Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zbDZO4XBY3tRDee9adoEWwwIK-g.roa
File: zbDZO4XBY3tRDee9adoEWwwIK-g.roa (raw, json)
Hash identifier: XUoLnhTrPUisgOSkEvgaS/G2CNNDFnl34Ud3eCR0ZJM=
Subject key identifier: CD:B0:D9:3B:85:C1:63:7B:51:0D:E7:BD:69:DA:04:5B:0C:08:2B:E8
Certificate issuer: /CN=cdaaa0e082360360acda347664eb8314eb11da10
Certificate serial: 0183CCA879DCCE59C487179C168D4643A49F
Authority key identifier: CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zbDZO4XBY3tRDee9adoEWwwIK-g.roa
Signing time: Wed 12 Oct 2022 14:45:36 +0000
ROA not before: Wed 12 Oct 2022 14:45:36 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 211619
IP address blocks: 88.209.229.0/24 maxlen: 24
88.209.228.0/24 maxlen: 24
88.209.236.0/22 maxlen: 22
88.209.246.0/23 maxlen: 23
88.209.254.0/24 maxlen: 24
83.137.156.0/24 maxlen: 24
83.137.157.0/24 maxlen: 24
83.137.153.0/24 maxlen: 24
178.210.232.0/22 maxlen: 22
178.210.237.0/24 maxlen: 24
45.9.168.0/24 maxlen: 24
77.242.152.0/22 maxlen: 22
92.52.218.0/24 maxlen: 24
194.41.47.0/24 maxlen: 24
88.151.62.0/24 maxlen: 24
5.182.112.0/24 maxlen: 24
45.14.9.0/24 maxlen: 24
5.182.115.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:cc:a8:79:dc:ce:59:c4:87:17:9c:16:8d:46:43:a4:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cdaaa0e082360360acda347664eb8314eb11da10
Validity
Not Before: Oct 12 14:45:36 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=cdb0d93b85c1637b510de7bd69da045b0c082be8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:4c:cc:6f:31:3d:0b:e6:c7:f0:26:82:5c:a4:
12:fe:60:ca:f5:6f:f4:00:61:97:9f:34:84:ad:26:
f9:60:1b:8a:53:ae:ca:fc:b0:66:34:8f:f4:5b:a6:
e1:5b:d7:e3:93:63:86:ce:6d:86:6d:45:b5:d1:2d:
f1:dc:98:49:e2:c0:d1:bd:b5:1a:b2:d8:f7:95:c4:
a1:92:a0:d9:d7:2e:ac:0a:74:8e:47:41:88:ac:54:
9d:90:11:46:1a:4f:69:10:f3:b0:b6:fd:6c:b9:b0:
fd:c6:a6:d7:2f:54:d0:a1:ae:17:90:2a:19:16:26:
88:ce:0e:d2:0a:67:d7:96:59:8e:a3:e8:34:bc:9d:
89:91:b1:8f:cf:d7:98:25:c6:27:80:39:a5:6a:00:
dc:c5:c8:ca:25:e8:9b:d8:09:57:5c:99:f1:95:40:
12:35:c3:a3:63:45:78:0e:d5:95:3c:a8:9e:d2:67:
58:99:17:40:b1:b6:f5:f2:63:fc:f3:7f:5f:f8:3e:
77:36:2a:64:64:4f:7a:f2:d4:76:91:8b:02:ff:3b:
06:76:b8:ad:79:38:1b:42:50:f5:70:1d:f5:df:00:
c6:95:76:05:44:c6:28:39:a6:49:63:8f:1f:89:85:
c0:5b:dd:e2:99:7a:dc:60:7b:85:5b:95:43:7f:92:
89:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:B0:D9:3B:85:C1:63:7B:51:0D:E7:BD:69:DA:04:5B:0C:08:2B:E8
X509v3 Authority Key Identifier:
keyid:CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zbDZO4XBY3tRDee9adoEWwwIK-g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.182.112.0/24
5.182.115.0/24
45.9.168.0/24
45.14.9.0/24
77.242.152.0/22
83.137.153.0/24
83.137.156.0/23
88.151.62.0/24
88.209.228.0/23
88.209.236.0/22
88.209.246.0/23
88.209.254.0/24
92.52.218.0/24
178.210.232.0/22
178.210.237.0/24
194.41.47.0/24
Signature Algorithm: sha256WithRSAEncryption
7c:e2:3d:2e:d5:1f:7a:09:fa:22:7a:42:68:f0:bd:ac:91:97:
ac:57:5d:b9:7f:1c:65:01:df:c9:26:ea:5f:1c:fe:50:2d:8e:
9f:43:a0:20:d7:cb:38:09:63:01:6c:90:43:d9:6c:02:b6:28:
4a:47:b2:45:3c:92:ab:20:6f:a3:43:3f:8e:9c:68:70:68:ed:
a1:d7:5e:a7:b2:f9:aa:c7:f4:dc:e0:49:88:1c:0c:bc:95:02:
4b:c8:1f:ee:50:5a:5d:87:3b:fd:8f:c3:89:2b:bd:c4:c0:55:
bf:78:bc:6a:7c:16:59:a8:59:bc:e4:b8:cf:fc:93:ad:39:8d:
be:6b:61:70:d8:5a:e0:fd:70:1e:38:ea:58:01:f6:2a:85:ee:
92:a3:41:ac:eb:b9:9a:5b:d5:b5:b7:27:05:0b:3f:7b:7b:9c:
6a:48:00:74:78:29:2d:eb:9b:26:0d:75:fe:fe:58:20:07:c0:
d5:4b:5f:61:7e:06:c9:00:f4:6b:eb:3a:70:f8:06:7d:ee:b0:
b0:fc:36:69:cb:1b:b4:e4:a5:6a:99:fd:e2:a3:f7:43:32:ba:
de:0a:63:b1:1b:f3:0f:d2:2b:b2:65:78:fc:d3:b2:a3:23:d4:
5e:66:1b:3a:14:c6:16:ea:f4:ba:e9:7a:13:94:95:4d:81:7e:
2c:36:a5:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:47:57 2024 by rpki-client on console-ams.rpki-client.org