Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/f378d3-3947-47f9-805d-829acebc1169/1/3c-kOGoY9-FOhG3KBCpLWQE89E0.roa
File: 3c-kOGoY9-FOhG3KBCpLWQE89E0.roa (raw, json)
Hash identifier: UVvtoCdjdc2lG9X4lZ5aNzdetSPg7dr3Mtw27YxvOqE=
Subject key identifier: DD:CF:A4:38:6A:18:F7:E1:4E:84:6D:CA:04:2A:4B:59:01:3C:F4:4D
Certificate issuer: /CN=81069c09551b3fe3ba2c9a6e55d8e059bba0b186
Certificate serial: 01834147ED20ABBDD706610ED569BCF526E8
Authority key identifier: 81:06:9C:09:55:1B:3F:E3:BA:2C:9A:6E:55:D8:E0:59:BB:A0:B1:86
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gQacCVUbP-O6LJpuVdjgWbugsYY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/f378d3-3947-47f9-805d-829acebc1169/1/3c-kOGoY9-FOhG3KBCpLWQE89E0.roa
Signing time: Thu 15 Sep 2022 13:12:56 +0000
ROA not before: Thu 15 Sep 2022 13:12:56 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 21221
IP address blocks: 82.210.96.0/19 maxlen: 24
84.35.0.0/16 maxlen: 24
82.210.64.0/19 maxlen: 24
82.210.64.0/18 maxlen: 24
212.29.160.0/19 maxlen: 24
2001:15b0::/32 maxlen: 48
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:41:47:ed:20:ab:bd:d7:06:61:0e:d5:69:bc:f5:26:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=81069c09551b3fe3ba2c9a6e55d8e059bba0b186
Validity
Not Before: Sep 15 13:12:56 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ddcfa4386a18f7e14e846dca042a4b59013cf44d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:6c:0f:c9:a4:2f:f1:30:10:82:dd:d1:d2:d4:
42:ea:68:ff:e4:be:7d:74:a0:95:c1:da:d8:d0:64:
b3:58:97:72:ca:a3:8d:21:96:7d:a5:45:a5:98:9c:
e8:5c:6f:c5:b6:bf:aa:02:0b:40:4f:e1:85:4a:c2:
b8:5c:06:04:ca:6a:68:fa:1b:63:63:38:41:19:72:
35:3e:48:f1:c7:08:88:28:f3:a0:23:1f:da:32:1b:
ae:c8:e8:0f:2e:13:f6:70:03:9e:aa:8c:2b:c8:3a:
c6:32:ae:78:a6:5d:53:94:6b:9a:5f:27:23:08:8b:
33:66:98:73:57:51:b7:da:04:33:9d:72:43:69:e2:
55:37:9a:3a:68:a7:b6:35:52:15:68:9f:c9:8d:19:
d1:80:d5:2d:21:d3:0f:7c:79:be:dd:5d:c3:53:8e:
88:2d:38:90:0e:3c:af:99:be:2c:f5:6c:64:5a:2a:
1d:46:b9:65:1e:f8:62:c8:f4:79:68:f3:c7:13:3a:
ce:f5:6b:fd:f2:96:25:10:ef:90:b3:56:47:4f:dc:
6c:b8:c2:81:70:0f:af:7a:04:1f:79:0b:46:d8:1d:
ce:b0:5c:f7:f9:47:b6:c1:35:06:93:ee:c4:db:a0:
bb:f4:28:ca:66:03:d8:13:a8:f5:1a:33:2a:3f:5d:
0e:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:CF:A4:38:6A:18:F7:E1:4E:84:6D:CA:04:2A:4B:59:01:3C:F4:4D
X509v3 Authority Key Identifier:
keyid:81:06:9C:09:55:1B:3F:E3:BA:2C:9A:6E:55:D8:E0:59:BB:A0:B1:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gQacCVUbP-O6LJpuVdjgWbugsYY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/f378d3-3947-47f9-805d-829acebc1169/1/3c-kOGoY9-FOhG3KBCpLWQE89E0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/f378d3-3947-47f9-805d-829acebc1169/1/gQacCVUbP-O6LJpuVdjgWbugsYY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.210.64.0/18
84.35.0.0/16
212.29.160.0/19
IPv6:
2001:15b0::/32
Signature Algorithm: sha256WithRSAEncryption
5f:98:c0:2d:6b:8c:12:02:79:13:fe:3d:2e:c8:cc:7f:a3:6c:
5d:fa:75:42:28:cc:af:0c:c7:cf:36:5a:73:f1:38:50:d5:e6:
f3:89:a4:61:f7:34:c8:be:52:a6:29:7a:9e:c5:3d:20:85:6f:
6a:4d:61:59:65:4d:cd:c0:bb:cd:db:1e:aa:4f:fc:02:71:6e:
77:87:9e:31:11:53:1f:f7:56:b8:fd:1e:ac:11:03:e6:8c:09:
56:ee:41:8e:d8:7d:85:16:73:54:60:3b:49:97:28:c9:8a:23:
f1:e7:cf:5f:d9:86:4d:87:77:e6:76:84:5f:ee:1c:74:bb:d3:
de:d8:38:5a:dc:9f:ac:ff:05:02:f9:07:ca:d3:cd:3f:e3:2a:
69:73:ad:fe:69:20:27:06:e9:6e:16:91:bc:b1:fd:d8:18:f1:
80:0e:2c:4e:d9:6d:ca:01:46:4e:35:79:aa:fc:87:2a:b6:6c:
7a:08:e6:7e:ac:0a:9b:63:4c:c8:78:d8:32:38:cc:69:55:a1:
2d:c3:9d:26:81:9f:9f:92:9b:62:3b:11:c7:75:f9:ff:9f:e0:
95:bb:a4:be:93:b5:fc:39:d4:b8:e0:c6:09:ca:15:c8:22:af:
b6:97:59:b2:90:6d:0e:09:59:5a:21:97:c5:5e:c4:bd:27:68:
62:77:9d:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:58:33 2023 by rpki-client on console-fra.rpki-client.org