Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/PVkCVapdLFQvAkdoW_xnXHAsi6A.roa
File: PVkCVapdLFQvAkdoW_xnXHAsi6A.roa (raw, json)
Hash identifier: PGr3KX3cqIWi0yEsa69B7P8oNTfaeLzlb7SLr/ZE480=
Subject key identifier: 3D:59:02:55:AA:5D:2C:54:2F:02:47:68:5B:FC:67:5C:70:2C:8B:A0
Certificate issuer: /CN=cdaaa0e082360360acda347664eb8314eb11da10
Certificate serial: 0182CE89884D4001070F6FAD226C4A728A23
Authority key identifier: CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/PVkCVapdLFQvAkdoW_xnXHAsi6A.roa
Signing time: Wed 24 Aug 2022 06:28:16 +0000
ROA not before: Wed 24 Aug 2022 06:28:16 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 138687
IP address blocks: 178.210.251.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:ce:89:88:4d:40:01:07:0f:6f:ad:22:6c:4a:72:8a:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cdaaa0e082360360acda347664eb8314eb11da10
Validity
Not Before: Aug 24 06:28:16 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=3d590255aa5d2c542f0247685bfc675c702c8ba0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:c8:28:89:02:bf:3b:f5:ba:f0:03:3a:78:60:
30:96:aa:ab:48:8e:1d:d4:2f:e9:58:0c:4e:64:9b:
15:bb:59:67:bf:01:1d:f7:b9:48:e8:3b:8e:a0:19:
94:bb:ac:a7:8d:70:93:cc:31:03:57:5d:c8:28:bd:
d0:11:49:ed:f9:8a:f4:80:e5:1e:b9:3f:57:cc:d4:
53:7c:d2:2e:f4:25:d1:83:c1:cf:12:25:2a:4f:a5:
d3:f8:23:b9:6f:a6:9f:fe:1b:44:6a:07:5c:cd:ad:
a3:0f:06:27:b1:a9:48:5b:a0:93:32:a3:90:4e:50:
fe:dd:a4:de:76:1c:06:55:80:ec:b2:c4:27:93:fd:
e6:28:20:db:19:1b:07:17:f5:43:c4:12:f6:48:d7:
ee:be:ae:0e:ee:0f:be:56:85:4c:be:76:c0:a7:3c:
b6:19:c9:6b:5f:70:c5:1c:ae:95:f6:ac:5e:15:4e:
1c:21:d6:e8:70:5c:55:1b:c3:57:4d:02:b9:13:34:
53:5e:8f:c4:50:f7:33:03:42:f4:4c:ec:d3:a9:29:
5f:0e:45:3d:44:62:66:1c:c8:71:2b:f0:1a:17:6c:
2e:34:8a:69:e3:69:8d:28:25:c9:98:fd:9c:06:a1:
82:d2:e9:50:31:8a:e0:d9:6c:75:0a:6e:28:5c:02:
d6:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:59:02:55:AA:5D:2C:54:2F:02:47:68:5B:FC:67:5C:70:2C:8B:A0
X509v3 Authority Key Identifier:
keyid:CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/PVkCVapdLFQvAkdoW_xnXHAsi6A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.210.251.0/24
Signature Algorithm: sha256WithRSAEncryption
a7:87:22:bb:e3:74:c6:b9:56:f1:25:fd:a4:9d:dc:a7:94:77:
0d:b9:27:81:27:53:51:c8:55:52:59:bb:6f:34:0f:e4:a5:40:
b3:20:96:cf:cd:5d:49:37:4a:90:ed:f3:a8:0b:a6:62:d9:b2:
3c:17:fb:89:19:dc:9a:75:f6:89:5d:0c:58:14:b7:47:69:e5:
eb:4c:a4:d5:8c:80:0d:af:07:49:a7:ef:3c:47:db:f5:ef:22:
ae:f1:db:e6:78:ef:e7:c8:2a:45:f2:19:b7:5c:16:df:7c:3b:
26:a8:82:fb:d5:c6:9a:04:21:98:ab:2f:58:a3:e7:e3:70:cf:
d7:9f:a4:bf:ac:2f:7d:91:44:67:73:42:71:95:9e:c8:dc:84:
c5:c3:01:a6:d4:d7:af:fa:cd:b6:50:49:86:b3:c5:c3:42:35:
3d:be:69:c5:d2:a8:5d:c5:02:59:bd:fb:86:cd:89:0c:b4:6b:
08:e2:15:82:9a:4b:78:4e:14:3e:d6:6c:c9:b9:7e:c1:b3:a2:
81:de:cd:c4:30:7e:2b:02:1b:87:6e:0e:ed:31:90:9c:dc:ed:
47:5b:0e:41:1a:71:0a:9a:c8:9b:ba:02:38:7d:5b:ac:74:ef:
d3:30:25:83:c8:2d:6c:eb:88:43:55:c3:af:00:ab:8d:87:64:
c9:1b:85:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:56:27 2024 by rpki-client on console-fra.rpki-client.org