Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/74e17f-f9f4-4789-92b7-9dd6e88fcc8d/1/I8Z4KcvXguSWBdSqYhhhL8Qaueg.roa
File: I8Z4KcvXguSWBdSqYhhhL8Qaueg.roa (raw, json)
Hash identifier: /izypDHLnVZe6nLQ/OFuIxN7+9hm6tk+jiV0vb7Mn3M=
Subject key identifier: 23:C6:78:29:CB:D7:82:E4:96:05:D4:AA:62:18:61:2F:C4:1A:B9:E8
Certificate issuer: /CN=b91b91504983091506a1a944457a4558b94dab7f
Certificate serial: 38AEF454
Authority key identifier: B9:1B:91:50:49:83:09:15:06:A1:A9:44:45:7A:45:58:B9:4D:AB:7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uRuRUEmDCRUGoalERXpFWLlNq38.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/74e17f-f9f4-4789-92b7-9dd6e88fcc8d/1/I8Z4KcvXguSWBdSqYhhhL8Qaueg.roa
Signing time: Tue 01 Mar 2022 09:10:56 +0000
ROA not before: Tue 01 Mar 2022 09:10:56 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 62337
IP address blocks: 178.175.164.0/23 maxlen: 24
178.175.188.0/23 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 950989908 (0x38aef454)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b91b91504983091506a1a944457a4558b94dab7f
Validity
Not Before: Mar 1 09:10:56 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=23c67829cbd782e49605d4aa6218612fc41ab9e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:ee:f1:09:ca:a1:c2:84:3a:ba:2b:a6:4d:3d:
08:8d:a2:50:0f:01:da:bc:76:7e:bc:20:a1:6e:be:
c9:cf:01:93:9f:97:48:b7:ba:1c:45:95:56:4d:61:
97:ef:69:b0:3b:ce:d1:a6:06:a0:50:14:74:06:a3:
8a:a0:45:58:6f:fa:e5:d8:09:1a:b2:8f:16:7f:8d:
82:65:2d:24:48:d8:ed:a4:54:f7:05:57:38:c8:02:
48:37:9e:af:92:67:f3:42:0b:47:87:54:25:2b:e0:
4f:ce:03:19:c0:b4:c2:69:ea:7e:42:4e:0b:09:12:
c5:c7:21:56:5a:86:07:7b:36:41:6e:65:03:2a:57:
ba:5f:80:ea:1c:b4:18:d2:0c:1f:8e:bc:d6:21:57:
3d:ef:5e:2a:d8:c3:e9:ea:d5:44:a3:2d:98:3b:1b:
a2:60:d8:5c:30:24:a0:af:aa:1b:24:1b:a9:a2:80:
cf:dc:84:86:32:a0:7a:23:0e:43:30:f9:ad:7a:ab:
4e:b1:04:d7:4f:02:1d:a9:78:08:84:53:8d:28:b9:
bb:bf:ef:d1:54:7f:03:da:98:86:a0:2d:8a:4e:7a:
24:7d:51:2b:b7:a9:21:91:45:1a:f6:85:83:72:3b:
30:20:e4:9d:3f:69:a6:5d:ab:01:54:a5:a5:ca:30:
27:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:C6:78:29:CB:D7:82:E4:96:05:D4:AA:62:18:61:2F:C4:1A:B9:E8
X509v3 Authority Key Identifier:
keyid:B9:1B:91:50:49:83:09:15:06:A1:A9:44:45:7A:45:58:B9:4D:AB:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uRuRUEmDCRUGoalERXpFWLlNq38.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/74e17f-f9f4-4789-92b7-9dd6e88fcc8d/1/I8Z4KcvXguSWBdSqYhhhL8Qaueg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/74e17f-f9f4-4789-92b7-9dd6e88fcc8d/1/uRuRUEmDCRUGoalERXpFWLlNq38.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.175.164.0/23
178.175.188.0/23
Signature Algorithm: sha256WithRSAEncryption
85:28:b3:42:33:89:be:47:a5:4e:0a:44:a7:2b:ef:18:d0:6c:
12:ce:17:93:58:96:13:c7:3b:b3:64:0e:61:7d:d0:15:53:63:
7c:35:05:e1:4e:c0:a4:45:22:b3:3f:85:e9:c8:23:4b:3c:bd:
2a:54:b9:d0:c9:1f:13:c0:29:bd:ab:74:99:2e:88:d5:78:52:
e9:7a:ab:1b:fe:c3:2e:cb:07:ff:73:b2:d1:f9:38:2b:d0:42:
42:f4:5c:4c:5f:7d:2e:89:31:44:fd:ab:f9:03:83:3b:5f:0f:
84:e0:ff:a6:f8:11:03:d4:bd:d0:ec:47:b2:59:c9:15:00:9c:
0b:88:36:ee:0a:b2:f3:79:e7:55:91:df:62:89:7a:76:be:94:
43:11:43:4e:43:5c:e8:21:c5:d5:22:00:9e:eb:9a:14:36:3b:
b7:c3:65:f4:99:fe:6a:60:13:07:04:84:ba:4c:80:7e:f8:61:
08:f2:05:95:8d:3e:d4:24:fc:1b:8a:45:16:70:67:25:27:50:
b6:5d:9a:a1:c1:aa:58:39:be:2f:02:8b:cd:03:6a:33:4f:1b:
5b:c5:b7:7f:e8:ca:85:4a:d4:14:dc:1e:3b:36:79:15:15:de:
6c:68:09:37:4f:9a:25:46:64:31:29:06:6f:1e:0d:1e:49:2e:
ab:29:a1:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:17 2023 by rpki-client on console-ams.rpki-client.org