Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/pGbzdkmwzDD_i9mA0OENcRaOtBw.roa
File: pGbzdkmwzDD_i9mA0OENcRaOtBw.roa (raw, json)
Hash identifier: T0GtJKRHY0PSE1t6YTmTo6SWwJjJZ4N+5Xz/wDGY9G0=
Subject key identifier: A4:66:F3:76:49:B0:CC:30:FF:8B:D9:80:D0:E1:0D:71:16:8E:B4:1C
Certificate issuer: /CN=cdaaa0e082360360acda347664eb8314eb11da10
Certificate serial: 018A40AEAFFAD31A5EBE77694424327BC4FE
Authority key identifier: CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/pGbzdkmwzDD_i9mA0OENcRaOtBw.roa
Signing time: Tue 29 Aug 2023 09:45:04 +0000
ROA not before: Tue 29 Aug 2023 09:45:04 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 5065
IP address blocks: 83.137.159.0/24 maxlen: 24
178.210.231.0/24 maxlen: 24
178.210.230.0/24 maxlen: 24
88.151.57.0/24 maxlen: 24
88.151.58.0/24 maxlen: 24
88.209.195.0/24 maxlen: 24
77.242.156.0/24 maxlen: 24
2.58.168.0/24 maxlen: 24
2.58.170.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:40:ae:af:fa:d3:1a:5e:be:77:69:44:24:32:7b:c4:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cdaaa0e082360360acda347664eb8314eb11da10
Validity
Not Before: Aug 29 09:45:04 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a466f37649b0cc30ff8bd980d0e10d71168eb41c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:74:02:61:2f:e7:c8:b2:be:e3:0b:2a:7f:e8:
3e:be:a2:38:f3:f2:3b:36:b4:4e:96:54:c7:58:1a:
ea:55:b3:3a:08:44:1e:35:6c:d6:23:58:99:f7:94:
70:18:d3:ec:24:7b:fc:f1:16:2d:4b:03:db:47:f5:
e7:9b:e2:cf:95:81:63:f0:1c:42:13:d6:8a:28:d1:
a0:8d:fe:20:b1:c9:d0:15:fe:e2:62:09:81:de:31:
76:ec:06:76:d8:b5:d1:f3:b9:36:97:c6:ab:97:0a:
17:a5:67:63:f7:cf:99:34:e4:2f:99:c2:d8:ba:ac:
d4:d4:bd:42:cc:3b:2a:02:9c:1b:b4:b5:5d:86:82:
ad:5f:19:12:da:16:60:fd:4d:06:5c:dc:3d:92:f9:
5c:0f:21:ba:f7:b0:7c:0e:e3:57:96:c3:de:d4:7f:
1d:b0:94:ee:e1:0d:9d:dd:cd:d7:ea:49:94:db:92:
ed:d6:86:76:70:eb:72:18:3c:ec:d1:8c:01:10:a6:
65:b5:03:30:4c:99:e8:ca:41:c1:cf:e4:2a:67:86:
a4:e7:39:d2:bf:fa:bc:47:a7:18:91:38:92:3e:56:
bc:26:ee:29:97:89:3c:8a:7c:b4:00:b4:ff:54:aa:
95:3a:42:6f:10:27:35:65:17:66:5a:59:7b:64:bc:
8a:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:66:F3:76:49:B0:CC:30:FF:8B:D9:80:D0:E1:0D:71:16:8E:B4:1C
X509v3 Authority Key Identifier:
keyid:CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/pGbzdkmwzDD_i9mA0OENcRaOtBw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.58.168.0/24
2.58.170.0/24
77.242.156.0/24
83.137.159.0/24
88.151.57.0-88.151.58.255
88.209.195.0/24
178.210.230.0/23
Signature Algorithm: sha256WithRSAEncryption
4f:f1:b2:39:8f:0d:52:6a:f7:d6:6c:3b:63:1d:04:44:c8:6c:
50:ab:85:36:11:2d:b0:77:c1:9c:39:c8:2e:37:5f:ae:ca:85:
32:2b:94:de:4e:d4:b6:6d:f4:1f:e3:62:00:72:fa:4f:99:76:
f3:45:a0:f8:3f:fb:3b:ac:08:61:ff:c7:a3:06:3a:2b:fe:3a:
b4:c6:5c:d7:11:8e:63:e8:9b:9a:c2:15:d7:d8:f4:20:2c:a0:
69:5b:a6:3d:cb:32:2d:4c:32:10:4e:8f:fc:08:a2:01:6c:c0:
5f:df:20:91:ac:b2:48:82:f4:95:1e:8b:22:37:bb:1a:52:51:
fa:64:b5:d6:6e:fd:e0:0e:c8:b4:6f:c7:e3:d7:97:ff:2a:c8:
de:f3:2a:2f:26:81:ba:19:29:45:d1:29:78:24:59:89:b0:f2:
1c:9c:5d:9e:58:8c:fd:ca:92:a0:8c:72:63:d5:ae:dd:50:91:
69:3c:b7:91:45:94:79:d6:f0:65:62:c0:fa:c6:90:90:89:b8:
ef:73:c3:3e:64:15:35:4b:96:45:3c:cd:d0:a7:93:93:36:e3:
82:48:0d:b4:39:4b:dc:08:b5:41:ce:04:42:60:39:ee:aa:73:
af:6b:88:05:a7:b3:bf:48:5b:4a:e6:70:43:30:6a:53:10:e3:
cd:43:fc:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:56:28 2024 by rpki-client on console-fra.rpki-client.org