Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/BcL-akIkHetyJJdEwBMjcdOPDtI.roa
File: BcL-akIkHetyJJdEwBMjcdOPDtI.roa (raw, json)
Hash identifier: OymK8NHySODRY2bEXgiEsze2UgBkCbnYOeKHcUfa8Jw=
Subject key identifier: 05:C2:FE:6A:42:24:1D:EB:72:24:97:44:C0:13:23:71:D3:8F:0E:D2
Certificate issuer: /CN=cdaaa0e082360360acda347664eb8314eb11da10
Certificate serial: 0182F3BCF324B54BDAF8FE5DF602A4691655
Authority key identifier: CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/BcL-akIkHetyJJdEwBMjcdOPDtI.roa
Signing time: Wed 31 Aug 2022 11:50:22 +0000
ROA not before: Wed 31 Aug 2022 11:50:22 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 398343
IP address blocks: 178.210.249.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:f3:bc:f3:24:b5:4b:da:f8:fe:5d:f6:02:a4:69:16:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cdaaa0e082360360acda347664eb8314eb11da10
Validity
Not Before: Aug 31 11:50:22 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=05c2fe6a42241deb72249744c0132371d38f0ed2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:5a:70:63:9d:20:0e:14:9b:66:35:17:3c:77:
00:bb:a4:ab:91:a1:76:7f:00:b1:f9:1d:c5:93:3d:
fa:9c:1d:01:b5:df:51:d0:76:be:4d:48:44:aa:64:
09:7c:cb:fc:7c:42:6c:be:73:91:41:a8:40:46:dc:
c7:8a:71:9b:59:9b:b0:d7:75:4e:53:06:a8:05:9b:
de:79:43:23:a1:44:33:d0:36:40:8c:95:21:05:2e:
c4:48:04:ae:45:25:5c:78:7c:99:d1:36:05:85:b2:
c7:b1:c6:90:0b:3d:32:4f:9b:6a:fb:51:3d:b1:c2:
2f:e2:63:eb:5a:ed:ad:79:51:a5:60:a2:b3:4c:fb:
0a:0a:cf:4a:e7:2b:08:f3:71:8e:47:6a:31:10:f2:
2f:6e:81:4c:98:a0:d5:e4:81:32:ff:d6:b7:37:52:
0c:46:c3:33:4e:04:05:b3:aa:e3:a2:ab:4b:f6:f1:
90:5e:dd:a6:fb:79:6a:de:36:ed:2b:a4:ba:7a:5a:
7b:bf:34:1a:51:d8:0f:e0:11:b9:b0:d8:6f:f3:5e:
e9:dd:c3:a1:29:25:0a:3e:29:2c:b4:44:d4:f2:df:
30:ca:da:e3:76:dc:c5:d6:11:5a:6e:30:6f:e4:1d:
4f:bf:56:2a:bb:da:ed:24:92:30:3d:f1:ba:08:9c:
59:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:C2:FE:6A:42:24:1D:EB:72:24:97:44:C0:13:23:71:D3:8F:0E:D2
X509v3 Authority Key Identifier:
keyid:CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/BcL-akIkHetyJJdEwBMjcdOPDtI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.210.249.0/24
Signature Algorithm: sha256WithRSAEncryption
82:72:51:09:9d:50:db:45:6c:68:43:17:f6:85:43:cd:27:bf:
e3:d7:70:10:53:ce:f6:ed:9d:f4:74:dc:80:6d:23:98:a3:b6:
64:f4:f2:ff:ec:c7:cc:7f:81:6b:27:0f:75:7d:13:7f:f4:fa:
86:73:3e:d5:36:56:0e:64:0c:c7:1c:8a:2e:6d:e4:f2:a8:51:
85:7f:f5:e5:dd:5f:d8:eb:01:09:42:2b:71:09:e5:ab:b7:eb:
f8:0b:b9:86:ad:63:68:6a:8d:a9:b0:18:2d:d8:e0:e2:0f:12:
1c:38:82:ee:88:d6:51:66:dc:83:b9:b5:13:33:25:77:a6:11:
83:87:3f:39:91:25:f3:65:41:d2:89:96:bd:1e:88:38:03:57:
16:38:4f:5e:c0:da:86:c1:57:9d:1c:f0:c0:76:d9:24:36:70:
f1:33:8c:58:73:b6:51:ab:58:84:c2:50:f7:61:9c:ee:d2:6a:
3d:1a:82:4d:ae:05:a7:62:67:02:25:c6:eb:6e:43:cb:ae:21:
a8:99:6a:a7:4e:1d:3b:12:65:72:ae:eb:9a:c6:d8:aa:0f:75:
37:f7:d1:aa:9f:3a:34:cc:e9:81:d9:b4:f9:f2:79:1a:4a:b7:
1f:db:a0:ec:bb:09:24:1e:a8:6a:31:91:2d:17:1b:1d:76:cc:
d2:cf:f1:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:47:55 2024 by rpki-client on console-ams.rpki-client.org