Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/jCgxjrBfU8Ao573UnCZFsldpJeU.roa
File: jCgxjrBfU8Ao573UnCZFsldpJeU.roa (raw, json)
Hash identifier: 4t4PzFu5sjCODGSn/wA7562vfqpi7yECUyh15WgoAVU=
Subject key identifier: 8C:28:31:8E:B0:5F:53:C0:28:E7:BD:D4:9C:26:45:B2:57:69:25:E5
Certificate issuer: /CN=cdaaa0e082360360acda347664eb8314eb11da10
Certificate serial: 0187F69EA77AC09E81984AC1479C9534518E
Authority key identifier: CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/jCgxjrBfU8Ao573UnCZFsldpJeU.roa
Signing time: Sun 07 May 2023 14:30:05 +0000
ROA not before: Sun 07 May 2023 14:30:05 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 88.209.248.0/24 maxlen: 24
88.209.249.0/24 maxlen: 24
178.210.236.0/24 maxlen: 24
88.209.195.0/24 maxlen: 24
88.209.194.0/24 maxlen: 24
88.209.209.0/24 maxlen: 24
88.209.216.0/24 maxlen: 24
88.209.224.0/24 maxlen: 24
88.209.225.0/24 maxlen: 24
88.209.221.0/24 maxlen: 24
88.151.58.0/24 maxlen: 24
88.151.56.0/24 maxlen: 24
88.151.61.0/24 maxlen: 24
5.182.113.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:f6:9e:a7:7a:c0:9e:81:98:4a:c1:47:9c:95:34:51:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cdaaa0e082360360acda347664eb8314eb11da10
Validity
Not Before: May 7 14:30:05 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8c28318eb05f53c028e7bdd49c2645b2576925e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:f1:9e:f8:51:d0:0f:a9:b0:a0:59:71:1f:d5:
e5:d1:a3:01:a5:2a:c2:94:78:d9:1c:4f:2e:52:1b:
22:4a:b2:9a:26:d7:56:48:50:9e:a5:66:e1:b0:ba:
1c:c3:e0:ef:cb:8a:21:0f:91:39:07:65:d1:2c:80:
33:ae:0e:5b:2a:87:42:0f:d9:da:f1:09:71:8d:bd:
cc:e0:15:8e:e7:b9:f4:41:1d:06:67:74:d9:1b:45:
8c:3e:27:e8:52:54:5b:5a:76:71:01:3b:66:af:ba:
76:8f:a0:51:8e:af:70:fb:a7:47:04:4b:e3:4e:9f:
70:c6:cb:ca:42:a7:a3:40:82:91:35:71:10:df:74:
09:d8:7e:53:b3:b6:9a:23:6f:7e:e5:38:14:cb:d2:
53:c1:fc:14:51:ad:9d:c5:b6:90:58:59:04:24:07:
4a:6e:7d:93:00:5d:a3:5b:d2:6a:e3:54:96:da:b9:
75:95:1d:77:13:ea:4a:70:48:95:c5:2d:df:32:f2:
af:e0:57:d3:85:6e:85:7b:aa:f8:6f:e8:fb:3d:93:
34:b4:0e:89:8b:87:ae:b2:65:f7:24:ec:0a:98:63:
6a:27:2d:b0:f1:b2:16:c0:dc:cf:ff:eb:4a:b3:8b:
7a:c0:1d:3d:db:52:97:ae:5f:d0:cd:13:51:ec:7b:
e9:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:28:31:8E:B0:5F:53:C0:28:E7:BD:D4:9C:26:45:B2:57:69:25:E5
X509v3 Authority Key Identifier:
keyid:CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/jCgxjrBfU8Ao573UnCZFsldpJeU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.182.113.0/24
88.151.56.0/24
88.151.58.0/24
88.151.61.0/24
88.209.194.0/23
88.209.209.0/24
88.209.216.0/24
88.209.221.0/24
88.209.224.0/23
88.209.248.0/23
178.210.236.0/24
Signature Algorithm: sha256WithRSAEncryption
89:cf:c8:67:57:f6:cf:3b:54:ed:7a:d3:c7:da:3c:5c:55:80:
83:00:45:00:23:a0:d9:a1:03:cf:e6:47:8a:9e:a9:95:ec:5e:
40:80:25:14:c0:36:da:8d:6a:30:91:ad:fa:c5:f8:f1:76:c2:
db:0a:2a:df:0b:55:ed:5f:d0:33:47:83:52:8c:76:f6:16:b5:
20:e7:a5:d1:09:e7:20:6c:c1:ef:a5:ad:ae:00:de:ba:80:9f:
b2:e2:21:a6:e5:53:86:ec:87:0d:95:61:b7:23:0b:b8:ff:71:
b2:31:07:0f:77:b8:9f:6d:10:41:d8:84:19:78:37:f1:fc:cb:
2e:28:33:72:87:d1:a9:e8:b4:a2:61:f0:27:6d:af:7b:b6:d9:
d2:fa:7a:05:0c:d6:b5:f9:b9:2a:b5:f6:29:14:89:15:76:b7:
29:c5:6c:95:11:48:4d:b3:e7:0c:0c:b3:a3:45:40:a6:da:19:
d9:37:94:38:b9:c9:b6:ae:49:b3:fe:2c:cb:50:77:be:66:92:
ba:cf:e6:08:14:43:41:ca:6e:f5:73:52:6d:a0:ff:13:02:ec:
28:f9:f3:2d:29:32:f1:57:fd:3d:b8:34:4b:1d:a4:5c:f0:0f:
e1:fa:23:df:e1:98:fe:42:43:d7:08:3d:af:15:a3:17:78:72:
d3:0e:8c:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:47:56 2024 by rpki-client on console-ams.rpki-client.org