Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/vzQzjIHfOOl1rODRVoFKPp4YNcQ.roa
File: vzQzjIHfOOl1rODRVoFKPp4YNcQ.roa (raw, json)
Hash identifier: NUkBBUcBVWIg7k0Zskirhu2npzJkozR1Tq1Ny+LrKL0=
Subject key identifier: BF:34:33:8C:81:DF:38:E9:75:AC:E0:D1:56:81:4A:3E:9E:18:35:C4
Certificate issuer: /CN=cdaaa0e082360360acda347664eb8314eb11da10
Certificate serial: 0181F79B299E689B98C7F9109B70E2FC7F48
Authority key identifier: CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/vzQzjIHfOOl1rODRVoFKPp4YNcQ.roa
Signing time: Wed 13 Jul 2022 12:49:09 +0000
ROA not before: Wed 13 Jul 2022 12:49:09 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 42864
IP address blocks: 88.209.228.0/24 maxlen: 24
88.209.227.0/24 maxlen: 24
88.209.231.0/24 maxlen: 24
178.210.236.0/24 maxlen: 24
88.209.192.0/21 maxlen: 24
88.209.208.0/20 maxlen: 24
88.209.226.0/24 maxlen: 24
88.209.225.0/24 maxlen: 24
88.209.224.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:81:f7:9b:29:9e:68:9b:98:c7:f9:10:9b:70:e2:fc:7f:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cdaaa0e082360360acda347664eb8314eb11da10
Validity
Not Before: Jul 13 12:49:09 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=bf34338c81df38e975ace0d156814a3e9e1835c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:20:e6:bc:76:69:3e:74:ec:e1:3f:5f:65:de:
30:d9:d5:fe:e4:f8:76:5a:d1:f2:a5:f5:c1:8a:d2:
da:11:6f:2e:93:b5:48:8b:2e:9e:6f:47:98:59:d9:
08:bd:47:0a:5e:c2:2f:07:bc:18:52:b8:88:ff:f9:
03:eb:3c:34:fb:9a:d0:5a:5a:9c:f5:66:fd:de:64:
b4:c2:58:9a:db:f6:de:45:9b:d9:a0:97:42:76:6c:
4a:26:00:d5:a9:5f:fe:a5:d3:50:21:db:6f:39:f6:
76:57:1e:dd:dc:2f:b0:66:67:78:71:39:45:14:80:
e6:e4:10:8b:69:23:d7:df:db:6b:3c:27:0e:8f:34:
42:e4:a1:55:ad:a7:55:e2:0e:d9:a0:0f:fd:66:68:
26:00:e6:29:e4:0c:99:b0:1a:54:36:aa:99:20:15:
2d:ef:9b:1f:07:08:5d:a7:f4:eb:8a:c8:03:3d:71:
16:5a:59:8a:c1:c1:cc:00:95:d6:60:f1:02:8c:be:
17:d1:7a:3c:71:ee:ea:4b:6a:63:8a:c9:12:12:9a:
41:71:3f:6a:30:9a:f7:60:42:30:c4:02:c0:03:bb:
2d:8f:b6:db:d2:00:29:98:b8:58:48:09:29:be:97:
69:16:6d:fb:b4:8d:95:8a:ea:9c:2e:40:e4:b1:4a:
b0:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:34:33:8C:81:DF:38:E9:75:AC:E0:D1:56:81:4A:3E:9E:18:35:C4
X509v3 Authority Key Identifier:
keyid:CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/vzQzjIHfOOl1rODRVoFKPp4YNcQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.209.192.0/21
88.209.208.0-88.209.228.255
88.209.231.0/24
178.210.236.0/24
Signature Algorithm: sha256WithRSAEncryption
5f:b5:1b:af:8a:7b:05:11:5a:2a:2f:9e:53:a6:91:07:9b:57:
d5:23:a9:f3:78:71:97:93:f2:cc:51:b7:0d:dc:a0:0f:d6:be:
8b:d7:5c:32:f7:3e:59:1e:c0:5e:34:2d:69:ea:7a:4d:82:24:
d6:de:b1:b2:3e:0f:14:2e:13:16:71:2b:d7:f0:16:e8:5f:82:
77:bc:b3:60:2e:ab:9c:5c:55:14:38:62:0f:11:a4:8a:74:6b:
cb:f0:e3:20:2b:1d:01:8e:33:6e:03:6c:ac:a1:8b:d7:cc:6a:
99:9e:fd:1f:0d:aa:02:6c:f8:20:6d:75:ee:e9:ed:3d:e1:50:
d2:c3:e7:8c:51:28:15:f9:f0:7a:fd:bb:a0:39:16:39:83:73:
62:a6:82:21:7c:e5:25:30:64:d8:49:64:8b:9a:9f:42:2e:40:
4f:84:67:88:b4:0e:5a:71:37:71:62:f6:43:fd:56:b5:20:1d:
c7:3b:f2:e4:fd:68:ae:88:ce:b4:43:a1:5c:bf:c5:9a:1c:64:
e8:e7:cc:69:2b:19:82:c7:32:85:21:83:92:58:8f:8a:74:ab:
ad:f4:a1:22:b5:a2:dd:44:d4:a7:dc:23:8a:bf:59:cc:ee:c1:
6c:16:c8:83:f5:d7:a1:be:16:1f:72:bc:46:36:b1:cf:e6:bd:
9c:cb:73:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:56:28 2024 by rpki-client on console-fra.rpki-client.org