Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/vhyAH4uuxQjM_UX1KFEFN-NCrmQ.roa
File: vhyAH4uuxQjM_UX1KFEFN-NCrmQ.roa (raw, json)
Hash identifier: NtwcQz2ySghWynm4R8TxawY1BJ2vtFXa56sBBBySs5A=
Subject key identifier: BE:1C:80:1F:8B:AE:C5:08:CC:FD:45:F5:28:51:05:37:E3:42:AE:64
Certificate issuer: /CN=cdaaa0e082360360acda347664eb8314eb11da10
Certificate serial: 0184D24D6EDE09E04AADB1D01BFBDC72C624
Authority key identifier: CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/vhyAH4uuxQjM_UX1KFEFN-NCrmQ.roa
Signing time: Fri 02 Dec 2022 10:06:40 +0000
ROA not before: Fri 02 Dec 2022 10:06:40 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 211619
IP address blocks: 88.209.228.0/24 maxlen: 24
88.209.236.0/22 maxlen: 22
88.209.246.0/23 maxlen: 23
83.137.159.0/24 maxlen: 24
83.137.156.0/24 maxlen: 24
83.137.157.0/24 maxlen: 24
83.137.153.0/24 maxlen: 24
178.210.232.0/24 maxlen: 24
178.210.237.0/24 maxlen: 24
178.210.234.0/24 maxlen: 24
178.210.235.0/24 maxlen: 24
45.9.168.0/24 maxlen: 24
77.242.152.0/22 maxlen: 22
92.52.218.0/24 maxlen: 24
194.41.47.0/24 maxlen: 24
88.151.62.0/24 maxlen: 24
5.182.112.0/24 maxlen: 24
45.14.9.0/24 maxlen: 24
5.182.115.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:d2:4d:6e:de:09:e0:4a:ad:b1:d0:1b:fb:dc:72:c6:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cdaaa0e082360360acda347664eb8314eb11da10
Validity
Not Before: Dec 2 10:06:40 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=be1c801f8baec508ccfd45f528510537e342ae64
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:df:e0:e7:75:be:95:9a:5b:e0:89:65:e8:ef:
55:05:17:98:eb:6f:0c:48:40:a1:78:fc:f3:a6:ee:
c5:69:fa:9a:ae:29:74:34:8f:0a:7f:98:c8:cf:ca:
a0:34:a6:9c:4c:f8:a7:1c:f9:f3:8d:f8:fd:13:8a:
92:69:7f:da:72:43:54:3e:68:0a:53:b4:cf:8b:1c:
7b:25:e1:90:b9:e5:9d:df:7f:22:12:8e:dc:7a:c3:
51:32:47:b4:6f:cc:94:03:0b:d8:21:64:71:bb:04:
f7:b6:c3:a4:71:7c:ba:59:bf:ce:56:0b:1d:a2:ea:
61:5d:4a:39:0a:f6:28:b9:a4:ba:56:33:ed:c5:cd:
26:03:fd:01:ca:ff:6a:71:71:15:97:0d:1f:54:40:
ed:4e:4e:21:7c:e5:26:a7:31:d4:b5:81:23:62:80:
3a:3f:13:17:19:98:f7:40:74:ff:f1:8b:51:ae:c6:
c6:cb:2d:a5:25:1c:35:ac:b2:2e:37:90:00:33:49:
ce:ca:2f:81:db:c8:77:97:a0:47:44:1e:97:2d:04:
a7:0d:11:f7:a8:66:ac:46:e3:28:77:85:39:55:38:
de:35:a2:ef:95:cd:03:b4:50:98:87:c1:bc:fc:d9:
4b:19:59:b4:56:dc:a8:6d:df:88:8f:21:52:f0:d9:
11:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:1C:80:1F:8B:AE:C5:08:CC:FD:45:F5:28:51:05:37:E3:42:AE:64
X509v3 Authority Key Identifier:
keyid:CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/vhyAH4uuxQjM_UX1KFEFN-NCrmQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.182.112.0/24
5.182.115.0/24
45.9.168.0/24
45.14.9.0/24
77.242.152.0/22
83.137.153.0/24
83.137.156.0/23
83.137.159.0/24
88.151.62.0/24
88.209.228.0/24
88.209.236.0/22
88.209.246.0/23
92.52.218.0/24
178.210.232.0/24
178.210.234.0/23
178.210.237.0/24
194.41.47.0/24
Signature Algorithm: sha256WithRSAEncryption
60:1b:28:43:c7:53:d3:3d:1f:94:39:f7:25:3b:a3:2e:70:70:
2a:4d:01:98:44:38:33:3b:88:4c:5d:2f:67:67:a6:60:b2:01:
d8:fd:a3:fb:f4:96:65:68:fe:d2:bc:8f:d3:38:56:7c:6e:b7:
42:ad:81:02:c3:e0:0c:9e:49:8a:44:5c:71:13:83:7f:75:58:
37:2a:5a:9b:41:f1:a7:d2:23:be:96:38:92:a5:23:94:3d:c8:
39:16:af:57:96:16:52:94:be:b7:e6:53:72:ad:f5:2c:45:be:
f5:12:da:2e:f0:52:1e:85:d7:63:27:8e:7e:60:47:25:75:5d:
26:a9:f5:47:52:28:84:a3:a2:a3:a0:e0:a3:31:1b:49:c2:32:
8c:73:cd:d2:86:70:19:16:df:fb:3a:5c:ee:8d:2a:b2:23:a6:
8b:e5:da:24:12:1e:05:c5:8b:71:95:62:5d:5c:b0:01:a7:50:
c9:07:5d:ba:cb:09:b8:fb:23:0b:74:ec:2d:7c:3a:f4:5c:47:
0f:21:30:c9:0d:59:8e:c4:92:67:cf:2b:b9:93:55:61:c6:da:
d4:02:73:28:0f:3e:fd:f9:36:bb:e0:b2:c1:f2:ad:96:53:52:
af:be:77:59:14:32:a4:f5:d0:00:7d:23:63:b4:ce:bd:62:28:
b4:7c:24:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:56:28 2024 by rpki-client on console-fra.rpki-client.org