Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/42dfc0-a764-4d5d-a634-3454f490fd96/1/Hu_I_LnjrEOEGhtObfujCGW1Bfg.roa
File: Hu_I_LnjrEOEGhtObfujCGW1Bfg.roa (raw, json)
Hash identifier: 3lnRB8dqM6fLaeZn8RdGpIWBZMDeY5UqE09Hw2zglGA=
Subject key identifier: 1E:EF:C8:FC:B9:E3:AC:43:84:1A:1B:4E:6D:FB:A3:08:65:B5:05:F8
Certificate issuer: /CN=6278a768c910badcd5c4aef7c172a9f061547e8c
Certificate serial: 018832FAC13E72ECEFD2A67B2A6DDBCC87B1
Authority key identifier: 62:78:A7:68:C9:10:BA:DC:D5:C4:AE:F7:C1:72:A9:F0:61:54:7E:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YninaMkQutzVxK73wXKp8GFUfow.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/42dfc0-a764-4d5d-a634-3454f490fd96/1/Hu_I_LnjrEOEGhtObfujCGW1Bfg.roa
Signing time: Fri 19 May 2023 07:47:54 +0000
ROA not before: Fri 19 May 2023 07:47:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 198691
IP address blocks: 178.20.206.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:32:fa:c1:3e:72:ec:ef:d2:a6:7b:2a:6d:db:cc:87:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6278a768c910badcd5c4aef7c172a9f061547e8c
Validity
Not Before: May 19 07:47:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1eefc8fcb9e3ac43841a1b4e6dfba30865b505f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:d4:b6:83:e0:97:09:41:0b:e1:a4:69:b9:86:
23:95:96:e2:63:33:1d:0e:66:5f:63:17:0b:10:f5:
43:02:2e:20:c6:bb:22:5c:ae:63:18:75:3b:b2:6f:
6f:0f:28:61:60:01:34:6f:79:5c:c1:55:35:13:af:
74:19:26:37:a8:44:0c:29:a2:f8:b8:25:ac:46:89:
2b:c2:2a:85:64:ff:43:30:15:b1:9e:f9:5c:79:d9:
9a:b0:bb:e7:d2:ea:7a:86:e6:a2:0a:db:3c:55:3b:
c4:91:a7:22:d2:0f:97:70:1e:86:54:01:72:1c:41:
2e:46:75:03:7c:44:76:9c:0f:7c:5e:cb:85:b6:ba:
49:0c:5f:1d:62:82:c0:9b:dc:d4:e3:e7:41:08:b8:
32:fc:a5:e4:03:68:00:24:7d:29:88:54:55:93:70:
42:e7:02:0b:29:4c:8b:89:d2:38:ea:c9:3a:b2:bf:
94:04:04:c4:e2:4b:b3:0f:5a:8a:cf:80:20:5c:71:
5b:41:51:77:98:e3:f3:5e:15:b8:71:87:6b:68:4d:
15:9a:03:9c:08:fd:8d:3e:09:6b:74:8a:26:fd:6b:
22:03:9e:06:cf:82:95:46:ba:f6:0e:22:b0:e1:f8:
23:b6:a9:12:a5:f4:48:f0:d3:8c:d2:fc:e0:7b:cf:
2e:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:EF:C8:FC:B9:E3:AC:43:84:1A:1B:4E:6D:FB:A3:08:65:B5:05:F8
X509v3 Authority Key Identifier:
keyid:62:78:A7:68:C9:10:BA:DC:D5:C4:AE:F7:C1:72:A9:F0:61:54:7E:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YninaMkQutzVxK73wXKp8GFUfow.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/42dfc0-a764-4d5d-a634-3454f490fd96/1/Hu_I_LnjrEOEGhtObfujCGW1Bfg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/42dfc0-a764-4d5d-a634-3454f490fd96/1/YninaMkQutzVxK73wXKp8GFUfow.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.20.206.0/24
Signature Algorithm: sha256WithRSAEncryption
03:6a:f1:62:6b:42:82:a0:3f:ff:7f:85:95:62:6a:7f:49:1d:
0b:46:96:5a:5a:ce:9e:95:b5:e9:ac:dc:ad:52:2b:2b:93:46:
79:84:13:e9:88:04:55:f2:db:1c:1b:f5:09:cb:62:77:0a:3f:
a8:99:a5:34:69:f4:41:a0:37:c1:02:ea:3f:bb:a0:f9:dd:b8:
7a:6d:05:5a:28:0d:af:9c:73:24:44:e2:08:61:3a:91:02:9a:
0b:76:aa:86:8a:d0:37:5d:d8:42:65:24:64:76:77:a8:6e:97:
fa:d6:b7:88:77:45:26:cd:1b:41:24:f0:b9:40:34:db:4f:23:
a3:37:a0:ee:db:09:5c:9a:1e:5a:92:d6:22:1d:9a:58:4e:30:
eb:eb:c2:b1:dc:48:7f:ac:82:89:65:5c:b4:e9:65:d5:d9:8f:
c6:c3:d0:3c:c2:ce:74:fc:01:9a:91:d9:7a:04:c6:9f:fb:70:
49:a1:92:4e:f7:c0:46:16:65:da:52:6a:19:7a:00:3e:2d:17:
02:c8:a8:5a:b6:db:a0:4f:d6:f3:f4:b1:eb:5c:c7:aa:29:fc:
1a:fa:65:79:55:42:2a:0e:d5:31:32:57:b9:be:38:0a:16:3a:
a9:98:3e:7e:7f:f6:89:6b:56:b4:21:37:f3:71:08:8b:99:be:
90:c8:49:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:18:01 2025 by rpki-client