Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/48b407-6d94-49ae-a3d8-72c83128761b/1/DI50tpOxDvTlHuWupX48zsD_J6U.roa
File: DI50tpOxDvTlHuWupX48zsD_J6U.roa (raw, json)
Hash identifier: t4cof2xPAt/AzgHdzh+bJSoi/PatXhGgNXU1wIRLjD8=
Subject key identifier: 0C:8E:74:B6:93:B1:0E:F4:E5:1E:E5:AE:A5:7E:3C:CE:C0:FF:27:A5
Certificate issuer: /CN=add353933674a5608f6d1ee2dab4f64c8bff8f39
Certificate serial: 018C7BF9130FC3E19DECA47456343B285415
Authority key identifier: AD:D3:53:93:36:74:A5:60:8F:6D:1E:E2:DA:B4:F6:4C:8B:FF:8F:39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rdNTkzZ0pWCPbR7i2rT2TIv_jzk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/48b407-6d94-49ae-a3d8-72c83128761b/1/DI50tpOxDvTlHuWupX48zsD_J6U.roa
Signing time: Mon 18 Dec 2023 08:09:30 +0000
ROA not before: Mon 18 Dec 2023 08:09:30 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 8851
IP address blocks: 91.84.0.0/18 maxlen: 18
194.46.32.0/19 maxlen: 19
91.84.128.0/17 maxlen: 17
194.46.64.0/19 maxlen: 19
91.85.0.0/16 maxlen: 16
194.46.80.0/20 maxlen: 20
212.104.128.0/19 maxlen: 19
212.108.80.0/21 maxlen: 21
212.108.88.0/22 maxlen: 22
91.84.96.0/19 maxlen: 19
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:7b:f9:13:0f:c3:e1:9d:ec:a4:74:56:34:3b:28:54:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=add353933674a5608f6d1ee2dab4f64c8bff8f39
Validity
Not Before: Dec 18 08:09:30 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0c8e74b693b10ef4e51ee5aea57e3ccec0ff27a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:b7:38:dd:0b:f9:d3:91:9d:5f:88:84:84:a8:
4d:5e:4e:31:d6:c8:e6:d4:a7:9f:8c:2c:12:3f:08:
1d:ec:19:62:8a:ba:ea:94:02:e9:7d:18:f3:83:bd:
f6:77:34:8a:07:cf:3c:04:60:38:10:fa:b2:87:f7:
f3:b8:9d:26:72:4f:a3:2a:d4:43:df:4b:98:bf:97:
92:18:13:e0:64:7f:8c:77:16:54:d8:11:41:b4:95:
f1:1c:ff:72:be:0f:ec:1e:5a:55:9d:e2:b9:97:48:
32:ac:09:07:44:50:5a:15:91:2a:7b:63:ab:98:9c:
73:c4:01:cd:38:ed:79:2d:e5:7d:3b:52:c9:ff:70:
e4:5e:75:fb:57:89:8d:4f:a2:bd:a7:0b:a6:03:6e:
b5:8a:45:57:4b:34:f3:94:d3:45:59:01:68:5d:39:
91:d3:d9:b6:9e:a0:06:64:3d:ce:a1:f3:2c:f2:ef:
fd:f8:30:c3:83:d8:ab:6e:01:95:78:e4:c0:f8:d7:
1e:aa:cf:21:79:27:af:74:e9:a8:39:83:26:e0:86:
fa:cc:a7:08:ef:1c:d8:f2:25:d2:43:26:ad:fa:2e:
1a:ab:32:31:97:f9:21:49:11:32:ca:5d:c8:37:67:
5f:39:4e:1a:e3:8f:96:57:e6:ba:55:d6:1f:76:8e:
ea:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:8E:74:B6:93:B1:0E:F4:E5:1E:E5:AE:A5:7E:3C:CE:C0:FF:27:A5
X509v3 Authority Key Identifier:
keyid:AD:D3:53:93:36:74:A5:60:8F:6D:1E:E2:DA:B4:F6:4C:8B:FF:8F:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rdNTkzZ0pWCPbR7i2rT2TIv_jzk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/48b407-6d94-49ae-a3d8-72c83128761b/1/DI50tpOxDvTlHuWupX48zsD_J6U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/48b407-6d94-49ae-a3d8-72c83128761b/1/rdNTkzZ0pWCPbR7i2rT2TIv_jzk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.84.0.0/18
91.84.96.0-91.85.255.255
194.46.32.0-194.46.95.255
212.104.128.0/19
212.108.80.0-212.108.91.255
Signature Algorithm: sha256WithRSAEncryption
87:ec:28:db:0e:77:62:73:75:51:f5:90:70:55:44:66:a1:2a:
7e:6f:8d:5c:75:90:f2:d8:51:cd:1b:8c:3e:3a:3a:ea:55:f0:
ad:64:0f:02:b3:8a:8d:c8:c0:21:7b:a8:91:a5:92:bc:b6:5c:
a9:55:6d:3f:b4:c0:ae:99:6e:5f:1c:58:32:92:4c:34:01:7a:
4b:e5:2f:6b:d4:2a:35:22:25:22:e1:40:52:6d:91:3c:e9:db:
4b:7b:9c:8b:08:54:ad:1a:ed:39:f6:ea:70:c2:f6:b9:d9:d9:
1e:b2:59:84:55:a3:38:77:4f:f9:c8:dd:9e:5f:c4:3b:4e:b7:
96:69:7d:d9:8d:c0:ca:75:30:85:f5:3f:c0:c2:1a:18:6e:4f:
5f:1f:8a:38:1f:5c:58:23:ec:c8:cd:ca:ed:be:16:84:58:b2:
64:db:df:42:af:b5:0c:2f:bf:78:a8:d3:b1:cf:25:f9:ab:47:
16:c9:ae:73:f4:3a:72:97:81:f8:5a:11:c0:44:e6:d8:34:8b:
a4:f2:c2:39:f6:ab:fe:bf:2f:23:96:25:19:73:23:b8:a2:c8:
b0:75:29:14:c4:51:6d:bf:32:b6:e6:ec:dd:43:18:90:c4:b9:
f9:5a:29:31:86:bd:7a:2b:30:8c:e5:9b:78:c3:e4:5a:a6:09:
a7:5e:7e:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:14 2024 by rpki-client on console-fra.rpki-client.org