Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/uuxV7XdSAc7mv-P89pUtGWXG0_I.roa
File: uuxV7XdSAc7mv-P89pUtGWXG0_I.roa (raw, json)
Hash identifier: wWKqHtAHW3/2wR2Q4PBdygKZ8lj3tNcaHvUYtlut3ds=
Subject key identifier: BA:EC:55:ED:77:52:01:CE:E6:BF:E3:FC:F6:95:2D:19:65:C6:D3:F2
Certificate issuer: /CN=cdaaa0e082360360acda347664eb8314eb11da10
Certificate serial: 018CC3B6B95E12061585C78FD9BE930CB83E
Authority key identifier: CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/uuxV7XdSAc7mv-P89pUtGWXG0_I.roa
Signing time: Mon 01 Jan 2024 06:29:41 +0000
ROA not before: Mon 01 Jan 2024 06:29:41 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 42864
IP address blocks: 178.248.200.0/21 maxlen: 21
45.9.171.0/24 maxlen: 24
45.9.170.0/24 maxlen: 24
45.9.169.0/24 maxlen: 24
88.209.196.0/24 maxlen: 24
88.209.193.0/24 maxlen: 24
88.209.208.0/24 maxlen: 24
88.209.213.0/24 maxlen: 24
88.209.212.0/24 maxlen: 24
88.209.210.0/24 maxlen: 24
88.209.215.0/24 maxlen: 24
88.209.214.0/24 maxlen: 24
178.210.225.0/24 maxlen: 24
178.210.224.0/24 maxlen: 24
193.138.125.0/24 maxlen: 24
178.210.240.0/22 maxlen: 22
178.210.238.0/23 maxlen: 23
178.210.237.0/24 maxlen: 24
77.242.144.0/22 maxlen: 24
77.242.151.0/24 maxlen: 24
77.242.148.0/24 maxlen: 24
45.88.93.0/24 maxlen: 24
178.210.244.0/22 maxlen: 22
178.210.251.0/24 maxlen: 24
178.210.250.0/24 maxlen: 24
178.210.249.0/24 maxlen: 24
178.210.248.0/24 maxlen: 24
178.210.254.0/23 maxlen: 23
45.14.11.0/24 maxlen: 24
45.14.10.0/24 maxlen: 24
92.52.212.0/22 maxlen: 24
92.52.210.0/23 maxlen: 23
92.52.209.0/24 maxlen: 24
92.52.208.0/24 maxlen: 24
2a00:1f40::/29 maxlen: 29
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:b6:b9:5e:12:06:15:85:c7:8f:d9:be:93:0c:b8:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cdaaa0e082360360acda347664eb8314eb11da10
Validity
Not Before: Jan 1 06:29:41 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=baec55ed775201cee6bfe3fcf6952d1965c6d3f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:f1:3d:b2:13:a6:3b:9c:d9:29:fb:7e:ac:ee:
4b:c7:1f:ae:22:11:e7:87:c6:92:15:0a:01:96:48:
98:9e:a4:50:ce:9c:e6:16:9b:8c:96:8d:e1:87:36:
61:0e:54:4f:e0:7b:b5:8b:c6:89:df:96:07:bf:db:
e3:16:e2:96:36:85:1e:ed:4d:43:de:04:72:1b:dd:
87:d6:47:c4:81:11:29:05:3d:0e:36:d3:08:13:93:
c3:8e:65:87:08:0a:f6:e5:b6:d5:cb:28:91:73:41:
d8:e1:c2:38:df:89:ed:a2:af:28:ef:a7:86:cc:5a:
a4:ef:5d:e0:05:b3:e3:9d:76:0f:4d:37:d2:ef:80:
31:2d:96:47:a2:d2:db:18:ae:86:64:97:d6:eb:7b:
51:bd:20:ba:16:4b:31:97:6e:5e:55:b4:e9:7d:36:
12:f9:29:ba:12:41:40:23:46:e8:cf:22:06:12:0f:
24:86:0a:24:df:20:3d:99:4c:ac:fe:de:a7:78:65:
79:b0:c9:ea:64:a2:4d:70:9c:b6:f9:ca:b2:60:16:
8a:2b:8e:f0:ce:72:58:a4:c9:ca:26:09:06:39:ec:
10:94:8a:ac:48:89:32:c8:d0:8f:68:47:11:e3:ac:
00:d0:ff:b7:9f:da:8e:66:1f:02:de:83:c7:a5:a1:
22:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:EC:55:ED:77:52:01:CE:E6:BF:E3:FC:F6:95:2D:19:65:C6:D3:F2
X509v3 Authority Key Identifier:
keyid:CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/uuxV7XdSAc7mv-P89pUtGWXG0_I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.9.169.0-45.9.171.255
45.14.10.0/23
45.88.93.0/24
77.242.144.0-77.242.148.255
77.242.151.0/24
88.209.193.0/24
88.209.196.0/24
88.209.208.0/24
88.209.210.0/24
88.209.212.0/22
92.52.208.0/21
178.210.224.0/23
178.210.237.0-178.210.251.255
178.210.254.0/23
178.248.200.0/21
193.138.125.0/24
IPv6:
2a00:1f40::/29
Signature Algorithm: sha256WithRSAEncryption
25:1a:9d:e5:3b:09:01:ea:c5:be:80:72:0c:a7:fd:25:85:c8:
4a:99:08:40:f4:6d:8b:a8:9c:42:36:94:4f:f8:3b:90:8d:dd:
c9:af:77:93:4e:7a:48:c1:60:1a:1c:b1:0f:e4:3f:00:a9:a0:
c5:41:de:79:a6:f6:f0:32:50:ef:9e:09:87:2d:68:7d:7a:62:
1c:58:c9:e0:b6:a6:2a:3a:bf:88:f7:e0:6f:a8:e6:71:47:a1:
aa:1f:39:08:7b:28:82:67:4b:c6:de:69:3a:2e:74:bf:4c:90:
f5:17:74:86:81:0e:86:aa:24:cb:af:81:27:b5:2e:3c:12:21:
9e:1e:83:f5:7b:3e:50:fd:cf:d8:b3:30:35:ea:15:0d:eb:d4:
1d:cc:61:ec:51:b9:f2:e3:88:dd:a9:5e:1b:11:42:85:72:d3:
9e:d5:a0:20:10:2c:d9:84:a0:b1:6d:1a:e8:6b:50:b2:df:14:
8d:b9:98:c1:d5:1c:11:8c:dc:8d:fb:9f:fa:26:01:32:1b:7b:
c0:70:03:b2:e4:92:3b:3a:c8:ed:4b:0e:2c:f6:b7:57:1e:a7:
94:21:a2:e7:53:1b:77:28:66:4f:78:61:1c:29:0f:25:d2:19:
21:03:56:be:20:61:c0:e9:06:de:f6:ff:a1:ad:a9:3f:ce:e1:
07:0f:26:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:56:28 2024 by rpki-client on console-fra.rpki-client.org