Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/VVaYqYR7W7M9_LEflKuS44elM7Q.roa
File: VVaYqYR7W7M9_LEflKuS44elM7Q.roa (raw, json)
Hash identifier: OhoLybuipLTj45dSkrPDwQZB1fzaT8NMrx4qPSLVpdA=
Subject key identifier: 55:56:98:A9:84:7B:5B:B3:3D:FC:B1:1F:94:AB:92:E3:87:A5:33:B4
Certificate issuer: /CN=cdaaa0e082360360acda347664eb8314eb11da10
Certificate serial: 018CE5EF8319E068491DD081C4C52DD9B215
Authority key identifier: CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/VVaYqYR7W7M9_LEflKuS44elM7Q.roa
Signing time: Sun 07 Jan 2024 21:58:48 +0000
ROA not before: Sun 07 Jan 2024 21:58:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 211619
IP address blocks: 88.209.228.0/24 maxlen: 24
88.209.239.0/24 maxlen: 24
88.209.236.0/24 maxlen: 24
88.209.236.0/22 maxlen: 22
88.209.237.0/24 maxlen: 24
88.209.238.0/24 maxlen: 24
88.209.246.0/23 maxlen: 24
88.209.254.0/24 maxlen: 24
83.137.156.0/24 maxlen: 24
83.137.157.0/24 maxlen: 24
83.137.158.0/24 maxlen: 24
83.137.153.0/24 maxlen: 24
178.210.232.0/24 maxlen: 24
178.210.229.0/24 maxlen: 24
45.9.168.0/24 maxlen: 24
77.242.152.0/22 maxlen: 24
88.209.219.0/24 maxlen: 24
92.52.217.0/24 maxlen: 24
194.41.47.0/24 maxlen: 24
5.182.112.0/24 maxlen: 24
5.182.115.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:e5:ef:83:19:e0:68:49:1d:d0:81:c4:c5:2d:d9:b2:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cdaaa0e082360360acda347664eb8314eb11da10
Validity
Not Before: Jan 7 21:58:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=555698a9847b5bb33dfcb11f94ab92e387a533b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:bc:dc:53:eb:28:71:f6:1c:cb:58:5f:31:4f:
ce:44:ea:27:c6:35:c7:eb:f8:00:ee:75:21:c7:b3:
86:b4:4c:e8:f1:50:8d:70:80:0f:fb:f9:7e:3a:90:
78:d6:1f:93:be:f5:c8:8a:99:b3:30:75:af:8b:66:
a8:2d:04:48:e3:bc:6d:e6:24:e4:d7:e3:f6:5a:42:
e9:e7:1b:ba:83:5e:40:b1:a5:9c:47:e4:30:88:c2:
88:e6:ee:6f:2f:c0:54:78:25:ed:9e:46:21:18:e0:
27:0f:77:9c:06:7c:61:05:d8:d8:1a:53:8c:25:36:
df:ca:e1:17:49:81:dc:54:54:72:c8:f8:86:55:5b:
f5:65:59:fa:41:fc:b1:3a:00:0e:03:7b:28:d2:f0:
99:45:1a:55:9d:0a:62:22:79:d9:52:52:7e:81:02:
af:a6:b5:f9:0b:0d:20:a2:4d:00:2a:0f:88:c4:52:
b2:43:c5:cc:6c:0c:75:55:7b:95:e5:05:92:f7:45:
01:85:63:5e:7f:11:3e:8b:c1:4c:4d:79:fd:b5:8a:
ce:ae:8f:0e:eb:83:1d:b5:d5:5a:63:29:1e:7d:61:
ee:06:89:98:76:3b:dd:83:d7:1b:f0:d0:7d:a6:b9:
4f:18:9e:71:bd:6f:48:f1:db:49:4a:34:cc:0c:d4:
ed:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:56:98:A9:84:7B:5B:B3:3D:FC:B1:1F:94:AB:92:E3:87:A5:33:B4
X509v3 Authority Key Identifier:
keyid:CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/VVaYqYR7W7M9_LEflKuS44elM7Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.182.112.0/24
5.182.115.0/24
45.9.168.0/24
77.242.152.0/22
83.137.153.0/24
83.137.156.0-83.137.158.255
88.209.219.0/24
88.209.228.0/24
88.209.236.0/22
88.209.246.0/23
88.209.254.0/24
92.52.217.0/24
178.210.229.0/24
178.210.232.0/24
194.41.47.0/24
Signature Algorithm: sha256WithRSAEncryption
6d:75:f1:7f:6c:e0:22:a9:2f:a2:1f:27:ca:20:60:6c:bd:02:
eb:23:99:ee:12:0b:43:14:92:14:6c:91:24:98:46:d2:22:7e:
42:3e:f2:21:f6:09:6d:ab:6d:8f:6f:62:3c:b2:2b:be:93:2f:
7b:81:76:ce:09:50:5b:29:56:7e:05:5a:4a:d5:e4:30:da:bd:
5f:ff:9d:64:c5:a0:19:e2:6f:b8:77:7c:13:ab:b2:69:ce:60:
95:ae:6c:31:65:87:19:b6:0c:d9:8d:95:f4:1e:d1:70:48:67:
64:51:e1:c4:e8:2e:99:21:a0:f1:cc:e0:08:83:6b:e4:c0:8d:
0f:44:e2:fc:a4:49:fa:d8:24:0d:a8:13:6a:0a:c3:f5:6b:3f:
88:8f:b2:eb:4a:a3:46:2d:83:a1:52:0a:a5:03:36:4a:bf:fc:
4b:30:4e:be:29:83:63:1a:84:9b:bb:09:e1:dd:14:bb:72:7e:
a7:11:7d:bb:a3:18:cf:35:3b:f6:04:7b:74:65:10:ad:fe:73:
79:75:28:62:9f:78:a7:b2:26:60:d6:22:18:a3:41:4c:ff:80:
9c:5b:a1:e9:8c:25:bb:46:34:b0:ed:d3:d1:3c:ec:4f:8d:31:
9c:e8:d0:7d:30:53:e2:24:c9:ca:e2:64:bc:37:52:6c:8b:89:
93:3d:47:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:47:55 2024 by rpki-client on console-ams.rpki-client.org