Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/iu0fDk9SwYW03Sp4ruCcUu_iI9U.roa
File: iu0fDk9SwYW03Sp4ruCcUu_iI9U.roa (raw, json)
Hash identifier: bIDIO+8eLIC5cnruuJ4HFo8MMvr6J9KvdTs+auz7kT8=
Subject key identifier: 8A:ED:1F:0E:4F:52:C1:85:B4:DD:2A:78:AE:E0:9C:52:EF:E2:23:D5
Certificate issuer: /CN=cdaaa0e082360360acda347664eb8314eb11da10
Certificate serial: 018446FC4D9615A1424FC2C38E95E6C27E7B
Authority key identifier: CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/iu0fDk9SwYW03Sp4ruCcUu_iI9U.roa
Signing time: Sat 05 Nov 2022 08:50:50 +0000
ROA not before: Sat 05 Nov 2022 08:50:50 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 834
IP address blocks: 88.209.231.0/24 maxlen: 24
88.209.232.0/22 maxlen: 22
83.137.152.0/24 maxlen: 24
83.137.154.0/23 maxlen: 24
178.210.252.0/24 maxlen: 24
88.151.61.0/24 maxlen: 24
88.151.63.0/24 maxlen: 24
88.209.204.0/22 maxlen: 24
88.209.200.0/22 maxlen: 32
88.209.205.0/24 maxlen: 24
88.209.206.0/24 maxlen: 24
88.209.226.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:46:fc:4d:96:15:a1:42:4f:c2:c3:8e:95:e6:c2:7e:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cdaaa0e082360360acda347664eb8314eb11da10
Validity
Not Before: Nov 5 08:50:50 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=8aed1f0e4f52c185b4dd2a78aee09c52efe223d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:33:9a:f1:bc:05:b6:83:3c:b7:33:ad:f0:ff:
f8:59:6a:c6:49:c7:ee:4e:e1:03:2c:9d:69:32:43:
83:fa:99:e1:dc:df:43:9f:47:d7:73:86:f5:6a:a5:
bd:e0:65:9e:78:f7:1b:33:88:68:d6:9e:e6:28:b6:
4b:0a:b9:b9:b9:0c:05:ff:ae:65:09:a7:ef:8b:09:
d3:97:a5:6e:82:77:c2:db:d6:4d:db:66:2c:9c:d0:
32:e4:4f:d0:ba:4e:a9:17:1b:e2:23:a6:03:93:e9:
86:53:1c:3d:2b:22:a5:e4:9f:2c:e1:67:d5:64:49:
87:5e:4a:56:0a:d6:dd:8f:6d:f5:78:7d:d4:64:12:
36:41:39:27:5f:cd:f9:60:a3:9b:3c:ec:48:67:8d:
8b:db:87:54:be:0f:09:02:9d:ca:69:a9:00:3a:87:
0e:64:f2:22:51:78:26:a9:7f:82:ed:ca:59:77:ab:
5c:42:a6:28:eb:92:a9:38:bb:c8:5d:5e:ee:dd:80:
99:4b:59:2c:6d:01:87:ff:17:2f:28:8d:08:01:e8:
5e:59:3c:8d:7d:74:ed:7e:ed:a2:e4:e5:36:af:31:
c3:63:d5:d8:57:db:12:1c:4b:8d:5b:1b:e9:a0:c2:
05:06:f3:27:ed:97:83:7c:e8:51:8a:9d:ad:45:fb:
ee:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:ED:1F:0E:4F:52:C1:85:B4:DD:2A:78:AE:E0:9C:52:EF:E2:23:D5
X509v3 Authority Key Identifier:
keyid:CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/iu0fDk9SwYW03Sp4ruCcUu_iI9U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.137.152.0/24
83.137.154.0/23
88.151.61.0/24
88.151.63.0/24
88.209.200.0/21
88.209.226.0/24
88.209.231.0-88.209.235.255
178.210.252.0/24
Signature Algorithm: sha256WithRSAEncryption
b2:94:a7:80:24:e3:fd:ac:87:f3:02:69:ac:aa:76:d4:d6:cd:
88:40:fe:fb:59:fa:16:5f:68:0f:b8:6b:0a:95:a5:d2:9f:fa:
2c:80:7e:7d:26:a7:87:80:bb:13:df:45:08:1f:ed:50:43:25:
e7:13:de:bb:97:c0:6d:5b:7a:b9:d1:c4:1f:68:77:b1:2f:a6:
3f:ca:57:3e:82:1e:d7:40:88:6c:d9:c5:e4:23:9c:60:e7:b0:
ea:60:4a:fc:c2:27:18:be:89:9e:9b:35:6f:ba:fc:0b:1b:33:
52:f9:1d:1f:68:96:92:fa:10:d6:87:39:78:54:18:19:e6:08:
c8:10:bc:7d:ef:b0:4c:7f:f6:6b:a4:a0:db:5a:d9:26:4e:78:
34:2c:e4:bd:33:c5:97:17:93:f4:f3:16:e3:ab:f9:71:03:51:
a6:23:35:dd:7d:a9:cb:73:6b:c7:9d:20:4e:38:c2:77:b1:08:
86:49:32:fa:eb:f2:8a:ed:ce:76:ee:f1:f3:db:51:1e:34:7d:
75:35:18:23:92:97:ef:67:92:6e:7a:2e:35:f5:8c:e2:c7:e8:
d2:1e:fe:c6:f0:ca:ed:4c:74:b8:a0:a5:e0:29:55:b9:56:07:
52:43:57:81:2a:23:55:8f:01:7d:d7:24:5b:e7:52:e0:67:45:
cd:90:ff:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:47:56 2024 by rpki-client on console-ams.rpki-client.org