Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/48b407-6d94-49ae-a3d8-72c83128761b/1/zz06OY5oWUqsQZl6XhWwXQKXq2M.roa
File: zz06OY5oWUqsQZl6XhWwXQKXq2M.roa (raw, json)
Hash identifier: 8831SdCHcEV3PpRsapwtYcqdva04dL/jWY1GsU4Jq9Q=
Subject key identifier: CF:3D:3A:39:8E:68:59:4A:AC:41:99:7A:5E:15:B0:5D:02:97:AB:63
Certificate issuer: /CN=add353933674a5608f6d1ee2dab4f64c8bff8f39
Certificate serial: 01857115469E89B757D000E326AFFFBBFE03
Authority key identifier: AD:D3:53:93:36:74:A5:60:8F:6D:1E:E2:DA:B4:F6:4C:8B:FF:8F:39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rdNTkzZ0pWCPbR7i2rT2TIv_jzk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/48b407-6d94-49ae-a3d8-72c83128761b/1/zz06OY5oWUqsQZl6XhWwXQKXq2M.roa
Signing time: Mon 02 Jan 2023 06:04:57 +0000
ROA not before: Mon 02 Jan 2023 06:04:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 206509
IP address blocks: 194.46.32.0/19 maxlen: 19
91.84.0.0/15 maxlen: 16
194.46.64.0/19 maxlen: 19
194.46.80.0/20 maxlen: 20
212.104.128.0/19 maxlen: 19
212.108.80.0/21 maxlen: 21
212.108.88.0/22 maxlen: 22
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:15:46:9e:89:b7:57:d0:00:e3:26:af:ff:bb:fe:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=add353933674a5608f6d1ee2dab4f64c8bff8f39
Validity
Not Before: Jan 2 06:04:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=cf3d3a398e68594aac41997a5e15b05d0297ab63
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:9c:94:b0:8b:83:91:2a:e2:03:8e:55:4e:36:
e6:bb:3a:14:c9:d1:a9:a6:c9:3e:80:3e:1b:a9:16:
63:61:46:f7:be:37:23:ee:5c:a3:60:fc:80:88:8d:
b3:7a:4d:7e:e2:8b:e1:bc:26:41:14:ea:11:5b:c3:
ba:cd:85:0a:7a:b3:a4:06:c6:a9:79:63:a2:5f:f4:
03:cb:48:78:31:7d:69:c2:e5:b7:4a:49:d5:e4:6a:
19:ad:51:14:40:91:40:a1:ba:54:e3:00:46:f0:47:
5a:b2:33:1a:84:b6:7c:6c:d4:ce:c8:d8:37:f0:4c:
f9:68:75:ba:e9:ae:ec:bd:22:39:70:5d:d5:2a:37:
87:2f:bb:3b:72:10:23:7c:8e:52:eb:34:98:d1:e9:
90:e5:9f:36:c0:bb:65:2d:b0:0d:4c:03:53:74:02:
86:41:18:05:2a:43:40:9f:c9:a9:51:30:94:87:ad:
a6:b3:b9:5e:af:7c:bd:5b:29:8a:f9:c5:05:b4:01:
74:71:e4:e3:c4:a0:83:b6:eb:24:86:9e:c0:c4:7a:
d4:f1:dd:c4:45:97:23:93:79:b0:bf:19:e0:f1:af:
a5:ef:4e:cb:6f:ca:9c:1b:cc:f3:79:52:6a:ae:9c:
cf:6f:08:54:83:2a:89:be:bb:93:8f:17:b9:43:e5:
4c:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:3D:3A:39:8E:68:59:4A:AC:41:99:7A:5E:15:B0:5D:02:97:AB:63
X509v3 Authority Key Identifier:
keyid:AD:D3:53:93:36:74:A5:60:8F:6D:1E:E2:DA:B4:F6:4C:8B:FF:8F:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rdNTkzZ0pWCPbR7i2rT2TIv_jzk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/48b407-6d94-49ae-a3d8-72c83128761b/1/zz06OY5oWUqsQZl6XhWwXQKXq2M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/48b407-6d94-49ae-a3d8-72c83128761b/1/rdNTkzZ0pWCPbR7i2rT2TIv_jzk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.84.0.0/15
194.46.32.0-194.46.95.255
212.104.128.0/19
212.108.80.0-212.108.91.255
Signature Algorithm: sha256WithRSAEncryption
48:a9:44:83:a1:f0:70:e7:c4:3a:c5:b4:30:31:b3:75:b9:be:
94:2f:a2:5d:16:8a:aa:4b:e9:a3:89:b5:34:70:a4:81:dd:6c:
06:a8:fb:2b:45:e7:9e:ad:19:a6:ad:a5:80:f2:90:f6:95:1e:
ab:32:aa:48:c7:c9:a7:3f:a9:31:c2:15:75:c1:e8:45:b3:2c:
cb:2f:4d:3a:60:e9:b7:2b:57:60:56:53:b1:dd:f2:57:a3:40:
77:85:7c:5b:cb:3c:2e:de:e5:cd:64:85:1d:cc:67:d0:28:80:
3e:b5:93:d0:22:cc:05:ed:84:73:77:a6:d7:35:43:4a:14:8a:
54:a5:dc:2e:35:b6:4d:01:1f:8d:a0:91:0c:de:64:5a:48:2c:
6c:0a:51:82:9e:41:61:57:b4:e8:9f:81:57:eb:e4:f2:b2:0d:
60:7e:d8:a0:bf:25:62:2d:4a:51:b7:d5:d6:d0:60:68:50:ae:
8d:95:b0:11:a0:da:da:25:95:e9:5a:ce:7a:9e:71:08:72:a5:
cc:cf:94:06:b2:cf:e4:e1:01:e5:33:5f:56:1a:ac:8b:d8:07:
60:06:9b:64:49:78:b9:58:6b:74:23:aa:1e:d3:53:a3:8a:c1:
b7:49:66:1f:a0:11:2d:47:e4:42:11:d5:9a:a8:3f:5f:af:68:
d1:90:bf:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:14 2024 by rpki-client on console-fra.rpki-client.org