Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/dPhSUJS6tvSsh9-YE0OuWKHCdmU.roa
File: dPhSUJS6tvSsh9-YE0OuWKHCdmU.roa (raw, json)
Hash identifier: jc0XNeOtmqxbKblDTwcEpQzc2ZG8H8mUP8bjCVF57q0=
Subject key identifier: 74:F8:52:50:94:BA:B6:F4:AC:87:DF:98:13:43:AE:58:A1:C2:76:65
Certificate issuer: /CN=cdaaa0e082360360acda347664eb8314eb11da10
Certificate serial: 018682D3A9A7F10E22532F8CEE92B9D8588F
Authority key identifier: CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/dPhSUJS6tvSsh9-YE0OuWKHCdmU.roa
Signing time: Fri 24 Feb 2023 09:49:14 +0000
ROA not before: Fri 24 Feb 2023 09:49:14 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 42864
IP address blocks: 178.248.200.0/21 maxlen: 21
45.9.171.0/24 maxlen: 24
45.9.170.0/24 maxlen: 24
45.9.169.0/24 maxlen: 24
88.209.192.0/21 maxlen: 24
88.209.225.0/24 maxlen: 24
178.210.224.0/22 maxlen: 24
193.138.125.0/24 maxlen: 24
178.210.236.0/24 maxlen: 24
77.242.145.0/24 maxlen: 24
77.242.144.0/24 maxlen: 24
77.242.151.0/24 maxlen: 24
77.242.148.0/24 maxlen: 24
77.242.147.0/24 maxlen: 24
77.242.146.0/24 maxlen: 24
77.242.159.0/24 maxlen: 24
77.242.158.0/24 maxlen: 24
77.242.157.0/24 maxlen: 24
77.242.156.0/24 maxlen: 24
92.52.219.0/24 maxlen: 24
45.88.93.0/24 maxlen: 24
45.14.10.0/24 maxlen: 24
45.14.8.0/24 maxlen: 24
92.52.212.0/22 maxlen: 24
92.52.210.0/23 maxlen: 23
92.52.209.0/24 maxlen: 24
92.52.208.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:82:d3:a9:a7:f1:0e:22:53:2f:8c:ee:92:b9:d8:58:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cdaaa0e082360360acda347664eb8314eb11da10
Validity
Not Before: Feb 24 09:49:14 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=74f8525094bab6f4ac87df981343ae58a1c27665
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:14:2b:39:be:ea:f2:e4:1c:3d:88:21:3e:9a:
a6:de:48:bc:cf:4a:06:30:0b:8c:ab:7d:c9:f5:57:
44:83:79:43:2e:ce:3c:3c:c8:79:29:48:6c:b1:0b:
db:cb:a3:a4:39:82:6b:99:85:5c:cd:33:2e:77:00:
39:0b:0f:84:46:8f:96:8f:3b:25:c5:93:8e:a9:37:
a1:18:0d:e6:62:15:37:1b:0c:ef:c3:dd:ff:ec:7e:
5b:cd:42:68:1d:fc:e5:2e:59:c4:ce:98:2a:1e:fa:
ea:26:ff:7b:37:25:26:24:7f:65:22:47:7d:c9:5f:
0f:bf:85:bd:d0:99:71:ec:8f:c8:68:82:e5:d4:e0:
ad:b6:71:8b:32:c2:2d:d6:16:41:da:9f:5f:45:6d:
d7:58:02:a5:5b:2e:bc:8a:13:1d:e9:68:07:07:96:
db:60:50:1e:66:1e:84:d5:22:60:61:49:a5:c3:39:
a8:b4:ae:3e:79:8e:dd:7f:6c:41:0d:15:91:32:b0:
40:08:d0:9d:2d:a7:3b:01:74:15:aa:0f:c2:e8:a8:
db:01:27:1c:84:75:bd:0d:ea:4c:13:d7:13:66:c0:
26:5b:f8:0a:7a:21:ae:f0:f6:36:76:a3:d0:57:0e:
e1:57:18:44:57:e5:d3:29:4f:fa:fa:f7:28:da:69:
09:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:F8:52:50:94:BA:B6:F4:AC:87:DF:98:13:43:AE:58:A1:C2:76:65
X509v3 Authority Key Identifier:
keyid:CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/dPhSUJS6tvSsh9-YE0OuWKHCdmU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.9.169.0-45.9.171.255
45.14.8.0/24
45.14.10.0/24
45.88.93.0/24
77.242.144.0-77.242.148.255
77.242.151.0/24
77.242.156.0/22
88.209.192.0/21
88.209.225.0/24
92.52.208.0/21
92.52.219.0/24
178.210.224.0/22
178.210.236.0/24
178.248.200.0/21
193.138.125.0/24
Signature Algorithm: sha256WithRSAEncryption
60:22:9b:b2:d5:99:03:8c:01:20:77:8e:12:0a:0b:ad:92:6b:
57:06:b5:12:fb:f8:75:de:ee:df:56:59:ab:f3:6d:a9:10:82:
b5:49:34:78:4a:e1:16:eb:c7:03:ff:8f:f2:af:14:7f:66:5a:
c8:0b:39:83:ea:37:3d:52:ca:13:5e:c0:fa:09:82:51:b4:0f:
e3:74:82:70:14:e1:6d:19:ee:00:fd:5c:75:b3:b8:7c:27:59:
d4:17:2d:ea:02:fe:e9:c9:bb:c1:87:f3:1d:4c:79:6e:50:78:
63:38:78:63:98:2f:ed:02:13:5b:9e:db:2b:19:1d:4b:fb:92:
4c:e4:a8:4e:17:80:21:5a:6a:a0:a8:83:fd:39:1b:4a:88:33:
a3:a4:38:f8:53:13:fa:d9:f4:44:1f:2a:13:b6:1b:ef:e6:75:
0d:e8:5b:09:40:70:a2:c0:d8:5c:7d:81:52:c8:b0:cb:c7:22:
51:14:75:d7:88:29:08:0a:a8:52:ae:94:f4:9d:06:78:fe:e2:
08:b3:a1:c2:30:9f:e2:52:ae:4a:49:c3:cf:2e:b0:7f:a2:1b:
f2:f0:19:f4:d3:89:e4:db:b4:7a:8a:50:ff:11:a8:40:42:fb:
0e:59:87:73:9c:20:32:2a:1c:c1:bb:72:0e:e8:20:f5:53:e0:
dc:3c:2d:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 20:45:30 2025 by rpki-client