Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/1bh7dyLr0DETC57D7ZYjf7mLGaE.roa
File: 1bh7dyLr0DETC57D7ZYjf7mLGaE.roa (raw, json)
Hash identifier: gNS1ZyI+4TEBwRIkLcx3afUMno+36koWdUqVeDb1hvE=
Subject key identifier: D5:B8:7B:77:22:EB:D0:31:13:0B:9E:C3:ED:96:23:7F:B9:8B:19:A1
Certificate issuer: /CN=cdaaa0e082360360acda347664eb8314eb11da10
Certificate serial: 018BA3A616092FD9F3D73EAA2BA1EB0C6CC4
Authority key identifier: CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/1bh7dyLr0DETC57D7ZYjf7mLGaE.roa
Signing time: Mon 06 Nov 2023 08:00:52 +0000
ROA not before: Mon 06 Nov 2023 08:00:52 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 1239
IP address blocks: 92.52.214.0/24 maxlen: 24
178.210.249.0/24 maxlen: 24
178.210.251.0/24 maxlen: 24
178.210.252.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:a3:a6:16:09:2f:d9:f3:d7:3e:aa:2b:a1:eb:0c:6c:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cdaaa0e082360360acda347664eb8314eb11da10
Validity
Not Before: Nov 6 08:00:52 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d5b87b7722ebd031130b9ec3ed96237fb98b19a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:51:b3:af:9d:d8:23:b8:38:c3:50:59:fe:7e:
81:f6:74:ce:a2:3b:71:dd:6a:a6:94:59:88:88:75:
d5:36:2f:f1:0a:7c:8e:5c:3f:d4:60:63:a3:30:06:
e9:7a:4e:d5:2f:92:28:31:dd:f5:06:ba:ba:85:90:
13:14:73:0f:fe:04:16:64:9e:5e:fa:9a:8a:b5:71:
09:e5:15:b1:52:07:7b:ac:43:a6:d5:f3:2a:47:76:
48:98:70:4b:d3:37:e6:00:9e:c5:0b:88:8e:f3:78:
20:7f:af:e5:6a:1e:b2:c0:c1:5a:3e:1f:15:92:b6:
86:4d:df:1c:eb:ab:d6:08:b1:2d:1f:cf:04:ab:50:
0a:8b:48:00:70:2b:b7:ff:16:5c:c9:3e:cf:b1:01:
3c:16:79:70:17:18:9d:72:71:2a:cf:ae:9f:02:88:
d6:68:b4:8e:d2:25:b2:b4:10:f4:ae:85:f6:ca:9a:
33:75:64:1c:2b:30:75:f5:57:bf:05:b3:3e:e1:b5:
4c:41:35:7f:f0:b3:42:c0:37:f5:fc:94:13:32:a2:
e2:f7:d9:d6:a5:b8:f9:cf:a8:69:2c:ce:d9:bd:1e:
2c:14:e5:58:36:fb:d8:9b:50:bd:6a:7d:59:f2:be:
ae:9f:7e:4a:35:ae:ad:e2:31:d6:57:53:d1:54:54:
4e:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:B8:7B:77:22:EB:D0:31:13:0B:9E:C3:ED:96:23:7F:B9:8B:19:A1
X509v3 Authority Key Identifier:
keyid:CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/1bh7dyLr0DETC57D7ZYjf7mLGaE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.52.214.0/24
178.210.249.0/24
178.210.251.0-178.210.252.255
Signature Algorithm: sha256WithRSAEncryption
64:ae:7f:3c:ff:d4:0b:6d:1d:8e:09:6f:45:a6:a4:76:c6:49:
80:ca:ca:4d:4e:ab:8e:24:b1:e8:85:29:40:31:78:1d:df:89:
8b:43:af:95:93:75:58:cc:fd:6e:f7:3f:b2:14:e7:5e:8b:88:
91:f4:08:04:87:34:f9:17:4b:88:64:78:6e:1b:4a:9a:a1:10:
4b:ea:b2:f4:89:83:2c:ad:62:21:ac:f8:28:ae:09:b4:e9:7e:
68:3b:56:9b:66:0a:9a:5e:9e:60:45:36:02:6f:12:2d:db:a4:
9a:f9:ea:a5:80:c9:ea:8a:f6:2d:8f:d2:d2:cf:28:f2:b7:19:
cc:b2:83:58:44:09:a1:80:e4:2c:15:78:e5:89:ec:cb:20:19:
21:5f:0a:85:04:f6:eb:c3:84:da:3f:0c:6e:6a:dd:4a:f3:a1:
b8:e5:c2:c2:16:b9:54:65:ee:dc:51:3e:45:37:5d:40:72:d4:
cd:83:c0:e6:02:24:a3:95:85:8e:17:50:3b:87:c8:37:c2:58:
6c:8e:dc:30:01:14:8e:a5:f2:e2:7c:27:c7:e8:dc:c7:9e:2b:
b8:c0:a0:d7:59:73:34:48:a7:66:ec:ce:05:6b:9e:52:be:03:
99:8c:51:93:40:79:50:b3:60:15:ad:8f:c2:56:39:37:d7:e0:
06:f2:68:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:47:54 2024 by rpki-client on console-ams.rpki-client.org