:50:15:1d:
0e:bf:d7:6f:8f:06:57:77:20:e1:31:db:9f:92:e7:c3:20:ca:
f9:e7:d8:5a:a1:09:0e:c4:a8:1b:65:86:c9:59:bc:fa:c8:d2:
e6:47:6e:7a:79:9f:28:1a:c5:65:0a:a4:b6:df:be:4b:38:9e:
9b:52:0c:fa:59:48:2f:04:d7:33:ec:b9:76:e8:4f:7f:fc:4e:
44:1d:b0:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:56:27 2024 by rpki-client on console-fra.rpki-client.org