Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/xTuZL-C4cuHK9BCgTXmTxWutFek.roa
File: xTuZL-C4cuHK9BCgTXmTxWutFek.roa (raw, json)
Hash identifier: fSJknR6mBdzkzD4Rlzu42AFy2s8Qu5HkJCxA4iFaFzA=
Subject key identifier: C5:3B:99:2F:E0:B8:72:E1:CA:F4:10:A0:4D:79:93:C5:6B:AD:15:E9
Certificate issuer: /CN=cdaaa0e082360360acda347664eb8314eb11da10
Certificate serial: 01884285306846C148C4DD011916CB6352FD
Authority key identifier: CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/xTuZL-C4cuHK9BCgTXmTxWutFek.roa
Signing time: Mon 22 May 2023 08:13:24 +0000
ROA not before: Mon 22 May 2023 08:13:24 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 42864
IP address blocks: 178.248.200.0/21 maxlen: 21
45.9.171.0/24 maxlen: 24
45.9.170.0/24 maxlen: 24
45.9.169.0/24 maxlen: 24
88.209.196.0/24 maxlen: 24
88.209.193.0/24 maxlen: 24
88.209.208.0/24 maxlen: 24
88.209.213.0/24 maxlen: 24
88.209.212.0/24 maxlen: 24
88.209.210.0/24 maxlen: 24
88.209.215.0/24 maxlen: 24
88.209.214.0/24 maxlen: 24
2.58.168.0/22 maxlen: 22
178.210.224.0/22 maxlen: 24
193.138.125.0/24 maxlen: 24
77.242.144.0/22 maxlen: 24
77.242.151.0/24 maxlen: 24
77.242.148.0/24 maxlen: 24
77.242.156.0/24 maxlen: 24
92.52.219.0/24 maxlen: 24
45.88.93.0/24 maxlen: 24
45.14.11.0/24 maxlen: 24
45.14.10.0/24 maxlen: 24
45.14.8.0/24 maxlen: 24
92.52.212.0/22 maxlen: 24
92.52.210.0/23 maxlen: 23
92.52.209.0/24 maxlen: 24
92.52.208.0/24 maxlen: 24
2a00:1f40::/29 maxlen: 29
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:42:85:30:68:46:c1:48:c4:dd:01:19:16:cb:63:52:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cdaaa0e082360360acda347664eb8314eb11da10
Validity
Not Before: May 22 08:13:24 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c53b992fe0b872e1caf410a04d7993c56bad15e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:81:27:24:c9:5d:b8:10:56:c5:f6:63:84:4b:
79:9a:fd:50:61:ef:e7:6a:2e:ce:ff:e8:c0:58:e4:
1a:0f:83:85:16:b0:81:7a:ac:de:5d:e5:e7:f5:4d:
ba:6c:38:ef:cf:cd:93:c8:5e:87:67:ef:fa:62:de:
ac:15:05:08:5e:02:e8:7e:d0:0f:1d:72:97:5b:d9:
c8:ee:db:9b:2d:f0:83:bb:ef:c0:4b:e2:28:e5:91:
3e:98:b7:52:35:51:6b:23:51:f1:43:9f:2b:97:38:
74:93:e4:18:16:c4:9e:dd:6a:b7:da:fd:d2:e5:2d:
1b:e5:fa:44:9a:47:bb:a7:10:c0:32:b7:76:a1:11:
54:df:23:40:26:5a:53:15:59:61:7e:65:e2:d2:71:
18:c6:22:d4:4c:08:ea:bf:73:a7:26:7f:98:ce:4f:
01:63:a9:d8:a5:75:a1:c3:5f:fc:90:85:41:72:03:
dc:42:a5:b4:68:d5:de:4b:a8:1b:bd:d5:a2:93:6c:
4f:3a:08:6a:30:eb:2a:2f:32:54:a9:f9:e1:0f:27:
f0:44:64:03:de:3b:1c:5b:09:b4:67:99:ed:70:b3:
2a:4a:61:be:d3:aa:69:3f:90:48:70:b7:86:12:e9:
f8:36:86:31:84:91:1c:28:64:4e:2a:96:2a:52:66:
17:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:3B:99:2F:E0:B8:72:E1:CA:F4:10:A0:4D:79:93:C5:6B:AD:15:E9
X509v3 Authority Key Identifier:
keyid:CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/xTuZL-C4cuHK9BCgTXmTxWutFek.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.58.168.0/22
45.9.169.0-45.9.171.255
45.14.8.0/24
45.14.10.0/23
45.88.93.0/24
77.242.144.0-77.242.148.255
77.242.151.0/24
77.242.156.0/24
88.209.193.0/24
88.209.196.0/24
88.209.208.0/24
88.209.210.0/24
88.209.212.0/22
92.52.208.0/21
92.52.219.0/24
178.210.224.0/22
178.248.200.0/21
193.138.125.0/24
IPv6:
2a00:1f40::/29
Signature Algorithm: sha256WithRSAEncryption
bd:45:5f:87:4a:5f:fc:b5:05:01:ec:1a:76:f1:24:4a:ca:10:
65:2f:f9:fe:aa:7e:b4:b6:89:ac:6f:ce:21:20:f0:59:6c:ae:
c7:c7:f3:bf:e5:9a:09:8f:19:fe:1b:29:2d:c0:2c:25:0b:66:
84:8a:40:c8:c9:25:cb:7d:06:46:16:47:fa:3d:3f:dc:86:a8:
69:bb:3c:c3:6b:04:75:11:d9:ef:87:14:d7:43:03:7c:70:32:
01:cf:04:25:4a:f5:bf:48:64:ca:43:e4:36:36:90:f5:d3:94:
3f:c2:1f:cf:63:ea:82:8f:7f:a5:2e:09:d6:3b:a2:23:4d:25:
e2:49:73:64:a5:c8:a9:10:d6:07:21:99:f3:ee:de:7c:0a:b3:
d9:cf:3e:d3:f4:90:da:d8:ac:bf:25:e5:d8:f6:3e:4b:95:55:
2d:a1:c7:7b:7a:75:69:31:cc:3e:d2:47:56:c0:f8:bc:a1:83:
f8:11:44:c3:40:5c:34:91:51:25:ae:c0:33:9b:07:8f:16:ab:
cb:bf:09:7c:53:f9:59:a5:e9:0c:ef:64:0b:d7:43:53:20:c9:
90:ab:b1:36:69:4c:f1:f3:ef:b2:ea:e0:62:2d:79:76:d5:79:
bc:b3:c8:64:46:8b:ef:56:03:f4:0d:3d:4b:66:92:6b:d4:e0:
13:13:13:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:56:28 2024 by rpki-client on console-fra.rpki-client.org