Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/pifIX87alqxLXy4owfQapOA_hC4.roa
File: pifIX87alqxLXy4owfQapOA_hC4.roa (raw, json)
Hash identifier: 9JhN0udGiSKRVuZ/5j6mVxuoSbFWnKvtRorgvkvblSQ=
Subject key identifier: A6:27:C8:5F:CE:DA:96:AC:4B:5F:2E:28:C1:F4:1A:A4:E0:3F:84:2E
Certificate issuer: /CN=cdaaa0e082360360acda347664eb8314eb11da10
Certificate serial: 018C441CEA6A08895438FD124D483D80DEF8
Authority key identifier: CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/pifIX87alqxLXy4owfQapOA_hC4.roa
Signing time: Thu 07 Dec 2023 11:49:54 +0000
ROA not before: Thu 07 Dec 2023 11:49:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 42864
IP address blocks: 178.248.200.0/21 maxlen: 21
45.9.171.0/24 maxlen: 24
45.9.170.0/24 maxlen: 24
45.9.169.0/24 maxlen: 24
88.209.196.0/24 maxlen: 24
88.209.193.0/24 maxlen: 24
88.209.208.0/24 maxlen: 24
88.209.213.0/24 maxlen: 24
88.209.212.0/24 maxlen: 24
88.209.210.0/24 maxlen: 24
88.209.215.0/24 maxlen: 24
88.209.214.0/24 maxlen: 24
178.210.225.0/24 maxlen: 24
178.210.224.0/24 maxlen: 24
193.138.125.0/24 maxlen: 24
77.242.144.0/22 maxlen: 24
77.242.151.0/24 maxlen: 24
77.242.148.0/24 maxlen: 24
45.88.93.0/24 maxlen: 24
178.210.251.0/24 maxlen: 24
178.210.250.0/24 maxlen: 24
178.210.249.0/24 maxlen: 24
178.210.248.0/24 maxlen: 24
45.14.11.0/24 maxlen: 24
45.14.10.0/24 maxlen: 24
92.52.212.0/22 maxlen: 24
92.52.210.0/23 maxlen: 23
92.52.209.0/24 maxlen: 24
92.52.208.0/24 maxlen: 24
2a00:1f40::/29 maxlen: 29
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:44:1c:ea:6a:08:89:54:38:fd:12:4d:48:3d:80:de:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cdaaa0e082360360acda347664eb8314eb11da10
Validity
Not Before: Dec 7 11:49:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a627c85fceda96ac4b5f2e28c1f41aa4e03f842e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:2e:a8:c2:74:63:9c:68:cc:96:a7:d1:c6:6c:
55:ce:a3:36:20:85:8e:e2:62:51:cf:a7:08:62:dc:
f8:04:8a:93:f1:db:f2:b9:9c:4e:c1:c9:ec:39:5c:
ce:a7:e5:36:43:6c:dd:a6:bc:b4:0d:00:e1:25:77:
87:c8:48:5b:2e:a0:31:4d:e9:4f:8a:15:ac:73:d3:
b1:ed:61:ba:28:95:3d:0a:6a:bb:dc:26:74:f2:5b:
cb:b0:c0:47:47:68:2d:45:2a:0c:ee:82:70:57:37:
48:74:4f:54:b7:9e:26:5c:50:cf:bc:5e:95:7e:32:
c5:57:c6:cb:78:8c:31:7e:d1:6b:95:32:43:98:af:
d7:c5:f2:d1:3d:08:6a:b4:3e:79:79:57:b0:e5:44:
6d:f4:68:81:aa:17:cc:89:b7:ed:d5:4e:35:c1:5e:
66:15:37:26:19:52:fc:9e:7b:70:55:c5:06:09:46:
77:8a:69:98:2c:46:2c:72:fd:ca:31:b2:4a:09:ab:
77:a2:a5:f0:b5:8a:1a:8b:3c:2b:97:8e:ce:ad:61:
77:9e:4e:95:00:ad:a3:70:58:c3:72:02:f0:34:4e:
e6:a8:7b:52:b9:17:26:b8:f8:81:ee:60:51:b1:f1:
38:71:56:6b:14:99:36:f1:0f:3f:11:3c:1b:99:11:
de:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:27:C8:5F:CE:DA:96:AC:4B:5F:2E:28:C1:F4:1A:A4:E0:3F:84:2E
X509v3 Authority Key Identifier:
keyid:CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/pifIX87alqxLXy4owfQapOA_hC4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.9.169.0-45.9.171.255
45.14.10.0/23
45.88.93.0/24
77.242.144.0-77.242.148.255
77.242.151.0/24
88.209.193.0/24
88.209.196.0/24
88.209.208.0/24
88.209.210.0/24
88.209.212.0/22
92.52.208.0/21
178.210.224.0/23
178.210.248.0/22
178.248.200.0/21
193.138.125.0/24
IPv6:
2a00:1f40::/29
Signature Algorithm: sha256WithRSAEncryption
03:c6:04:fa:0f:e4:88:e6:dc:20:ba:ac:0f:2e:6e:22:6f:cc:
fe:1a:29:22:a7:eb:c3:64:5f:d8:f7:66:97:ec:9b:da:58:c7:
3b:6f:ae:95:2e:57:71:77:7c:47:07:c8:3b:2b:b7:55:98:d0:
f3:6c:58:5a:78:f4:23:5c:c6:74:91:3a:4e:be:84:1b:57:62:
d7:c2:b7:38:28:b3:0d:4d:b4:f7:8a:00:1a:4d:29:57:e4:51:
aa:b8:0d:f9:47:07:eb:6a:f6:49:38:72:e7:aa:b9:76:df:c9:
56:9b:a1:20:c2:c1:50:7d:25:f9:e2:fb:e9:ad:ea:6d:3e:34:
f4:d5:7e:e0:b7:55:94:8d:af:ac:19:73:36:f2:53:bd:3b:5a:
89:b8:ed:34:fc:d8:e0:de:5d:05:f4:a5:7a:2b:e6:fe:2b:40:
03:06:ba:4b:e7:52:94:c6:46:ff:e2:b5:3a:73:e0:05:30:4b:
10:c7:f8:3d:f8:66:15:b6:d3:c3:49:73:75:36:9d:8a:fd:3a:
34:87:88:cd:68:9d:0d:69:ea:f7:07:c7:23:02:00:2c:b6:20:
cb:99:21:40:17:17:0c:8b:1c:66:d9:b0:64:00:49:10:e4:fd:
54:b3:2d:86:22:7a:d9:76:53:2a:1a:b6:f3:52:91:7e:c5:d4:
62:50:5c:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:47:56 2024 by rpki-client on console-ams.rpki-client.org