Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/f3539d-38cd-465e-a57d-dee2f650dd86/1/C0mFXY3UkF0-JslJRf7ex_b10Mg.roa
File: C0mFXY3UkF0-JslJRf7ex_b10Mg.roa (raw, json)
Hash identifier: vzM95bXWa5QreAbLvq+GC1o4amP2ASdu1Roc+cYzPoQ=
Subject key identifier: 0B:49:85:5D:8D:D4:90:5D:3E:26:C9:49:45:FE:DE:C7:F6:F5:D0:C8
Certificate issuer: /CN=ceb86983547113359bade1f3f38104091e3a6439
Certificate serial: 0186C572FE91552FBB928350FD2DEFEA2F96
Authority key identifier: CE:B8:69:83:54:71:13:35:9B:AD:E1:F3:F3:81:04:09:1E:3A:64:39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zrhpg1RxEzWbreHz84EECR46ZDk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/f3539d-38cd-465e-a57d-dee2f650dd86/1/C0mFXY3UkF0-JslJRf7ex_b10Mg.roa
Signing time: Thu 09 Mar 2023 08:18:13 +0000
ROA not before: Thu 09 Mar 2023 08:18:13 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 8612
IP address blocks: 84.220.0.0/14 maxlen: 24
195.130.224.0/19 maxlen: 19
193.43.3.180/30 maxlen: 30
213.205.0.0/18 maxlen: 18
193.43.3.192/26 maxlen: 26
193.43.2.0/24 maxlen: 24
82.85.26.128/26 maxlen: 26
94.38.0.0/15 maxlen: 15
82.85.53.64/26 maxlen: 26
82.85.53.0/26 maxlen: 26
82.84.0.0/15 maxlen: 24
193.207.24.0/21 maxlen: 24
62.10.0.0/15 maxlen: 24
217.133.0.0/16 maxlen: 16
193.207.32.0/19 maxlen: 24
217.73.208.0/20 maxlen: 20
94.32.0.0/13 maxlen: 24
193.207.96.0/20 maxlen: 21
193.43.3.184/29 maxlen: 29
212.123.64.0/19 maxlen: 19
193.207.128.0/17 maxlen: 22
193.207.64.0/18 maxlen: 24
94.32.0.0/14 maxlen: 14
94.36.0.0/14 maxlen: 14
213.205.0.251/32 maxlen: 32
217.133.170.0/24 maxlen: 24
2a01:7d0:4800:1::/64 maxlen: 64
2a01:7d0::/32 maxlen: 32
2a01:7d0:4811::/64 maxlen: 64
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:c5:72:fe:91:55:2f:bb:92:83:50:fd:2d:ef:ea:2f:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ceb86983547113359bade1f3f38104091e3a6439
Validity
Not Before: Mar 9 08:18:13 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0b49855d8dd4905d3e26c94945fedec7f6f5d0c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:24:33:a4:41:03:31:24:db:78:77:2c:02:c4:
13:bc:dd:2c:dd:e0:e9:8d:62:04:35:04:f3:82:b5:
f6:39:ba:97:b0:ed:32:f5:c5:fd:06:05:96:72:71:
06:9a:cc:6f:da:4e:b1:06:f2:c7:2b:8d:b5:0f:b6:
ee:d0:4c:81:00:bd:7e:f7:98:c4:70:60:5e:e5:21:
68:56:15:a3:9b:28:9a:ff:b1:a2:77:46:c1:95:bf:
e6:a8:b9:1b:59:b3:1f:b9:a4:69:71:2e:30:2f:7b:
14:92:23:fe:2b:d7:5f:09:fe:a7:ce:2e:10:89:2e:
6c:65:36:91:a0:57:75:50:08:36:4f:f6:db:a1:9c:
84:5b:4b:b3:ed:23:42:b2:46:ae:f1:14:bb:81:47:
8e:9e:e1:ba:33:92:5f:b8:b6:0a:5d:c9:58:63:d4:
a8:4d:2a:f2:d1:6d:89:fe:4e:e5:d4:8b:11:8a:53:
bf:1f:cc:03:74:a8:a1:c8:34:bf:12:12:2f:5e:71:
59:99:ac:41:a2:7a:6a:cb:61:76:ab:3f:35:54:72:
6a:e4:ed:23:a1:3b:fc:9a:48:87:f4:0a:0b:f9:d4:
bc:27:57:5c:3a:6d:05:c4:5d:60:70:d2:eb:d8:1f:
d2:28:d8:9a:26:7a:05:24:78:25:77:09:18:74:9b:
48:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:49:85:5D:8D:D4:90:5D:3E:26:C9:49:45:FE:DE:C7:F6:F5:D0:C8
X509v3 Authority Key Identifier:
keyid:CE:B8:69:83:54:71:13:35:9B:AD:E1:F3:F3:81:04:09:1E:3A:64:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zrhpg1RxEzWbreHz84EECR46ZDk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/f3539d-38cd-465e-a57d-dee2f650dd86/1/C0mFXY3UkF0-JslJRf7ex_b10Mg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/f3539d-38cd-465e-a57d-dee2f650dd86/1/zrhpg1RxEzWbreHz84EECR46ZDk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.10.0.0/15
82.84.0.0/15
84.220.0.0/14
94.32.0.0/13
193.43.2.0/24
193.43.3.180-193.43.3.255
193.207.24.0-193.207.255.255
195.130.224.0/19
212.123.64.0/19
213.205.0.0/18
217.73.208.0/20
217.133.0.0/16
IPv6:
2a01:7d0::/32
Signature Algorithm: sha256WithRSAEncryption
38:0e:8b:47:70:71:6c:44:0b:0b:22:ca:9d:d5:c3:75:a6:e3:
6f:9d:aa:06:7c:60:c9:2e:76:ea:8d:4d:09:02:79:ff:9e:75:
72:49:ea:3f:f2:c0:f0:be:b5:9a:bd:a7:dd:8a:44:32:da:e1:
e9:46:03:e2:c7:a1:16:a5:59:8e:2f:01:42:bb:9e:fb:a9:e7:
ab:3b:63:a1:0a:4f:b5:a8:1c:44:9f:eb:6f:13:9d:85:5f:de:
50:f8:43:65:e0:80:d1:8d:50:6b:05:74:8c:42:29:e8:52:87:
ca:b5:6d:02:82:95:7f:71:62:8e:cc:5f:4a:60:d4:a5:01:ba:
1a:88:54:62:65:b0:6d:7f:08:7d:7d:a6:f6:2e:8f:6f:ba:b0:
23:b4:26:9a:c7:9d:3d:49:f4:b3:37:2e:0d:a0:eb:d7:67:ba:
71:e9:49:0d:76:4e:6a:9f:88:d4:92:ee:87:34:8b:14:13:68:
06:c1:9b:1a:1d:2c:37:94:05:db:48:4c:7c:a6:b7:af:e3:2e:
db:9f:c3:22:a5:e4:17:e6:e7:e4:96:54:72:b9:53:27:a1:8f:
44:d8:b5:b6:2e:98:3c:00:2f:54:35:09:65:a3:a6:5b:cf:c6:
8e:b8:28:d6:40:ec:73:d8:16:24:d8:91:36:6a:1b:1f:73:12:
6d:ac:a6:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:23 2023 by rpki-client on console-fra.rpki-client.org