Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/VxhrPwlw-8rJ6OTUbhtyfo1blrQ.roa
File: VxhrPwlw-8rJ6OTUbhtyfo1blrQ.roa (raw, json)
Hash identifier: Xpx69U/eVP9pTAGfH46m937DLG5WrvYIB4lNjosmY4A=
Subject key identifier: 57:18:6B:3F:09:70:FB:CA:C9:E8:E4:D4:6E:1B:72:7E:8D:5B:96:B4
Certificate issuer: /CN=cdaaa0e082360360acda347664eb8314eb11da10
Certificate serial: 018571E7A143CC3C6CD65A426A3251A8EC07
Authority key identifier: CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/VxhrPwlw-8rJ6OTUbhtyfo1blrQ.roa
Signing time: Mon 02 Jan 2023 09:54:43 +0000
ROA not before: Mon 02 Jan 2023 09:54:43 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 42864
IP address blocks: 178.210.224.0/21 maxlen: 21
178.248.200.0/21 maxlen: 21
193.138.125.0/24 maxlen: 24
45.9.171.0/24 maxlen: 24
45.9.170.0/24 maxlen: 24
45.9.169.0/24 maxlen: 24
178.210.236.0/24 maxlen: 24
77.242.144.0/20 maxlen: 20
88.209.192.0/21 maxlen: 24
88.209.208.0/20 maxlen: 24
88.209.225.0/24 maxlen: 24
88.209.224.0/24 maxlen: 24
92.52.219.0/24 maxlen: 24
45.14.10.0/24 maxlen: 24
45.14.8.0/24 maxlen: 24
92.52.212.0/22 maxlen: 24
92.52.210.0/23 maxlen: 23
92.52.209.0/24 maxlen: 24
92.52.208.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:e7:a1:43:cc:3c:6c:d6:5a:42:6a:32:51:a8:ec:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cdaaa0e082360360acda347664eb8314eb11da10
Validity
Not Before: Jan 2 09:54:43 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=57186b3f0970fbcac9e8e4d46e1b727e8d5b96b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:de:59:73:99:dc:61:95:d1:e2:92:cf:55:fd:
88:08:3e:bf:86:d0:bc:f3:10:94:fd:13:6b:e8:f2:
f1:fc:d6:dc:07:47:14:4f:f4:09:dc:d1:2c:e0:72:
73:eb:4a:1d:d1:e3:c8:62:5f:e8:0d:53:f9:19:d5:
bf:c1:58:ca:3a:ad:fb:96:6e:ed:5c:13:46:94:c0:
ae:62:27:44:37:47:e7:84:ac:cb:32:b2:66:b3:35:
78:2e:bc:94:fb:08:7e:46:c4:84:d8:11:d8:78:50:
26:e2:c2:39:53:aa:b3:bc:7d:c3:8d:26:45:f6:e8:
b7:3b:9d:b2:21:dd:4b:af:88:bc:e6:16:db:50:b4:
18:2b:d0:e0:b5:17:61:73:db:5c:90:ee:b7:a3:5f:
bd:a7:ef:0f:fe:56:d6:f6:51:2c:ea:33:6d:48:d4:
f7:46:ae:f4:e1:82:52:3f:b3:2c:95:64:62:e5:da:
22:ea:d4:58:85:90:54:25:e9:76:25:92:79:c1:af:
c0:20:34:7d:e5:10:9e:87:cc:78:55:77:ae:0a:e3:
86:0a:af:aa:be:cc:56:51:4c:cc:8a:e7:ac:ca:75:
40:5d:aa:a2:18:7e:1b:eb:4e:48:1c:52:1c:55:00:
ae:4b:bf:81:d2:cc:24:66:f8:fe:31:0d:c9:29:fd:
b7:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:18:6B:3F:09:70:FB:CA:C9:E8:E4:D4:6E:1B:72:7E:8D:5B:96:B4
X509v3 Authority Key Identifier:
keyid:CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/VxhrPwlw-8rJ6OTUbhtyfo1blrQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.9.169.0-45.9.171.255
45.14.8.0/24
45.14.10.0/24
77.242.144.0/20
88.209.192.0/21
88.209.208.0-88.209.225.255
92.52.208.0/21
92.52.219.0/24
178.210.224.0/21
178.210.236.0/24
178.248.200.0/21
193.138.125.0/24
Signature Algorithm: sha256WithRSAEncryption
71:5a:2b:2d:25:0d:da:fc:be:3c:ab:78:1f:87:21:20:fb:a0:
8d:db:07:c6:76:64:ed:b1:8b:0b:9a:7d:15:1e:18:4e:3b:fa:
bb:43:04:b6:48:4a:96:cc:3c:90:a1:c7:fb:11:6d:62:8d:2f:
6a:04:98:7e:70:b7:b4:ce:00:31:5f:bf:33:e2:e4:3e:d0:c1:
f0:92:9a:a6:f0:a3:66:72:f2:c4:34:f0:84:74:38:c1:a0:95:
25:a7:c5:df:97:03:26:84:44:11:8c:3a:f7:09:f9:a4:32:45:
2c:d5:dd:7d:b7:cf:bf:5b:c2:58:5c:d0:6a:e1:56:00:b8:9f:
74:c9:19:03:be:90:2e:57:a2:38:ab:ff:f0:3c:f0:88:56:ca:
a6:45:0d:0b:26:18:36:e8:32:a2:22:66:dc:0c:c0:af:4b:26:
f3:4e:25:a8:d7:29:55:f6:69:e5:d2:cf:34:99:44:b9:ab:b5:
64:3b:f4:49:b9:25:52:0e:df:2b:76:be:27:7e:a4:9e:21:78:
c4:03:61:73:0c:97:45:45:21:32:6a:ef:f2:1f:ce:6f:e1:4e:
15:18:f3:49:20:85:a6:db:8e:e8:7a:2e:a5:e9:e9:d9:27:71:
14:3f:d5:b0:85:ed:be:fd:20:fb:1f:d5:f8:d0:b0:48:55:3c:
af:a8:96:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:47:56 2024 by rpki-client on console-ams.rpki-client.org