Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/t-4pRI_TriAelrHNaB101PZitJk.roa
File: t-4pRI_TriAelrHNaB101PZitJk.roa (raw, json)
Hash identifier: auWKxz/p9IOqvGUdttbpQ0okcSEkDJnOARdDTs6I2Ng=
Subject key identifier: B7:EE:29:44:8F:D3:AE:20:1E:96:B1:CD:68:1D:74:D4:F6:62:B4:99
Certificate issuer: /CN=cdaaa0e082360360acda347664eb8314eb11da10
Certificate serial: 018D9DD0C77456D3B19B3371704035FCB5D7
Authority key identifier: CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/t-4pRI_TriAelrHNaB101PZitJk.roa
Signing time: Mon 12 Feb 2024 14:55:21 +0000
ROA not before: Mon 12 Feb 2024 14:55:21 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 211619
IP address blocks: 5.182.112.0/24 maxlen: 24
5.182.115.0/24 maxlen: 24
45.9.168.0/24 maxlen: 24
77.242.152.0/22 maxlen: 24
83.137.153.0/24 maxlen: 24
83.137.156.0/24 maxlen: 24
83.137.157.0/24 maxlen: 24
83.137.158.0/24 maxlen: 24
88.209.206.0/24 maxlen: 24
88.209.219.0/24 maxlen: 24
88.209.228.0/24 maxlen: 24
88.209.236.0/22 maxlen: 22
88.209.236.0/24 maxlen: 24
88.209.237.0/24 maxlen: 24
88.209.238.0/24 maxlen: 24
88.209.239.0/24 maxlen: 24
88.209.246.0/24 maxlen: 24
88.209.247.0/24 maxlen: 24
88.209.254.0/24 maxlen: 24
92.52.217.0/24 maxlen: 24
178.210.229.0/24 maxlen: 24
178.210.232.0/24 maxlen: 24
194.41.47.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:9d:d0:c7:74:56:d3:b1:9b:33:71:70:40:35:fc:b5:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cdaaa0e082360360acda347664eb8314eb11da10
Validity
Not Before: Feb 12 14:55:21 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b7ee29448fd3ae201e96b1cd681d74d4f662b499
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:6f:f3:fd:98:a6:06:d8:39:ad:f0:af:9d:03:
da:a8:90:63:31:36:b6:85:0b:28:b7:fb:a9:9a:c4:
41:64:c1:64:55:c0:57:7d:36:c6:b4:8d:c0:d8:4e:
98:f1:cf:62:14:a0:b1:07:c4:58:41:8f:31:95:03:
b6:c6:74:fb:26:d2:d6:97:bb:9b:41:9a:f0:be:87:
f9:26:ef:6a:2e:ab:45:42:b4:10:f0:b1:a5:b3:e9:
33:37:55:96:11:a4:3f:2d:02:81:68:20:a8:70:84:
71:4a:68:bb:60:53:54:13:e2:6c:ef:a8:37:65:cc:
e4:ae:b9:82:5c:d3:b8:1d:d9:24:60:c7:3d:7c:12:
0d:8a:a1:c2:20:f0:95:e0:c4:b6:97:df:3b:da:03:
f0:e6:ec:4a:e1:a0:06:c5:d1:14:19:fb:9d:bb:32:
63:e3:9e:a4:b7:cb:e6:17:f4:e4:1f:f5:84:3a:3d:
a2:d4:74:cc:77:9e:21:b1:10:52:80:f5:46:d0:4a:
b0:59:21:e2:33:75:af:a2:be:0b:c5:71:1a:dd:47:
e5:9b:4d:02:28:98:55:0b:10:5d:65:64:9f:fa:70:
ba:b2:19:4b:4a:d1:32:99:bf:a0:c1:3e:ab:57:68:
11:dc:13:da:fb:e2:6b:28:97:8c:d7:c8:dc:72:d9:
ce:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:EE:29:44:8F:D3:AE:20:1E:96:B1:CD:68:1D:74:D4:F6:62:B4:99
X509v3 Authority Key Identifier:
keyid:CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/t-4pRI_TriAelrHNaB101PZitJk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.182.112.0/24
5.182.115.0/24
45.9.168.0/24
77.242.152.0/22
83.137.153.0/24
83.137.156.0-83.137.158.255
88.209.206.0/24
88.209.219.0/24
88.209.228.0/24
88.209.236.0/22
88.209.246.0/23
88.209.254.0/24
92.52.217.0/24
178.210.229.0/24
178.210.232.0/24
194.41.47.0/24
Signature Algorithm: sha256WithRSAEncryption
67:22:6d:a0:03:9f:fb:9b:43:2e:48:dd:e6:1c:23:16:1b:7f:
9b:79:1a:63:64:05:c9:fa:26:3b:06:af:3a:39:22:e0:47:09:
c5:9e:5e:c6:d0:ed:0b:7e:5e:96:9a:48:2b:82:c5:91:c9:45:
1d:b5:73:3b:8c:96:7a:c6:98:09:bd:3b:ae:05:ba:d9:63:31:
12:d0:99:a6:92:45:1b:22:37:ad:80:31:4b:f3:ee:d0:39:63:
28:bb:f5:7d:0c:a1:8c:e6:ce:b4:7f:0b:fe:2c:ba:cc:9d:fc:
e7:96:bc:4c:72:dd:d9:6c:fb:80:32:b2:05:37:74:39:8c:83:
f0:0d:10:48:e9:b1:d4:66:cf:36:84:ae:96:5e:fa:40:4a:92:
da:72:9e:3e:38:32:cc:fc:d2:7b:dc:4e:6e:91:20:3e:22:55:
ba:d1:30:55:81:6c:ea:7b:fb:94:2d:53:86:1d:e4:f8:1f:57:
eb:21:3b:af:3b:11:59:de:8f:75:4e:50:56:42:5c:bf:c7:8b:
39:07:8b:5c:e4:a0:a1:46:46:68:d5:54:45:56:23:fe:50:9e:
66:87:4f:c2:4a:f4:d0:9c:3a:d5:a1:49:af:17:09:7f:a1:b5:
92:e8:3d:42:0b:6a:05:8d:48:5c:fc:40:a8:78:95:41:2b:ea:
5f:5d:5f:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:47:57 2024 by rpki-client on console-ams.rpki-client.org