Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/py5iJWgzFL-6X6ZoOrgqHqKKPvI.roa
File: py5iJWgzFL-6X6ZoOrgqHqKKPvI.roa (raw, json)
Hash identifier: G9ZCOKhI1CPRulp2k6KngLUlGqSdmlc/SbVKfN5WFx8=
Subject key identifier: A7:2E:62:25:68:33:14:BF:BA:5F:A6:68:3A:B8:2A:1E:A2:8A:3E:F2
Certificate issuer: /CN=cdaaa0e082360360acda347664eb8314eb11da10
Certificate serial: 018C9202124F46D0E071D83A66E93D5F1FCC
Authority key identifier: CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/py5iJWgzFL-6X6ZoOrgqHqKKPvI.roa
Signing time: Fri 22 Dec 2023 14:50:58 +0000
ROA not before: Fri 22 Dec 2023 14:50:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 25274
IP address blocks: 178.210.240.0/21 maxlen: 21
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:92:02:12:4f:46:d0:e0:71:d8:3a:66:e9:3d:5f:1f:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cdaaa0e082360360acda347664eb8314eb11da10
Validity
Not Before: Dec 22 14:50:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a72e6225683314bfba5fa6683ab82a1ea28a3ef2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:e1:f1:6a:e5:62:e7:91:d0:4f:24:4f:c0:4f:
9e:71:7c:82:62:6b:3d:75:ea:cd:0d:00:ee:62:4e:
08:c9:f9:bf:94:4a:4a:f7:2b:6a:09:5c:b5:f6:0e:
82:b8:33:cc:fa:a0:92:13:59:5d:4c:04:fd:de:90:
d0:53:f7:52:7e:45:97:fb:63:19:35:07:18:73:c6:
b4:be:25:3f:6e:7c:db:f5:19:5a:4c:5c:74:34:03:
b0:46:a5:6e:53:bb:cd:f7:4e:04:df:16:70:0c:65:
35:8e:5c:0a:c7:73:0a:a7:46:20:a7:48:41:58:a3:
1f:df:a5:15:60:a8:73:e0:b5:97:9e:2b:e8:6e:d9:
52:13:47:bf:68:03:4d:63:0a:3e:12:a5:b2:65:7b:
70:19:fd:0e:bc:29:0a:ad:1c:96:ac:4f:6b:1d:06:
72:bd:d2:b4:bb:ba:a9:f5:e2:57:71:b3:77:d3:78:
a7:ff:53:36:39:80:d2:cf:0d:fa:ba:51:c4:2e:1e:
69:bb:9c:98:d4:7c:10:76:60:ba:e0:6c:d3:7a:3b:
eb:74:e3:74:0a:33:8e:43:36:05:01:cf:33:bc:f4:
b2:06:f2:5b:ce:43:23:80:0f:e8:55:de:05:56:65:
ff:3f:ed:09:f5:c3:8c:01:1c:42:e5:31:51:05:3a:
79:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:2E:62:25:68:33:14:BF:BA:5F:A6:68:3A:B8:2A:1E:A2:8A:3E:F2
X509v3 Authority Key Identifier:
keyid:CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/py5iJWgzFL-6X6ZoOrgqHqKKPvI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.210.240.0/21
Signature Algorithm: sha256WithRSAEncryption
24:05:f3:2d:89:d6:43:2d:92:3a:f7:bc:3c:e5:9e:ec:5c:9e:
68:79:3e:54:a8:d6:e7:dd:bb:3f:82:dc:94:d9:86:9c:bb:e4:
82:c1:d5:fc:16:a5:4b:9a:7e:a7:f5:f6:10:cb:bc:52:88:75:
c9:77:4c:f4:0f:42:18:46:a5:0e:a6:4a:07:52:33:b0:a7:f0:
c7:c1:d2:bd:1e:e2:64:42:9e:eb:5f:af:66:80:58:c7:59:9a:
c0:d9:d4:27:50:e4:f6:cf:56:e3:a8:51:6e:58:c0:52:65:77:
4a:0f:09:98:98:cf:9e:63:75:3f:58:54:04:4c:29:cc:9d:36:
38:a4:1c:85:e5:96:52:06:af:f6:6f:e5:03:31:00:d0:a3:74:
9d:ef:81:38:43:eb:f0:16:4e:dd:ae:26:d3:65:c9:5e:78:04:
c1:a4:71:b4:68:6c:cc:53:1f:a8:09:72:94:48:28:89:ae:01:
a8:ef:d4:a4:fd:1d:a8:37:c4:2f:b9:4c:32:52:b0:c5:3d:d9:
64:98:40:a0:c7:6b:fb:0c:93:f5:34:a7:e2:de:16:a4:0d:54:
59:1b:16:27:4e:a7:a4:c1:8c:3a:cd:42:fd:30:fe:1e:81:c3:
79:96:e1:e5:10:22:74:b2:1b:74:dc:2c:2b:bd:00:ea:ba:4d:
4b:41:09:a0
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYySAhJPRtDgcdg6Zuk9Xx/MMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNkYWFhMGUwODIzNjAzNjBhY2RhMzQ3NjY0ZWI4MzE0ZWIx
MWRhMTAwHhcNMjMxMjIyMTQ1MDU4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhNzJlNjIyNTY4MzMxNGJmYmE1ZmE2NjgzYWI4MmExZWEyOGEzZWYyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp+HxauVi55HQTyRPwE+ecXyCYms9
derNDQDuYk4Iyfm/lEpK9ytqCVy19g6CuDPM+qCSE1ldTAT93pDQU/dSfkWX+2MZ
NQcYc8a0viU/bnzb9RlaTFx0NAOwRqVuU7vN904E3xZwDGU1jlwKx3MKp0Ygp0hB
WKMf36UVYKhz4LWXnivobtlSE0e/aANNYwo+EqWyZXtwGf0OvCkKrRyWrE9rHQZy
vdK0u7qp9eJXcbN303in/1M2OYDSzw36ulHELh5pu5yY1HwQdmC64GzTejvrdON0
CjOOQzYFAc8zvPSyBvJbzkMjgA/oVd4FVmX/P+0J9cOMARxC5TFRBTp5owIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFKcuYiVoMxS/ul+maDq4Kh6iij7yMB8GA1UdIwQY
MBaAFM2qoOCCNgNgrNo0dmTrgxTrEdoQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvemFxZzRJSTJBMkNzMmpSMlpPdURGT3NSMmhBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZC81ODkxMjctMTA5Ni00YzkxLTk2Y2Mt
N2U0ZDZmNmY2ZTY2LzEvcHk1aUpXZ3pGTC02WDZab09yZ3FIcUtLUHZJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZC81ODkxMjctMTA5Ni00YzkxLTk2Y2MtN2U0ZDZmNmY2ZTY2
LzEvemFxZzRJSTJBMkNzMmpSMlpPdURGT3NSMmhBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDstLwMA0G
CSqGSIb3DQEBCwUAA4IBAQAkBfMtidZDLZI697w85Z7sXJ5oeT5UqNbn3bs/gtyU
2Yacu+SCwdX8FqVLmn6n9fYQy7xSiHXJd0z0D0IYRqUOpkoHUjOwp/DHwdK9HuJk
Qp7rX69mgFjHWZrA2dQnUOT2z1bjqFFuWMBSZXdKDwmYmM+eY3U/WFQETCnMnTY4
pByF5ZZSBq/2b+UDMQDQo3Sd74E4Q+vwFk7dribTZcleeATBpHG0aGzMUx+oCXKU
SCiJrgGo79Sk/R2oN8QvuUwyUrDFPdlkmECgx2v7DJP1NKfi3hakDVRZGxYnTqek
wYw6zUL9MP4egcN5luHlECJ0sht03CwrvQDquk1LQQmg
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:56:28 2024 by rpki-client on console-fra.rpki-client.org