Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/e0sHsq7e7gBAFrEorCLeLbzau9c.roa
File: e0sHsq7e7gBAFrEorCLeLbzau9c.roa (raw, json)
Hash identifier: pKk7jRP5QuG4ek3Qa+J6l1Tj0Se0KLJyqDE0Us2g+aY=
Subject key identifier: 7B:4B:07:B2:AE:DE:EE:00:40:16:B1:28:AC:22:DE:2D:BC:DA:BB:D7
Certificate issuer: /CN=cdaaa0e082360360acda347664eb8314eb11da10
Certificate serial: 018DCBC18B8F57ADB1FCFE560C68CF787822
Authority key identifier: CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/e0sHsq7e7gBAFrEorCLeLbzau9c.roa
Signing time: Wed 21 Feb 2024 13:01:15 +0000
ROA not before: Wed 21 Feb 2024 13:01:15 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 42864
IP address blocks: 5.182.115.0/24 maxlen: 24
45.9.169.0/24 maxlen: 24
45.9.170.0/24 maxlen: 24
45.9.171.0/24 maxlen: 24
45.14.10.0/24 maxlen: 24
45.14.11.0/24 maxlen: 24
45.88.93.0/24 maxlen: 24
77.242.144.0/22 maxlen: 24
77.242.148.0/24 maxlen: 24
77.242.151.0/24 maxlen: 24
77.242.152.0/22 maxlen: 24
83.137.158.0/24 maxlen: 24
88.209.193.0/24 maxlen: 24
88.209.196.0/24 maxlen: 24
88.209.208.0/24 maxlen: 24
88.209.210.0/24 maxlen: 24
88.209.212.0/24 maxlen: 24
88.209.213.0/24 maxlen: 24
88.209.214.0/24 maxlen: 24
88.209.215.0/24 maxlen: 24
88.209.219.0/24 maxlen: 24
92.52.208.0/24 maxlen: 24
92.52.209.0/24 maxlen: 24
92.52.210.0/23 maxlen: 23
92.52.212.0/22 maxlen: 24
178.210.224.0/24 maxlen: 24
178.210.225.0/24 maxlen: 24
178.210.237.0/24 maxlen: 24
178.210.238.0/23 maxlen: 23
178.210.240.0/22 maxlen: 22
178.210.244.0/22 maxlen: 22
178.210.248.0/24 maxlen: 24
178.210.249.0/24 maxlen: 24
178.210.250.0/24 maxlen: 24
178.210.251.0/24 maxlen: 24
178.210.254.0/23 maxlen: 23
178.248.200.0/21 maxlen: 21
193.138.125.0/24 maxlen: 24
2a00:1f40::/29 maxlen: 29
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:cb:c1:8b:8f:57:ad:b1:fc:fe:56:0c:68:cf:78:78:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cdaaa0e082360360acda347664eb8314eb11da10
Validity
Not Before: Feb 21 13:01:15 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7b4b07b2aedeee004016b128ac22de2dbcdabbd7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:65:f1:c1:89:8e:22:6d:72:d8:ad:54:ba:a0:
1c:ae:2e:57:1e:1e:5d:7d:a2:c8:8d:f5:e2:ba:f1:
92:f1:25:e6:1d:8e:93:0c:3b:ce:20:78:16:66:31:
2e:af:84:d9:ca:4b:b8:56:5b:64:c1:9c:51:91:42:
d3:1d:f4:de:db:76:0d:b4:b5:e5:58:00:77:12:37:
a6:fd:03:dc:7c:ee:14:2f:8b:b1:1f:01:e0:99:4a:
4e:68:82:c9:f4:d3:b0:e0:bb:11:a3:db:dd:29:78:
52:55:17:cd:ae:ee:b9:8b:41:bc:99:15:71:12:58:
a0:28:1e:46:8e:bf:c9:4f:26:30:57:bc:88:e8:8a:
59:ab:87:64:c1:e3:19:39:bb:9e:5c:01:9d:78:48:
1d:ec:d5:ad:d0:4c:5e:03:59:7d:81:a2:6d:fb:1f:
c0:65:36:f4:79:33:75:3f:07:21:da:6c:d2:6e:f7:
d3:3f:15:1b:bb:4b:07:1f:30:29:15:c5:1f:14:b6:
eb:9b:9e:a1:30:45:0e:99:68:b9:ad:21:02:bf:b9:
16:ee:30:fb:ee:3a:03:91:87:69:1d:47:a8:31:c0:
ee:5c:78:e4:0d:99:13:39:e8:f3:22:5d:8f:a0:ce:
b4:c0:53:5b:4d:99:4a:30:82:8e:cd:ef:60:2d:ee:
b0:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:4B:07:B2:AE:DE:EE:00:40:16:B1:28:AC:22:DE:2D:BC:DA:BB:D7
X509v3 Authority Key Identifier:
keyid:CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/e0sHsq7e7gBAFrEorCLeLbzau9c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.182.115.0/24
45.9.169.0-45.9.171.255
45.14.10.0/23
45.88.93.0/24
77.242.144.0-77.242.148.255
77.242.151.0-77.242.155.255
83.137.158.0/24
88.209.193.0/24
88.209.196.0/24
88.209.208.0/24
88.209.210.0/24
88.209.212.0/22
88.209.219.0/24
92.52.208.0/21
178.210.224.0/23
178.210.237.0-178.210.251.255
178.210.254.0/23
178.248.200.0/21
193.138.125.0/24
IPv6:
2a00:1f40::/29
Signature Algorithm: sha256WithRSAEncryption
9b:12:36:2b:8c:6d:62:b3:02:43:49:ea:af:32:2b:11:46:f2:
d0:fc:52:cf:80:c5:a0:0a:40:98:24:94:2b:0e:44:5b:8d:d9:
b7:95:ce:32:17:4d:99:51:b9:c3:1a:72:bb:43:0d:bc:99:eb:
39:a3:46:ef:16:a2:f6:43:5e:7e:52:e0:b6:39:78:93:27:85:
59:da:66:54:82:63:b4:56:67:19:71:10:8c:d4:0f:97:9f:ee:
30:67:83:b7:ce:b4:b5:c0:01:ab:fa:81:23:5b:4a:94:2d:54:
12:47:c8:16:f9:7b:f0:33:71:e4:b3:9d:16:bc:9c:5c:4c:77:
90:89:d2:39:e1:c7:2b:e3:59:c1:50:80:8f:0a:e8:1b:c9:d6:
b6:76:e6:12:c9:fe:82:6b:06:4b:4e:ea:0a:a1:6f:e1:73:0e:
a8:30:0c:b0:b1:2c:63:18:21:7c:f7:9e:0d:9a:21:ba:eb:32:
22:13:0b:8e:40:3f:db:3e:fe:4e:ba:45:b8:21:12:54:59:85:
69:68:ca:3b:99:18:9f:a2:1d:30:35:9c:de:2f:b9:ea:13:f4:
1b:45:ac:56:80:71:cd:ae:f2:e8:d9:6a:57:f8:62:fb:58:c4:
f1:ad:06:c8:64:94:ac:fd:0f:c6:5a:a8:f6:26:42:2e:12:58:
e4:94:e9:c7
-----BEGIN CERTIFICATE-----
MIIFnTCCBIWgAwIBAgISAY3LwYuPV62x/P5WDGjPeHgiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNkYWFhMGUwODIzNjAzNjBhY2RhMzQ3NjY0ZWI4MzE0ZWIx
MWRhMTAwHhcNMjQwMjIxMTMwMTE1WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3YjRiMDdiMmFlZGVlZTAwNDAxNmIxMjhhYzIyZGUyZGJjZGFiYmQ3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtGXxwYmOIm1y2K1UuqAcri5XHh5d
faLIjfXiuvGS8SXmHY6TDDvOIHgWZjEur4TZyku4VltkwZxRkULTHfTe23YNtLXl
WAB3Ejem/QPcfO4UL4uxHwHgmUpOaILJ9NOw4LsRo9vdKXhSVRfNru65i0G8mRVx
EligKB5Gjr/JTyYwV7yI6IpZq4dkweMZObueXAGdeEgd7NWt0ExeA1l9gaJt+x/A
ZTb0eTN1Pwch2mzSbvfTPxUbu0sHHzApFcUfFLbrm56hMEUOmWi5rSECv7kW7jD7
7joDkYdpHUeoMcDuXHjkDZkTOejzIl2PoM60wFNbTZlKMIKOze9gLe6wXQIDAQAB
o4ICqTCCAqUwHQYDVR0OBBYEFHtLB7Ku3u4AQBaxKKwi3i282rvXMB8GA1UdIwQY
MBaAFM2qoOCCNgNgrNo0dmTrgxTrEdoQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvemFxZzRJSTJBMkNzMmpSMlpPdURGT3NSMmhBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZC81ODkxMjctMTA5Ni00YzkxLTk2Y2Mt
N2U0ZDZmNmY2ZTY2LzEvZTBzSHNxN2U3Z0JBRnJFb3JDTGVMYnphdTljLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZC81ODkxMjctMTA5Ni00YzkxLTk2Y2MtN2U0ZDZmNmY2ZTY2
LzEvemFxZzRJSTJBMkNzMmpSMlpPdURGT3NSMmhBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIG+BggrBgEFBQcBBwEB/wSBrjCBqzCBmQQCAAEwgZIDBAAF
tnMwDAMEAC0JqQMEAi0JqAMEAS0OCgMEAC1YXTAMAwQETfKQAwQATfKUMAwDBABN
8pcDBAJN8pgDBABTiZ4DBABY0cEDBABY0cQDBABY0dADBABY0dIDBAJY0dQDBABY
0dsDBANcNNADBAGy0uAwDAMEALLS7QMEArLS+AMEAbLS/gMEA7L4yAMEAMGKfTAN
BAIAAjAHAwUDKgAfQDANBgkqhkiG9w0BAQsFAAOCAQEAmxI2K4xtYrMCQ0nqrzIr
EUby0PxSz4DFoApAmCSUKw5EW43Zt5XOMhdNmVG5wxpyu0MNvJnrOaNG7xai9kNe
flLgtjl4kyeFWdpmVIJjtFZnGXEQjNQPl5/uMGeDt860tcABq/qBI1tKlC1UEkfI
Fvl78DNx5LOdFrycXEx3kInSOeHHK+NZwVCAjwroG8nWtnbmEsn+gmsGS07qCqFv
4XMOqDAMsLEsYxghfPeeDZohuusyIhMLjkA/2z7+TrpFuCESVFmFaWjKO5kYn6Id
MDWc3i+56hP0G0WsVoBxza7y6NlqV/hi+1jE8a0GyGSUrP0Pxlqo9iZCLhJY5JTp
xw==
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:47:56 2024 by rpki-client on console-ams.rpki-client.org