Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/VWTH_z38AlPCuO8UHDySQs44GnE.roa
File: VWTH_z38AlPCuO8UHDySQs44GnE.roa (raw, json)
Hash identifier: m1vFPBs2S6ZAS0QB5ZdHXwS9hhXZCfrsdzsljXH3v4g=
Subject key identifier: 55:64:C7:FF:3D:FC:02:53:C2:B8:EF:14:1C:3C:92:42:CE:38:1A:71
Certificate issuer: /CN=cdaaa0e082360360acda347664eb8314eb11da10
Certificate serial: 0189627AF1D2F104188987DE24631C5C9112
Authority key identifier: CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/VWTH_z38AlPCuO8UHDySQs44GnE.roa
Signing time: Mon 17 Jul 2023 06:12:51 +0000
ROA not before: Mon 17 Jul 2023 06:12:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 178.210.230.0/24 maxlen: 24
77.242.150.0/24 maxlen: 24
88.151.58.0/24 maxlen: 24
88.151.56.0/23 maxlen: 24
88.209.195.0/24 maxlen: 24
2.58.168.0/24 maxlen: 24
5.182.113.0/24 maxlen: 24
88.209.211.0/24 maxlen: 24
88.209.221.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:62:7a:f1:d2:f1:04:18:89:87:de:24:63:1c:5c:91:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cdaaa0e082360360acda347664eb8314eb11da10
Validity
Not Before: Jul 17 06:12:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5564c7ff3dfc0253c2b8ef141c3c9242ce381a71
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:2f:cb:66:a5:ec:f6:47:48:00:24:0f:09:b5:
d5:d8:f6:17:35:98:c5:77:52:a4:72:7e:2c:ce:40:
8d:56:d0:1f:4f:1d:39:8f:98:f5:30:12:29:d4:f1:
30:8d:7e:fe:90:15:bb:24:8a:24:4f:a0:85:a9:62:
81:0a:fb:0e:64:ad:4e:d7:45:60:63:c1:0b:f2:f6:
6b:b5:76:24:52:50:11:c2:e1:a9:55:77:6e:ab:1b:
13:8f:51:73:60:d4:d1:1d:c2:78:62:1c:ad:a2:60:
96:94:20:ee:a8:a4:22:5f:d5:f0:f8:69:22:78:9e:
6f:95:0a:ed:34:27:79:4c:7e:4f:91:1b:d6:ec:1a:
42:6d:ef:fa:76:43:78:19:5c:8d:87:2f:18:4d:7d:
c3:5c:d9:2e:a1:bf:7f:35:7c:57:58:86:46:60:f2:
0b:28:e6:3c:b5:7e:82:fd:c0:a0:b8:fa:63:33:fe:
f6:e4:02:03:7f:f9:47:6c:ba:bc:b0:f0:36:ba:91:
2a:e6:aa:84:4e:36:00:3e:e2:36:0c:89:92:81:31:
6c:00:5e:c0:da:4b:df:66:c4:b3:1e:5e:66:17:bb:
97:8c:fc:7d:a0:64:d3:9d:ec:d5:9c:76:63:a0:6e:
71:91:4f:5a:71:00:db:17:58:05:0d:d0:a0:02:52:
82:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:64:C7:FF:3D:FC:02:53:C2:B8:EF:14:1C:3C:92:42:CE:38:1A:71
X509v3 Authority Key Identifier:
keyid:CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/VWTH_z38AlPCuO8UHDySQs44GnE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.58.168.0/24
5.182.113.0/24
77.242.150.0/24
88.151.56.0-88.151.58.255
88.209.195.0/24
88.209.211.0/24
88.209.221.0/24
178.210.230.0/24
Signature Algorithm: sha256WithRSAEncryption
22:31:9e:32:24:c4:f0:67:ec:52:9e:e7:b9:e2:1d:64:fe:cc:
25:e1:d0:c9:b9:7a:fa:9e:e2:b9:d9:0a:8c:d6:17:9d:da:27:
ed:71:a6:71:00:f0:ca:e6:08:02:bd:59:ad:18:d9:23:42:31:
d0:87:f6:de:ff:ed:6c:55:82:06:0e:0c:c4:3c:78:07:8f:52:
21:7a:35:97:ab:ba:21:da:82:4c:40:9b:53:15:b8:6c:31:60:
7c:36:9a:92:16:12:c6:63:83:60:31:14:6b:1b:36:fc:44:b9:
f8:06:5f:12:f5:b7:ce:46:0e:7a:60:2c:f3:a3:2a:4b:6d:34:
11:5e:a2:25:db:93:7e:c6:10:f8:5f:3b:0c:2f:77:4c:74:8e:
5b:ae:19:25:79:6e:56:47:03:bd:12:02:85:47:49:b6:be:2e:
65:2a:6f:e3:cf:d3:56:2f:0a:fe:01:ba:42:74:f0:70:81:86:
0f:d5:2d:e7:f0:f8:35:0c:3d:e1:1f:d6:7e:c2:e9:0f:d3:19:
39:f2:c7:27:56:8c:dc:45:b3:63:7b:d4:ba:d9:dc:31:27:25:
c2:8c:0c:0b:41:77:51:8c:95:79:e8:64:d1:e5:1a:11:2a:55:
4e:4b:d0:7b:0d:57:d1:4c:bd:9f:2d:91:74:ba:97:bb:3f:f3:
33:17:5b:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:56:27 2024 by rpki-client on console-fra.rpki-client.org