Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/0T8q7udPlbYjVQzjEpor8oDVNww.roa
File: 0T8q7udPlbYjVQzjEpor8oDVNww.roa (raw, json)
Hash identifier: opF6sLRKpjGsTt1j2YAGL+5Qj1mn/ZzvH4ndkuubAqQ=
Subject key identifier: D1:3F:2A:EE:E7:4F:95:B6:23:55:0C:E3:12:9A:2B:F2:80:D5:37:0C
Certificate issuer: /CN=cdaaa0e082360360acda347664eb8314eb11da10
Certificate serial: 0182EDC1EF6F44E81BFE1A223A93B093E8C3
Authority key identifier: CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/0T8q7udPlbYjVQzjEpor8oDVNww.roa
Signing time: Tue 30 Aug 2022 07:58:06 +0000
ROA not before: Tue 30 Aug 2022 07:58:06 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 46573
IP address blocks: 178.210.250.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:ed:c1:ef:6f:44:e8:1b:fe:1a:22:3a:93:b0:93:e8:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cdaaa0e082360360acda347664eb8314eb11da10
Validity
Not Before: Aug 30 07:58:06 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d13f2aeee74f95b623550ce3129a2bf280d5370c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:02:da:e2:36:f8:b2:ba:18:a6:80:b4:be:8b:
f0:ff:55:e4:a1:6a:9a:5e:21:ef:51:cb:d9:f9:ac:
0f:18:08:38:68:a4:15:2e:61:5a:72:b5:6c:6f:1d:
73:9d:c6:32:f9:81:21:3a:dd:e7:fd:5f:5c:4a:3a:
70:1c:75:dc:64:20:d0:c6:06:56:4b:85:97:f3:73:
d8:90:cd:42:e3:94:5d:a8:01:bc:7f:9c:8f:fd:45:
d1:2c:f8:fb:40:93:45:81:de:ea:69:72:8a:00:ac:
e4:dd:5e:22:27:30:31:6c:9d:6f:b3:22:3f:04:d1:
24:60:d4:ea:25:df:9c:a7:ad:d5:d5:36:3b:b9:cd:
af:25:50:02:c8:a8:fe:c4:09:7c:26:24:21:04:2e:
22:63:e3:73:4f:ec:0c:b7:98:1e:17:13:79:8c:2c:
d5:10:4f:7a:88:70:4a:fe:91:6e:82:7b:2c:9b:e6:
ea:11:1b:f7:df:73:91:83:12:5b:79:56:c1:da:88:
20:ba:fe:56:c3:45:18:7c:a1:bc:f8:ad:65:42:fa:
7d:49:32:69:35:53:b0:05:75:44:b1:39:64:d8:1a:
20:ec:b4:6f:b8:8d:6e:82:9b:ea:f6:6b:e7:b7:1b:
a6:6e:0b:51:87:ad:86:d3:bd:f3:45:64:92:dc:a0:
1e:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:3F:2A:EE:E7:4F:95:B6:23:55:0C:E3:12:9A:2B:F2:80:D5:37:0C
X509v3 Authority Key Identifier:
keyid:CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/0T8q7udPlbYjVQzjEpor8oDVNww.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.210.250.0/24
Signature Algorithm: sha256WithRSAEncryption
8f:f7:08:a1:48:0c:e3:4f:1e:d1:2f:69:2d:cb:c1:a4:24:8a:
82:31:af:be:65:15:6d:73:d3:8c:64:63:b5:51:7d:9a:3e:86:
cb:74:cc:d1:99:60:95:d8:a2:87:d9:18:76:f0:90:3c:ad:8a:
d4:53:14:bc:bc:3e:a6:9e:39:ad:60:30:f7:38:52:a9:ee:dc:
b0:e0:bf:3f:64:8c:b3:5f:c5:2b:31:37:76:79:f6:83:8f:94:
f0:ed:54:c8:47:15:ec:90:c7:33:bb:90:a0:de:ae:ad:68:a2:
b7:40:9c:2e:97:de:3c:ac:8b:5d:89:63:aa:3e:67:f3:b3:6c:
da:52:e9:f0:42:cc:55:fb:aa:3a:cd:b9:00:2c:96:e0:a0:47:
86:6b:26:8b:d1:99:0e:a3:cb:01:f4:ec:76:54:15:c2:6c:65:
7f:ca:cd:30:b3:f5:a3:6f:cb:e7:e3:0e:e7:87:fc:0a:3e:e8:
57:5a:84:eb:6d:bb:86:26:66:b6:21:67:7c:03:72:58:ab:45:
14:cb:83:5b:98:62:c4:b4:17:1f:dc:7e:b7:8c:72:c9:aa:f4:
88:71:de:b5:7a:3b:b7:5a:58:a5:c8:57:ff:1c:cd:da:ba:2d:
31:a6:20:e2:04:6a:30:f0:20:ca:09:ca:c2:30:f3:5f:cf:07:
c3:6c:c0:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:56:26 2024 by rpki-client on console-fra.rpki-client.org