Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/b8d29c-3333-493c-9739-df56ec670de7/1/6hVlhbDQQ0aaFtYhUH2P3J5bm20.roa
File: 6hVlhbDQQ0aaFtYhUH2P3J5bm20.roa (raw, json)
Hash identifier: nJC8ER7PXn3P60EMzbc5CxIpY2bSLE60RFEI6lY/iiE=
Subject key identifier: EA:15:65:85:B0:D0:43:46:9A:16:D6:21:50:7D:8F:DC:9E:5B:9B:6D
Certificate issuer: /CN=fcbe62378bb580af4ed70bfa35abc840945d7803
Certificate serial: 013FE8
Authority key identifier: FC:BE:62:37:8B:B5:80:AF:4E:D7:0B:FA:35:AB:C8:40:94:5D:78:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_L5iN4u1gK9O1wv6NavIQJRdeAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/b8d29c-3333-493c-9739-df56ec670de7/1/6hVlhbDQQ0aaFtYhUH2P3J5bm20.roa
Signing time: Mon 21 Mar 2022 14:15:11 +0000
ROA not before: Mon 21 Mar 2022 14:15:11 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 207872
IP address blocks: 178.236.203.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 81896 (0x13fe8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fcbe62378bb580af4ed70bfa35abc840945d7803
Validity
Not Before: Mar 21 14:15:11 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ea156585b0d043469a16d621507d8fdc9e5b9b6d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:5b:86:f8:71:78:2a:a7:fc:b7:54:4c:23:a6:
e4:67:04:9f:84:d4:9b:77:d6:2e:7a:b3:94:fa:61:
14:43:66:63:1d:57:99:36:ee:8e:36:93:c6:43:fb:
35:e9:1c:2a:25:36:05:b9:70:fa:69:3d:58:8b:64:
d6:8c:e2:fa:c0:40:f9:87:6a:b2:71:b4:b8:f3:bc:
5d:ee:88:ab:a7:20:46:a3:70:60:83:bb:da:56:32:
cb:f1:c0:47:5a:a9:5d:40:e7:88:56:cc:80:c5:9a:
89:58:eb:87:8f:cd:de:31:b7:87:2f:41:31:21:44:
77:b1:2e:5a:35:a1:ce:be:76:c8:f1:0a:c9:45:82:
42:07:da:68:4d:d5:96:49:bb:a9:cb:77:a1:db:25:
59:9d:8f:82:a7:da:77:77:e9:23:79:bc:ad:fc:41:
f6:2b:ca:a4:42:29:36:6d:86:e0:25:81:d2:d8:16:
93:43:e4:20:8a:00:e3:3d:0b:dc:87:2d:4b:81:7c:
55:53:b6:99:38:e5:0f:b3:ed:13:0d:8d:ac:d0:7a:
97:f6:9d:aa:90:75:50:a2:3c:16:eb:c1:e7:a3:05:
c8:00:4e:76:c2:b2:03:a9:f0:0a:09:1c:97:27:1d:
18:0d:b1:6f:0a:d0:44:7f:24:34:f7:d6:96:0c:16:
f8:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:15:65:85:B0:D0:43:46:9A:16:D6:21:50:7D:8F:DC:9E:5B:9B:6D
X509v3 Authority Key Identifier:
keyid:FC:BE:62:37:8B:B5:80:AF:4E:D7:0B:FA:35:AB:C8:40:94:5D:78:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_L5iN4u1gK9O1wv6NavIQJRdeAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/b8d29c-3333-493c-9739-df56ec670de7/1/6hVlhbDQQ0aaFtYhUH2P3J5bm20.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/b8d29c-3333-493c-9739-df56ec670de7/1/_L5iN4u1gK9O1wv6NavIQJRdeAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.236.203.0/24
Signature Algorithm: sha256WithRSAEncryption
27:0a:6f:5c:29:27:d8:5b:49:85:4d:d5:70:88:68:06:98:68:
99:c6:32:9e:d5:bb:ff:93:59:9e:6b:e6:1d:70:07:30:a1:d2:
14:d2:10:e5:15:2d:23:12:0d:c6:07:dc:3f:fa:5e:bf:c0:83:
fa:4f:24:9e:0d:a4:88:9e:44:ff:ad:22:9b:ea:c5:f7:f6:dd:
5e:5c:2a:12:47:9e:07:c1:a3:47:72:b5:6c:c6:b8:e6:7f:5f:
17:cb:0d:84:40:4c:a0:78:f0:8e:9f:63:5d:5a:db:d3:0b:65:
c7:27:e8:cd:ea:17:1b:f8:fa:c9:6f:93:b8:49:9c:8b:07:a0:
a7:34:10:25:e7:e3:2a:7c:c7:db:fd:3a:f9:bc:3a:13:62:13:
58:d0:0f:8b:b0:0c:bc:1c:f1:e7:8b:b0:76:5d:51:4f:b1:6a:
9b:39:00:d7:39:4f:76:cf:f8:76:fd:eb:e7:d3:3d:ce:a5:6b:
b1:58:04:a6:c1:01:d6:f6:bd:44:01:f3:ec:d8:b5:f9:c5:63:
87:cd:68:b0:f2:c5:fd:5b:ae:a6:82:dd:03:fb:64:43:11:f3:
8c:f5:ee:7c:d3:dc:10:f9:26:93:df:04:a0:3e:86:5f:76:25:
ec:b1:89:fe:5a:f4:8f:d5:c7:c7:65:91:45:6a:1d:a5:16:ef:
d2:0f:a4:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:40:24 2024 by rpki-client on console-ams.rpki-client.org