Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/cvECU9TwFrfZPPexjvMC_3PS0Jc.roa
File: cvECU9TwFrfZPPexjvMC_3PS0Jc.roa (raw, json)
Hash identifier: Ze3fF2fGF0OLQUOXJfwhh13W/QQJ4DRvaTbkmtA+Hno=
Subject key identifier: 72:F1:02:53:D4:F0:16:B7:D9:3C:F7:B1:8E:F3:02:FF:73:D2:D0:97
Certificate issuer: /CN=cdaaa0e082360360acda347664eb8314eb11da10
Certificate serial: 018954C2FB5E31D29FF9A3A25A66C0058866
Authority key identifier: CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/cvECU9TwFrfZPPexjvMC_3PS0Jc.roa
Signing time: Fri 14 Jul 2023 14:16:51 +0000
ROA not before: Fri 14 Jul 2023 14:16:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 88.209.230.0/24 maxlen: 24
88.209.255.0/24 maxlen: 24
178.210.230.0/24 maxlen: 24
88.151.58.0/24 maxlen: 24
88.151.56.0/23 maxlen: 24
88.209.195.0/24 maxlen: 24
2.58.168.0/24 maxlen: 24
5.182.113.0/24 maxlen: 24
88.209.211.0/24 maxlen: 24
88.209.221.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:54:c2:fb:5e:31:d2:9f:f9:a3:a2:5a:66:c0:05:88:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cdaaa0e082360360acda347664eb8314eb11da10
Validity
Not Before: Jul 14 14:16:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=72f10253d4f016b7d93cf7b18ef302ff73d2d097
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:a5:2c:6b:8d:c0:1d:a9:59:48:71:45:af:29:
72:8c:e5:21:6d:94:a5:f2:0f:ab:e0:4c:4b:f1:78:
7c:2d:51:06:70:26:bb:d3:c7:d6:4e:b5:0c:87:f4:
40:bb:16:33:87:91:76:d7:cc:d7:fd:ed:38:df:cf:
fe:58:dc:11:ec:53:04:64:6e:77:db:c3:91:4e:e9:
ea:78:d6:91:79:8f:5a:67:98:10:0c:74:6d:ea:92:
ee:2e:4e:5b:2f:3c:3c:71:01:c9:12:1c:e7:31:09:
b0:2c:f9:93:ab:ef:6a:18:8f:68:96:71:76:14:73:
52:7e:5b:dd:64:c5:f3:73:73:33:a0:f5:64:1e:07:
00:77:76:a3:a7:23:e1:63:75:11:2d:5d:15:c4:cc:
0e:57:53:7e:c6:9d:6e:d4:de:05:a0:7a:d3:54:9e:
23:eb:a0:20:9b:92:2a:66:1a:38:c4:2c:81:f2:6a:
98:1c:cc:af:a5:ce:0c:9a:19:e3:1d:53:4a:36:97:
98:a0:a8:19:8b:08:04:92:70:f5:70:d6:de:96:2f:
2f:49:06:55:12:85:d6:8d:b7:de:07:d9:34:ef:b0:
32:0a:19:96:ea:cc:19:1d:c1:a2:1b:e9:57:73:c1:
da:26:3f:0c:ee:13:b5:42:c1:e3:df:de:ad:e0:00:
f5:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:F1:02:53:D4:F0:16:B7:D9:3C:F7:B1:8E:F3:02:FF:73:D2:D0:97
X509v3 Authority Key Identifier:
keyid:CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/cvECU9TwFrfZPPexjvMC_3PS0Jc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.58.168.0/24
5.182.113.0/24
88.151.56.0-88.151.58.255
88.209.195.0/24
88.209.211.0/24
88.209.221.0/24
88.209.230.0/24
88.209.255.0/24
178.210.230.0/24
Signature Algorithm: sha256WithRSAEncryption
7e:96:de:5a:05:8e:f8:0f:93:ca:4c:17:d8:15:47:aa:59:5b:
93:91:32:65:82:8a:b9:4b:ae:19:b7:d0:18:d0:d8:d2:b7:63:
e1:31:fa:e4:ba:4c:72:4a:5c:33:0e:d6:72:12:97:82:79:f3:
42:97:b2:04:e6:92:92:1b:42:2c:f8:02:be:fa:79:29:d9:8e:
d6:0f:1f:3f:b6:51:b2:a4:5a:72:5e:c4:ba:ff:7e:1f:ad:81:
b5:f4:41:47:33:9c:9f:6c:e5:cc:67:b7:27:d7:3b:42:b5:87:
a4:40:9d:b6:af:29:ac:40:ac:fb:80:bb:91:35:da:d9:09:9a:
f8:fb:3e:a1:61:e9:c9:14:7c:28:a5:db:bb:65:0f:5d:28:80:
14:b1:1c:cf:28:dd:23:16:15:51:07:9e:93:2e:24:47:b5:86:
34:fb:34:67:fa:98:16:aa:7f:8d:5a:29:c0:57:b6:c3:73:e8:
04:ab:99:70:ee:5f:1b:d1:c4:1f:97:d8:2d:c0:6b:af:d4:82:
5c:f9:5c:9e:76:f7:d1:99:73:ae:07:a4:1a:17:40:fe:77:b2:
96:d1:89:9d:37:1e:54:46:f9:f9:b8:7d:94:d2:ee:46:38:f3:
d1:74:96:a2:02:37:6d:71:6d:17:72:b3:35:61:6a:ca:c9:b4:
49:b9:84:35
-----BEGIN CERTIFICATE-----
MIIFNTCCBB2gAwIBAgISAYlUwvteMdKf+aOiWmbABYhmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNkYWFhMGUwODIzNjAzNjBhY2RhMzQ3NjY0ZWI4MzE0ZWIx
MWRhMTAwHhcNMjMwNzE0MTQxNjUxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3MmYxMDI1M2Q0ZjAxNmI3ZDkzY2Y3YjE4ZWYzMDJmZjczZDJkMDk3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu6Usa43AHalZSHFFrylyjOUhbZSl
8g+r4ExL8Xh8LVEGcCa708fWTrUMh/RAuxYzh5F218zX/e0438/+WNwR7FMEZG53
28ORTunqeNaReY9aZ5gQDHRt6pLuLk5bLzw8cQHJEhznMQmwLPmTq+9qGI9olnF2
FHNSflvdZMXzc3MzoPVkHgcAd3ajpyPhY3URLV0VxMwOV1N+xp1u1N4FoHrTVJ4j
66Agm5IqZho4xCyB8mqYHMyvpc4MmhnjHVNKNpeYoKgZiwgEknD1cNbeli8vSQZV
EoXWjbfeB9k077AyChmW6swZHcGiG+lXc8HaJj8M7hO1QsHj396t4AD10wIDAQAB
o4ICQTCCAj0wHQYDVR0OBBYEFHLxAlPU8Ba32Tz3sY7zAv9z0tCXMB8GA1UdIwQY
MBaAFM2qoOCCNgNgrNo0dmTrgxTrEdoQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvemFxZzRJSTJBMkNzMmpSMlpPdURGT3NSMmhBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZC81ODkxMjctMTA5Ni00YzkxLTk2Y2Mt
N2U0ZDZmNmY2ZTY2LzEvY3ZFQ1U5VHdGcmZaUFBleGp2TUNfM1BTMEpjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZC81ODkxMjctMTA5Ni00YzkxLTk2Y2MtN2U0ZDZmNmY2ZTY2
LzEvemFxZzRJSTJBMkNzMmpSMlpPdURGT3NSMmhBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMFcGCCsGAQUFBwEHAQH/BEgwRjBEBAIAATA+AwQAAjqoAwQA
BbZxMAwDBANYlzgDBABYlzoDBABY0cMDBABY0dMDBABY0d0DBABY0eYDBABY0f8D
BACy0uYwDQYJKoZIhvcNAQELBQADggEBAH6W3loFjvgPk8pMF9gVR6pZW5ORMmWC
irlLrhm30BjQ2NK3Y+Ex+uS6THJKXDMO1nISl4J580KXsgTmkpIbQiz4Ar76eSnZ
jtYPHz+2UbKkWnJexLr/fh+tgbX0QUcznJ9s5cxntyfXO0K1h6RAnbavKaxArPuA
u5E12tkJmvj7PqFh6ckUfCil27tlD10ogBSxHM8o3SMWFVEHnpMuJEe1hjT7NGf6
mBaqf41aKcBXtsNz6ASrmXDuXxvRxB+X2C3Aa6/Uglz5XJ5299GZc64HpBoXQP53
spbRiZ03HlRG+fm4fZTS7kY489F0lqICN21xbRdyszVhasrJtEm5hDU=
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:47:56 2024 by rpki-client on console-ams.rpki-client.org