Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/42dfc0-a764-4d5d-a634-3454f490fd96/1/7S6d2fUCmcYggUCwCcgT0K6aoH0.roa
File: 7S6d2fUCmcYggUCwCcgT0K6aoH0.roa (raw, json)
Hash identifier: 0p/nfE16+ctfAyHMpTGiLA7j1Hvpn56I92Sc1pCWgqA=
Subject key identifier: ED:2E:9D:D9:F5:02:99:C6:20:81:40:B0:09:C8:13:D0:AE:9A:A0:7D
Certificate issuer: /CN=6278a768c910badcd5c4aef7c172a9f061547e8c
Certificate serial: 3795D6DF
Authority key identifier: 62:78:A7:68:C9:10:BA:DC:D5:C4:AE:F7:C1:72:A9:F0:61:54:7E:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YninaMkQutzVxK73wXKp8GFUfow.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/42dfc0-a764-4d5d-a634-3454f490fd96/1/7S6d2fUCmcYggUCwCcgT0K6aoH0.roa
Signing time: Sat 01 Jan 2022 12:57:45 +0000
ROA not before: Sat 01 Jan 2022 12:57:45 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 50693
IP address blocks: 178.20.204.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 932566751 (0x3795d6df)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6278a768c910badcd5c4aef7c172a9f061547e8c
Validity
Not Before: Jan 1 12:57:45 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ed2e9dd9f50299c6208140b009c813d0ae9aa07d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:ff:89:03:f5:cf:a7:dc:2e:74:00:1c:84:c6:
76:bf:5c:2b:40:85:59:cb:3e:bf:40:c5:d3:27:56:
a8:53:88:0b:c1:de:af:9f:7b:77:f9:90:a7:42:e4:
3f:5d:05:98:23:ef:82:f4:b6:a0:cb:29:d8:3b:82:
0e:07:91:01:20:5f:5d:63:0c:f3:12:62:21:40:a3:
b1:c0:44:5b:b5:6d:7a:28:90:a5:fd:b3:43:a1:14:
8f:c9:97:8f:81:04:6e:77:61:35:87:f8:21:05:57:
16:c5:ca:9d:1c:42:d9:94:67:31:90:eb:70:35:84:
20:2d:c7:78:cc:0e:fb:ee:47:bc:80:33:15:ab:f5:
63:98:7a:9f:2b:27:9e:32:8c:7e:79:45:fb:d4:78:
fd:67:15:0d:f3:f5:29:b4:58:53:2a:df:5e:d5:70:
8b:58:69:85:e2:08:89:1a:fc:35:9c:f3:82:7d:91:
f5:17:7f:d2:bf:c5:ad:08:e4:4f:8f:28:d0:20:4b:
a5:9f:f2:ec:f3:a7:2b:b7:44:4d:5f:54:80:35:2e:
85:61:72:f8:44:b1:21:a0:4d:92:6f:54:8f:dc:ce:
1a:3e:93:76:4e:64:32:ac:d0:33:0d:ff:5b:1c:4c:
31:fd:cb:f6:cf:bc:97:26:3f:aa:8f:5b:4c:b2:68:
9d:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:2E:9D:D9:F5:02:99:C6:20:81:40:B0:09:C8:13:D0:AE:9A:A0:7D
X509v3 Authority Key Identifier:
keyid:62:78:A7:68:C9:10:BA:DC:D5:C4:AE:F7:C1:72:A9:F0:61:54:7E:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YninaMkQutzVxK73wXKp8GFUfow.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/42dfc0-a764-4d5d-a634-3454f490fd96/1/7S6d2fUCmcYggUCwCcgT0K6aoH0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/42dfc0-a764-4d5d-a634-3454f490fd96/1/YninaMkQutzVxK73wXKp8GFUfow.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.20.204.0/24
Signature Algorithm: sha256WithRSAEncryption
79:e9:ff:50:36:77:43:8a:21:66:c5:60:d0:05:d6:98:d2:a4:
b4:0e:a5:81:86:ae:c3:1c:3c:50:9d:86:40:c5:f9:21:19:6e:
94:3a:6e:a2:58:25:b1:fb:ea:15:66:6c:a0:e2:27:07:8a:c1:
b1:42:2b:61:03:80:7b:9f:ef:ff:46:6b:a9:d8:a5:80:ee:c1:
27:bd:45:1b:76:17:eb:96:5c:a9:a0:17:ea:c3:93:69:74:fe:
b1:17:af:5e:54:3b:1b:88:11:6d:06:df:16:5e:ec:bd:6e:be:
82:85:8b:b9:4d:4c:02:56:d4:c3:a5:9d:e6:92:06:5d:c1:89:
63:fa:2c:ad:c0:e1:e5:8d:9b:c6:a3:e7:ba:36:60:1e:35:06:
e3:d0:5e:06:19:9d:b8:81:f0:74:4f:e1:c1:72:9d:90:ae:16:
ed:89:4c:cc:02:39:52:88:85:f2:ec:56:57:f9:3a:26:45:30:
5a:de:14:70:ba:fd:3a:32:a7:82:33:22:7b:3f:98:5e:5f:e8:
02:67:82:ee:b4:54:9c:4d:dd:c7:ea:d6:02:d6:f6:cd:2e:96:
fe:26:8c:53:e1:76:52:e0:fd:9f:87:d8:64:c8:9a:1d:e0:e6:
42:ff:34:ef:ad:00:0e:f3:37:66:59:06:0d:62:4e:2d:35:0b:
9c:6d:0c:88
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEN5XW3zANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg2
Mjc4YTc2OGM5MTBiYWRjZDVjNGFlZjdjMTcyYTlmMDYxNTQ3ZThjMB4XDTIyMDEw
MTEyNTc0NVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoZWQyZTlkZDlmNTAy
OTljNjIwODE0MGIwMDljODEzZDBhZTlhYTA3ZDCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAKz/iQP1z6fcLnQAHITGdr9cK0CFWcs+v0DF0ydWqFOIC8He
r597d/mQp0LkP10FmCPvgvS2oMsp2DuCDgeRASBfXWMM8xJiIUCjscBEW7VteiiQ
pf2zQ6EUj8mXj4EEbndhNYf4IQVXFsXKnRxC2ZRnMZDrcDWEIC3HeMwO++5HvIAz
Fav1Y5h6nysnnjKMfnlF+9R4/WcVDfP1KbRYUyrfXtVwi1hpheIIiRr8NZzzgn2R
9Rd/0r/FrQjkT48o0CBLpZ/y7POnK7dETV9UgDUuhWFy+ESxIaBNkm9Uj9zOGj6T
dk5kMqzQMw3/WxxMMf3L9s+8lyY/qo9bTLJonY8CAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBTtLp3Z9QKZxiCBQLAJyBPQrpqgfTAfBgNVHSMEGDAWgBRieKdoyRC63NXE
rvfBcqnwYVR+jDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L1luaW5hTWtRdXR6VnhLNzN3WEtwOEdGVWZvdy5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvMGIvNDJkZmMwLWE3NjQtNGQ1ZC1hNjM0LTM0NTRmNDkwZmQ5Ni8x
LzdTNmQyZlVDbWNZZ2dVQ3dDY2dUMEs2YW9IMC5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMGIv
NDJkZmMwLWE3NjQtNGQ1ZC1hNjM0LTM0NTRmNDkwZmQ5Ni8xL1luaW5hTWtRdXR6
VnhLNzN3WEtwOEdGVWZvdy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEALIUzDANBgkqhkiG9w0BAQsFAAOC
AQEAeen/UDZ3Q4ohZsVg0AXWmNKktA6lgYauwxw8UJ2GQMX5IRlulDpuolglsfvq
FWZsoOInB4rBsUIrYQOAe5/v/0ZrqdilgO7BJ71FG3YX65ZcqaAX6sOTaXT+sRev
XlQ7G4gRbQbfFl7svW6+goWLuU1MAlbUw6Wd5pIGXcGJY/osrcDh5Y2bxqPnujZg
HjUG49BeBhmduIHwdE/hwXKdkK4W7YlMzAI5UoiF8uxWV/k6JkUwWt4UcLr9OjKn
gjMiez+YXl/oAmeC7rRUnE3dx+rWAtb2zS6W/iaMU+F2UuD9n4fYZMiaHeDmQv80
760ADvM3ZlkGDWJOLTULnG0MiA==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:18:30 2024 by rpki-client on console-fra.rpki-client.org