Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/R6Y4eRHaMLlgnkyTRBwTwXcqFu4.roa
File: R6Y4eRHaMLlgnkyTRBwTwXcqFu4.roa (raw, json)
Hash identifier: iidJVKOPudm9cyr2AiCz6v1qgd48DvE5IXlIovHqtD8=
Subject key identifier: 47:A6:38:79:11:DA:30:B9:60:9E:4C:93:44:1C:13:C1:77:2A:16:EE
Certificate issuer: /CN=cdaaa0e082360360acda347664eb8314eb11da10
Certificate serial: 018571E7B141C5CC9CA2E9B404075A7E115C
Authority key identifier: CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/R6Y4eRHaMLlgnkyTRBwTwXcqFu4.roa
Signing time: Mon 02 Jan 2023 09:54:47 +0000
ROA not before: Mon 02 Jan 2023 09:54:47 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 211619
IP address blocks: 88.209.228.0/24 maxlen: 24
88.209.236.0/22 maxlen: 22
88.209.246.0/23 maxlen: 23
88.209.253.0/24 maxlen: 24
83.137.159.0/24 maxlen: 24
83.137.156.0/24 maxlen: 24
83.137.157.0/24 maxlen: 24
83.137.158.0/24 maxlen: 24
83.137.153.0/24 maxlen: 24
178.210.232.0/24 maxlen: 24
178.210.233.0/24 maxlen: 24
178.210.237.0/24 maxlen: 24
178.210.234.0/24 maxlen: 24
178.210.235.0/24 maxlen: 24
45.9.168.0/24 maxlen: 24
77.242.152.0/22 maxlen: 22
92.52.218.0/24 maxlen: 24
194.41.47.0/24 maxlen: 24
88.151.62.0/24 maxlen: 24
5.182.112.0/24 maxlen: 24
45.14.9.0/24 maxlen: 24
5.182.115.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:e7:b1:41:c5:cc:9c:a2:e9:b4:04:07:5a:7e:11:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cdaaa0e082360360acda347664eb8314eb11da10
Validity
Not Before: Jan 2 09:54:47 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=47a6387911da30b9609e4c93441c13c1772a16ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:bf:78:d1:bf:9a:84:6d:b8:65:ad:95:0f:6a:
db:ac:f5:8e:6a:04:92:82:4e:5b:86:2f:82:84:78:
29:2d:34:e0:73:e1:1f:ae:f3:7c:77:ef:43:16:18:
d0:e3:b1:bd:ca:ef:8b:d6:37:de:f1:44:95:69:c1:
ff:44:54:ab:56:ba:17:06:a1:8c:d7:71:17:ce:26:
e7:91:85:db:5c:d4:ff:3f:d7:d7:55:73:f6:15:79:
75:8b:db:06:de:10:c7:20:22:19:db:50:f7:f8:28:
60:5f:ce:d5:0d:a8:ce:50:83:a9:77:71:58:bb:75:
8b:a7:48:dc:57:72:70:9e:02:5c:f9:2c:86:01:42:
6b:39:f3:cf:b9:bc:3c:c1:b1:3d:38:a5:66:3a:6e:
9f:38:c6:48:98:27:08:38:fd:3a:00:61:ba:84:d5:
9c:6b:60:35:6a:08:e4:20:3e:35:21:08:3f:c1:c6:
63:c0:f4:c2:95:f0:cb:e0:38:22:bb:c0:ae:f4:22:
e8:f2:86:2b:43:70:9f:e4:8a:34:96:8a:87:ac:3a:
09:c1:dd:30:bf:43:b2:13:43:41:93:02:4f:c2:c4:
11:b2:97:0e:dd:19:ac:5f:a9:a7:02:ba:f8:10:01:
39:fc:b3:40:f7:ef:97:70:c0:d6:91:18:ce:65:bb:
fb:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:A6:38:79:11:DA:30:B9:60:9E:4C:93:44:1C:13:C1:77:2A:16:EE
X509v3 Authority Key Identifier:
keyid:CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/R6Y4eRHaMLlgnkyTRBwTwXcqFu4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.182.112.0/24
5.182.115.0/24
45.9.168.0/24
45.14.9.0/24
77.242.152.0/22
83.137.153.0/24
83.137.156.0/22
88.151.62.0/24
88.209.228.0/24
88.209.236.0/22
88.209.246.0/23
88.209.253.0/24
92.52.218.0/24
178.210.232.0/22
178.210.237.0/24
194.41.47.0/24
Signature Algorithm: sha256WithRSAEncryption
06:fe:ee:04:ed:93:4e:f0:2d:00:4b:80:04:45:f7:7d:52:59:
ad:88:a1:c2:c6:6d:0a:1c:67:51:e5:08:0f:a2:b6:61:19:56:
f0:00:d7:4c:d1:13:9c:97:84:6d:9c:e9:17:a6:29:29:2b:c5:
c7:6c:95:f8:c6:72:c8:d9:bd:7c:18:7f:c7:23:1f:9c:2c:81:
8c:62:71:8a:6a:09:9f:a3:e8:59:47:21:6a:c6:09:43:07:d2:
6d:43:2e:9b:36:f4:bf:24:3f:24:8e:7a:0a:c9:2f:48:2f:ca:
3f:ea:74:fb:ae:a4:ac:13:ac:73:07:5b:5d:27:e0:19:8c:1d:
0b:6d:ee:57:d7:70:78:09:01:f7:75:f7:1c:70:15:c5:73:f3:
ce:5e:44:2f:6f:dc:7a:c0:83:a7:6f:c0:ac:9d:ee:51:3b:83:
3c:b9:d3:66:44:87:78:50:6a:c3:fe:06:02:49:30:a1:81:1a:
b9:a2:f7:69:ec:70:47:fc:30:d6:bd:3d:3d:6e:31:b4:67:c0:
56:20:19:8f:dc:59:3c:58:8d:bb:0d:23:f2:1d:28:73:76:20:
4b:fc:7e:56:ed:73:5e:5b:87:f1:90:a8:20:a0:21:87:5e:db:
02:17:5c:3d:ad:7e:8f:8e:fd:26:b3:27:00:17:10:1b:81:3e:
99:49:ac:30
-----BEGIN CERTIFICATE-----
MIIFVzCCBD+gAwIBAgISAYVx57FBxcycoum0BAdafhFcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNkYWFhMGUwODIzNjAzNjBhY2RhMzQ3NjY0ZWI4MzE0ZWIx
MWRhMTAwHhcNMjMwMTAyMDk1NDQ3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0N2E2Mzg3OTExZGEzMGI5NjA5ZTRjOTM0NDFjMTNjMTc3MmExNmVlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn7940b+ahG24Za2VD2rbrPWOagSS
gk5bhi+ChHgpLTTgc+EfrvN8d+9DFhjQ47G9yu+L1jfe8USVacH/RFSrVroXBqGM
13EXzibnkYXbXNT/P9fXVXP2FXl1i9sG3hDHICIZ21D3+ChgX87VDajOUIOpd3FY
u3WLp0jcV3JwngJc+SyGAUJrOfPPubw8wbE9OKVmOm6fOMZImCcIOP06AGG6hNWc
a2A1agjkID41IQg/wcZjwPTClfDL4Dgiu8Cu9CLo8oYrQ3Cf5Io0loqHrDoJwd0w
v0OyE0NBkwJPwsQRspcO3RmsX6mnArr4EAE5/LNA9++XcMDWkRjOZbv7xQIDAQAB
o4ICYzCCAl8wHQYDVR0OBBYEFEemOHkR2jC5YJ5Mk0QcE8F3KhbuMB8GA1UdIwQY
MBaAFM2qoOCCNgNgrNo0dmTrgxTrEdoQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvemFxZzRJSTJBMkNzMmpSMlpPdURGT3NSMmhBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZC81ODkxMjctMTA5Ni00YzkxLTk2Y2Mt
N2U0ZDZmNmY2ZTY2LzEvUjZZNGVSSGFNTGxnbmt5VFJCd1R3WGNxRnU0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZC81ODkxMjctMTA5Ni00YzkxLTk2Y2MtN2U0ZDZmNmY2ZTY2
LzEvemFxZzRJSTJBMkNzMmpSMlpPdURGT3NSMmhBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMHkGCCsGAQUFBwEHAQH/BGowaDBmBAIAATBgAwQABbZwAwQA
BbZzAwQALQmoAwQALQ4JAwQCTfKYAwQAU4mZAwQCU4mcAwQAWJc+AwQAWNHkAwQC
WNHsAwQBWNH2AwQAWNH9AwQAXDTaAwQCstLoAwQAstLtAwQAwikvMA0GCSqGSIb3
DQEBCwUAA4IBAQAG/u4E7ZNO8C0AS4AERfd9UlmtiKHCxm0KHGdR5QgPorZhGVbw
ANdM0ROcl4RtnOkXpikpK8XHbJX4xnLI2b18GH/HIx+cLIGMYnGKagmfo+hZRyFq
xglDB9JtQy6bNvS/JD8kjnoKyS9IL8o/6nT7rqSsE6xzB1tdJ+AZjB0Lbe5X13B4
CQH3dfcccBXFc/POXkQvb9x6wIOnb8Csne5RO4M8udNmRId4UGrD/gYCSTChgRq5
ovdp7HBH/DDWvT09bjG0Z8BWIBmP3Fk8WI27DSPyHShzdiBL/H5W7XNeW4fxkKgg
oCGHXtsCF1w9rX6Pjv0msycAFxAbgT6ZSaww
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:47:55 2024 by rpki-client on console-ams.rpki-client.org