Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/YlDygkgQgUkKufKq3IquCsdhfbo.roa
File: YlDygkgQgUkKufKq3IquCsdhfbo.roa (raw, json)
Hash identifier: y5pIM7Kazi1O3ra4UO7p0lcVQ1dr2wickCiTE5W7hDo=
Subject key identifier: 62:50:F2:82:48:10:81:49:0A:B9:F2:AA:DC:8A:AE:0A:C7:61:7D:BA
Certificate issuer: /CN=cdaaa0e082360360acda347664eb8314eb11da10
Certificate serial: 01870D53C715BBAB437753F2E887025EC187
Authority key identifier: CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/YlDygkgQgUkKufKq3IquCsdhfbo.roa
Signing time: Thu 23 Mar 2023 07:16:46 +0000
ROA not before: Thu 23 Mar 2023 07:16:46 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 211619
IP address blocks: 88.209.228.0/24 maxlen: 24
88.209.236.0/22 maxlen: 22
88.209.246.0/23 maxlen: 23
88.209.253.0/24 maxlen: 24
88.209.254.0/24 maxlen: 24
83.137.159.0/24 maxlen: 24
83.137.157.0/24 maxlen: 24
83.137.153.0/24 maxlen: 24
178.210.232.0/24 maxlen: 24
178.210.233.0/24 maxlen: 24
178.210.237.0/24 maxlen: 24
178.210.234.0/24 maxlen: 24
178.210.235.0/24 maxlen: 24
45.9.168.0/24 maxlen: 24
77.242.152.0/22 maxlen: 24
92.52.218.0/24 maxlen: 24
194.41.47.0/24 maxlen: 24
88.151.62.0/24 maxlen: 24
5.182.112.0/24 maxlen: 24
45.14.9.0/24 maxlen: 24
5.182.115.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:0d:53:c7:15:bb:ab:43:77:53:f2:e8:87:02:5e:c1:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cdaaa0e082360360acda347664eb8314eb11da10
Validity
Not Before: Mar 23 07:16:46 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6250f282481081490ab9f2aadc8aae0ac7617dba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:3a:0e:8d:dc:0f:e1:21:38:0a:e6:d7:8d:51:
a4:a5:67:66:91:16:e3:b4:bd:30:50:01:2a:5d:79:
1e:5d:f1:61:ad:a6:a0:d6:11:d9:b9:6c:47:cd:f6:
65:e8:34:4e:8b:a7:6e:fb:55:25:42:5e:a0:c7:11:
3a:e9:67:fb:86:53:95:e8:7d:8e:a5:7e:d9:1a:c1:
f2:63:ef:6d:f0:ec:7a:83:26:3c:99:64:9b:3e:60:
ff:97:b8:df:f8:df:04:1d:7a:a4:06:ce:86:15:bc:
0e:1d:c9:38:22:a7:22:1a:8a:ec:3b:0c:53:71:97:
f2:f2:ee:2c:7f:85:42:0c:a9:1d:55:c1:a9:a7:52:
6f:7d:57:49:f7:2b:81:d0:72:4f:94:d5:77:4e:ed:
02:ba:85:aa:eb:e4:de:d7:f5:76:27:37:0a:7a:1c:
c0:d0:e9:a5:55:58:ec:12:73:6b:96:a7:86:2a:58:
a2:93:26:f4:91:8d:8c:0a:d3:a1:b7:40:86:f6:8d:
d1:d4:c9:09:d5:6d:8d:d5:93:12:02:48:5c:2e:c7:
93:bf:ab:ea:c7:d3:71:ea:62:b1:ed:09:f2:e2:b5:
73:f9:91:f2:16:8a:1b:fb:cf:24:93:3c:78:f0:51:
e6:fe:6e:e0:f5:d4:ba:2e:de:bd:97:a4:49:53:30:
48:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:50:F2:82:48:10:81:49:0A:B9:F2:AA:DC:8A:AE:0A:C7:61:7D:BA
X509v3 Authority Key Identifier:
keyid:CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/YlDygkgQgUkKufKq3IquCsdhfbo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.182.112.0/24
5.182.115.0/24
45.9.168.0/24
45.14.9.0/24
77.242.152.0/22
83.137.153.0/24
83.137.157.0/24
83.137.159.0/24
88.151.62.0/24
88.209.228.0/24
88.209.236.0/22
88.209.246.0/23
88.209.253.0-88.209.254.255
92.52.218.0/24
178.210.232.0/22
178.210.237.0/24
194.41.47.0/24
Signature Algorithm: sha256WithRSAEncryption
67:d9:20:d5:dd:b7:15:8b:24:2a:df:51:d3:63:eb:1c:fd:67:
72:dc:49:a5:79:57:70:c6:92:7b:3a:27:69:53:32:07:a8:1f:
04:2b:46:74:ce:d9:51:9e:f4:03:7a:9f:ac:63:10:6a:73:62:
ca:ab:1c:09:60:35:dc:03:9d:ef:52:ca:5e:cf:72:6d:f5:b8:
78:c3:6c:c2:e6:68:e7:4f:d4:de:78:3e:86:63:44:0a:2a:30:
87:32:75:55:01:1c:de:33:70:31:d7:58:38:87:ed:26:0a:6f:
9f:35:ed:7a:24:57:3a:0c:ae:25:a7:a6:a4:d1:c9:63:3e:c3:
48:9d:0b:59:31:75:c1:31:a7:a7:9b:89:7b:93:a5:d8:ab:6f:
4a:5c:d1:99:f4:1e:7d:36:1c:fa:ad:04:08:be:d0:14:63:c1:
e4:ce:83:f0:1d:17:46:be:b0:13:90:84:60:bf:a5:7a:fa:e0:
c4:15:88:de:30:37:cf:c4:d5:c5:4c:75:45:d9:ad:2d:e6:83:
9d:0f:ce:40:9c:f7:03:c2:9a:1c:1e:d9:6b:47:5a:02:42:38:
37:6f:41:79:b8:e4:b5:ac:15:02:55:7a:b2:51:e9:64:82:a6:
04:40:d1:93:18:3b:7b:c9:55:5e:c4:6e:47:15:b3:a1:91:8d:
53:8d:34:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:47:56 2024 by rpki-client on console-ams.rpki-client.org