Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/ukvvJLW4jhB2rhP_B9A7UG8pDCM.roa
File: ukvvJLW4jhB2rhP_B9A7UG8pDCM.roa (raw, json)
Hash identifier: 9Jiex+XlhuHZ/Rjwat2Aa1KpF518NXLNySfgKVNxrrI=
Subject key identifier: BA:4B:EF:24:B5:B8:8E:10:76:AE:13:FF:07:D0:3B:50:6F:29:0C:23
Certificate issuer: /CN=cdaaa0e082360360acda347664eb8314eb11da10
Certificate serial: 018BA3BB7FCC64AE5AA1F517C26442FE2D32
Authority key identifier: CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/ukvvJLW4jhB2rhP_B9A7UG8pDCM.roa
Signing time: Mon 06 Nov 2023 08:24:16 +0000
ROA not before: Mon 06 Nov 2023 08:24:16 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 88.209.232.0/22 maxlen: 24
178.210.228.0/24 maxlen: 24
77.242.150.0/24 maxlen: 24
88.209.200.0/24 maxlen: 24
88.209.211.0/24 maxlen: 24
88.209.217.0/24 maxlen: 24
88.209.226.0/24 maxlen: 24
92.52.214.0/24 maxlen: 24
178.210.248.0/24 maxlen: 24
178.210.249.0/24 maxlen: 24
178.210.250.0/24 maxlen: 24
178.210.251.0/24 maxlen: 24
88.151.56.0/23 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:a3:bb:7f:cc:64:ae:5a:a1:f5:17:c2:64:42:fe:2d:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cdaaa0e082360360acda347664eb8314eb11da10
Validity
Not Before: Nov 6 08:24:16 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ba4bef24b5b88e1076ae13ff07d03b506f290c23
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fb:d0:16:78:a5:bf:78:ce:7f:8d:11:13:00:12:
0e:0d:db:4b:df:a8:2a:11:ee:1c:84:6a:82:9d:73:
20:76:f8:df:f2:87:be:56:54:69:e3:91:8e:96:43:
cc:7c:59:9d:48:98:00:a5:d7:e4:d6:40:b5:b5:ce:
1d:ec:3c:3c:c0:eb:7b:90:cf:36:3c:2a:ca:52:4e:
c8:ed:ca:35:c6:46:1d:8a:12:b3:07:27:21:57:67:
ea:eb:8f:af:57:79:71:6a:78:9e:1b:44:3c:a6:a9:
61:f3:bf:92:b5:75:a9:e6:63:47:63:92:05:35:dc:
97:62:e3:f0:af:3c:af:07:4b:eb:f2:e6:41:05:f1:
05:d0:6b:63:66:22:42:a4:82:b0:2c:6e:29:1a:9b:
49:bc:7f:66:6d:7b:8f:b4:05:f1:cf:73:7a:fa:7f:
e7:f1:bf:6c:b3:6a:33:95:12:e3:50:8b:3e:fb:e9:
f0:3d:79:ce:e6:5a:8d:64:0e:ae:55:21:97:13:20:
7e:60:95:a3:d7:23:19:36:f1:e2:29:86:f8:99:71:
a6:fe:73:79:58:74:8d:d3:52:4d:70:9b:b9:c8:f5:
85:b6:0c:3d:6d:e5:49:5b:6f:af:ee:97:72:a9:2e:
f4:17:87:f1:5f:08:97:ba:09:e5:97:f0:a6:5c:5c:
34:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:4B:EF:24:B5:B8:8E:10:76:AE:13:FF:07:D0:3B:50:6F:29:0C:23
X509v3 Authority Key Identifier:
keyid:CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/ukvvJLW4jhB2rhP_B9A7UG8pDCM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.242.150.0/24
88.151.56.0/23
88.209.200.0/24
88.209.211.0/24
88.209.217.0/24
88.209.226.0/24
88.209.232.0/22
92.52.214.0/24
178.210.228.0/24
178.210.248.0/22
Signature Algorithm: sha256WithRSAEncryption
96:c2:b5:1f:ab:f0:49:9c:0e:e3:f1:ee:d4:19:9d:72:8a:47:
18:41:e0:d7:91:d1:05:1b:42:b7:bb:63:0b:7e:81:5a:6c:4d:
f9:21:4f:46:c4:d0:64:d6:ec:c3:11:0a:6a:9e:ea:40:08:8b:
ab:9f:53:59:58:22:07:64:79:b0:35:0f:90:03:6f:23:46:71:
13:f5:0f:53:55:8b:e2:6e:5e:47:c8:c9:99:26:3b:f9:5a:68:
23:33:3e:c4:b5:91:20:37:d9:c5:33:66:22:a8:08:04:9d:e4:
d5:35:d0:92:bd:ca:07:a0:87:a7:49:7e:4c:a4:bf:05:8d:33:
7d:ae:a7:ab:ee:60:6f:30:eb:42:4a:3a:00:ce:5a:67:c5:d9:
18:1e:0e:37:d2:fa:64:da:fd:83:6b:6e:7e:90:42:e1:3e:0a:
25:d4:0a:f0:0b:f2:d0:4e:75:69:bb:68:99:a7:b7:41:63:a6:
a7:3b:ab:73:24:05:56:a3:c0:16:f3:99:02:5f:78:b0:08:98:
fb:25:b8:46:cc:b9:06:65:67:f6:d5:8d:70:8a:18:19:25:44:
0a:f2:1d:d5:b2:3f:19:c4:a2:aa:55:80:5d:b9:62:3d:c9:63:
a3:4e:dc:58:0a:4a:95:91:54:b9:1a:95:07:33:aa:85:0e:b8:
d6:8f:46:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:56:28 2024 by rpki-client on console-fra.rpki-client.org