Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/h5sMtgb8qsLidlKPq4OYMCwIqBQ.roa
File: h5sMtgb8qsLidlKPq4OYMCwIqBQ.roa (raw, json)
Hash identifier: 5zwdTTtyRSh1gcaHro6JpYEoZ7wxmpZZSqj0ydbmKNs=
Subject key identifier: 87:9B:0C:B6:06:FC:AA:C2:E2:76:52:8F:AB:83:98:30:2C:08:A8:14
Certificate issuer: /CN=cdaaa0e082360360acda347664eb8314eb11da10
Certificate serial: 018DB2C21B64526702AE5061E6F9A2C166CE
Authority key identifier: CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/h5sMtgb8qsLidlKPq4OYMCwIqBQ.roa
Signing time: Fri 16 Feb 2024 16:31:21 +0000
ROA not before: Fri 16 Feb 2024 16:31:21 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 211619
IP address blocks: 5.182.112.0/24 maxlen: 24
5.182.115.0/24 maxlen: 24
45.9.168.0/24 maxlen: 24
83.137.153.0/24 maxlen: 24
83.137.156.0/24 maxlen: 24
83.137.157.0/24 maxlen: 24
83.137.158.0/24 maxlen: 24
88.209.206.0/24 maxlen: 24
88.209.228.0/24 maxlen: 24
88.209.236.0/22 maxlen: 22
88.209.236.0/24 maxlen: 24
88.209.237.0/24 maxlen: 24
88.209.238.0/24 maxlen: 24
88.209.239.0/24 maxlen: 24
88.209.246.0/24 maxlen: 24
88.209.247.0/24 maxlen: 24
88.209.254.0/24 maxlen: 24
92.52.217.0/24 maxlen: 24
178.210.229.0/24 maxlen: 24
178.210.232.0/24 maxlen: 24
194.41.47.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:b2:c2:1b:64:52:67:02:ae:50:61:e6:f9:a2:c1:66:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cdaaa0e082360360acda347664eb8314eb11da10
Validity
Not Before: Feb 16 16:31:21 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=879b0cb606fcaac2e276528fab8398302c08a814
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:bc:a7:7f:b8:3e:92:fd:c6:f9:ad:3d:45:34:
6e:56:f5:92:0c:31:c7:d3:ae:12:29:26:bc:cd:4b:
0c:ea:e1:10:60:c4:73:9f:00:e4:b3:95:d6:62:7a:
3c:ab:99:18:4c:9b:5a:4f:1d:9d:a1:d2:10:d6:49:
56:9f:cb:9b:6d:99:b6:9d:31:29:13:9c:9f:9b:75:
96:41:b3:da:48:13:c8:95:07:d4:2b:c4:af:30:f4:
5d:5b:66:f4:86:07:05:ff:21:48:fc:22:40:5f:4b:
bb:58:65:99:27:f4:37:15:ca:40:52:88:a5:79:07:
9c:64:23:0a:83:16:3f:89:61:0c:72:33:93:54:7f:
03:ea:2e:c0:9c:64:da:80:59:12:2a:fc:95:f0:c6:
ce:2b:c7:ea:7c:e6:fb:da:a2:80:37:15:1e:d6:55:
3c:3b:c6:c3:30:31:7f:53:d7:61:09:c0:11:59:1c:
7e:4c:f4:4b:fb:4e:cd:ec:d4:45:fe:a3:5a:e7:8e:
e5:5f:57:6c:6c:59:41:ff:83:23:eb:1e:67:f7:67:
eb:98:4a:cd:1d:2b:3d:ca:bd:78:f2:80:ea:67:65:
d9:5e:62:26:04:93:5e:1c:81:d0:71:38:f7:dd:17:
74:cf:6d:66:58:0e:db:8b:ab:0e:d1:e3:2f:ee:1a:
90:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:9B:0C:B6:06:FC:AA:C2:E2:76:52:8F:AB:83:98:30:2C:08:A8:14
X509v3 Authority Key Identifier:
keyid:CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/h5sMtgb8qsLidlKPq4OYMCwIqBQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.182.112.0/24
5.182.115.0/24
45.9.168.0/24
83.137.153.0/24
83.137.156.0-83.137.158.255
88.209.206.0/24
88.209.228.0/24
88.209.236.0/22
88.209.246.0/23
88.209.254.0/24
92.52.217.0/24
178.210.229.0/24
178.210.232.0/24
194.41.47.0/24
Signature Algorithm: sha256WithRSAEncryption
4d:7f:42:98:3d:5c:3a:18:31:c2:f9:df:5d:15:a4:e6:f6:59:
e0:4a:06:4f:98:05:b5:9b:8b:90:71:51:40:ad:d6:5c:85:f7:
ee:7e:15:87:13:0f:07:d4:51:92:bb:c9:d9:d6:29:5f:5c:19:
9c:8d:12:b0:70:29:5c:44:2c:21:b7:3b:b7:50:fa:73:d6:34:
aa:bf:24:99:21:db:4b:a1:0f:89:ff:ad:7e:26:f4:62:a7:48:
aa:31:b4:e8:61:0b:c7:b7:7d:9d:b8:59:cc:84:05:26:1f:d6:
b3:10:d7:67:1b:a5:ce:a2:1d:e9:eb:f9:4e:d0:78:60:09:13:
ef:71:04:88:d6:2b:f3:32:32:9a:dd:98:3d:32:8b:97:b5:9e:
e7:ff:17:ee:93:5b:00:9d:a3:2d:0c:ac:75:55:32:85:a8:44:
89:e4:d9:bd:5e:44:c6:c1:89:27:d6:54:ee:55:e1:5b:03:aa:
9d:ef:8d:ea:f3:40:77:0e:3b:e2:d9:58:5e:98:2f:c8:a9:ea:
05:d3:16:8b:83:d7:8c:74:a4:02:a2:0b:ff:dd:6b:5f:41:4a:
85:61:5b:e8:5c:f9:17:73:54:10:7d:86:c7:e0:dd:c9:39:2b:
ef:80:ab:7b:79:e4:f2:a0:2c:c6:8d:a8:be:c6:03:60:3f:20:
41:ce:ff:1b
-----BEGIN CERTIFICATE-----
MIIFUzCCBDugAwIBAgISAY2ywhtkUmcCrlBh5vmiwWbOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNkYWFhMGUwODIzNjAzNjBhY2RhMzQ3NjY0ZWI4MzE0ZWIx
MWRhMTAwHhcNMjQwMjE2MTYzMTIxWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4NzliMGNiNjA2ZmNhYWMyZTI3NjUyOGZhYjgzOTgzMDJjMDhhODE0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0Lynf7g+kv3G+a09RTRuVvWSDDHH
064SKSa8zUsM6uEQYMRznwDks5XWYno8q5kYTJtaTx2dodIQ1klWn8ubbZm2nTEp
E5yfm3WWQbPaSBPIlQfUK8SvMPRdW2b0hgcF/yFI/CJAX0u7WGWZJ/Q3FcpAUoil
eQecZCMKgxY/iWEMcjOTVH8D6i7AnGTagFkSKvyV8MbOK8fqfOb72qKANxUe1lU8
O8bDMDF/U9dhCcARWRx+TPRL+07N7NRF/qNa547lX1dsbFlB/4Mj6x5n92frmErN
HSs9yr148oDqZ2XZXmImBJNeHIHQcTj33Rd0z21mWA7bi6sO0eMv7hqQNwIDAQAB
o4ICXzCCAlswHQYDVR0OBBYEFIebDLYG/KrC4nZSj6uDmDAsCKgUMB8GA1UdIwQY
MBaAFM2qoOCCNgNgrNo0dmTrgxTrEdoQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvemFxZzRJSTJBMkNzMmpSMlpPdURGT3NSMmhBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZC81ODkxMjctMTA5Ni00YzkxLTk2Y2Mt
N2U0ZDZmNmY2ZTY2LzEvaDVzTXRnYjhxc0xpZGxLUHE0T1lNQ3dJcUJRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZC81ODkxMjctMTA5Ni00YzkxLTk2Y2MtN2U0ZDZmNmY2ZTY2
LzEvemFxZzRJSTJBMkNzMmpSMlpPdURGT3NSMmhBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMHUGCCsGAQUFBwEHAQH/BGYwZDBiBAIAATBcAwQABbZwAwQA
BbZzAwQALQmoAwQAU4mZMAwDBAJTiZwDBABTiZ4DBABY0c4DBABY0eQDBAJY0ewD
BAFY0fYDBABY0f4DBABcNNkDBACy0uUDBACy0ugDBADCKS8wDQYJKoZIhvcNAQEL
BQADggEBAE1/Qpg9XDoYMcL5310VpOb2WeBKBk+YBbWbi5BxUUCt1lyF9+5+FYcT
DwfUUZK7ydnWKV9cGZyNErBwKVxELCG3O7dQ+nPWNKq/JJkh20uhD4n/rX4m9GKn
SKoxtOhhC8e3fZ24WcyEBSYf1rMQ12cbpc6iHenr+U7QeGAJE+9xBIjWK/MyMprd
mD0yi5e1nuf/F+6TWwCdoy0MrHVVMoWoRInk2b1eRMbBiSfWVO5V4VsDqp3vjerz
QHcOO+LZWF6YL8ip6gXTFouD14x0pAKiC//da19BSoVhW+hc+RdzVBB9hsfg3ck5
K++Aq3t55PKgLMaNqL7GA2A/IEHO/xs=
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:47:56 2024 by rpki-client on console-ams.rpki-client.org