Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/m9Mxh1lhQw4MLJ_QU5W6zqIUXJU.roa
File: m9Mxh1lhQw4MLJ_QU5W6zqIUXJU.roa (raw, json)
Hash identifier: dudHKWZESmYUYdwZtllGa+JkrFr22MhBBtA3CtLrAN8=
Subject key identifier: 9B:D3:31:87:59:61:43:0E:0C:2C:9F:D0:53:95:BA:CE:A2:14:5C:95
Certificate issuer: /CN=cdaaa0e082360360acda347664eb8314eb11da10
Certificate serial: 0189FD4F5FC3787F6974C76043047EB3540C
Authority key identifier: CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/m9Mxh1lhQw4MLJ_QU5W6zqIUXJU.roa
Signing time: Wed 16 Aug 2023 07:46:24 +0000
ROA not before: Wed 16 Aug 2023 07:46:24 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 88.209.245.0/24 maxlen: 24
83.137.158.0/24 maxlen: 24
83.137.159.0/24 maxlen: 24
77.242.150.0/24 maxlen: 24
88.209.195.0/24 maxlen: 24
77.242.156.0/24 maxlen: 24
77.242.159.0/24 maxlen: 24
88.209.211.0/24 maxlen: 24
88.209.216.0/24 maxlen: 24
88.209.217.0/24 maxlen: 24
178.210.250.0/24 maxlen: 24
88.151.57.0/24 maxlen: 24
88.151.58.0/24 maxlen: 24
88.151.56.0/23 maxlen: 24
88.151.63.0/24 maxlen: 24
2.58.168.0/24 maxlen: 24
2.58.170.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:fd:4f:5f:c3:78:7f:69:74:c7:60:43:04:7e:b3:54:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cdaaa0e082360360acda347664eb8314eb11da10
Validity
Not Before: Aug 16 07:46:24 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9bd331875961430e0c2c9fd05395bacea2145c95
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:9e:d5:52:69:39:78:9c:b1:89:38:1e:0b:7b:
10:8c:6d:44:fa:bf:69:f8:ef:9c:dd:b6:0d:71:03:
0f:31:1f:fb:42:3f:0d:e0:01:f8:8d:44:57:32:c8:
e5:04:1a:de:c5:15:2f:7f:5e:db:9c:b0:52:95:9d:
2a:e7:f0:d1:f3:4a:c8:95:6d:1e:14:d4:dd:54:89:
63:c3:e3:eb:f2:d9:4b:77:95:bc:ed:91:16:77:a0:
cb:e3:e0:0e:cd:95:a6:ce:1c:7b:00:6f:1d:cd:4d:
9d:57:6d:20:29:8d:36:52:39:6c:9c:e9:de:94:f4:
66:3f:57:88:8e:1d:a7:df:38:52:9f:cc:5f:b5:1d:
bf:79:1c:39:5b:76:30:30:5e:c9:7e:fe:74:b8:25:
e8:d7:3d:43:69:35:1c:dd:ee:ef:cf:e2:59:0f:26:
47:4c:91:45:ee:5a:74:ba:3c:ba:35:f1:ad:8a:a3:
2e:36:ce:34:ba:35:0c:53:3a:ea:a4:3e:73:4b:27:
57:d6:de:c2:e1:b8:a3:63:9e:e9:d9:bb:69:8a:e1:
ff:62:28:83:ad:24:f6:15:b2:9c:c5:70:73:4b:47:
84:cb:82:f2:2f:d2:b3:76:59:65:1b:9b:41:34:a2:
5b:45:cc:51:a3:10:db:fd:65:2b:60:99:36:f2:61:
5d:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:D3:31:87:59:61:43:0E:0C:2C:9F:D0:53:95:BA:CE:A2:14:5C:95
X509v3 Authority Key Identifier:
keyid:CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/m9Mxh1lhQw4MLJ_QU5W6zqIUXJU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.58.168.0/24
2.58.170.0/24
77.242.150.0/24
77.242.156.0/24
77.242.159.0/24
83.137.158.0/23
88.151.56.0-88.151.58.255
88.151.63.0/24
88.209.195.0/24
88.209.211.0/24
88.209.216.0/23
88.209.245.0/24
178.210.250.0/24
Signature Algorithm: sha256WithRSAEncryption
62:4a:c6:96:bd:6d:c4:b7:7c:51:9b:f3:e4:d9:c9:3c:e1:f2:
2b:67:f1:b4:55:a7:87:54:b9:30:ad:99:e5:46:ea:3a:88:cd:
9d:ff:3d:ad:4c:c9:e6:48:61:25:d6:8f:e2:a1:c9:69:41:62:
bf:89:25:ba:f2:98:4d:0c:42:32:68:02:74:c3:8a:3f:75:2a:
1c:2f:ea:ad:1d:ec:87:2b:63:c5:47:59:07:95:49:b6:37:f7:
cf:d5:1c:84:b9:5a:fa:a9:c0:db:25:a7:86:ed:32:3a:5a:d1:
89:70:d2:c3:29:3c:36:d2:fc:33:ef:34:29:0a:a4:93:32:69:
5e:6d:72:11:b7:fb:58:87:74:ed:0c:61:15:15:a1:7e:3a:4c:
0f:15:09:68:bc:46:a7:90:7f:c9:b1:33:e2:22:04:cb:66:63:
42:ea:d5:a7:b0:5d:76:b3:55:db:23:67:a2:3b:11:91:7a:09:
89:f9:d8:7d:82:94:4d:48:59:bb:f6:5f:9c:c1:8e:18:7e:b0:
23:11:13:c9:be:ff:26:29:a9:02:c7:c7:07:05:bb:cd:ef:4f:
f9:01:2b:e1:20:c7:5c:3d:49:ce:ea:22:40:47:8f:df:d3:46:
b5:73:a1:09:03:3f:ed:69:97:d9:06:d2:93:51:f9:17:72:c0:
5c:ba:43:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:56:28 2024 by rpki-client on console-fra.rpki-client.org