Route Origin Authorization
$ rpki-client -vvf rpki.multacom.com/repo/MCOMCA/0/3139382e3231312e33332e302f32342d3234203d3e20333935363831.roa
File: 3139382e3231312e33332e302f32342d3234203d3e20333935363831.roa (raw, json)
Hash identifier: vngAyI//wH85rUZ+KGrmG7LKnnsc2IzXKGx5PtPsQP0=
Subject key identifier: A8:D6:56:E8:B8:54:C5:B4:BA:84:5A:A2:A6:33:3A:97:C4:17:05:A4
Certificate issuer: /CN=8901940597c48f785a91d7212b9ca71b1f1f20ade68568e5b1
Certificate serial: 2E5862FE053F739D3E88005CE1652AF9E94B5106
Authority key identifier: DC:62:76:88:30:B1:B1:20:17:16:51:8D:5E:6A:65:25:B0:23:59:3A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4dc07ba6-d360-4ca5-a860-62e4e5476f84/8901940597c48f785a91d7212b9ca71b1f1f20ade68568e5b1.cer
Subject info access: rsync://rpki.multacom.com/repo/MCOMCA/0/3139382e3231312e33332e302f32342d3234203d3e20333935363831.roa
Signing time: Sat 29 Jul 2023 19:00:00 +0000
ROA not before: Sat 29 Jul 2023 18:55:00 +0000
ROA not after: Mon 29 Jul 2024 19:00:00 +0000
asID: 395681
IP address blocks: 198.211.33.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2e:58:62:fe:05:3f:73:9d:3e:88:00:5c:e1:65:2a:f9:e9:4b:51:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8901940597c48f785a91d7212b9ca71b1f1f20ade68568e5b1
Validity
Not Before: Jul 29 18:55:00 2023 GMT
Not After : Jul 29 19:00:00 2024 GMT
Subject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
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:c1:1b:35:32:b6:7a:fb:1e:a8:e4:c4:43:30:
8b:ce:92:a0:e7:bd:ab:5e:f8:e2:c9:03:40:13:85:
81:db:a3:de:6e:ff:5f:11:c1:7c:83:0c:71:e3:1b:
62:a1:97:0b:ad:81:97:67:14:2b:1e:aa:e8:cf:c6:
3e:5c:7b:51:4a:e1:96:0c:e9:15:ed:c8:de:8b:5f:
e7:99:26:58:03:9a:47:a3:b9:3d:22:79:a7:a6:6f:
53:e9:30:4b:68:13:a5:cd:69:7a:1a:db:9c:da:dd:
3c:6f:89:fe:e1:27:76:2d:e5:a5:14:73:59:86:58:
43:3a:1c:45:3d:d4:2c:38:ea:cd:6b:a0:ef:50:0e:
85:2c:f1:52:68:e0:a5:4e:a5:2d:fc:d7:1c:cc:8d:
e5:7e:79:8c:aa:2d:da:0e:d2:9e:42:2b:e1:88:0c:
1f:fd:d5:f0:b9:d2:04:81:51:6d:b5:1d:ce:f1:be:
b1:0b:86:75:07:c6:c6:03:22:d2:f2:10:e3:e3:d1:
7e:07:48:84:27:86:66:9d:f6:34:a6:e2:b1:20:46:
7b:02:2b:50:48:ca:ff:1b:83:4a:1b:4d:25:3b:02:
c4:58:f7:90:5e:94:ee:15:eb:04:8a:e5:9e:13:60:
cd:92:60:e8:ed:a9:a5:c8:5b:b5:ca:85:e8:c6:a8:
33:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:D6:56:E8:B8:54:C5:B4:BA:84:5A:A2:A6:33:3A:97:C4:17:05:A4
X509v3 Authority Key Identifier:
keyid:DC:62:76:88:30:B1:B1:20:17:16:51:8D:5E:6A:65:25:B0:23:59:3A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.multacom.com/repo/MCOMCA/0/DC62768830B1B1201716518D5E6A6525B023593A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4dc07ba6-d360-4ca5-a860-62e4e5476f84/8901940597c48f785a91d7212b9ca71b1f1f20ade68568e5b1.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.multacom.com/repo/MCOMCA/0/3139382e3231312e33332e302f32342d3234203d3e20333935363831.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
198.211.33.0/24
Signature Algorithm: sha256WithRSAEncryption
15:f9:20:2d:0d:21:fb:d7:83:4b:ef:6c:6e:0f:de:4c:ef:77:
38:0f:43:8b:ad:07:54:80:e9:86:b7:79:81:6b:96:a3:a6:d6:
fc:29:72:42:82:63:d1:57:ab:45:b0:e5:26:a0:63:86:e5:62:
ed:0c:b3:aa:98:b3:2a:49:d5:52:90:1c:26:1e:bf:e0:ca:e6:
f7:ff:2b:8e:7d:78:cb:06:7e:b2:16:06:38:e5:bb:42:20:bc:
7c:a8:d6:6b:b5:2c:17:a1:d3:4e:09:b8:a5:cc:6a:c9:6f:8b:
0b:d4:f0:89:7f:40:28:9b:c9:95:e2:41:0f:e0:8e:97:1c:3c:
4e:cd:ed:d7:d8:6b:73:53:05:99:b1:6d:8d:ca:c3:45:8a:e2:
be:38:6f:fd:95:e6:9a:80:28:84:f6:96:46:fa:02:2b:5b:f6:
6b:1c:0f:db:50:a0:c7:88:b2:82:8e:48:24:37:88:72:d8:d7:
dd:5c:fc:17:72:56:93:00:1e:47:b2:5c:94:fe:97:c2:46:47:
fd:ab:0c:c9:36:a0:d5:d4:c7:7c:3a:f1:0a:f0:d7:53:be:1e:
41:8e:bf:0d:41:22:04:14:20:06:7d:34:05:af:99:99:5d:9e:
dd:7b:2f:ff:b5:c1:0c:d8:b5:dc:f1:d8:f8:7d:5d:25:cc:49:
3e:bc:1c:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 9 22:59:11 2023 by rpki-client on console-ams.rpki-client.org