Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/SJH_hWvYWn9W0btiiUsfNPxrmZg.roa
File: SJH_hWvYWn9W0btiiUsfNPxrmZg.roa (raw, json)
Hash identifier: K6rO8obd1bD6+b/QDzYSm68QSPAyDKz8DqXqFZwEs4c=
Subject key identifier: 48:91:FF:85:6B:D8:5A:7F:56:D1:BB:62:89:4B:1F:34:FC:6B:99:98
Certificate issuer: /CN=cdaaa0e082360360acda347664eb8314eb11da10
Certificate serial: 0189D5C5D2FEFE188C5A49E226C9AB30B227
Authority key identifier: CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/SJH_hWvYWn9W0btiiUsfNPxrmZg.roa
Signing time: Tue 08 Aug 2023 15:30:58 +0000
ROA not before: Tue 08 Aug 2023 15:30:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 83.137.158.0/24 maxlen: 24
83.137.159.0/24 maxlen: 24
77.242.150.0/24 maxlen: 24
88.209.195.0/24 maxlen: 24
77.242.156.0/24 maxlen: 24
77.242.159.0/24 maxlen: 24
88.209.211.0/24 maxlen: 24
88.209.216.0/24 maxlen: 24
88.209.217.0/24 maxlen: 24
178.210.250.0/24 maxlen: 24
88.151.58.0/24 maxlen: 24
88.151.56.0/23 maxlen: 24
2.58.168.0/24 maxlen: 24
2.58.170.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:d5:c5:d2:fe:fe:18:8c:5a:49:e2:26:c9:ab:30:b2:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cdaaa0e082360360acda347664eb8314eb11da10
Validity
Not Before: Aug 8 15:30:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4891ff856bd85a7f56d1bb62894b1f34fc6b9998
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:28:5d:77:6f:70:57:0d:6a:63:5c:c8:cf:3b:
88:ff:bb:d1:fb:9b:58:d2:df:8d:14:3d:93:ea:b3:
a9:3a:9e:15:dc:1d:08:bf:6e:32:1c:7f:6b:99:c8:
e6:4b:d6:ee:2c:01:23:95:c0:ed:13:a1:31:65:c0:
26:d9:be:8a:0f:d2:56:5b:2f:83:eb:48:99:ab:00:
fc:95:6a:ff:d4:87:d4:ac:a0:94:00:1a:cd:09:c2:
df:67:d1:d7:d7:a7:d1:32:a9:59:bb:0d:22:24:49:
9e:2d:88:0a:e0:4f:34:15:ad:d8:47:33:f2:a2:93:
8a:ed:be:29:60:69:90:fd:db:25:f8:c0:2f:90:b0:
24:54:79:06:ce:10:ae:77:fa:21:a0:a5:1f:63:0e:
70:17:95:25:89:b6:c7:cc:06:91:fd:66:e1:9d:59:
fc:23:a8:05:1b:32:b0:94:2e:31:ad:7c:4d:60:48:
6b:cd:10:10:93:a2:45:11:d1:92:f3:1f:0f:44:73:
93:00:6b:84:5c:c3:a9:f8:1a:cc:60:77:7b:2b:b7:
ae:0e:be:d1:1e:9e:35:a3:91:7a:f3:0d:5d:7e:a3:
d0:68:64:55:80:59:49:50:b2:0b:d3:54:e7:df:67:
80:9f:ca:89:73:d0:4f:71:48:79:b9:d3:fa:8e:33:
d7:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:91:FF:85:6B:D8:5A:7F:56:D1:BB:62:89:4B:1F:34:FC:6B:99:98
X509v3 Authority Key Identifier:
keyid:CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/SJH_hWvYWn9W0btiiUsfNPxrmZg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.58.168.0/24
2.58.170.0/24
77.242.150.0/24
77.242.156.0/24
77.242.159.0/24
83.137.158.0/23
88.151.56.0-88.151.58.255
88.209.195.0/24
88.209.211.0/24
88.209.216.0/23
178.210.250.0/24
Signature Algorithm: sha256WithRSAEncryption
09:84:2f:4a:1b:af:2e:27:ed:8f:cf:c5:ec:64:b7:80:8b:52:
2d:1a:a8:76:8b:64:34:5e:e1:70:45:c3:8d:3f:60:bf:31:84:
01:ad:e1:3a:13:9f:bf:27:66:db:7f:91:d8:4c:7e:19:8e:fe:
6d:e6:92:b2:70:cc:0f:41:5c:a0:e8:31:67:e1:6a:ab:ec:26:
42:f4:5f:8c:e3:32:14:61:e0:cb:32:4e:fc:0c:04:57:27:dd:
bf:e2:22:18:50:8a:84:76:5f:ad:96:c3:0d:90:7d:05:e9:17:
68:5a:58:bd:d9:9a:3b:29:e2:20:71:2b:dd:dc:d9:0e:b2:48:
40:7a:06:1b:60:c5:9a:44:23:83:d7:73:32:0f:14:b5:5c:22:
b8:5b:d1:03:07:ba:93:14:b0:96:c5:69:3f:40:22:a5:a5:51:
ef:23:11:8d:0d:a3:ec:fa:78:f5:b3:d9:3d:fa:08:ae:4c:f9:
e9:27:c5:40:62:7f:a3:e8:c1:7e:aa:ef:cb:bb:21:0a:f9:a2:
0e:a7:97:59:f7:59:4d:73:a3:f1:97:03:1c:5e:02:01:d2:c5:
ff:6c:70:69:7c:e5:b5:70:81:24:7e:27:f7:23:fb:a6:f7:91:
42:f7:82:aa:0a:f4:a8:c0:e4:96:e7:ff:1e:63:bb:bb:16:36:
d6:bf:9b:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:47:55 2024 by rpki-client on console-ams.rpki-client.org