Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/74e17f-f9f4-4789-92b7-9dd6e88fcc8d/1/X1DCJD1wz67bTWABKh_wInrUPxA.roa
File: X1DCJD1wz67bTWABKh_wInrUPxA.roa (raw, json)
Hash identifier: MTWYjCmlI2NKPUh8qiB1N38wuPaMsYtu5udSwRlAAkw=
Subject key identifier: 5F:50:C2:24:3D:70:CF:AE:DB:4D:60:01:2A:1F:F0:22:7A:D4:3F:10
Certificate issuer: /CN=b91b91504983091506a1a944457a4558b94dab7f
Certificate serial: 38B26B4A
Authority key identifier: B9:1B:91:50:49:83:09:15:06:A1:A9:44:45:7A:45:58:B9:4D:AB:7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uRuRUEmDCRUGoalERXpFWLlNq38.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/74e17f-f9f4-4789-92b7-9dd6e88fcc8d/1/X1DCJD1wz67bTWABKh_wInrUPxA.roa
Signing time: Tue 01 Mar 2022 09:20:32 +0000
ROA not before: Tue 01 Mar 2022 09:20:32 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 35534
IP address blocks: 178.175.178.0/23 maxlen: 24
178.175.176.0/23 maxlen: 24
178.175.174.0/23 maxlen: 24
178.175.186.0/23 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 951216970 (0x38b26b4a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b91b91504983091506a1a944457a4558b94dab7f
Validity
Not Before: Mar 1 09:20:32 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=5f50c2243d70cfaedb4d60012a1ff0227ad43f10
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:36:50:d1:d5:3a:f8:76:f6:f7:40:15:e3:c6:
f4:d9:e7:0a:e7:0f:ec:06:de:78:da:93:fe:54:7f:
13:fe:f0:e6:30:63:cd:4b:c2:ea:16:16:41:3e:be:
21:2a:92:7b:6d:0f:c4:eb:35:71:34:66:73:95:fa:
3f:3f:2e:0a:d2:ee:18:ad:ab:56:19:4b:10:76:ed:
71:30:f4:b7:ce:9e:ae:6e:5c:58:9c:09:9b:4d:28:
c4:df:f1:b6:5a:b3:7f:82:73:99:98:66:0b:ed:32:
eb:4a:94:94:7a:f8:be:3d:fc:fa:8b:91:90:56:fe:
82:f9:9a:8e:af:56:fd:53:6e:95:af:c1:39:08:07:
4a:f1:e1:a5:32:3d:1f:0b:87:2a:4d:c7:16:69:f4:
a2:46:25:f2:3e:f6:f6:8f:d3:b3:51:0f:36:1a:8b:
07:df:e7:94:ba:f6:32:d7:3e:8b:f1:44:56:ea:a9:
0a:ff:48:b4:a9:4d:78:28:86:05:41:4a:4c:cb:58:
d4:7d:df:d0:6a:18:a7:ef:ea:41:d1:e3:eb:5a:d9:
c0:e4:4e:57:d2:38:8b:5b:3a:03:4e:07:33:81:7d:
08:69:ca:94:fe:97:e6:50:a2:24:a0:dc:ff:21:ef:
84:b1:4a:c2:dc:5f:67:24:22:c3:c2:a5:bf:c8:a2:
79:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:50:C2:24:3D:70:CF:AE:DB:4D:60:01:2A:1F:F0:22:7A:D4:3F:10
X509v3 Authority Key Identifier:
keyid:B9:1B:91:50:49:83:09:15:06:A1:A9:44:45:7A:45:58:B9:4D:AB:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uRuRUEmDCRUGoalERXpFWLlNq38.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/74e17f-f9f4-4789-92b7-9dd6e88fcc8d/1/X1DCJD1wz67bTWABKh_wInrUPxA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/74e17f-f9f4-4789-92b7-9dd6e88fcc8d/1/uRuRUEmDCRUGoalERXpFWLlNq38.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.175.174.0-178.175.179.255
178.175.186.0/23
Signature Algorithm: sha256WithRSAEncryption
38:44:08:3d:a9:87:30:3b:e5:6a:be:c2:f6:0d:19:89:65:98:
60:7d:4b:05:49:b5:d6:4e:5d:46:18:90:2c:ac:76:dd:a2:5c:
24:9e:e8:51:79:3c:58:85:d4:32:db:33:e2:61:89:3d:17:c9:
41:96:16:a7:d6:5c:f2:32:d3:eb:9c:d0:b3:e4:1d:02:52:2a:
ef:a7:9e:f0:18:ba:f3:94:0c:f4:a2:11:aa:e5:25:74:87:f6:
fa:a3:94:98:d4:42:14:cc:6f:18:7b:53:65:c8:9c:76:b6:e2:
c4:97:9c:7f:ed:a5:17:2d:ee:a5:4d:f2:04:df:7a:bc:3f:9a:
8a:56:c0:ff:1e:94:e9:48:24:75:e5:0f:3c:48:89:bc:84:d8:
72:29:11:f6:8a:ed:2c:27:53:4d:2e:e3:2e:d5:15:88:d7:f2:
f8:21:72:3b:2a:ff:d6:22:8c:f5:7a:88:91:12:b9:52:15:28:
32:60:44:38:16:b7:fc:61:5a:50:32:6d:a3:5f:b2:dd:92:70:
7d:34:9e:f7:98:5d:2b:af:e4:40:be:f1:ad:8a:32:35:c9:f2:
7a:1c:32:5b:37:ba:f2:a0:05:c4:3b:8e:77:74:26:0c:99:14:
f2:b1:9d:63:e6:63:d9:ee:bf:1c:8e:bc:6c:f2:39:89:f3:e5:
fb:1c:34:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:44:29 2023 by rpki-client on console-fra.rpki-client.org