Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/7kxyxkh6KaVSkMPye6FCeLqtORM.roa
File: 7kxyxkh6KaVSkMPye6FCeLqtORM.roa (raw, json)
Hash identifier: t4D3pXnIlMpOXwLNR0XjJJOTSoao7QB2pWFn1rd5PQ0=
Subject key identifier: EE:4C:72:C6:48:7A:29:A5:52:90:C3:F2:7B:A1:42:78:BA:AD:39:13
Certificate issuer: /CN=cdaaa0e082360360acda347664eb8314eb11da10
Certificate serial: 0188B98B72947C7245CDCCA1378C4DE9FE16
Authority key identifier: CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/7kxyxkh6KaVSkMPye6FCeLqtORM.roa
Signing time: Wed 14 Jun 2023 10:55:03 +0000
ROA not before: Wed 14 Jun 2023 10:55:03 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 211619
IP address blocks: 88.209.228.0/24 maxlen: 24
88.209.239.0/24 maxlen: 24
88.209.236.0/22 maxlen: 22
88.209.246.0/23 maxlen: 23
88.209.253.0/24 maxlen: 24
88.209.254.0/24 maxlen: 24
83.137.159.0/24 maxlen: 24
83.137.156.0/24 maxlen: 24
83.137.157.0/24 maxlen: 24
83.137.158.0/24 maxlen: 24
83.137.153.0/24 maxlen: 24
45.9.168.0/24 maxlen: 24
88.209.206.0/24 maxlen: 24
88.209.219.0/24 maxlen: 24
88.209.217.0/24 maxlen: 24
88.151.62.0/24 maxlen: 24
178.210.230.0/24 maxlen: 24
178.210.231.0/24 maxlen: 24
178.210.232.0/24 maxlen: 24
178.210.233.0/24 maxlen: 24
178.210.237.0/24 maxlen: 24
178.210.234.0/24 maxlen: 24
178.210.235.0/24 maxlen: 24
77.242.152.0/22 maxlen: 24
77.242.157.0/24 maxlen: 24
77.242.158.0/24 maxlen: 24
92.52.217.0/24 maxlen: 24
92.52.218.0/24 maxlen: 24
194.41.47.0/24 maxlen: 24
5.182.112.0/24 maxlen: 24
5.182.115.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:b9:8b:72:94:7c:72:45:cd:cc:a1:37:8c:4d:e9:fe:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cdaaa0e082360360acda347664eb8314eb11da10
Validity
Not Before: Jun 14 10:55:03 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ee4c72c6487a29a55290c3f27ba14278baad3913
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:3a:b2:3a:05:11:52:d4:d9:83:61:25:2d:ee:
ee:77:1d:50:98:4c:8b:19:25:a5:f1:a4:26:71:1f:
60:a4:d1:86:18:a2:66:43:1f:8d:4c:16:b7:f2:1a:
25:00:05:85:df:9d:3e:0d:28:d7:3e:fb:a3:0d:47:
d2:5a:c6:aa:0a:b8:34:d8:ff:75:64:11:52:ef:f3:
3e:56:ee:f9:91:0b:93:8a:92:0c:04:57:d1:39:04:
bb:fc:93:4f:69:d9:fb:25:de:c8:ef:9b:fd:2e:49:
1e:46:5e:f3:c4:6c:eb:de:2f:23:51:0e:b0:06:95:
fe:2a:7b:25:4e:b3:1d:89:55:4a:e7:8b:c4:c6:75:
7e:de:b0:0c:04:2e:78:f9:57:e0:e6:88:1f:35:e1:
54:b9:79:ba:e6:02:15:01:cc:d2:9d:32:42:9f:28:
2b:1b:3e:39:26:8a:42:e0:21:5c:07:4f:90:07:08:
08:4d:3c:4b:10:fe:f7:46:25:15:e1:29:0d:5d:ab:
47:be:24:6a:1f:25:4f:8d:db:d8:ac:82:21:58:3b:
71:ef:9e:63:78:2b:67:38:12:67:8c:eb:17:b9:df:
cf:41:1f:cc:fc:24:9a:cb:39:85:81:f1:6c:53:d9:
fc:d4:ab:7c:35:c1:e2:c5:4e:65:43:5a:fb:d5:1e:
bd:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:4C:72:C6:48:7A:29:A5:52:90:C3:F2:7B:A1:42:78:BA:AD:39:13
X509v3 Authority Key Identifier:
keyid:CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/7kxyxkh6KaVSkMPye6FCeLqtORM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.182.112.0/24
5.182.115.0/24
45.9.168.0/24
77.242.152.0/22
77.242.157.0-77.242.158.255
83.137.153.0/24
83.137.156.0/22
88.151.62.0/24
88.209.206.0/24
88.209.217.0/24
88.209.219.0/24
88.209.228.0/24
88.209.236.0/22
88.209.246.0/23
88.209.253.0-88.209.254.255
92.52.217.0-92.52.218.255
178.210.230.0-178.210.235.255
178.210.237.0/24
194.41.47.0/24
Signature Algorithm: sha256WithRSAEncryption
83:0c:d1:75:c4:99:9c:56:f4:95:a6:0d:ee:cb:82:eb:04:ef:
4c:3c:db:90:48:79:87:a9:9d:e8:ee:d2:51:8a:e8:c9:83:47:
1a:7b:ef:60:2f:d8:43:db:a5:9c:11:4f:ef:ad:a2:0d:4b:fa:
c0:ea:55:f9:f4:fd:28:e5:58:11:de:1a:cf:bc:88:5a:ad:ee:
b1:98:09:22:9e:58:0c:50:92:4e:82:a3:4b:ca:58:8b:29:69:
74:39:f0:a4:33:c5:97:b2:aa:2f:22:7c:58:80:2e:ea:de:4e:
9b:16:93:80:46:54:83:da:f3:2d:87:2b:92:07:28:8d:8b:50:
0a:6a:3f:a6:9e:8a:13:77:ea:59:6e:d5:eb:68:c0:d7:0f:db:
9d:da:27:4f:8f:c1:58:fc:17:79:9c:09:3a:54:6b:0a:77:36:
db:ea:33:7e:df:c3:1a:54:eb:67:b3:b8:69:9f:63:bf:be:ce:
8a:c0:e2:b4:d2:be:f4:c6:7a:ed:83:fb:02:79:fb:59:e9:b0:
58:9b:43:80:9b:5f:0b:2d:5c:8e:6b:56:2c:cf:32:28:e2:0c:
ed:c4:1c:4c:fe:14:b9:d6:5e:bc:a7:27:e9:ca:86:9f:58:cf:
a3:c7:99:a9:29:da:b6:c7:6b:bc:77:ee:a4:62:2e:83:ef:3d:
c0:f3:a0:e7
-----BEGIN CERTIFICATE-----
MIIFjjCCBHagAwIBAgISAYi5i3KUfHJFzcyhN4xN6f4WMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNkYWFhMGUwODIzNjAzNjBhY2RhMzQ3NjY0ZWI4MzE0ZWIx
MWRhMTAwHhcNMjMwNjE0MTA1NTAzWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlZTRjNzJjNjQ4N2EyOWE1NTI5MGMzZjI3YmExNDI3OGJhYWQzOTEzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAujqyOgURUtTZg2ElLe7udx1QmEyL
GSWl8aQmcR9gpNGGGKJmQx+NTBa38holAAWF350+DSjXPvujDUfSWsaqCrg02P91
ZBFS7/M+Vu75kQuTipIMBFfROQS7/JNPadn7Jd7I75v9LkkeRl7zxGzr3i8jUQ6w
BpX+KnslTrMdiVVK54vExnV+3rAMBC54+Vfg5ogfNeFUuXm65gIVAczSnTJCnygr
Gz45JopC4CFcB0+QBwgITTxLEP73RiUV4SkNXatHviRqHyVPjdvYrIIhWDtx755j
eCtnOBJnjOsXud/PQR/M/CSayzmFgfFsU9n81Kt8NcHixU5lQ1r71R692QIDAQAB
o4ICmjCCApYwHQYDVR0OBBYEFO5McsZIeimlUpDD8nuhQni6rTkTMB8GA1UdIwQY
MBaAFM2qoOCCNgNgrNo0dmTrgxTrEdoQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvemFxZzRJSTJBMkNzMmpSMlpPdURGT3NSMmhBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZC81ODkxMjctMTA5Ni00YzkxLTk2Y2Mt
N2U0ZDZmNmY2ZTY2LzEvN2t4eXhraDZLYVZTa01QeWU2RkNlTHF0T1JNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZC81ODkxMjctMTA5Ni00YzkxLTk2Y2MtN2U0ZDZmNmY2ZTY2
LzEvemFxZzRJSTJBMkNzMmpSMlpPdURGT3NSMmhBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIGvBggrBgEFBQcBBwEB/wSBnzCBnDCBmQQCAAEwgZIDBAAF
tnADBAAFtnMDBAAtCagDBAJN8pgwDAMEAE3ynQMEAE3yngMEAFOJmQMEAlOJnAME
AFiXPgMEAFjRzgMEAFjR2QMEAFjR2wMEAFjR5AMEAljR7AMEAVjR9jAMAwQAWNH9
AwQAWNH+MAwDBABcNNkDBABcNNowDAMEAbLS5gMEArLS6AMEALLS7QMEAMIpLzAN
BgkqhkiG9w0BAQsFAAOCAQEAgwzRdcSZnFb0laYN7suC6wTvTDzbkEh5h6md6O7S
UYroyYNHGnvvYC/YQ9ulnBFP762iDUv6wOpV+fT9KOVYEd4az7yIWq3usZgJIp5Y
DFCSToKjS8pYiylpdDnwpDPFl7KqLyJ8WIAu6t5OmxaTgEZUg9rzLYcrkgcojYtQ
Cmo/pp6KE3fqWW7V62jA1w/bndonT4/BWPwXeZwJOlRrCnc22+ozft/DGlTrZ7O4
aZ9jv77OisDitNK+9MZ67YP7Ann7WemwWJtDgJtfCy1cjmtWLM8yKOIM7cQcTP4U
udZevKcn6cqGn1jPo8eZqSnatsdrvHfupGIug+89wPOg5w==
-----END CERTIFICATE-----
Generated at Fri May 2 12:07:46 2025 by rpki-client