Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/7Ta-JVQAXDtSzwWeCwkX8jcWZb0.roa
File: 7Ta-JVQAXDtSzwWeCwkX8jcWZb0.roa (raw, json)
Hash identifier: buevwmrNNPDERoGo2RvvXtTfnw5uJMbp1u8Fg7AdZl8=
Subject key identifier: ED:36:BE:25:54:00:5C:3B:52:CF:05:9E:0B:09:17:F2:37:16:65:BD
Certificate issuer: /CN=cdaaa0e082360360acda347664eb8314eb11da10
Certificate serial: 018CC3B6B72FA045EBCB0CD90804C56CA8AE
Authority key identifier: CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/7Ta-JVQAXDtSzwWeCwkX8jcWZb0.roa
Signing time: Mon 01 Jan 2024 06:29:40 +0000
ROA not before: Mon 01 Jan 2024 06:29:40 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 5650
IP address blocks: 88.209.240.0/22 maxlen: 22
178.210.252.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:b6:b7:2f:a0:45:eb:cb:0c:d9:08:04:c5:6c:a8:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cdaaa0e082360360acda347664eb8314eb11da10
Validity
Not Before: Jan 1 06:29:40 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ed36be2554005c3b52cf059e0b0917f2371665bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:e0:92:08:59:2e:36:74:3b:8c:b5:96:05:2e:
db:5a:85:94:0a:a6:9e:82:3b:b0:5a:66:50:b0:85:
4d:f7:92:0f:e4:d4:b0:42:12:92:59:a8:97:fc:13:
fc:ef:40:0a:85:10:b6:ab:db:91:a1:3f:06:2f:8e:
a7:80:e2:a0:0a:53:53:fc:ef:1a:7f:26:59:94:a7:
48:0f:50:a2:a8:cb:4c:6d:b3:84:2b:aa:da:d3:40:
27:48:a3:6c:ea:99:90:98:20:d2:95:73:a3:c5:ff:
57:47:a5:71:96:95:db:25:9f:d8:6e:1b:6e:b8:cc:
01:26:fa:e4:cb:db:8a:a6:8f:da:0a:e6:c5:14:7f:
89:52:81:3f:80:71:e7:44:eb:ea:86:2a:9d:bc:37:
34:da:f8:b0:f0:18:21:8e:3a:e8:c5:63:de:5e:2b:
9a:11:0e:f1:82:72:0d:07:56:6b:64:5d:8f:05:95:
b6:00:49:60:bc:7b:42:53:72:4b:d9:73:8a:ea:7c:
a1:9a:5c:66:4b:20:52:94:25:99:22:16:86:5b:02:
29:31:48:c9:1a:11:03:ed:0a:29:27:8c:85:6d:fa:
fd:e1:60:f1:b5:45:6c:a7:97:be:7e:03:6d:3d:07:
72:8a:c4:4c:06:7e:e1:f1:2f:49:7e:bb:79:7d:f4:
81:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:36:BE:25:54:00:5C:3B:52:CF:05:9E:0B:09:17:F2:37:16:65:BD
X509v3 Authority Key Identifier:
keyid:CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/7Ta-JVQAXDtSzwWeCwkX8jcWZb0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.209.240.0/22
178.210.252.0/24
Signature Algorithm: sha256WithRSAEncryption
4a:f9:ec:43:7b:2e:a9:88:a8:48:6c:a3:cf:71:53:53:3c:61:
90:4c:eb:de:8e:da:10:9e:ce:05:8c:32:58:29:db:50:7e:47:
4f:9d:87:2d:e9:f3:06:75:ad:4d:66:27:28:1f:c4:14:7d:bd:
0d:96:df:41:bc:95:20:af:76:41:1c:2d:13:39:7d:c8:c5:ee:
7c:1e:ef:86:0b:df:47:0f:66:50:6c:84:7e:d8:ac:de:55:e2:
55:6a:f8:ab:e9:35:9f:5e:76:ae:0f:03:04:eb:6b:f8:22:ed:
4e:a5:35:3d:aa:19:5a:0a:f8:1a:a4:e3:6e:58:5c:ef:7e:a2:
d9:33:6b:9a:9f:49:f8:59:63:e0:5a:b1:02:7b:be:78:5c:15:
d3:e1:09:b7:dd:c0:1f:98:87:aa:2c:bf:0b:e4:c5:63:2c:5a:
11:98:56:cc:f8:0c:27:3c:d1:ea:1b:f3:c9:cf:54:12:69:a4:
f2:60:6e:62:52:9c:60:6c:88:19:cb:13:59:71:5f:f1:0d:12:
a1:a7:ea:70:bb:84:5b:eb:de:08:27:49:43:8c:72:20:f7:e1:
ee:01:c2:5c:58:69:de:ef:88:54:e6:17:84:5d:d2:14:08:f4:
9d:d7:d0:f6:d2:7a:f5:93:4d:fe:06:6d:df:bf:d0:01:fe:cf:
94:8a:ad:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:56:27 2024 by rpki-client on console-fra.rpki-client.org