Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zzrtfENbWKMGWo3-7L5XaYUCwmE.roa
File: zzrtfENbWKMGWo3-7L5XaYUCwmE.roa (raw, json)
Hash identifier: DvTy21ZUHnuWELqnJL3PbvpSUUjOHFI4wS+E5SGaA7k=
Subject key identifier: CF:3A:ED:7C:43:5B:58:A3:06:5A:8D:FE:EC:BE:57:69:85:02:C2:61
Certificate issuer: /CN=cdaaa0e082360360acda347664eb8314eb11da10
Certificate serial: 018617CF567286FD68166AAE1BD12728D930
Authority key identifier: CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zzrtfENbWKMGWo3-7L5XaYUCwmE.roa
Signing time: Fri 03 Feb 2023 15:05:09 +0000
ROA not before: Fri 03 Feb 2023 15:05:09 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 42864
IP address blocks: 178.210.224.0/22 maxlen: 24
193.138.125.0/24 maxlen: 24
178.248.200.0/21 maxlen: 21
45.9.171.0/24 maxlen: 24
45.9.170.0/24 maxlen: 24
45.9.169.0/24 maxlen: 24
178.210.236.0/24 maxlen: 24
77.242.144.0/20 maxlen: 20
88.209.192.0/21 maxlen: 24
88.209.208.0/20 maxlen: 24
88.209.225.0/24 maxlen: 24
88.209.224.0/24 maxlen: 24
92.52.219.0/24 maxlen: 24
45.14.10.0/24 maxlen: 24
45.14.8.0/24 maxlen: 24
92.52.212.0/22 maxlen: 24
92.52.210.0/23 maxlen: 23
92.52.209.0/24 maxlen: 24
92.52.208.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:17:cf:56:72:86:fd:68:16:6a:ae:1b:d1:27:28:d9:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cdaaa0e082360360acda347664eb8314eb11da10
Validity
Not Before: Feb 3 15:05:09 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=cf3aed7c435b58a3065a8dfeecbe57698502c261
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:5d:c7:8f:1c:3b:b3:8b:9f:23:b7:f1:ea:9f:
2b:a4:bd:00:fd:9c:11:07:6c:41:b6:31:74:1d:66:
ec:8e:c4:9c:81:15:3f:9d:98:e2:96:f7:42:a0:99:
22:25:18:5b:e6:62:86:50:49:46:8a:17:cf:78:41:
55:07:e1:30:4f:12:5e:c5:29:83:01:71:4e:90:14:
c3:12:0e:0c:ed:6f:50:7d:52:98:df:41:0e:f9:5a:
cc:3c:5b:80:d0:9b:17:de:68:e5:fa:e5:35:1e:d0:
91:80:12:79:4a:8d:b4:5f:9d:ed:4e:a4:cc:64:cf:
c2:95:9e:dd:69:e0:58:40:bc:d4:7f:90:3c:ba:df:
89:18:e9:54:a3:01:1a:8b:61:84:e7:fd:ef:b7:ca:
33:9a:42:30:6d:48:24:71:23:d0:58:e9:f6:e9:18:
2c:47:f5:93:7a:58:20:d6:92:03:e3:67:52:4c:72:
d8:09:3b:d3:2a:b7:ad:2a:b5:60:cf:33:5c:52:65:
f4:60:7e:ac:74:b2:ef:25:f7:88:39:41:97:ef:d5:
29:ad:2c:60:80:5c:71:e3:d4:cc:0e:34:75:cd:3c:
35:6f:34:14:e4:d2:fa:fa:9b:bd:be:d7:57:23:60:
64:5e:f8:42:bd:91:4a:d4:ec:ff:a9:e0:df:2f:63:
14:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:3A:ED:7C:43:5B:58:A3:06:5A:8D:FE:EC:BE:57:69:85:02:C2:61
X509v3 Authority Key Identifier:
keyid:CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zzrtfENbWKMGWo3-7L5XaYUCwmE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.9.169.0-45.9.171.255
45.14.8.0/24
45.14.10.0/24
77.242.144.0/20
88.209.192.0/21
88.209.208.0-88.209.225.255
92.52.208.0/21
92.52.219.0/24
178.210.224.0/22
178.210.236.0/24
178.248.200.0/21
193.138.125.0/24
Signature Algorithm: sha256WithRSAEncryption
13:7f:17:a5:60:9c:30:d6:06:59:37:22:2c:09:89:10:b3:1a:
a2:31:d6:b8:45:3e:d8:09:83:c7:39:e3:c0:a9:cc:a1:d9:c8:
2f:2a:9f:96:6f:0e:5b:1b:61:8e:46:ef:69:52:bb:97:14:df:
b9:12:1b:f5:33:5f:d8:c5:21:95:1a:44:1f:ae:e4:3f:b4:b9:
d9:96:4c:e7:c7:7a:aa:84:21:45:0e:63:89:1c:18:06:d2:34:
15:f3:f4:cb:42:ff:c1:62:ad:c2:71:60:12:2f:78:9e:15:f7:
a9:34:ce:25:a2:9a:38:4c:b4:38:b8:b3:15:89:b8:0d:88:cf:
d1:8f:45:32:a6:e7:15:fe:45:ea:0c:1d:7b:56:07:26:31:c0:
5d:53:3a:37:f5:7d:67:80:f0:e8:12:0c:0d:6e:68:b5:f2:96:
4e:43:a7:c3:22:d1:e0:14:2b:20:ec:90:56:ee:0e:bf:be:b9:
f8:f2:7b:44:11:ab:e0:cd:5a:80:b2:4b:ad:64:ee:e5:57:c9:
a6:d0:36:0a:c3:da:c7:24:2b:69:ba:60:f0:55:2a:e0:27:91:
9e:59:40:a9:99:8c:86:9c:a3:a8:02:ce:af:7b:5c:4f:a7:ec:
15:d3:24:92:3c:35:53:b4:b8:ff:72:12:56:95:79:d5:5e:fb:
80:af:9b:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:56:28 2024 by rpki-client on console-fra.rpki-client.org