Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/kzIPl8x1-YTIyhiCCL8mpUGAKQE.roa
File: kzIPl8x1-YTIyhiCCL8mpUGAKQE.roa (raw, json)
Hash identifier: Ukl4df0BfZNre52n54K9Cb9wiU8WZhUxVdnn7glx6Rk=
Subject key identifier: 93:32:0F:97:CC:75:F9:84:C8:CA:18:82:08:BF:26:A5:41:80:29:01
Certificate issuer: /CN=cdaaa0e082360360acda347664eb8314eb11da10
Certificate serial: 0188BDDE50F3B71028BD3FD9515423EFCDA0
Authority key identifier: CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/kzIPl8x1-YTIyhiCCL8mpUGAKQE.roa
Signing time: Thu 15 Jun 2023 07:04:03 +0000
ROA not before: Thu 15 Jun 2023 07:04:03 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 211619
IP address blocks: 88.209.228.0/24 maxlen: 24
88.209.239.0/24 maxlen: 24
88.209.236.0/22 maxlen: 22
88.209.246.0/23 maxlen: 23
88.209.254.0/24 maxlen: 24
83.137.159.0/24 maxlen: 24
83.137.156.0/24 maxlen: 24
83.137.157.0/24 maxlen: 24
83.137.158.0/24 maxlen: 24
83.137.153.0/24 maxlen: 24
178.210.232.0/24 maxlen: 24
178.210.233.0/24 maxlen: 24
178.210.237.0/24 maxlen: 24
178.210.234.0/24 maxlen: 24
178.210.235.0/24 maxlen: 24
45.9.168.0/24 maxlen: 24
77.242.152.0/22 maxlen: 24
88.209.206.0/24 maxlen: 24
88.209.219.0/24 maxlen: 24
92.52.217.0/24 maxlen: 24
92.52.218.0/24 maxlen: 24
194.41.47.0/24 maxlen: 24
5.182.112.0/24 maxlen: 24
5.182.115.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:bd:de:50:f3:b7:10:28:bd:3f:d9:51:54:23:ef:cd:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cdaaa0e082360360acda347664eb8314eb11da10
Validity
Not Before: Jun 15 07:04:03 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=93320f97cc75f984c8ca188208bf26a541802901
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:8f:4f:c9:fc:a8:db:fb:5f:c4:c2:d5:e9:4e:
e3:e6:15:5e:c4:67:d5:fa:5d:11:8d:17:08:4d:a5:
5d:f1:fc:6a:55:8b:45:12:1c:43:a0:1b:3c:59:75:
94:56:65:4a:14:1b:ac:6b:8e:76:38:07:ed:cb:ca:
be:22:b4:c7:7f:c5:84:67:cc:3f:a5:c0:56:57:9f:
5f:4d:4e:b3:7f:49:9a:c4:e7:2c:58:6e:00:40:ce:
23:9c:d8:0e:84:34:58:ec:e6:e9:4e:1a:bd:8b:76:
92:f6:e4:68:bc:ce:00:11:5b:83:68:4f:f9:b8:71:
a1:fd:b4:86:6b:ad:fa:c6:cb:98:e8:e9:cc:63:7c:
16:7a:19:e7:bf:31:08:9b:a4:54:42:4a:84:40:6c:
ae:3e:17:58:42:4d:bd:3f:14:54:4f:45:6d:1a:cb:
ef:f5:2e:b9:27:5a:87:76:54:6e:9c:1e:32:4d:da:
6c:9b:0f:2d:6c:f2:bc:ae:29:4c:6e:ff:d4:5f:36:
d9:c7:97:9e:d4:c3:44:ee:91:fc:10:ee:05:b3:be:
e8:f1:f2:d7:d5:78:d9:73:f6:6e:ad:91:63:9a:67:
f1:3d:e3:36:9c:75:89:d7:07:f7:ee:83:b5:43:a9:
f8:7c:ef:05:5d:d8:4e:e1:0e:13:e6:2a:c1:29:52:
81:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:32:0F:97:CC:75:F9:84:C8:CA:18:82:08:BF:26:A5:41:80:29:01
X509v3 Authority Key Identifier:
keyid:CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/kzIPl8x1-YTIyhiCCL8mpUGAKQE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.182.112.0/24
5.182.115.0/24
45.9.168.0/24
77.242.152.0/22
83.137.153.0/24
83.137.156.0/22
88.209.206.0/24
88.209.219.0/24
88.209.228.0/24
88.209.236.0/22
88.209.246.0/23
88.209.254.0/24
92.52.217.0-92.52.218.255
178.210.232.0/22
178.210.237.0/24
194.41.47.0/24
Signature Algorithm: sha256WithRSAEncryption
b6:00:28:22:b2:9f:5e:27:38:ab:d8:ad:b7:04:dc:b0:10:df:
e0:d1:b3:4b:e3:9f:13:85:64:30:07:f0:91:17:27:07:c2:e5:
82:6a:5a:15:cb:00:7f:34:99:56:24:aa:02:1e:84:bc:6b:4f:
a0:01:71:36:66:ed:02:96:91:5a:ea:fe:16:64:2f:1a:b4:4b:
20:3d:00:9d:c4:39:46:a8:e8:92:51:19:5e:e2:16:0b:59:b5:
0f:9e:32:a4:77:70:63:db:e0:cb:a8:aa:e9:39:5b:9e:6d:1d:
2e:d7:1d:df:da:6c:e0:d9:ee:32:66:09:9d:49:20:0f:fe:ec:
fe:77:18:82:0b:d5:d1:60:bf:fd:f4:fc:69:11:fa:02:a3:f0:
70:0b:fc:bf:45:5d:dc:3b:cb:dd:88:bd:5c:a1:fd:05:0e:32:
97:6e:f4:61:77:9e:0d:04:a2:5e:20:35:da:69:ac:6b:d0:10:
b1:bd:0b:8d:67:05:29:cd:39:21:a4:4d:1c:92:7f:3f:35:61:
a9:ce:73:0e:28:ff:92:5d:6d:ab:66:0e:84:04:f6:2a:4b:44:
9a:6d:30:94:f3:f2:92:a5:68:88:a5:4d:ae:57:08:24:78:87:
9f:a4:01:aa:f7:3f:c4:ef:b8:40:36:d7:b9:af:66:57:d9:41:
07:b3:24:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:56:28 2024 by rpki-client on console-fra.rpki-client.org