Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/qKNhhtmbpRrz8GGK5VjENpEni0U.roa
File: qKNhhtmbpRrz8GGK5VjENpEni0U.roa (raw, json)
Hash identifier: XtwhFHSlbUSMUMSrJ6gs5qN8+9Wpsjg6v+NRZ7+EDwk=
Subject key identifier: A8:A3:61:86:D9:9B:A5:1A:F3:F0:61:8A:E5:58:C4:36:91:27:8B:45
Certificate issuer: /CN=cdaaa0e082360360acda347664eb8314eb11da10
Certificate serial: 018851B34A42EBEECCFDEAB04647CFEB2E07
Authority key identifier: CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/qKNhhtmbpRrz8GGK5VjENpEni0U.roa
Signing time: Thu 25 May 2023 06:58:04 +0000
ROA not before: Thu 25 May 2023 06:58:04 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 61317
IP address blocks: 88.209.244.0/24 maxlen: 24
178.210.236.0/24 maxlen: 24
88.209.192.0/24 maxlen: 24
88.209.194.0/24 maxlen: 24
88.151.59.0/24 maxlen: 24
88.209.207.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:51:b3:4a:42:eb:ee:cc:fd:ea:b0:46:47:cf:eb:2e:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cdaaa0e082360360acda347664eb8314eb11da10
Validity
Not Before: May 25 06:58:04 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a8a36186d99ba51af3f0618ae558c43691278b45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:1d:ea:0f:ef:69:ee:4f:43:61:d1:08:38:99:
db:b1:72:14:c5:80:45:eb:19:27:6b:2a:87:f5:f5:
45:2a:26:e7:ce:80:2f:ed:6c:4f:6a:52:c8:6f:27:
df:2c:4c:e7:df:5e:ac:2d:1f:5b:7c:d7:de:26:a4:
ca:d2:05:cb:15:7b:1f:4b:a5:7e:82:1c:f7:d3:bb:
a3:be:3c:09:cd:d0:66:78:43:30:56:1c:a8:7e:0a:
61:bc:69:4e:44:bd:53:86:bd:5e:b2:92:22:1b:3c:
20:d9:cb:b0:cc:32:68:a8:1c:81:43:0c:47:a7:38:
bf:41:3d:0a:50:99:27:88:fb:b0:03:3e:65:1e:7f:
d7:62:bc:00:b0:63:14:5c:ff:95:1e:c0:53:8e:97:
e6:0c:98:09:28:4f:c9:ec:7b:16:8e:9a:58:bc:b3:
ca:6e:65:d2:d3:74:22:e0:8f:0d:27:d6:9d:f3:3f:
4f:a0:7e:37:4c:e7:e6:98:01:1e:67:9f:e2:9b:8a:
47:7c:15:f3:ba:5c:d1:b3:50:e1:a0:38:60:e7:5e:
0a:57:de:bb:8e:d8:fe:b1:09:34:f2:b9:51:24:b0:
80:89:46:5c:81:ee:46:92:34:4d:29:5e:03:d8:aa:
32:6e:15:e1:f6:74:04:1d:83:23:69:24:80:c5:41:
c8:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:A3:61:86:D9:9B:A5:1A:F3:F0:61:8A:E5:58:C4:36:91:27:8B:45
X509v3 Authority Key Identifier:
keyid:CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/qKNhhtmbpRrz8GGK5VjENpEni0U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.151.59.0/24
88.209.192.0/24
88.209.194.0/24
88.209.207.0/24
88.209.244.0/24
178.210.236.0/24
Signature Algorithm: sha256WithRSAEncryption
75:5e:c8:4d:53:7c:bd:10:93:c5:2a:c5:a9:90:8c:04:5c:c5:
34:e5:f9:54:b8:b7:44:56:ae:05:62:1f:12:56:7e:9e:fa:4d:
b0:bd:10:04:a3:61:1a:16:4b:99:82:3d:ba:fb:02:32:bf:c9:
ce:12:29:c1:d7:87:c4:bc:87:8d:e7:77:69:4c:5c:52:8e:bb:
d2:52:f8:b8:53:b1:8a:42:19:ed:99:c6:b5:ec:7f:2b:05:06:
d2:f0:fb:bb:e4:1c:aa:d5:5e:6e:6c:f0:3d:89:f1:0e:fe:bc:
a0:da:83:42:15:d6:e1:d2:49:18:f0:1e:7f:e8:f4:1c:5c:2c:
55:28:81:21:51:48:8d:f3:14:d1:f7:96:60:80:72:08:a1:6a:
3a:4b:33:de:bd:74:15:44:a3:70:7e:a7:1e:08:9c:00:96:ba:
e0:7b:19:15:b8:ec:2b:a5:8e:e9:8a:95:0f:2d:d3:1a:1a:1c:
1a:a6:51:ff:1a:08:51:e4:0f:ef:b0:9a:d5:2a:76:52:b7:83:
73:c6:ce:24:03:da:b8:20:4f:7e:cd:40:38:ff:3c:c4:7a:15:
21:30:b1:33:2b:51:df:d7:70:74:3f:6e:60:83:a3:c9:75:89:
f5:22:54:a2:1c:96:aa:72:dc:b1:80:1d:7d:89:2c:76:3f:05:
41:ad:22:13
-----BEGIN CERTIFICATE-----
MIIFGzCCBAOgAwIBAgISAYhRs0pC6+7M/eqwRkfP6y4HMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNkYWFhMGUwODIzNjAzNjBhY2RhMzQ3NjY0ZWI4MzE0ZWIx
MWRhMTAwHhcNMjMwNTI1MDY1ODA0WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhOGEzNjE4NmQ5OWJhNTFhZjNmMDYxOGFlNTU4YzQzNjkxMjc4YjQ1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsB3qD+9p7k9DYdEIOJnbsXIUxYBF
6xknayqH9fVFKibnzoAv7WxPalLIbyffLEzn316sLR9bfNfeJqTK0gXLFXsfS6V+
ghz307ujvjwJzdBmeEMwVhyofgphvGlORL1Thr1espIiGzwg2cuwzDJoqByBQwxH
pzi/QT0KUJkniPuwAz5lHn/XYrwAsGMUXP+VHsBTjpfmDJgJKE/J7HsWjppYvLPK
bmXS03Qi4I8NJ9ad8z9PoH43TOfmmAEeZ5/im4pHfBXzulzRs1DhoDhg514KV967
jtj+sQk08rlRJLCAiUZcge5GkjRNKV4D2KoybhXh9nQEHYMjaSSAxUHI1QIDAQAB
o4ICJzCCAiMwHQYDVR0OBBYEFKijYYbZm6Ua8/BhiuVYxDaRJ4tFMB8GA1UdIwQY
MBaAFM2qoOCCNgNgrNo0dmTrgxTrEdoQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvemFxZzRJSTJBMkNzMmpSMlpPdURGT3NSMmhBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZC81ODkxMjctMTA5Ni00YzkxLTk2Y2Mt
N2U0ZDZmNmY2ZTY2LzEvcUtOaGh0bWJwUnJ6OEdHSzVWakVOcEVuaTBVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZC81ODkxMjctMTA5Ni00YzkxLTk2Y2MtN2U0ZDZmNmY2ZTY2
LzEvemFxZzRJSTJBMkNzMmpSMlpPdURGT3NSMmhBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMD0GCCsGAQUFBwEHAQH/BC4wLDAqBAIAATAkAwQAWJc7AwQA
WNHAAwQAWNHCAwQAWNHPAwQAWNH0AwQAstLsMA0GCSqGSIb3DQEBCwUAA4IBAQB1
XshNU3y9EJPFKsWpkIwEXMU05flUuLdEVq4FYh8SVn6e+k2wvRAEo2EaFkuZgj26
+wIyv8nOEinB14fEvIeN53dpTFxSjrvSUvi4U7GKQhntmca17H8rBQbS8Pu75Byq
1V5ubPA9ifEO/ryg2oNCFdbh0kkY8B5/6PQcXCxVKIEhUUiN8xTR95ZggHIIoWo6
SzPevXQVRKNwfqceCJwAlrrgexkVuOwrpY7pipUPLdMaGhwaplH/GghR5A/vsJrV
KnZSt4Nzxs4kA9q4IE9+zUA4/zzEehUhMLEzK1Hf13B0P25gg6PJdYn1IlSiHJaq
ctyxgB19iSx2PwVBrSIT
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:47:56 2024 by rpki-client on console-ams.rpki-client.org