Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/cdf2d7-b11e-47b2-9fc9-79091c78ab48/1/72cFJH9MdUUELi_7cLvbTgG_jpQ.roa
File: 72cFJH9MdUUELi_7cLvbTgG_jpQ.roa (raw, json)
Hash identifier: tsl3l+A9d6Ct5AIiyj+pGh2y/7LGJKPEiRrzkpGbTk0=
Subject key identifier: EF:67:05:24:7F:4C:75:45:04:2E:2F:FB:70:BB:DB:4E:01:BF:8E:94
Certificate issuer: /CN=7e2c0ccf1ffbfcdb8b61d738201301b8791184e8
Certificate serial: 3893E1A1
Authority key identifier: 7E:2C:0C:CF:1F:FB:FC:DB:8B:61:D7:38:20:13:01:B8:79:11:84:E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fiwMzx_7_NuLYdc4IBMBuHkRhOg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/cdf2d7-b11e-47b2-9fc9-79091c78ab48/1/72cFJH9MdUUELi_7cLvbTgG_jpQ.roa
Signing time: Thu 10 Mar 2022 08:22:15 +0000
ROA not before: Thu 10 Mar 2022 08:22:15 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 41381
IP address blocks: 89.105.64.0/21 maxlen: 24
89.105.72.0/21 maxlen: 24
89.105.80.0/21 maxlen: 24
89.105.88.0/21 maxlen: 24
2a01:7000::/32 maxlen: 48
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 949215649 (0x3893e1a1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e2c0ccf1ffbfcdb8b61d738201301b8791184e8
Validity
Not Before: Mar 10 08:22:15 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ef6705247f4c7545042e2ffb70bbdb4e01bf8e94
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:68:11:df:54:e3:69:a0:4f:23:47:1d:5c:e3:
f7:b4:90:3c:c5:91:56:3d:db:b9:6d:82:f1:c8:13:
41:d4:b7:28:6d:4f:f6:30:a9:be:a5:44:f3:4e:7b:
f0:2b:c3:51:97:a2:49:b0:0f:5a:08:55:4d:6d:4d:
7a:20:f3:90:5c:22:1f:46:0e:79:10:ad:1b:df:63:
1a:2c:3e:79:4e:d4:30:a0:25:bb:53:25:6f:43:dc:
c0:d0:a2:c9:7f:6c:70:90:89:23:de:30:c4:74:93:
92:47:d3:7d:8c:44:41:4c:65:1f:75:82:e6:4e:1b:
bf:cc:33:76:da:af:e5:c1:bf:e2:f4:02:a7:5c:78:
32:0b:da:fe:e8:48:01:8c:a8:38:3e:46:63:51:fc:
e5:87:a9:78:2c:0c:6b:26:21:27:07:7e:f9:7d:81:
e7:91:ce:0c:bd:17:15:8c:9d:b5:f8:00:bb:45:db:
ef:80:35:ef:a5:36:7b:26:8e:21:a2:fb:c7:8a:a9:
69:84:5d:49:93:3c:3c:79:ea:29:bd:70:84:f0:6e:
2f:ff:1c:d5:16:c6:71:e5:0e:c4:22:aa:23:4b:ae:
8d:bc:6f:50:52:85:cc:a2:db:bf:85:a9:5e:4b:e4:
8f:56:93:90:75:57:37:a0:64:d5:1b:5a:22:b6:f5:
3e:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:67:05:24:7F:4C:75:45:04:2E:2F:FB:70:BB:DB:4E:01:BF:8E:94
X509v3 Authority Key Identifier:
keyid:7E:2C:0C:CF:1F:FB:FC:DB:8B:61:D7:38:20:13:01:B8:79:11:84:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiwMzx_7_NuLYdc4IBMBuHkRhOg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/cdf2d7-b11e-47b2-9fc9-79091c78ab48/1/72cFJH9MdUUELi_7cLvbTgG_jpQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/cdf2d7-b11e-47b2-9fc9-79091c78ab48/1/fiwMzx_7_NuLYdc4IBMBuHkRhOg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.105.64.0/19
IPv6:
2a01:7000::/32
Signature Algorithm: sha256WithRSAEncryption
48:eb:12:f4:07:8e:ee:82:59:28:f7:e1:a6:0c:09:64:f8:2f:
53:d1:05:e7:6a:bb:43:3e:eb:2b:46:80:1e:a3:e9:6d:33:a4:
2b:e1:ed:c2:fd:40:2f:d0:96:4c:7c:23:bf:1a:a2:0e:03:db:
30:52:af:01:11:fb:ee:85:a5:6e:f2:10:7b:3b:1f:da:58:eb:
c1:f1:31:39:09:29:ef:42:0b:8f:18:a5:ee:74:cc:c2:8d:d9:
8e:3b:43:9f:2f:c6:14:c2:07:7f:0b:da:1b:78:6c:71:e2:cf:
93:8c:d6:f0:fe:22:58:84:78:d0:99:8d:e2:ba:38:ec:ae:ff:
98:b7:eb:9b:8f:fb:ab:1a:ac:5b:48:62:66:70:40:5d:5a:1d:
ef:4e:de:10:1d:c5:d1:a6:1f:d5:71:95:62:e0:e4:30:7d:da:
09:b5:d6:d0:f1:5b:ee:64:af:f5:64:94:72:d3:a6:72:4e:99:
54:61:05:f4:dd:6d:2f:c5:cf:e0:30:f3:ac:f9:7f:2a:28:0c:
c5:e3:55:c4:97:be:23:b9:df:d2:25:89:af:fc:12:3a:db:84:
e7:39:11:0b:75:b2:ff:6f:74:36:52:da:69:91:6f:f0:d4:d3:
31:cd:e9:ab:76:4d:a5:f5:b9:da:ec:e5:43:bf:c8:b9:2f:7c:
f2:41:42:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:59:36 2023 by rpki-client on console-fra.rpki-client.org