Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/xzVuMvHkHJMSa3I5WqjnQo77568.roa
File: xzVuMvHkHJMSa3I5WqjnQo77568.roa (raw, json)
Hash identifier: BF3PzGJWuIqTxj+UFNCvp+wCeWUFqMQgifteR38bKoo=
Subject key identifier: C7:35:6E:32:F1:E4:1C:93:12:6B:72:39:5A:A8:E7:42:8E:FB:E7:AF
Certificate issuer: /CN=cdaaa0e082360360acda347664eb8314eb11da10
Certificate serial: 01824A71BE715499D6D167E981D99D836072
Authority key identifier: CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/xzVuMvHkHJMSa3I5WqjnQo77568.roa
Signing time: Fri 29 Jul 2022 14:52:24 +0000
ROA not before: Fri 29 Jul 2022 14:52:24 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 211619
IP address blocks: 88.209.228.0/24 maxlen: 24
88.209.229.0/24 maxlen: 24
88.209.236.0/22 maxlen: 22
88.209.246.0/23 maxlen: 23
88.209.253.0/24 maxlen: 24
88.209.254.0/24 maxlen: 24
83.137.156.0/24 maxlen: 24
83.137.157.0/24 maxlen: 24
83.137.153.0/24 maxlen: 24
178.210.232.0/22 maxlen: 22
178.210.237.0/24 maxlen: 24
45.9.168.0/24 maxlen: 24
77.242.152.0/22 maxlen: 22
92.52.217.0/24 maxlen: 24
92.52.218.0/24 maxlen: 24
194.41.47.0/24 maxlen: 24
88.151.62.0/24 maxlen: 24
5.182.112.0/24 maxlen: 24
5.182.115.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:4a:71:be:71:54:99:d6:d1:67:e9:81:d9:9d:83:60:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cdaaa0e082360360acda347664eb8314eb11da10
Validity
Not Before: Jul 29 14:52:24 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c7356e32f1e41c93126b72395aa8e7428efbe7af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:90:ff:be:bd:d3:c8:58:e0:bd:91:77:70:f0:
62:f3:fb:05:2c:59:ee:04:c7:52:54:a5:ae:9f:ef:
ff:91:a6:13:5e:29:e1:e5:51:49:19:a2:d9:39:66:
76:49:28:bc:63:f6:39:20:ee:16:a8:0e:49:d0:0f:
c6:5c:81:69:f6:45:97:22:a4:3a:cc:21:16:35:88:
54:55:fc:d7:b0:8a:d9:61:9c:d1:93:56:bd:b6:22:
30:d6:60:da:26:a6:b0:02:c4:f9:b0:f7:49:c4:31:
c4:8a:87:15:d6:2a:6c:cb:30:38:7f:e2:69:ce:86:
25:f0:c9:7f:4e:cc:b3:ef:e1:d6:cb:59:d2:d1:77:
82:66:59:2a:62:5d:c1:e8:1c:6a:5b:69:95:b4:f6:
eb:3e:c5:f5:fc:45:11:cd:a1:c5:f4:ad:cd:68:13:
d7:6b:66:c8:b7:2a:a0:36:11:d1:cd:a9:a0:b0:a9:
26:83:19:52:b1:e5:75:0d:99:18:8a:91:f2:96:04:
11:8f:68:4b:a5:6c:9e:22:47:cf:b6:2b:be:ef:48:
ac:6f:9b:eb:cd:e5:29:6e:ab:24:02:f3:83:2b:94:
8b:58:02:24:44:9f:f9:72:0d:73:d4:ce:5d:d1:c8:
f2:7b:38:b3:71:86:84:52:70:c4:06:85:70:ba:73:
0a:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:35:6E:32:F1:E4:1C:93:12:6B:72:39:5A:A8:E7:42:8E:FB:E7:AF
X509v3 Authority Key Identifier:
keyid:CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/xzVuMvHkHJMSa3I5WqjnQo77568.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.182.112.0/24
5.182.115.0/24
45.9.168.0/24
77.242.152.0/22
83.137.153.0/24
83.137.156.0/23
88.151.62.0/24
88.209.228.0/23
88.209.236.0/22
88.209.246.0/23
88.209.253.0-88.209.254.255
92.52.217.0-92.52.218.255
178.210.232.0/22
178.210.237.0/24
194.41.47.0/24
Signature Algorithm: sha256WithRSAEncryption
55:65:70:e4:54:c9:bc:91:59:ef:a8:a2:61:1e:06:08:99:62:
56:de:0a:2a:2e:ca:5d:58:69:41:0c:d6:9f:7f:bc:4e:f8:59:
29:a9:af:06:4f:a2:8a:c3:8f:32:ce:5b:1d:1d:c6:6b:de:7f:
ba:fc:20:b5:9a:99:4e:fd:0e:e0:97:ee:51:66:ab:1b:f3:7d:
f1:6f:c3:1e:69:4f:38:f6:d2:1e:d6:0b:5c:f9:20:a7:06:14:
63:d2:b9:47:86:2e:63:a8:29:8c:58:17:b5:5f:33:bb:79:a9:
d4:e7:02:7e:e3:b8:7d:7a:ec:59:5d:4a:92:34:87:9a:07:ed:
ce:f0:df:97:08:84:44:cf:08:23:a1:97:96:64:50:7a:13:40:
8e:44:65:ad:ec:b5:3a:7d:c0:18:ab:a6:2e:eb:a6:ee:40:6c:
49:44:64:9f:ca:00:43:65:c2:b6:cc:55:14:0a:f0:31:d2:0a:
85:ac:9a:b6:fd:c8:a9:eb:fa:38:6d:7a:37:6b:79:14:af:ec:
8a:72:b9:f9:bb:28:9a:58:79:76:0c:81:35:8a:f8:a3:bf:e5:
1c:92:1c:eb:3d:f9:ae:57:a0:41:cc:3f:e6:95:82:7c:dd:bf:
ba:8a:e5:f5:da:b0:39:27:3b:e3:81:c8:dc:63:78:4f:51:28:
68:c0:04:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:47:57 2024 by rpki-client on console-ams.rpki-client.org