Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/f2EQauViORNhmR4AYKf8AbG5kpQ.roa
File: f2EQauViORNhmR4AYKf8AbG5kpQ.roa (raw, json)
Hash identifier: TLptKeNOi70geP0FKnnwAe6lOwqzjemLfUkRhNUlqA0=
Subject key identifier: 7F:61:10:6A:E5:62:39:13:61:99:1E:00:60:A7:FC:01:B1:B9:92:94
Certificate issuer: /CN=cdaaa0e082360360acda347664eb8314eb11da10
Certificate serial: 018995F1ED383549014AE2A931ECDDDC3EF1
Authority key identifier: CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/f2EQauViORNhmR4AYKf8AbG5kpQ.roa
Signing time: Thu 27 Jul 2023 06:03:27 +0000
ROA not before: Thu 27 Jul 2023 06:03:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 14445
IP address blocks: 178.210.226.0/24 maxlen: 24
178.210.227.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:95:f1:ed:38:35:49:01:4a:e2:a9:31:ec:dd:dc:3e:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cdaaa0e082360360acda347664eb8314eb11da10
Validity
Not Before: Jul 27 06:03:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7f61106ae562391361991e0060a7fc01b1b99294
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:b9:c5:c5:f4:e7:a1:fe:bc:76:05:1d:c8:f6:
0d:03:80:ef:9b:5c:04:9c:d1:ed:84:d4:fd:ca:62:
17:06:53:3e:dc:f2:8a:61:60:cd:85:90:eb:af:75:
b0:50:76:6c:63:71:95:cd:db:0e:de:84:59:2b:76:
20:9d:f6:b6:04:66:f5:ea:16:ac:f4:51:74:47:3a:
92:85:7d:ab:86:7d:32:30:8e:1e:c6:84:51:2d:d3:
f9:b9:8c:95:eb:df:07:3b:95:32:e1:fc:6a:57:66:
92:a5:d8:bf:06:c8:d3:07:ce:1d:27:82:d9:81:bc:
4e:9d:e9:02:51:6e:1f:a3:23:26:d5:58:95:21:81:
fe:34:4a:14:e3:bd:49:ea:7e:b0:05:3b:7c:eb:67:
d0:b7:50:7d:79:79:e8:cb:10:f8:f9:4d:14:0d:48:
84:88:56:a0:0f:48:28:72:69:82:25:13:63:01:62:
aa:36:16:8a:fb:f5:b1:6b:cb:1a:ff:1e:98:b1:55:
e5:33:74:3d:cb:4b:ed:55:7c:82:01:55:1c:dc:e1:
b7:c0:82:68:c7:bf:f9:2b:2c:03:19:31:34:c4:2e:
da:24:50:0f:24:39:2c:de:e6:88:a3:80:f0:d6:2f:
a6:ac:61:f7:7a:f0:e5:1d:91:3c:8a:17:cb:9a:ad:
8a:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:61:10:6A:E5:62:39:13:61:99:1E:00:60:A7:FC:01:B1:B9:92:94
X509v3 Authority Key Identifier:
keyid:CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/f2EQauViORNhmR4AYKf8AbG5kpQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.210.226.0/23
Signature Algorithm: sha256WithRSAEncryption
aa:d0:0f:e5:40:9b:53:7d:a3:be:d8:88:c1:60:14:01:2b:0c:
41:8a:8e:e4:22:0e:99:ba:ee:56:ae:d8:e3:61:42:ce:0e:3a:
6a:e8:57:2b:c2:ff:0d:7c:7e:33:fc:a9:28:99:e2:2c:45:e2:
e5:f1:90:1c:8d:c2:45:07:90:86:19:c0:c1:4b:fe:59:1f:58:
17:64:36:47:9c:84:69:26:c1:d9:77:77:06:62:dd:96:26:29:
cc:89:cc:8a:9e:8c:a3:96:ca:ea:f6:be:db:bf:cb:5e:34:1c:
6a:59:26:42:f2:dd:41:7c:14:76:ad:4b:97:e1:85:c6:c7:8e:
86:0e:16:05:88:99:40:5c:a0:63:6f:88:58:d4:81:bd:e2:18:
2f:ed:11:a9:46:71:ca:da:18:49:aa:6a:d7:b0:eb:41:aa:a6:
63:89:d4:b9:0d:57:a5:e5:0d:59:41:d6:f9:f8:51:99:1c:ae:
7c:0f:9b:20:86:1c:ba:6c:d6:ff:7d:12:15:3f:35:13:f6:91:
dc:54:23:d9:76:6b:c3:30:be:98:cc:54:3e:11:66:2d:2c:0a:
2b:3d:51:97:fb:ab:88:a9:3d:64:ab:5a:21:1b:95:f5:b8:b2:
25:a9:27:ab:18:4c:93:db:79:68:74:04:81:d4:5f:43:d7:3e:
1f:f2:70:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:47:56 2024 by rpki-client on console-ams.rpki-client.org