Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/hSCX9clmhnf3XSt9I0FnOUXclJM.roa
File: hSCX9clmhnf3XSt9I0FnOUXclJM.roa (raw, json)
Hash identifier: wR+J+w/IIIuH4D+j7tN/UOF5dsdRUO1h/IRuYPt4CNg=
Subject key identifier: 85:20:97:F5:C9:66:86:77:F7:5D:2B:7D:23:41:67:39:45:DC:94:93
Certificate issuer: /CN=cdaaa0e082360360acda347664eb8314eb11da10
Certificate serial: 018CC3B6B8327F951F7B44A6A4DE2090C2F9
Authority key identifier: CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/hSCX9clmhnf3XSt9I0FnOUXclJM.roa
Signing time: Mon 01 Jan 2024 06:29:40 +0000
ROA not before: Mon 01 Jan 2024 06:29:40 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 14445
IP address blocks: 178.210.226.0/24 maxlen: 24
178.210.227.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:b6:b8:32:7f:95:1f:7b:44:a6:a4:de:20:90:c2:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cdaaa0e082360360acda347664eb8314eb11da10
Validity
Not Before: Jan 1 06:29:40 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=852097f5c9668677f75d2b7d2341673945dc9493
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:4f:79:85:c6:f3:67:1b:7f:41:7d:ce:a6:50:
50:e3:d9:d5:60:5c:37:02:75:5c:59:aa:31:3c:dc:
83:a7:de:77:25:27:fc:71:e5:49:df:07:bd:15:ad:
4d:88:b2:4a:33:0f:81:1e:7d:d3:76:e6:c8:89:50:
32:c6:00:35:da:68:e7:7e:25:db:84:33:6d:ab:ac:
c3:eb:13:49:a7:2c:20:7d:08:98:ab:26:d0:4c:c3:
85:a0:aa:bd:ae:82:e7:f8:9d:dc:28:e8:65:ed:b5:
d3:39:c1:2e:04:5d:d5:e4:b4:30:db:46:15:d4:7d:
ae:83:e5:ae:02:2d:2a:a3:78:fb:ca:bb:20:e9:36:
cb:7d:4b:8f:4a:f2:9b:a0:49:39:f4:68:ab:7c:18:
9c:ca:90:39:15:27:e3:a5:ec:08:2e:12:64:db:d6:
6b:96:e5:ab:a7:a2:9f:1e:25:63:fc:5e:42:87:f1:
c7:6f:8f:92:1f:ba:83:74:0f:0f:78:e3:0b:8f:1e:
20:8f:d0:a7:79:30:4a:13:93:55:fd:99:0f:ac:83:
b9:6a:23:73:97:25:b6:44:d2:bb:54:a6:7c:9c:bd:
6f:60:0d:87:1d:d6:da:49:a4:23:f6:07:80:7f:0b:
29:e5:05:3c:ae:db:45:7f:fa:68:81:9d:27:60:64:
77:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:20:97:F5:C9:66:86:77:F7:5D:2B:7D:23:41:67:39:45:DC:94:93
X509v3 Authority Key Identifier:
keyid:CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/hSCX9clmhnf3XSt9I0FnOUXclJM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.210.226.0/23
Signature Algorithm: sha256WithRSAEncryption
a6:27:57:d1:bb:76:1f:ec:02:26:4b:26:14:c6:a8:1a:16:d4:
de:55:98:9b:18:0b:cd:7d:15:21:b8:e5:3e:ba:e7:da:cc:6a:
38:78:85:42:fc:1f:52:6d:49:90:9f:b1:89:30:e1:bc:9d:fc:
7d:0f:13:63:d3:28:5b:26:79:2c:92:1e:b4:9e:ce:80:0d:50:
5d:bd:ae:43:03:b4:72:8c:ee:38:b6:fe:a3:49:a1:1a:40:41:
d5:2f:d7:9e:fb:db:f1:fe:6b:e3:96:5e:f9:40:2e:29:6f:93:
bf:13:cc:03:58:c4:f9:b0:a9:be:a3:03:7c:a0:b2:3b:4f:1e:
f5:f3:4c:1d:0d:ab:7a:b2:46:f7:18:24:3b:1a:c4:74:86:e0:
fb:30:52:1b:7a:be:c0:8d:65:a9:0c:51:99:2b:40:43:53:28:
a8:75:2c:92:37:53:7c:a4:2f:5a:11:3f:1d:16:2e:fd:17:5d:
02:74:23:0c:23:cd:a4:f7:49:89:ee:e1:9d:c9:6b:96:2a:4a:
95:4a:ac:62:f3:09:f0:73:8c:11:18:ff:95:20:ca:62:61:bf:
f2:52:ad:05:86:5b:7e:32:69:cd:70:19:d5:dc:b1:82:a1:a8:
e3:46:05:67:96:3f:87:dd:ee:3f:f6:33:9a:61:97:88:9b:84:
bc:e7:a9:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:56:28 2024 by rpki-client on console-fra.rpki-client.org