Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/bCjPZtSoFfYV_o2VyVP7QLWB0bM.roa
File: bCjPZtSoFfYV_o2VyVP7QLWB0bM.roa (raw, json)
Hash identifier: 6cVRmOL8T36HAbsPCod8zc5oVJkg0nXwbOfvrUpcNsc=
Subject key identifier: 6C:28:CF:66:D4:A8:15:F6:15:FE:8D:95:C9:53:FB:40:B5:81:D1:B3
Certificate issuer: /CN=cdaaa0e082360360acda347664eb8314eb11da10
Certificate serial: 018311DABD60234CF9102BF052AB8FD06F51
Authority key identifier: CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/bCjPZtSoFfYV_o2VyVP7QLWB0bM.roa
Signing time: Tue 06 Sep 2022 08:11:31 +0000
ROA not before: Tue 06 Sep 2022 08:11:31 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 834
IP address blocks: 88.209.231.0/24 maxlen: 24
88.209.232.0/22 maxlen: 22
83.137.152.0/24 maxlen: 24
83.137.154.0/23 maxlen: 24
88.209.204.0/24 maxlen: 32
88.209.204.0/22 maxlen: 24
88.209.200.0/22 maxlen: 32
88.209.205.0/24 maxlen: 24
88.209.206.0/24 maxlen: 24
88.209.207.0/24 maxlen: 24
178.210.252.0/24 maxlen: 24
88.151.61.0/24 maxlen: 24
88.151.63.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:11:da:bd:60:23:4c:f9:10:2b:f0:52:ab:8f:d0:6f:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cdaaa0e082360360acda347664eb8314eb11da10
Validity
Not Before: Sep 6 08:11:31 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6c28cf66d4a815f615fe8d95c953fb40b581d1b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:4e:9a:45:af:ff:06:db:e9:a5:80:ac:95:95:
cc:13:d3:99:bf:9d:9b:13:3c:76:76:24:f4:db:8a:
e1:5b:ed:6e:bb:9d:22:95:31:64:55:78:79:76:d3:
b5:37:39:77:cf:10:35:6f:c4:26:38:9d:28:9c:fe:
c9:50:c2:94:c9:3e:89:99:2a:4a:4e:aa:e4:54:0a:
3c:fe:05:49:bb:b8:e2:ce:cb:71:62:b2:c4:1c:62:
44:53:7b:e4:3f:4e:1e:4a:42:d0:c7:91:aa:a8:b8:
28:c6:08:a3:d1:49:73:03:a6:06:a9:57:44:eb:d4:
d4:03:42:21:ac:57:40:cf:7a:87:5a:c8:37:b4:a4:
c2:a9:cf:ca:d4:0c:56:f7:7e:0f:ac:1d:94:80:da:
b5:cd:88:d1:f0:ea:e9:5e:b7:15:e3:fd:d1:c1:47:
e1:ef:8b:5b:a0:b0:ea:d6:85:f2:c7:88:e2:d5:fe:
2d:3f:ce:b9:c0:5a:d8:40:1e:4a:42:e8:3f:3e:e4:
14:36:ed:da:69:d8:ec:99:df:64:6d:ae:cb:bd:b8:
1c:a5:fd:2e:50:4e:59:15:c3:ef:08:33:44:13:b6:
55:e7:1b:e7:17:6f:13:9d:3c:7c:6e:e3:6f:eb:da:
aa:4e:d5:c9:42:02:89:cb:d2:d5:db:be:dd:e8:7e:
95:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:28:CF:66:D4:A8:15:F6:15:FE:8D:95:C9:53:FB:40:B5:81:D1:B3
X509v3 Authority Key Identifier:
keyid:CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/bCjPZtSoFfYV_o2VyVP7QLWB0bM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.137.152.0/24
83.137.154.0/23
88.151.61.0/24
88.151.63.0/24
88.209.200.0/21
88.209.231.0-88.209.235.255
178.210.252.0/24
Signature Algorithm: sha256WithRSAEncryption
59:66:b0:34:d3:09:d3:8d:0e:f6:a4:9e:d0:99:2a:69:66:01:
05:c5:be:c5:4b:3b:23:88:20:a2:89:48:a3:7f:b3:1c:98:5c:
2d:4f:a2:42:e5:9c:56:22:73:12:00:d8:6d:6c:51:de:8e:ef:
05:ba:bc:85:75:83:ea:7f:43:d9:5c:be:d4:76:c7:41:53:c0:
77:53:8d:14:37:68:77:ed:e8:23:a4:37:ad:2d:7d:e6:93:9f:
0d:f8:3e:19:d6:fb:44:de:50:05:72:ce:cb:3b:ea:81:ed:66:
c8:11:c9:ca:39:8b:50:d1:2d:b1:ff:87:aa:03:60:94:6e:5e:
d9:a7:37:12:05:0a:92:d3:48:98:67:82:43:64:be:67:cb:43:
51:6d:8b:5d:84:9c:35:0e:e3:37:78:f9:90:39:cc:c4:e6:80:
39:46:e0:68:62:f1:98:1b:f1:41:8a:17:2d:49:57:ea:d0:59:
3d:ec:fd:ca:8d:1d:96:20:b2:9d:33:e8:d5:d0:1b:a7:e2:39:
eb:f6:14:24:46:0e:ed:46:65:be:bd:66:c6:5e:6a:b5:23:77:
f0:96:59:e2:f5:00:d3:8a:97:55:a9:af:69:19:7b:e4:0f:8c:
21:7b:cd:99:09:18:a6:f2:2e:a3:a5:8b:84:c8:3b:f7:01:0a:
48:14:c1:62
-----BEGIN CERTIFICATE-----
MIIFKTCCBBGgAwIBAgISAYMR2r1gI0z5ECvwUquP0G9RMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNkYWFhMGUwODIzNjAzNjBhY2RhMzQ3NjY0ZWI4MzE0ZWIx
MWRhMTAwHhcNMjIwOTA2MDgxMTMxWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2YzI4Y2Y2NmQ0YTgxNWY2MTVmZThkOTVjOTUzZmI0MGI1ODFkMWIzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgE6aRa//BtvppYCslZXME9OZv52b
Ezx2diT024rhW+1uu50ilTFkVXh5dtO1Nzl3zxA1b8QmOJ0onP7JUMKUyT6JmSpK
TqrkVAo8/gVJu7jizstxYrLEHGJEU3vkP04eSkLQx5GqqLgoxgij0UlzA6YGqVdE
69TUA0IhrFdAz3qHWsg3tKTCqc/K1AxW934PrB2UgNq1zYjR8OrpXrcV4/3RwUfh
74tboLDq1oXyx4ji1f4tP865wFrYQB5KQug/PuQUNu3aadjsmd9kba7Lvbgcpf0u
UE5ZFcPvCDNEE7ZV5xvnF28TnTx8buNv69qqTtXJQgKJy9LV277d6H6VUQIDAQAB
o4ICNTCCAjEwHQYDVR0OBBYEFGwoz2bUqBX2Ff6NlclT+0C1gdGzMB8GA1UdIwQY
MBaAFM2qoOCCNgNgrNo0dmTrgxTrEdoQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvemFxZzRJSTJBMkNzMmpSMlpPdURGT3NSMmhBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZC81ODkxMjctMTA5Ni00YzkxLTk2Y2Mt
N2U0ZDZmNmY2ZTY2LzEvYkNqUFp0U29GZllWX28yVnlWUDdRTFdCMGJNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZC81ODkxMjctMTA5Ni00YzkxLTk2Y2MtN2U0ZDZmNmY2ZTY2
LzEvemFxZzRJSTJBMkNzMmpSMlpPdURGT3NSMmhBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEsGCCsGAQUFBwEHAQH/BDwwOjA4BAIAATAyAwQAU4mYAwQB
U4maAwQAWJc9AwQAWJc/AwQDWNHIMAwDBABY0ecDBAJY0egDBACy0vwwDQYJKoZI
hvcNAQELBQADggEBAFlmsDTTCdONDvakntCZKmlmAQXFvsVLOyOIIKKJSKN/sxyY
XC1PokLlnFYicxIA2G1sUd6O7wW6vIV1g+p/Q9lcvtR2x0FTwHdTjRQ3aHft6COk
N60tfeaTnw34PhnW+0TeUAVyzss76oHtZsgRyco5i1DRLbH/h6oDYJRuXtmnNxIF
CpLTSJhngkNkvmfLQ1Fti12EnDUO4zd4+ZA5zMTmgDlG4Ghi8Zgb8UGKFy1JV+rQ
WT3s/cqNHZYgsp0z6NXQG6fiOev2FCRGDu1GZb69ZsZearUjd/CWWeL1ANOKl1Wp
r2kZe+QPjCF7zZkJGKbyLqOli4TIO/cBCkgUwWI=
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:47:56 2024 by rpki-client on console-ams.rpki-client.org