Route Origin Authorization
$ rpki-client -vvf rpki.multacom.com/repo/MCOMCA/0/3130342e3139342e3232342e302f31392d3234203d3e203335393136.roa
File: 3130342e3139342e3232342e302f31392d3234203d3e203335393136.roa (raw, json)
Hash identifier: Ruj+OTUPexqaSk0UXEvELddRwWokICOoWnJFLTTAa8s=
Subject key identifier: 4C:B6:3B:D4:45:2C:6E:B6:D4:DB:01:F2:5F:44:B7:17:BE:AA:41:7C
Certificate issuer: /CN=8901940597c48f785a91d7212b9ca71b1f1f20ade68568e5b1
Certificate serial: 6F68E37CCA472229A788F45833C3B15470B91681
Authority key identifier: DC:62:76:88:30:B1:B1:20:17:16:51:8D:5E:6A:65:25:B0:23:59:3A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4dc07ba6-d360-4ca5-a860-62e4e5476f84/8901940597c48f785a91d7212b9ca71b1f1f20ade68568e5b1.cer
Subject info access: rsync://rpki.multacom.com/repo/MCOMCA/0/3130342e3139342e3232342e302f31392d3234203d3e203335393136.roa
Signing time: Sun 30 Jul 2023 01:00:00 +0000
ROA not before: Sun 30 Jul 2023 00:55:00 +0000
ROA not after: Tue 30 Jul 2024 01:00:00 +0000
asID: 35916
IP address blocks: 104.194.224.0/19 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6f:68:e3:7c:ca:47:22:29:a7:88:f4:58:33:c3:b1:54:70:b9:16:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8901940597c48f785a91d7212b9ca71b1f1f20ade68568e5b1
Validity
Not Before: Jul 30 00:55:00 2023 GMT
Not After : Jul 30 01:00:00 2024 GMT
Subject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
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:21:fb:be:50:b9:ff:58:85:b2:27:7c:84:b9:
d5:e5:61:77:b4:8c:76:b2:fa:46:cc:07:ed:69:43:
63:39:93:9f:22:3c:28:01:70:14:5e:d2:65:b0:ee:
01:32:f7:88:56:af:ed:bf:d5:72:ea:3e:89:6c:7d:
56:9a:3e:dc:bf:95:bd:4f:ff:d2:94:f0:46:7c:b8:
80:ad:1c:bd:e2:e7:21:c4:05:6c:a6:9a:2e:b2:18:
b2:47:2b:eb:11:32:68:52:93:89:41:da:c7:fa:a7:
59:f6:ce:e2:b9:62:f1:ca:a9:3e:b4:26:ff:9e:42:
81:28:9a:0d:d5:56:7c:83:e0:46:3d:48:a0:50:43:
83:e8:4e:e2:12:c7:18:2a:64:b9:bd:c9:da:a5:e5:
cd:95:b5:0c:5a:c1:4b:13:19:b2:95:27:c1:40:ad:
95:c0:38:bc:97:be:e7:80:09:ff:78:5d:cc:42:dd:
f4:41:44:74:a5:57:10:08:76:6d:7a:6c:a6:cc:8c:
61:c6:51:47:df:50:03:28:ff:b8:5c:99:88:25:a0:
cf:a1:ab:de:7b:55:7e:be:d9:cc:fd:81:b0:1a:f0:
99:ad:3a:6a:68:09:d9:32:7a:38:4f:da:13:21:63:
53:9d:d4:d0:28:44:84:98:ee:d5:59:8e:d8:51:b9:
0e:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:B6:3B:D4:45:2C:6E:B6:D4:DB:01:F2:5F:44:B7:17:BE:AA:41:7C
X509v3 Authority Key Identifier:
keyid:DC:62:76:88:30:B1:B1:20:17:16:51:8D:5E:6A:65:25:B0:23:59:3A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.multacom.com/repo/MCOMCA/0/DC62768830B1B1201716518D5E6A6525B023593A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4dc07ba6-d360-4ca5-a860-62e4e5476f84/8901940597c48f785a91d7212b9ca71b1f1f20ade68568e5b1.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.multacom.com/repo/MCOMCA/0/3130342e3139342e3232342e302f31392d3234203d3e203335393136.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
104.194.224.0/19
Signature Algorithm: sha256WithRSAEncryption
8d:76:0c:af:39:89:67:8c:39:04:26:0c:f6:a1:4a:fe:7f:7c:
e6:cb:0e:76:3a:04:3b:8a:cd:fd:59:73:3b:b1:22:4e:48:b7:
fb:9b:c5:57:f4:d3:53:de:d1:45:6a:51:f5:b2:01:1f:f9:bb:
73:08:b7:ab:20:78:a0:e6:e3:28:38:37:65:50:f9:16:61:7f:
ed:79:da:5c:18:23:70:28:b9:98:37:ec:ee:22:3d:a0:c5:d0:
27:be:cf:51:db:8a:9f:51:cf:78:3b:2e:13:c3:fd:11:f4:96:
2a:5f:17:43:9f:1f:04:48:28:ef:53:2f:07:04:99:a2:6b:3f:
43:c7:d1:94:3c:43:af:52:83:49:ff:3d:b0:f9:3c:3e:5c:25:
99:ba:a4:3a:6e:4b:3b:c9:2f:3c:55:5f:17:eb:f5:8d:3c:88:
a2:da:03:99:e5:61:cb:4d:ea:9f:f0:38:0d:47:71:16:f8:64:
30:71:c8:98:92:2b:bd:3f:e1:d8:e3:5b:cb:ec:5b:c0:25:24:
9f:e4:6c:41:13:df:44:dd:a6:82:09:9f:24:8b:8c:be:0c:81:
46:b6:28:16:f5:c4:0f:78:e8:56:7e:46:8a:89:8e:56:cb:be:
6a:9a:96:99:3b:0e:ad:3e:9d:4c:27:02:ba:06:e3:02:20:f8:
a6:6a:ee:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 9 22:55:20 2023 by rpki-client on console-fra.rpki-client.org