Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/PXW495p5L8sed_I1qg8HizgfuM0.roa
File: PXW495p5L8sed_I1qg8HizgfuM0.roa (raw, json)
Hash identifier: LVxGnTd3qtNz7gJjT40DGqt0FBG7627d9XzaKo5s5zU=
Subject key identifier: 3D:75:B8:F7:9A:79:2F:CB:1E:77:F2:35:AA:0F:07:8B:38:1F:B8:CD
Certificate issuer: /CN=cdaaa0e082360360acda347664eb8314eb11da10
Certificate serial: 018BCDE4E3EFC04901616F02063EB3E4F27E
Authority key identifier: CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/PXW495p5L8sed_I1qg8HizgfuM0.roa
Signing time: Tue 14 Nov 2023 12:53:31 +0000
ROA not before: Tue 14 Nov 2023 12:53:31 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 211619
IP address blocks: 88.209.228.0/24 maxlen: 24
88.209.239.0/24 maxlen: 24
88.209.236.0/24 maxlen: 24
88.209.236.0/22 maxlen: 22
88.209.237.0/24 maxlen: 24
88.209.238.0/24 maxlen: 24
88.209.246.0/23 maxlen: 24
88.209.254.0/24 maxlen: 24
83.137.157.0/24 maxlen: 24
83.137.153.0/24 maxlen: 24
178.210.232.0/24 maxlen: 24
178.210.229.0/24 maxlen: 24
178.210.237.0/24 maxlen: 24
178.210.235.0/24 maxlen: 24
45.9.168.0/24 maxlen: 24
77.242.152.0/22 maxlen: 24
88.209.219.0/24 maxlen: 24
92.52.217.0/24 maxlen: 24
92.52.218.0/24 maxlen: 24
194.41.47.0/24 maxlen: 24
5.182.112.0/24 maxlen: 24
5.182.115.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:cd:e4:e3:ef:c0:49:01:61:6f:02:06:3e:b3:e4:f2:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cdaaa0e082360360acda347664eb8314eb11da10
Validity
Not Before: Nov 14 12:53:31 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3d75b8f79a792fcb1e77f235aa0f078b381fb8cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:61:69:20:94:74:36:89:77:6e:2e:95:25:51:
8f:df:4c:0a:36:6d:b6:35:a3:95:a8:bc:d5:48:5f:
74:82:98:cc:db:ec:69:9a:0c:c2:14:56:7d:3b:3e:
62:3a:cc:f3:1b:54:27:a0:0b:e4:47:4a:e5:c8:51:
d0:33:db:fa:75:0d:ac:e9:91:3b:3a:ef:05:8b:57:
e4:09:4d:b3:9e:90:6d:8c:8e:5b:72:89:f6:99:48:
55:a4:bb:a2:38:48:9d:54:e3:d3:0c:80:25:a0:f4:
26:32:9e:7f:33:82:f2:78:1f:c2:99:7c:8c:e0:81:
97:1b:42:40:d5:46:86:40:8f:bc:82:03:a4:fd:3a:
0d:6f:af:1b:cf:2e:bb:f0:96:f2:27:51:ab:b7:85:
64:33:bc:f2:53:7c:f4:8a:10:5f:85:68:93:19:37:
af:fe:7a:1b:a6:3c:36:0e:44:05:29:38:a7:18:9f:
7b:d5:46:f6:ee:5e:95:d0:c2:16:d7:f6:e3:1e:18:
ab:15:a9:20:52:bd:b9:bf:b5:e5:a0:83:e9:3b:55:
4c:e5:2e:9f:ac:d6:fd:22:e4:ca:4e:4f:91:af:bf:
9e:49:44:76:dc:9d:7b:69:fc:8d:aa:3d:89:7f:2f:
98:ba:4d:6a:ea:84:4a:e8:52:c8:3e:1b:e1:f3:fd:
37:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:75:B8:F7:9A:79:2F:CB:1E:77:F2:35:AA:0F:07:8B:38:1F:B8:CD
X509v3 Authority Key Identifier:
keyid:CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/PXW495p5L8sed_I1qg8HizgfuM0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.182.112.0/24
5.182.115.0/24
45.9.168.0/24
77.242.152.0/22
83.137.153.0/24
83.137.157.0/24
88.209.219.0/24
88.209.228.0/24
88.209.236.0/22
88.209.246.0/23
88.209.254.0/24
92.52.217.0-92.52.218.255
178.210.229.0/24
178.210.232.0/24
178.210.235.0/24
178.210.237.0/24
194.41.47.0/24
Signature Algorithm: sha256WithRSAEncryption
34:63:9e:92:52:62:9d:a0:79:c9:4d:15:8b:ad:9a:f4:f3:53:
a5:1b:31:4c:cd:1e:9c:9c:14:4e:04:bb:b4:9d:ff:af:61:8e:
ef:81:79:e7:a1:5d:fa:20:b6:c9:2e:2b:aa:dd:96:81:db:8b:
cd:cd:e9:29:fb:5a:f0:eb:e0:82:34:6c:de:c7:27:33:1a:3e:
b1:c2:0d:58:cc:a4:7b:a0:20:62:49:6c:59:d6:29:91:10:67:
bb:9b:41:ad:fc:d5:5e:14:94:49:a2:1d:fd:fa:ca:a1:01:df:
bf:4b:28:eb:65:4c:c6:87:b1:48:ef:87:59:11:99:79:a7:b2:
e9:e1:ab:2c:83:df:2c:9d:1e:ed:28:89:1a:37:47:e6:4d:b7:
c5:0a:f2:67:f3:2b:77:13:b4:b1:7e:70:c8:66:d2:71:0b:89:
cb:ff:ec:da:82:b3:50:cd:82:17:5d:7c:01:42:02:86:a0:ca:
d3:6b:ab:c3:2f:41:0e:9f:0e:79:e1:37:30:9f:fd:3d:c8:95:
6d:75:75:9f:e8:29:0a:c0:95:cd:a4:11:00:b9:c1:7d:63:11:
73:b0:81:b0:8f:ff:80:ae:5b:0e:e0:f7:1f:af:57:6c:42:82:
fe:9b:fa:40:19:a4:8a:e7:cd:2c:09:a3:7a:f8:c3:05:72:90:
82:1c:62:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:47:55 2024 by rpki-client on console-ams.rpki-client.org