Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/wy4cFHV0fh-oqLn2y-ktbFEHOAM.roa
File: wy4cFHV0fh-oqLn2y-ktbFEHOAM.roa (raw, json)
Hash identifier: Ewaz2xYS/Ekkm0WOIDnJNe624qmtfdpLgM7iS/D8Pdg=
Subject key identifier: C3:2E:1C:14:75:74:7E:1F:A8:A8:B9:F6:CB:E9:2D:6C:51:07:38:03
Certificate issuer: /CN=cdaaa0e082360360acda347664eb8314eb11da10
Certificate serial: 0188D2EFB32BCDB0F6221CC3A1B8E2D04E42
Authority key identifier: CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/wy4cFHV0fh-oqLn2y-ktbFEHOAM.roa
Signing time: Mon 19 Jun 2023 09:15:04 +0000
ROA not before: Mon 19 Jun 2023 09:15:04 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 140155
IP address blocks: 178.210.230.0/24 maxlen: 24
178.210.231.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:d2:ef:b3:2b:cd:b0:f6:22:1c:c3:a1:b8:e2:d0:4e:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cdaaa0e082360360acda347664eb8314eb11da10
Validity
Not Before: Jun 19 09:15:04 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c32e1c1475747e1fa8a8b9f6cbe92d6c51073803
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:70:a8:ff:87:d4:81:02:26:7c:d4:f1:2d:a2:
82:fa:e4:e2:1a:ce:95:52:fe:1b:77:f8:12:0e:b7:
49:2a:51:f7:52:dc:f3:04:1c:57:19:f0:0a:ed:b2:
9a:c6:eb:67:a3:a9:77:a6:8d:07:5b:45:9c:0f:1c:
ab:38:7e:7a:b5:a7:3a:40:63:64:9f:47:dd:9c:66:
3a:ef:46:31:1a:8b:d0:b3:8c:4f:df:e8:5b:54:ec:
04:74:70:28:5b:4f:f5:7b:c3:ac:5e:02:37:2e:ec:
91:87:68:47:ce:d2:dc:c6:16:4a:19:84:0b:75:d5:
d0:70:6b:3f:40:9a:6b:ff:18:90:86:01:e7:4d:84:
2d:d0:2c:b2:6b:e7:51:17:f7:2a:dd:e4:f8:97:b9:
7c:84:06:2e:87:ae:65:ba:97:66:73:61:d1:c5:58:
c7:2e:6a:4e:21:c6:ac:2f:56:11:dc:44:66:c1:3c:
65:23:0e:fe:c5:77:40:d0:c8:1b:38:2b:69:43:47:
65:7b:88:2d:1f:4b:dc:c6:00:a3:5a:5e:21:ca:30:
1d:6c:7b:b4:73:ab:ba:64:54:2c:e1:be:49:ad:72:
74:d5:55:f6:58:bd:11:c3:03:60:6a:51:b6:01:19:
c2:fc:d9:f4:38:66:df:37:75:09:42:61:28:59:83:
84:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:2E:1C:14:75:74:7E:1F:A8:A8:B9:F6:CB:E9:2D:6C:51:07:38:03
X509v3 Authority Key Identifier:
keyid:CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/wy4cFHV0fh-oqLn2y-ktbFEHOAM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.210.230.0/23
Signature Algorithm: sha256WithRSAEncryption
40:20:f7:28:da:f6:81:ea:c2:61:ae:b4:7c:b8:e0:81:fe:ce:
45:9d:80:d3:ef:c5:82:ea:83:b0:ea:99:40:d7:6c:78:67:c9:
a6:45:48:86:e3:e1:79:21:a1:16:7a:5d:36:dc:75:f9:64:5e:
86:db:71:d1:75:de:3c:e3:60:ad:a4:c7:32:b3:dd:68:cf:2a:
f6:dd:4b:4b:41:22:8b:7d:4e:51:ba:1e:73:3c:37:5a:cf:95:
9e:44:51:99:17:e6:11:76:3d:1c:fc:0c:84:14:b1:8c:98:e2:
1d:77:ad:8e:0a:34:2b:50:5a:36:83:ca:e7:ce:14:b0:1b:b0:
75:1d:53:28:9f:f8:e0:52:70:a5:55:2d:99:e2:a7:06:73:2e:
57:3e:fd:0a:5b:c4:5d:12:78:e7:2c:64:2f:13:f9:2d:9a:45:
cb:03:a9:6d:c1:e1:d4:a5:74:2e:e9:60:05:b8:a1:d3:1c:eb:
52:c4:73:6a:ae:ab:6a:90:8d:72:1f:4b:20:70:1c:1e:b8:7d:
ef:d5:e9:20:a8:73:26:3f:35:27:c6:83:fd:de:0c:e3:c9:08:
a5:81:70:6c:71:3b:c3:f8:a9:bb:03:dc:f4:f2:b8:57:03:02:
59:fa:65:49:33:80:6c:4c:51:cf:cc:30:aa:e8:19:21:a6:80:
6e:3d:0c:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:56:28 2024 by rpki-client on console-fra.rpki-client.org