Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/lXWk-8-2WfLbQVi6Bdxh-eCepQE.roa
File: lXWk-8-2WfLbQVi6Bdxh-eCepQE.roa (raw, json)
Hash identifier: 3BH0PKyGq2MsMqUZOIy/ty9jScna9zeGiPHANv9pP/k=
Subject key identifier: 95:75:A4:FB:CF:B6:59:F2:DB:41:58:BA:05:DC:61:F9:E0:9E:A5:01
Certificate issuer: /CN=cdaaa0e082360360acda347664eb8314eb11da10
Certificate serial: 01858251E0B49A689A05C95D57DF3343D185
Authority key identifier: CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/lXWk-8-2WfLbQVi6Bdxh-eCepQE.roa
Signing time: Thu 05 Jan 2023 14:24:42 +0000
ROA not before: Thu 05 Jan 2023 14:24:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 42864
IP address blocks: 178.210.224.0/21 maxlen: 21
178.248.200.0/21 maxlen: 21
193.138.125.0/24 maxlen: 24
45.9.171.0/24 maxlen: 24
45.9.170.0/24 maxlen: 24
45.9.169.0/24 maxlen: 24
178.210.236.0/24 maxlen: 24
77.242.144.0/20 maxlen: 20
88.209.192.0/21 maxlen: 24
88.209.208.0/20 maxlen: 24
88.209.225.0/24 maxlen: 24
88.209.224.0/24 maxlen: 24
92.52.219.0/24 maxlen: 24
88.151.56.0/22 maxlen: 24
45.14.10.0/24 maxlen: 24
45.14.8.0/24 maxlen: 24
92.52.212.0/22 maxlen: 24
92.52.210.0/23 maxlen: 23
92.52.209.0/24 maxlen: 24
92.52.208.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:82:51:e0:b4:9a:68:9a:05:c9:5d:57:df:33:43:d1:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cdaaa0e082360360acda347664eb8314eb11da10
Validity
Not Before: Jan 5 14:24:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9575a4fbcfb659f2db4158ba05dc61f9e09ea501
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:07:af:e7:28:eb:63:11:a3:4c:11:fe:95:df:
ad:f2:c1:1b:80:7f:82:b2:61:6b:cf:de:d0:67:5b:
48:63:cf:fc:87:8f:22:9d:a8:ad:c6:3e:70:43:f5:
99:01:79:da:9f:35:ca:25:d2:6e:f2:de:8d:5f:4c:
35:93:f3:f8:19:cb:4e:97:d0:78:56:21:93:d1:63:
02:0f:15:f3:24:0e:f8:50:f8:2c:ce:9e:de:9a:a5:
14:45:7c:f5:fa:d2:54:ec:8d:ee:57:96:a6:2c:de:
a9:10:b4:43:49:86:ed:6b:9b:29:b1:d6:73:20:5f:
aa:8b:0b:9c:51:8c:0d:ae:32:8c:ea:ee:6a:cb:43:
ea:3b:09:a9:d4:20:50:0a:d1:82:58:30:43:d0:e1:
f9:20:63:77:62:05:b6:1f:6f:8c:69:61:03:d1:58:
46:a8:ca:eb:dc:3c:e3:ef:31:c7:7a:b8:e9:2e:f2:
98:2f:48:90:c6:25:9d:b4:76:8e:6a:76:aa:87:7f:
a9:5e:14:c9:b8:da:28:7a:88:f3:6f:9d:c0:bb:ec:
be:75:9c:0e:78:c3:47:22:bb:e3:8b:3d:72:2c:74:
0a:48:99:ff:9c:a9:25:af:13:c5:df:05:ab:66:f8:
c4:08:a9:85:49:80:ef:13:4d:d0:03:23:50:32:d0:
0e:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:75:A4:FB:CF:B6:59:F2:DB:41:58:BA:05:DC:61:F9:E0:9E:A5:01
X509v3 Authority Key Identifier:
keyid:CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/lXWk-8-2WfLbQVi6Bdxh-eCepQE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.9.169.0-45.9.171.255
45.14.8.0/24
45.14.10.0/24
77.242.144.0/20
88.151.56.0/22
88.209.192.0/21
88.209.208.0-88.209.225.255
92.52.208.0/21
92.52.219.0/24
178.210.224.0/21
178.210.236.0/24
178.248.200.0/21
193.138.125.0/24
Signature Algorithm: sha256WithRSAEncryption
8e:ed:fe:d2:12:f0:5b:14:f5:dd:57:22:f4:67:7f:d1:9c:9e:
23:9d:6f:bd:3b:fd:9b:d6:3b:5a:6b:8d:cd:20:5d:52:4d:1d:
34:7f:9e:c8:b3:8d:1a:39:07:1d:32:00:4a:10:4f:46:ab:a5:
4e:36:09:94:44:c0:5c:9b:47:20:9b:c3:78:5e:c4:98:ec:1d:
23:3e:e0:b8:8b:57:1a:e8:4b:7e:49:9c:2c:9b:1d:42:c9:df:
92:10:22:2a:e7:6f:19:9a:69:83:b9:cb:19:87:11:af:4c:e8:
cd:90:08:81:58:b0:9f:41:38:43:1f:97:d5:74:c4:fa:f5:e5:
fe:08:f4:15:e2:99:63:6d:18:ae:e0:26:e8:d9:82:5a:b4:ad:
7f:8b:bf:3b:28:7b:d5:50:b5:ef:99:de:80:18:a7:bf:54:6c:
53:9b:64:14:15:d9:1d:a4:ce:62:23:95:91:14:60:e8:4d:77:
ce:74:57:3b:c2:2c:19:1f:5e:22:ea:4f:0f:b8:71:40:fb:7f:
4a:91:19:ed:ed:a1:a3:f9:96:06:f1:d3:af:a6:d8:f2:a3:df:
a2:66:10:77:dc:d1:4a:18:47:90:6f:86:41:27:47:32:fe:dd:
83:95:25:e5:ff:9a:75:be:c3:0e:67:54:c2:3d:45:29:19:15:
8b:01:49:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:56:28 2024 by rpki-client on console-fra.rpki-client.org