Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/Uce-yJ-z0ICCw_CI8NfS5ZzUlM0.roa
File: Uce-yJ-z0ICCw_CI8NfS5ZzUlM0.roa (raw, json)
Hash identifier: 73lFJLQ/Vopdg2gVNMPf695+PwfBQBjUj6+pbB1DtC0=
Subject key identifier: 51:C7:BE:C8:9F:B3:D0:80:82:C3:F0:88:F0:D7:D2:E5:9C:D4:94:CD
Certificate issuer: /CN=cdaaa0e082360360acda347664eb8314eb11da10
Certificate serial: 0188AE3AD9D76A9373BACB818AD2724250E7
Authority key identifier: CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/Uce-yJ-z0ICCw_CI8NfS5ZzUlM0.roa
Signing time: Mon 12 Jun 2023 06:11:12 +0000
ROA not before: Mon 12 Jun 2023 06:11:12 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 178.210.250.0/24 maxlen: 24
88.151.56.0/23 maxlen: 24
77.242.159.0/24 maxlen: 24
88.209.211.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:ae:3a:d9:d7:6a:93:73:ba:cb:81:8a:d2:72:42:50:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cdaaa0e082360360acda347664eb8314eb11da10
Validity
Not Before: Jun 12 06:11:12 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=51c7bec89fb3d08082c3f088f0d7d2e59cd494cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:7a:1b:96:a3:e9:ad:f0:0f:72:9a:b2:07:01:
5c:e3:9a:7c:4b:fa:33:d9:40:fc:e8:72:27:f5:db:
5e:86:20:d7:b4:e3:79:42:50:27:5f:03:81:da:6b:
88:7b:09:97:ae:bf:0d:fd:64:c7:5c:d2:d7:16:6f:
69:5b:8d:ae:6d:71:c4:e2:e3:b1:fc:af:85:3d:73:
1c:6b:82:ee:51:d0:da:a3:e9:b2:fa:72:d8:66:9f:
c3:cb:0e:70:13:e2:c0:ca:de:b8:eb:77:5c:92:f3:
cf:6a:db:8a:b9:c2:5b:78:16:5c:f7:71:e0:b6:7f:
8f:01:03:0a:ba:af:58:7f:11:ec:94:39:ab:d7:b9:
de:26:ac:25:85:3f:2e:b5:50:ed:36:91:e6:cd:b0:
09:cf:e4:56:44:ba:db:55:c0:44:a2:47:aa:84:6f:
e2:49:33:8b:95:8e:12:93:1e:f5:57:79:82:31:1a:
91:01:88:a4:c4:bc:d9:02:b3:05:e4:df:82:fd:e7:
79:74:a7:e1:50:13:c8:ca:b7:80:1c:6c:76:20:16:
4d:17:c2:66:e7:dd:e0:15:ff:67:3a:79:04:b9:b6:
17:d5:9c:2e:06:d4:a9:e2:a6:bc:83:b9:2b:d1:18:
b9:61:2c:8b:c2:f9:6a:b4:8f:50:b1:03:f9:90:ab:
a0:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:C7:BE:C8:9F:B3:D0:80:82:C3:F0:88:F0:D7:D2:E5:9C:D4:94:CD
X509v3 Authority Key Identifier:
keyid:CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/Uce-yJ-z0ICCw_CI8NfS5ZzUlM0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.242.159.0/24
88.151.56.0/23
88.209.211.0/24
178.210.250.0/24
Signature Algorithm: sha256WithRSAEncryption
8b:f5:5f:3e:a3:a4:43:e1:2f:3a:b7:3a:4e:2a:80:fe:c1:3c:
18:fe:8f:d1:ec:ac:eb:f8:f3:82:48:c6:e8:92:7f:0c:33:7b:
3a:80:a9:11:2b:3f:43:1a:30:13:49:25:51:7f:23:eb:3b:7e:
e8:e6:e8:7e:d3:63:40:a6:bc:64:ff:7d:02:cf:c6:e5:16:2f:
6e:71:dc:10:52:52:7f:78:f4:56:5e:7a:dd:15:d7:ea:8b:24:
c3:b5:6f:cb:8e:4c:b7:49:85:2d:8b:48:d2:d2:8a:25:a9:3e:
be:b4:03:ce:b2:ab:ad:bf:12:4d:82:1d:0d:b1:52:94:2f:19:
64:17:8b:d6:f9:87:5f:15:18:cb:4e:f9:83:7d:db:26:41:8a:
12:a3:96:48:ef:e6:73:d8:ea:ec:64:33:8a:48:9d:26:99:65:
91:5a:6e:78:72:84:7f:6b:1c:66:c7:20:06:47:6e:e4:c2:f3:
a9:88:c3:68:4a:89:5f:38:da:72:20:79:23:e5:38:50:06:dc:
aa:4d:ef:6a:ff:6a:44:e9:88:74:6c:54:10:03:b1:95:06:ac:
50:36:bd:79:0b:49:39:19:21:f7:e7:81:11:76:85:f5:32:59:
d4:6c:38:5f:5f:54:23:12:68:e8:02:9e:3c:89:44:0e:3c:b2:
7f:d6:cc:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:56:27 2024 by rpki-client on console-fra.rpki-client.org