Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/ebVwKn8AMy3dVo931uiJ_5omth4.roa
File: ebVwKn8AMy3dVo931uiJ_5omth4.roa (raw, json)
Hash identifier: XMSIcfONz1MC47Dy8u/s3geFwRt33vLmmZbDajUOg7Y=
Subject key identifier: 79:B5:70:2A:7F:00:33:2D:DD:56:8F:77:D6:E8:89:FF:9A:26:B6:1E
Certificate issuer: /CN=cdaaa0e082360360acda347664eb8314eb11da10
Certificate serial: 018CB1308D8F4A283687848FC32D006847E6
Authority key identifier: CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/ebVwKn8AMy3dVo931uiJ_5omth4.roa
Signing time: Thu 28 Dec 2023 16:09:58 +0000
ROA not before: Thu 28 Dec 2023 16:09:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 211619
IP address blocks: 88.209.228.0/24 maxlen: 24
88.209.239.0/24 maxlen: 24
88.209.236.0/24 maxlen: 24
88.209.236.0/22 maxlen: 22
88.209.237.0/24 maxlen: 24
88.209.238.0/24 maxlen: 24
88.209.246.0/23 maxlen: 24
88.209.254.0/24 maxlen: 24
83.137.157.0/24 maxlen: 24
83.137.158.0/24 maxlen: 24
83.137.153.0/24 maxlen: 24
178.210.232.0/24 maxlen: 24
178.210.229.0/24 maxlen: 24
45.9.168.0/24 maxlen: 24
77.242.152.0/22 maxlen: 24
88.209.219.0/24 maxlen: 24
92.52.217.0/24 maxlen: 24
194.41.47.0/24 maxlen: 24
5.182.112.0/24 maxlen: 24
5.182.115.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:b1:30:8d:8f:4a:28:36:87:84:8f:c3:2d:00:68:47:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cdaaa0e082360360acda347664eb8314eb11da10
Validity
Not Before: Dec 28 16:09:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=79b5702a7f00332ddd568f77d6e889ff9a26b61e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:93:88:d5:51:fc:33:19:c2:d0:3f:83:3a:f6:
00:d9:88:4a:59:36:4a:a4:3a:3f:b5:e0:0c:30:8f:
75:a2:05:c0:c9:84:ff:1e:3d:35:c3:51:58:2d:8c:
bf:c9:eb:30:f6:d7:04:39:04:95:1a:83:8d:fe:4c:
f0:7e:da:22:47:02:57:0a:3a:55:78:eb:f0:51:37:
34:cd:67:7d:a0:f4:a4:d7:24:f3:fc:0d:43:00:1d:
1e:4d:a3:96:5a:db:96:6a:3e:ff:c4:fc:b6:7e:22:
43:85:33:49:f7:64:c9:6b:fb:27:f8:5d:ec:02:36:
28:71:b8:4a:44:c3:c1:89:4b:c2:2a:6e:df:32:48:
ec:f8:bf:60:4f:8d:ef:95:81:ef:d7:0e:19:c4:e9:
84:4f:2b:03:79:e5:12:22:57:5e:82:a7:27:b6:1f:
a2:cb:82:08:cd:59:3d:cd:e1:7e:49:ac:5d:83:5e:
54:13:e7:e9:58:e8:cf:dc:71:f9:fd:99:19:d0:65:
1a:02:fa:23:6b:1a:9f:ee:81:f9:20:44:6a:b4:9f:
32:2d:cb:19:18:72:dd:72:36:f0:c9:e7:21:b5:eb:
92:82:a9:ee:01:af:cc:fb:ff:e3:11:01:26:4d:28:
eb:4c:0f:0b:5a:20:bc:04:22:89:64:fe:23:23:0a:
db:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:B5:70:2A:7F:00:33:2D:DD:56:8F:77:D6:E8:89:FF:9A:26:B6:1E
X509v3 Authority Key Identifier:
keyid:CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/ebVwKn8AMy3dVo931uiJ_5omth4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.182.112.0/24
5.182.115.0/24
45.9.168.0/24
77.242.152.0/22
83.137.153.0/24
83.137.157.0-83.137.158.255
88.209.219.0/24
88.209.228.0/24
88.209.236.0/22
88.209.246.0/23
88.209.254.0/24
92.52.217.0/24
178.210.229.0/24
178.210.232.0/24
194.41.47.0/24
Signature Algorithm: sha256WithRSAEncryption
49:d3:6d:87:ad:fd:3a:44:8a:ce:38:d1:aa:66:6a:35:b3:b4:
3f:82:13:2a:3a:14:c0:63:b4:23:3f:a6:78:7d:be:d6:5c:37:
69:c5:0a:65:6f:56:04:05:8b:47:a7:fb:c0:98:c9:11:e9:42:
fe:a1:80:15:e5:70:a2:21:7e:b9:fa:46:79:93:eb:05:77:f4:
19:46:7e:9d:98:ad:55:57:bd:b3:83:e7:a8:c5:5e:b8:22:4c:
34:95:d6:c1:47:3c:21:1d:46:bb:3f:ae:03:a7:bc:a9:e2:f0:
26:35:e7:15:11:aa:68:7a:1b:71:fd:96:07:d5:1b:0d:36:14:
57:a4:09:c3:ac:1b:fd:c9:a4:10:e9:b7:6e:32:93:66:3b:78:
48:54:ea:a1:3c:05:3b:49:9a:b5:24:6a:94:8f:e5:ee:67:f5:
48:3a:9b:8a:d0:22:32:bc:d2:3e:1d:9d:d9:25:11:11:e5:4f:
02:4c:b1:22:e6:bf:a6:b0:90:ef:72:a6:21:68:1b:fb:06:38:
33:a9:c4:ef:87:1a:60:81:49:98:0b:70:57:49:a4:4a:33:dd:
57:57:db:a2:f3:19:e5:1c:1d:cc:ed:20:a4:45:ed:93:b4:49:
b4:14:5b:17:bb:0b:66:01:fc:8a:0e:63:53:5e:b3:e9:f8:d4:
31:53:f1:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:56:28 2024 by rpki-client on console-fra.rpki-client.org