Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/ca9dbe-0095-40f3-b932-0d8f7dd8cce6/1/cC0FFSbByA1L0kTystImnWP509c.roa
File: cC0FFSbByA1L0kTystImnWP509c.roa (raw, json)
Hash identifier: s4kpUXUzzhIh3Mc1hFZ6XkoC+3BDSnuo5ant4mDCZaA=
Subject key identifier: 70:2D:05:15:26:C1:C8:0D:4B:D2:44:F2:B2:D2:26:9D:63:F9:D3:D7
Certificate issuer: /CN=a9807f6d50d97d971dcf2e2e5064e9b907adb3ec
Certificate serial: 01856EF423AC8E5D0FDAEABD04506558FBA0
Authority key identifier: A9:80:7F:6D:50:D9:7D:97:1D:CF:2E:2E:50:64:E9:B9:07:AD:B3:EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qYB_bVDZfZcdzy4uUGTpuQets-w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/ca9dbe-0095-40f3-b932-0d8f7dd8cce6/1/cC0FFSbByA1L0kTystImnWP509c.roa
Signing time: Sun 01 Jan 2023 20:09:31 +0000
ROA not before: Sun 01 Jan 2023 20:09:31 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 13285
IP address blocks: 78.144.0.0/13 maxlen: 24
2.96.0.0/13 maxlen: 24
217.68.128.0/20 maxlen: 24
84.13.0.0/16 maxlen: 24
185.173.120.0/22 maxlen: 24
92.0.0.0/11 maxlen: 24
62.24.128.0/17 maxlen: 24
89.240.0.0/14 maxlen: 24
212.139.148.0/22 maxlen: 22
91.146.112.0/21 maxlen: 24
62.241.160.0/19 maxlen: 24
185.173.116.0/22 maxlen: 24
212.139.133.0/24 maxlen: 24
2001:4a00::/27 maxlen: 27
2001:7e0::/32 maxlen: 32
2a0b:e900::/29 maxlen: 29
2a0b:db00::/29 maxlen: 29
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:f4:23:ac:8e:5d:0f:da:ea:bd:04:50:65:58:fb:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a9807f6d50d97d971dcf2e2e5064e9b907adb3ec
Validity
Not Before: Jan 1 20:09:31 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=702d051526c1c80d4bd244f2b2d2269d63f9d3d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:5e:b7:ec:9b:e4:37:e8:70:21:3b:e5:da:20:
0f:ce:dc:bd:f9:ea:90:47:42:65:b1:16:3a:b4:57:
9a:49:35:ba:ba:4b:d6:c2:cd:7c:12:d8:d3:05:18:
0b:de:75:7a:c7:5e:33:2f:45:1a:fd:55:9d:52:5e:
36:ea:c5:a3:c6:4b:86:67:9a:10:f5:b6:78:94:a0:
09:b5:d2:c0:06:72:fd:e6:90:64:5d:30:3d:69:cb:
bf:50:64:1a:e1:be:b7:71:51:84:a4:94:32:6c:32:
05:3b:e3:62:da:da:72:a2:ac:54:99:af:6e:65:bf:
64:e7:6a:3e:ac:6f:db:21:2e:1e:7e:a1:df:d9:a7:
85:57:14:27:20:d6:4f:b7:01:4a:f6:c0:e4:cc:d9:
83:da:1b:74:07:8d:59:ba:a4:7e:bf:4a:df:0a:6c:
d5:5b:81:27:8c:19:35:59:ec:62:75:e4:20:07:d7:
94:22:e9:99:06:b6:19:64:5a:58:4a:87:03:41:b1:
80:17:62:e0:3e:89:e4:03:f0:6e:5a:77:e3:11:f9:
5d:f5:dc:6c:91:23:ff:b2:28:45:7e:49:84:98:95:
1e:93:0c:2a:4c:62:95:73:bb:61:a3:a6:e0:bf:60:
0a:df:d8:81:df:80:62:95:50:e7:11:bf:a8:96:8f:
68:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:2D:05:15:26:C1:C8:0D:4B:D2:44:F2:B2:D2:26:9D:63:F9:D3:D7
X509v3 Authority Key Identifier:
keyid:A9:80:7F:6D:50:D9:7D:97:1D:CF:2E:2E:50:64:E9:B9:07:AD:B3:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qYB_bVDZfZcdzy4uUGTpuQets-w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/ca9dbe-0095-40f3-b932-0d8f7dd8cce6/1/cC0FFSbByA1L0kTystImnWP509c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/ca9dbe-0095-40f3-b932-0d8f7dd8cce6/1/qYB_bVDZfZcdzy4uUGTpuQets-w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.96.0.0/13
62.24.128.0/17
62.241.160.0/19
78.144.0.0/13
84.13.0.0/16
89.240.0.0/14
91.146.112.0/21
92.0.0.0/11
185.173.116.0-185.173.123.255
212.139.133.0/24
212.139.148.0/22
217.68.128.0/20
IPv6:
2001:7e0::/32
2001:4a00::/27
2a0b:db00::/29
2a0b:e900::/29
Signature Algorithm: sha256WithRSAEncryption
70:60:5e:11:6d:7e:5f:de:f8:2a:c3:3d:6e:ca:d4:8d:61:d0:
8a:58:b9:d0:1a:d0:f9:30:d5:33:c0:56:f6:22:d7:0d:a8:ee:
f6:63:d3:d7:eb:ea:0a:78:26:e4:d3:58:11:8f:37:b4:57:cf:
74:a6:97:83:11:05:15:59:01:55:e6:51:55:21:47:b0:1b:bd:
6b:ee:49:65:6f:e2:ef:26:bb:5b:c6:98:0a:0a:87:4b:6b:db:
6a:29:58:e2:f2:23:44:03:bd:79:02:1f:f2:f3:a0:02:92:d7:
8e:c7:11:6a:63:d2:5e:21:f6:1e:e9:83:7a:c9:ea:50:d7:7a:
3e:72:84:60:1f:6e:6f:ce:4c:33:09:bd:c7:f1:21:ea:d0:69:
9b:0f:62:f8:d0:c9:1c:e2:0e:7e:53:ac:18:18:ec:2e:80:18:
a3:3c:19:f6:85:b1:cd:2d:f4:26:c8:9c:02:2d:33:6f:d0:12:
6f:31:11:bb:3c:44:b7:f1:40:52:17:c2:0d:25:0e:f3:af:16:
7e:38:c6:bd:20:3a:dd:df:dd:6b:a7:ea:b4:d5:87:02:2b:6f:
96:a6:01:4b:50:c2:a9:98:26:5a:3c:35:20:87:33:9b:eb:6b:
d3:26:5a:0d:6a:86:10:be:09:1a:a7:a9:73:55:e9:a4:95:9b:
65:37:18:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:45:51 2023 by rpki-client on console-fra.rpki-client.org