Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/WbvqLnrsyGCtgPm0ZPjRhZwyG14.roa
File: WbvqLnrsyGCtgPm0ZPjRhZwyG14.roa (raw, json)
Hash identifier: n1dnKrIIS0P9DiblVgxhwe7z9YdukC0pwIP2IQ9koWs=
Subject key identifier: 59:BB:EA:2E:7A:EC:C8:60:AD:80:F9:B4:64:F8:D1:85:9C:32:1B:5E
Certificate issuer: /CN=cdaaa0e082360360acda347664eb8314eb11da10
Certificate serial: 018B22D0420FD00D908BF126AD329BFE6546
Authority key identifier: CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/WbvqLnrsyGCtgPm0ZPjRhZwyG14.roa
Signing time: Thu 12 Oct 2023 07:35:55 +0000
ROA not before: Thu 12 Oct 2023 07:35:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 88.209.253.0/24 maxlen: 24
178.210.228.0/24 maxlen: 24
88.151.56.0/23 maxlen: 24
88.151.62.0/24 maxlen: 24
88.209.200.0/24 maxlen: 24
88.209.211.0/24 maxlen: 24
88.209.217.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:22:d0:42:0f:d0:0d:90:8b:f1:26:ad:32:9b:fe:65:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cdaaa0e082360360acda347664eb8314eb11da10
Validity
Not Before: Oct 12 07:35:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=59bbea2e7aecc860ad80f9b464f8d1859c321b5e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:04:aa:cc:1c:3c:0d:5d:78:bf:ad:2b:83:06:
7c:4f:3d:87:74:55:d0:8e:fa:77:48:6c:be:12:62:
95:6a:44:65:fe:62:98:55:28:0b:d2:fa:bd:ae:b3:
b6:e9:dc:6d:61:71:c9:57:66:70:9e:75:75:e8:0f:
c6:08:f6:e5:b5:51:d6:ff:35:e8:0b:6d:1f:4d:66:
e4:0b:75:c7:44:16:ee:c8:e9:d2:0e:d4:53:53:35:
6d:d0:59:5b:8d:0b:35:97:7c:16:2b:66:e4:f9:9e:
f2:8c:73:5c:5e:f5:f4:cb:be:71:01:98:f6:1b:34:
6d:81:36:ff:07:95:13:ce:11:33:0b:1a:69:30:6c:
c2:e3:49:11:70:5a:13:80:c9:37:06:c8:64:1b:36:
87:35:5c:4e:c4:a1:fe:2b:f4:ba:60:db:e6:2d:16:
c8:dd:e4:d6:b9:a7:c5:38:9e:ba:80:47:a8:b6:bb:
d4:5f:36:e5:6a:d4:6d:52:83:5c:ff:f4:4c:f7:0f:
ab:e8:16:c4:82:a4:96:fd:51:0b:f9:a6:f9:7a:a2:
0f:d5:29:f9:8e:48:19:18:b9:c0:69:12:ea:54:80:
91:04:3e:7b:8d:4c:a1:a4:38:d6:08:57:81:4b:c9:
3f:14:ff:28:63:f3:02:a7:d7:94:12:37:52:da:e0:
1f:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:BB:EA:2E:7A:EC:C8:60:AD:80:F9:B4:64:F8:D1:85:9C:32:1B:5E
X509v3 Authority Key Identifier:
keyid:CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/WbvqLnrsyGCtgPm0ZPjRhZwyG14.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.151.56.0/23
88.151.62.0/24
88.209.200.0/24
88.209.211.0/24
88.209.217.0/24
88.209.253.0/24
178.210.228.0/24
Signature Algorithm: sha256WithRSAEncryption
5b:14:7d:37:0d:b4:85:3a:ad:4f:7f:c3:69:4c:3f:25:a3:98:
db:ce:bd:d9:b8:d8:2a:8d:e8:54:49:74:98:0c:87:1c:23:f9:
76:55:c4:88:00:77:25:d8:bf:0a:df:ab:4f:d9:e7:6d:cd:57:
7a:cc:9c:03:38:08:95:74:d4:da:71:5a:6f:57:ea:00:54:bf:
f7:67:21:9c:95:0b:09:cb:99:c6:eb:13:2d:6d:97:7c:b4:fb:
a1:45:90:60:54:5a:ef:b0:a0:fa:95:9d:1f:d7:6d:c5:47:bb:
06:58:19:17:18:58:a4:16:7a:60:1b:85:a3:93:bb:a0:30:9e:
6c:0f:cb:fd:b2:5c:fa:29:68:df:38:03:a1:ef:46:ff:75:1f:
13:9d:21:98:25:06:ea:de:ff:c5:47:58:ef:9d:63:8c:8b:7f:
1f:59:82:be:33:7d:07:75:60:3a:fe:b1:51:19:cd:04:5b:11:
b9:02:ca:c3:13:13:ca:9f:9a:48:0a:3d:54:bc:d9:57:b6:27:
7d:ad:fb:57:89:65:18:ff:84:3d:32:8d:c3:3c:0e:52:ac:c6:
ef:81:b4:e3:a9:e3:df:db:a2:2c:7b:50:1c:3e:80:d2:d1:f6:
93:6a:dc:08:20:a0:e5:c3:43:72:5e:37:81:b8:3e:1e:bb:49:
17:ca:83:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:47:56 2024 by rpki-client on console-ams.rpki-client.org