Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/dOFmaEh8knQgba-iMDa_h3udMMc.roa
File: dOFmaEh8knQgba-iMDa_h3udMMc.roa (raw, json)
Hash identifier: OUA/IsS3prPXzQS/ELOpfuOsbq5c4MgFevXdGHvy3qk=
Subject key identifier: 74:E1:66:68:48:7C:92:74:20:6D:AF:A2:30:36:BF:87:7B:9D:30:C7
Certificate issuer: /CN=cdaaa0e082360360acda347664eb8314eb11da10
Certificate serial: 018ECDB2BE2D00B9F87A2E34CE826459E915
Authority key identifier: CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/dOFmaEh8knQgba-iMDa_h3udMMc.roa
Signing time: Thu 11 Apr 2024 15:07:07 +0000
ROA not before: Thu 11 Apr 2024 15:07:07 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 42864
IP address blocks: 45.9.169.0/24 maxlen: 24
45.9.170.0/24 maxlen: 24
45.9.171.0/24 maxlen: 24
45.14.10.0/24 maxlen: 24
45.14.11.0/24 maxlen: 24
45.88.93.0/24 maxlen: 24
77.242.144.0/22 maxlen: 24
77.242.148.0/24 maxlen: 24
77.242.151.0/24 maxlen: 24
88.209.193.0/24 maxlen: 24
88.209.196.0/24 maxlen: 24
88.209.208.0/24 maxlen: 24
88.209.210.0/24 maxlen: 24
88.209.212.0/24 maxlen: 24
88.209.213.0/24 maxlen: 24
88.209.214.0/24 maxlen: 24
88.209.215.0/24 maxlen: 24
88.209.246.0/24 maxlen: 24
88.209.247.0/24 maxlen: 24
92.52.208.0/24 maxlen: 24
92.52.209.0/24 maxlen: 24
92.52.210.0/23 maxlen: 23
92.52.212.0/22 maxlen: 24
92.52.215.0/24 maxlen: 24
92.52.219.0/24 maxlen: 24
178.210.224.0/24 maxlen: 24
178.210.225.0/24 maxlen: 24
178.210.226.0/23 maxlen: 23
178.210.228.0/22 maxlen: 24
178.210.232.0/22 maxlen: 22
178.210.236.0/24 maxlen: 24
178.210.237.0/24 maxlen: 24
178.210.240.0/22 maxlen: 22
178.210.244.0/22 maxlen: 22
178.210.248.0/24 maxlen: 24
178.210.249.0/24 maxlen: 24
178.210.250.0/24 maxlen: 24
178.210.251.0/24 maxlen: 24
178.210.252.0/22 maxlen: 22
178.248.200.0/21 maxlen: 21
193.138.125.0/24 maxlen: 24
2a00:1f40::/29 maxlen: 29
2a05:f5c0::/29 maxlen: 29
2a05:f5c0::/32 maxlen: 32
2a0c:f1c0::/29 maxlen: 29
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:cd:b2:be:2d:00:b9:f8:7a:2e:34:ce:82:64:59:e9:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cdaaa0e082360360acda347664eb8314eb11da10
Validity
Not Before: Apr 11 15:07:07 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=74e16668487c9274206dafa23036bf877b9d30c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:cb:e7:21:8e:f0:e2:e9:3c:c1:cf:cb:3c:49:
42:52:30:c9:48:e3:dc:ab:b7:72:ad:c2:47:e9:8b:
a2:26:64:a2:6a:67:71:89:cc:96:5d:88:f2:8a:40:
98:05:5d:e9:08:e9:11:74:b7:fd:70:cc:95:16:52:
f3:30:68:9d:3b:3a:ca:77:b6:98:eb:d9:31:98:53:
17:8f:80:ce:c1:f3:73:7f:51:00:e4:57:9a:20:2b:
20:fa:d6:3b:d4:b7:a8:91:e6:97:f1:5f:7a:0b:40:
34:31:a6:29:9f:ef:63:9d:63:ce:e0:05:ed:0b:49:
fc:49:ae:57:a8:83:e6:52:55:d6:1e:f4:8e:e3:2c:
79:89:ef:75:5f:f3:67:83:12:bf:92:33:fd:b1:46:
d0:74:1c:b6:7e:a5:99:23:d6:fb:7d:46:ec:62:45:
e9:7e:e7:f8:a8:b5:36:e3:b5:1f:f2:4b:ec:55:4a:
17:8d:4e:d3:24:9c:5d:0d:20:f5:bb:f3:89:a6:66:
8a:0f:44:e1:ae:97:77:97:60:3d:75:9d:2c:73:68:
3c:c1:1e:65:fa:10:fa:8e:84:ac:ad:f5:e2:26:89:
09:43:13:25:87:4d:14:fd:10:49:cc:78:a6:8e:05:
68:ab:ba:45:da:ee:c6:4c:c1:46:62:6d:ec:57:af:
68:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:E1:66:68:48:7C:92:74:20:6D:AF:A2:30:36:BF:87:7B:9D:30:C7
X509v3 Authority Key Identifier:
keyid:CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/dOFmaEh8knQgba-iMDa_h3udMMc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.9.169.0-45.9.171.255
45.14.10.0/23
45.88.93.0/24
77.242.144.0-77.242.148.255
77.242.151.0/24
88.209.193.0/24
88.209.196.0/24
88.209.208.0/24
88.209.210.0/24
88.209.212.0/22
88.209.246.0/23
92.52.208.0/21
92.52.219.0/24
178.210.224.0-178.210.237.255
178.210.240.0/20
178.248.200.0/21
193.138.125.0/24
IPv6:
2a00:1f40::/29
2a05:f5c0::/29
2a0c:f1c0::/29
Signature Algorithm: sha256WithRSAEncryption
56:76:20:5a:66:61:b7:d5:b2:14:19:ab:39:10:01:4d:53:83:
f6:b4:a0:f8:1e:fc:e8:b3:b9:cd:7b:71:e5:d8:c8:29:87:9a:
4f:74:af:a4:56:43:f3:46:3c:13:0c:97:3c:e3:23:3d:7a:b6:
df:b7:90:db:88:33:2e:95:6a:d4:51:ef:13:fa:ef:50:05:5c:
56:a0:a2:d2:13:b4:46:21:d6:56:31:d6:6b:d4:3e:12:9d:31:
41:e8:3f:41:52:51:b4:dc:e3:2f:5f:b6:fb:99:2f:9f:94:92:
14:74:56:f2:60:88:06:32:46:4e:66:36:e8:78:32:28:3a:25:
74:ec:89:d8:73:ea:ca:1c:b9:f6:7c:43:25:80:e5:5a:38:db:
de:20:01:b3:9c:5a:37:b3:b2:6d:cb:0b:bd:8a:5a:62:82:e4:
78:94:3f:92:b8:bd:af:df:f0:a8:8a:3e:b4:a8:08:fe:a4:cb:
ae:13:77:e2:68:c0:b8:58:09:5a:6d:fc:e7:3a:70:3d:38:94:
48:ed:17:d4:11:ca:69:ff:09:07:64:02:7b:73:32:71:56:95:
60:25:82:be:e4:f0:c9:b1:22:84:46:97:fc:16:a5:8b:03:54:
06:b9:95:24:a9:ac:aa:57:3c:8e:29:24:3c:39:bb:de:bb:dc:
59:dc:3c:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:47:56 2024 by rpki-client on console-ams.rpki-client.org