Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/d1bsdUAC-fwDPrNtGriAIZJE5KI.roa
File: d1bsdUAC-fwDPrNtGriAIZJE5KI.roa (raw, json)
Hash identifier: Mp5l7CVn2joaLvNjWDplTiqVg8XUZiLtxJXxoUYN+X4=
Subject key identifier: 77:56:EC:75:40:02:F9:FC:03:3E:B3:6D:1A:B8:80:21:92:44:E4:A2
Certificate issuer: /CN=cdaaa0e082360360acda347664eb8314eb11da10
Certificate serial: 0182B0E68DCF6F2295562507F8499DA27838
Authority key identifier: CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/d1bsdUAC-fwDPrNtGriAIZJE5KI.roa
Signing time: Thu 18 Aug 2022 12:21:15 +0000
ROA not before: Thu 18 Aug 2022 12:21:15 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 207459
IP address blocks: 178.210.253.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:b0:e6:8d:cf:6f:22:95:56:25:07:f8:49:9d:a2:78:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cdaaa0e082360360acda347664eb8314eb11da10
Validity
Not Before: Aug 18 12:21:15 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=7756ec754002f9fc033eb36d1ab880219244e4a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:53:61:bb:a3:4c:27:fe:93:ee:3b:69:cf:e3:
5a:9e:99:14:f2:12:8e:b0:d6:ec:e5:53:51:7a:e2:
9b:67:4c:48:26:00:c9:39:94:54:fa:87:d3:dc:73:
54:3c:72:25:25:bb:d2:e3:55:b0:a5:ab:ae:3a:6d:
79:7b:67:e6:84:8a:84:43:fc:02:c2:1d:6f:d1:10:
66:f3:d3:fb:f2:f0:82:eb:13:a6:5b:78:1e:e3:cf:
9b:86:1e:14:15:de:5e:30:80:11:3f:33:99:ea:b5:
59:fe:e9:95:58:d2:4a:18:6a:a3:c0:88:d9:1b:18:
86:75:9f:21:42:05:bd:e4:ec:18:21:27:14:7c:58:
fb:c4:ed:84:e5:81:f9:c2:74:1e:70:1e:3c:5e:e7:
3b:2a:ac:a8:14:c6:4f:f7:97:8e:87:7f:32:71:5b:
4f:af:ea:cd:55:e7:72:15:6d:39:97:0f:71:e9:56:
51:85:3a:36:f6:2d:e1:7d:ad:46:bf:3f:18:5e:67:
f1:d2:10:98:7e:31:f4:1d:56:8d:89:80:87:79:1c:
bc:22:fa:06:5c:a4:7c:88:1d:6b:df:a0:a3:38:1d:
12:7e:ff:cc:7d:0e:80:a8:21:39:9b:20:30:a7:f2:
42:1d:bf:db:66:e8:26:91:73:df:b0:62:ea:e4:75:
bc:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:56:EC:75:40:02:F9:FC:03:3E:B3:6D:1A:B8:80:21:92:44:E4:A2
X509v3 Authority Key Identifier:
keyid:CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/d1bsdUAC-fwDPrNtGriAIZJE5KI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.210.253.0/24
Signature Algorithm: sha256WithRSAEncryption
81:ab:e2:bd:9d:e2:24:82:6a:93:e0:8a:0f:db:02:f4:65:05:
0d:36:18:f6:fb:96:4d:a1:0f:8c:94:29:b9:f8:62:f9:26:d3:
f8:f7:b9:ad:cd:dd:80:d4:e9:5b:66:84:59:7f:c9:e0:f8:e2:
8d:ca:3a:82:f3:3a:8e:0b:86:30:9e:c3:8d:50:6b:3c:3b:9a:
6d:fb:60:e3:5c:18:68:de:70:48:dd:cc:50:d3:96:31:03:f8:
1b:2c:b3:de:2c:30:5c:59:db:8e:ad:58:c8:18:20:d2:1f:65:
3d:e2:d6:44:99:2c:5a:1c:6a:cc:dc:0b:83:e7:ef:c1:0c:c2:
a5:c8:a1:f9:6d:ed:f1:94:9d:95:ce:23:72:90:4c:c1:87:d6:
df:27:4a:d9:9a:aa:06:c9:43:d1:e8:83:8e:8c:2e:e2:aa:13:
2d:c1:68:21:1e:0b:bf:bc:e1:94:74:46:03:ee:8d:8b:83:18:
68:ea:b5:26:73:c3:af:e5:6a:9c:1b:c5:50:c5:4e:1b:9e:2b:
26:2b:22:54:ff:c9:de:af:c6:38:b5:44:d9:c2:aa:de:ae:ae:
b8:c3:f0:4d:c8:ae:34:b3:c7:dd:b3:ef:50:55:90:95:b7:f6:
a6:45:35:2f:fe:95:0a:c0:4d:68:4b:46:ab:cc:07:9b:22:73:
02:49:f8:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:47:56 2024 by rpki-client on console-ams.rpki-client.org