Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/nsWbOlBrO_y038CScmJbBoYO4Eg.roa
File: nsWbOlBrO_y038CScmJbBoYO4Eg.roa (raw, json)
Hash identifier: 9z0rk0Hs/ZH6twsLp7W50H8n6affxPD/WAczUYoINL8=
Subject key identifier: 9E:C5:9B:3A:50:6B:3B:FC:B4:DF:C0:92:72:62:5B:06:86:0E:E0:48
Certificate issuer: /CN=cdaaa0e082360360acda347664eb8314eb11da10
Certificate serial: 01892642DC99375B499C6BED7569F978D54C
Authority key identifier: CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/nsWbOlBrO_y038CScmJbBoYO4Eg.roa
Signing time: Wed 05 Jul 2023 13:34:23 +0000
ROA not before: Wed 05 Jul 2023 13:34:23 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 88.209.230.0/24 maxlen: 24
88.209.255.0/24 maxlen: 24
88.209.195.0/24 maxlen: 24
88.209.211.0/24 maxlen: 24
88.209.216.0/24 maxlen: 24
88.209.221.0/24 maxlen: 24
92.52.214.0/24 maxlen: 24
178.210.248.0/24 maxlen: 24
178.210.249.0/24 maxlen: 24
178.210.251.0/24 maxlen: 24
88.151.58.0/24 maxlen: 24
88.151.56.0/23 maxlen: 24
5.182.113.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:26:42:dc:99:37:5b:49:9c:6b:ed:75:69:f9:78:d5:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cdaaa0e082360360acda347664eb8314eb11da10
Validity
Not Before: Jul 5 13:34:23 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9ec59b3a506b3bfcb4dfc09272625b06860ee048
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:19:7d:24:67:b3:d2:87:a6:33:73:04:16:5c:
5a:c1:c0:bd:ef:e4:8b:25:4c:3b:47:bb:b2:79:ca:
a8:2e:fa:87:5a:2f:84:1f:19:ba:c1:f1:69:35:4e:
1a:8f:87:17:ac:a6:80:62:50:04:b7:06:09:7c:ef:
36:fc:89:ac:8c:ed:57:5d:23:f4:3f:91:3b:96:8c:
3e:30:61:57:cf:15:90:61:b9:40:03:27:e6:b2:c7:
08:fe:16:f5:fe:20:b9:2b:54:f7:89:ad:42:1a:1d:
c6:cb:00:c4:30:12:34:c8:ba:8f:f7:a2:0e:2e:35:
b1:f2:15:48:e4:1e:86:56:ee:7a:5e:da:8e:47:ac:
35:f3:23:de:d3:9c:91:61:7f:bc:65:62:33:d8:fd:
db:0e:e4:b6:a2:75:a5:a4:63:17:d0:15:b5:12:cc:
68:27:ca:31:7f:f2:8a:0b:93:8e:6c:de:7a:32:93:
95:f2:70:4a:8a:02:b2:d7:40:78:c5:89:61:84:39:
d1:d5:04:70:4f:41:80:62:aa:08:9a:92:1d:53:bf:
a9:0e:2b:4a:bd:76:73:1a:ca:23:80:d9:38:75:47:
2c:52:8e:ff:bc:11:dd:d0:08:6c:96:95:53:33:b5:
fe:ee:f1:a3:c3:d1:e5:f5:04:dd:9e:2a:cd:6a:df:
d9:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:C5:9B:3A:50:6B:3B:FC:B4:DF:C0:92:72:62:5B:06:86:0E:E0:48
X509v3 Authority Key Identifier:
keyid:CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/nsWbOlBrO_y038CScmJbBoYO4Eg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.182.113.0/24
88.151.56.0-88.151.58.255
88.209.195.0/24
88.209.211.0/24
88.209.216.0/24
88.209.221.0/24
88.209.230.0/24
88.209.255.0/24
92.52.214.0/24
178.210.248.0/23
178.210.251.0/24
Signature Algorithm: sha256WithRSAEncryption
53:32:e0:4e:a5:ed:72:e7:96:4a:f9:da:ee:70:1f:6f:b7:16:
c8:0e:92:34:0f:a1:6b:f3:7f:39:da:4c:cc:01:02:7a:50:77:
c7:1b:a6:ac:ae:e8:d0:fb:62:00:b1:97:ad:e3:32:18:09:5e:
ab:8c:3e:61:17:5e:56:27:7e:c9:75:42:17:2d:50:3c:10:87:
86:35:75:0f:e5:34:ba:65:f3:09:22:0f:d6:e0:6c:c4:4f:1c:
db:9c:1f:e0:bc:b9:e4:a4:49:42:e6:7b:b9:7b:f3:14:0d:01:
80:62:78:77:ec:9d:27:11:a2:e5:a9:cc:74:0a:1b:c1:15:4d:
e7:0c:b0:ba:2d:04:a8:34:1f:bb:34:23:56:19:9c:63:99:13:
d6:21:13:af:48:15:c8:6d:9d:18:af:71:87:50:8e:82:36:cc:
88:a1:6b:1a:6c:fe:28:6c:41:ae:ff:19:3e:36:ae:c8:e3:c2:
93:21:63:05:12:50:4c:25:a4:33:f5:38:9d:77:dd:6c:5c:b2:
db:87:e6:ad:df:a1:a2:60:67:eb:c0:db:a3:17:35:d9:4c:2e:
50:8d:c5:58:a7:a4:d2:24:ae:53:75:de:34:99:a5:bc:a9:bf:
b5:12:e7:62:ed:98:20:85:9e:ef:97:d6:b0:f7:29:7a:6c:21:
ac:5c:86:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 21:25:43 2025 by rpki-client