Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/48b407-6d94-49ae-a3d8-72c83128761b/1/6agWS65-YMoCH6chLZGQNW8hapY.roa
File: 6agWS65-YMoCH6chLZGQNW8hapY.roa (raw, json)
Hash identifier: u6jDeEnlGXHC+RbnqiRYUZivigQzUmETG1FlFJchuhQ=
Subject key identifier: E9:A8:16:4B:AE:7E:60:CA:02:1F:A7:21:2D:91:90:35:6F:21:6A:96
Certificate issuer: /CN=add353933674a5608f6d1ee2dab4f64c8bff8f39
Certificate serial: 018571154639A31A6D9342AAC2F8D51F2371
Authority key identifier: AD:D3:53:93:36:74:A5:60:8F:6D:1E:E2:DA:B4:F6:4C:8B:FF:8F:39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rdNTkzZ0pWCPbR7i2rT2TIv_jzk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/48b407-6d94-49ae-a3d8-72c83128761b/1/6agWS65-YMoCH6chLZGQNW8hapY.roa
Signing time: Mon 02 Jan 2023 06:04:57 +0000
ROA not before: Mon 02 Jan 2023 06:04:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 12513
IP address blocks: 194.46.32.0/19 maxlen: 19
91.84.0.0/15 maxlen: 15
194.46.64.0/19 maxlen: 19
194.46.80.0/20 maxlen: 20
212.104.128.0/19 maxlen: 19
212.108.80.0/21 maxlen: 21
212.108.88.0/22 maxlen: 22
2a02:c2c0::/29 maxlen: 29
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:15:46:39:a3:1a:6d:93:42:aa:c2:f8:d5:1f:23:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=add353933674a5608f6d1ee2dab4f64c8bff8f39
Validity
Not Before: Jan 2 06:04:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e9a8164bae7e60ca021fa7212d9190356f216a96
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:63:98:b8:51:b5:1b:38:3b:46:9b:a9:90:bb:
9f:10:d8:75:ee:32:a8:d2:4f:12:13:a9:c2:10:55:
db:0e:b3:53:e7:92:f8:88:5b:4b:59:f1:16:55:bf:
cf:6d:62:06:dd:58:b1:af:e5:77:aa:6f:88:e1:48:
3b:18:ee:37:c9:77:7c:0f:f3:8c:93:09:b5:90:93:
78:6f:43:17:a6:83:fa:a7:d3:a5:5e:6a:0b:ac:54:
40:9e:bc:e9:5c:47:6d:e1:25:20:e3:ce:b2:3d:d8:
eb:2d:e8:02:72:08:3f:20:af:29:0a:da:99:62:72:
48:22:4f:5f:c9:98:32:17:93:fb:1d:40:52:a2:7b:
05:90:56:34:e5:4a:99:c4:9c:b9:1c:4d:27:c0:0a:
fa:ce:40:6f:f1:8c:7c:72:f8:b9:4f:60:3e:ff:81:
4d:03:a7:11:ea:f3:5a:b2:5e:15:1e:c0:9d:dd:ea:
09:c7:e4:91:f2:c9:2d:7f:86:b8:cb:82:30:13:8c:
e6:c9:a0:b9:75:21:60:c6:9a:cf:b3:bd:59:8b:5c:
99:43:ec:5c:ea:3d:65:6c:39:9b:46:43:1b:c2:97:
0e:a3:40:bc:05:69:c4:6b:88:cc:a4:80:8d:6e:de:
18:7a:71:6b:43:16:db:23:eb:b1:2c:c1:cc:13:9e:
31:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:A8:16:4B:AE:7E:60:CA:02:1F:A7:21:2D:91:90:35:6F:21:6A:96
X509v3 Authority Key Identifier:
keyid:AD:D3:53:93:36:74:A5:60:8F:6D:1E:E2:DA:B4:F6:4C:8B:FF:8F:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rdNTkzZ0pWCPbR7i2rT2TIv_jzk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/48b407-6d94-49ae-a3d8-72c83128761b/1/6agWS65-YMoCH6chLZGQNW8hapY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/48b407-6d94-49ae-a3d8-72c83128761b/1/rdNTkzZ0pWCPbR7i2rT2TIv_jzk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.84.0.0/15
194.46.32.0-194.46.95.255
212.104.128.0/19
212.108.80.0-212.108.91.255
IPv6:
2a02:c2c0::/29
Signature Algorithm: sha256WithRSAEncryption
71:5c:69:6a:63:61:e4:b9:7c:56:94:ee:be:b3:e3:19:06:27:
0e:26:ac:73:15:b0:bc:24:6f:50:25:16:77:32:4b:a1:18:ee:
d3:52:84:fc:99:06:df:25:40:31:6c:92:d2:36:80:d5:f9:3e:
f6:b9:40:84:25:ae:cf:16:4b:2e:8f:6a:ca:11:bf:9f:fa:51:
7b:5c:ff:40:9f:9f:be:e7:7b:77:bd:7c:41:6f:94:3d:57:4d:
77:be:15:41:d0:3f:ce:3a:95:22:8d:b2:30:0b:55:d6:5f:b7:
c6:58:b8:7d:22:bc:8d:3e:23:2b:c5:38:e7:da:7f:9d:0f:35:
c9:97:e3:4d:e6:11:e1:c7:7c:f2:01:c7:f4:60:94:6e:3a:d0:
17:7a:9b:ed:04:cd:d2:5d:b1:87:cd:12:ce:02:6d:c5:ed:c2:
b1:2b:38:92:af:14:d4:9f:4f:50:e1:63:a1:fd:4e:b1:4a:71:
4d:4f:ff:5c:b2:ae:c6:b6:86:23:cd:6f:7d:4b:67:ef:75:bc:
bd:46:ac:c2:e3:8d:9f:65:dd:04:b7:17:62:70:5e:96:85:bc:
de:eb:c9:a0:6b:e0:89:d7:95:dd:aa:4b:20:0b:59:7a:e5:c2:
1d:3f:e6:70:db:1b:20:52:0b:e7:98:16:36:fa:31:56:55:42:
7b:ee:43:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:14 2024 by rpki-client on console-fra.rpki-client.org