Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/207934-9edc-4a89-820e-d8488b3ab42f/1/DM83udZc236QRNr1NkbZ5YxuykM.roa
File: DM83udZc236QRNr1NkbZ5YxuykM.roa (raw, json)
Hash identifier: tJOFe0KDBqnZYYrN8wPVnnKuVp43NCukphGfnT1/fpU=
Subject key identifier: 0C:CF:37:B9:D6:5C:DB:7E:90:44:DA:F5:36:46:D9:E5:8C:6E:CA:43
Certificate issuer: /CN=81c8b73ab7bdeb76ff48b2ca099616edbe71c426
Certificate serial: 05E0507E
Authority key identifier: 81:C8:B7:3A:B7:BD:EB:76:FF:48:B2:CA:09:96:16:ED:BE:71:C4:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gci3Ore963b_SLLKCZYW7b5xxCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/207934-9edc-4a89-820e-d8488b3ab42f/1/DM83udZc236QRNr1NkbZ5YxuykM.roa
Signing time: Mon 31 Jan 2022 17:19:06 +0000
ROA not before: Mon 31 Jan 2022 17:19:06 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 212144
IP address blocks: 2a0a:1f43::/32 maxlen: 32
2a0a:1f45::/32 maxlen: 32
2a0a:1f41::/32 maxlen: 32
2a0a:1f44::/32 maxlen: 32
2a0a:da40::/29 maxlen: 29
2a09:dc00::/29 maxlen: 29
2a0a:1f40::/32 maxlen: 32
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 98586750 (0x5e0507e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=81c8b73ab7bdeb76ff48b2ca099616edbe71c426
Validity
Not Before: Jan 31 17:19:06 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=0ccf37b9d65cdb7e9044daf53646d9e58c6eca43
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:5c:c6:88:87:a4:a0:b9:26:42:1c:e6:0d:7f:
95:48:00:1b:11:ad:ff:3f:9f:c1:eb:b2:74:b5:f9:
a9:55:24:03:8f:65:42:3f:4f:69:8c:5c:d4:43:ab:
75:5d:3b:8e:84:21:88:c0:ef:a6:d7:23:97:f7:2c:
7a:03:91:0d:65:66:d9:4c:42:c9:e0:a9:92:93:1d:
46:bb:68:b4:a4:39:dd:61:96:9c:91:75:e7:dd:0b:
3d:f2:f0:56:a0:1d:3d:d4:6c:41:3f:df:7e:0a:e0:
78:19:f9:51:69:a7:dc:e3:93:7c:e2:e3:6f:c6:77:
72:d2:7f:86:ec:88:05:ae:26:6d:ec:97:97:e1:79:
f9:e6:89:bb:66:0d:ac:f1:59:81:23:62:f9:e0:f2:
c9:2e:9c:20:e3:e4:2b:e7:99:c1:38:58:61:80:88:
d7:b7:3a:f5:93:35:8f:8c:55:1d:a3:94:6a:8f:f4:
c8:93:23:aa:5f:e9:f1:3e:fa:af:bf:c6:02:c5:4e:
92:e0:59:e6:d9:18:1d:0e:3d:3e:9f:c6:60:03:6d:
dc:54:82:0e:44:57:aa:52:58:12:2d:96:39:b1:ec:
55:78:fa:00:a1:b2:e1:70:99:01:78:ca:b2:8c:58:
23:83:7e:e5:69:18:0d:97:c4:72:ba:04:71:9e:90:
3f:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:CF:37:B9:D6:5C:DB:7E:90:44:DA:F5:36:46:D9:E5:8C:6E:CA:43
X509v3 Authority Key Identifier:
keyid:81:C8:B7:3A:B7:BD:EB:76:FF:48:B2:CA:09:96:16:ED:BE:71:C4:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gci3Ore963b_SLLKCZYW7b5xxCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/207934-9edc-4a89-820e-d8488b3ab42f/1/DM83udZc236QRNr1NkbZ5YxuykM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/207934-9edc-4a89-820e-d8488b3ab42f/1/gci3Ore963b_SLLKCZYW7b5xxCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a09:dc00::/29
2a0a:1f40::/31
2a0a:1f43::-2a0a:1f45:ffff:ffff:ffff:ffff:ffff:ffff
2a0a:da40::/29
Signature Algorithm: sha256WithRSAEncryption
5e:8b:e8:70:d5:8d:91:a5:58:ce:f9:ec:ea:49:75:8b:ee:19:
f4:85:6f:d6:8f:f6:e7:71:67:a8:36:96:ca:01:11:d7:bf:8b:
9c:e9:2c:af:13:69:06:72:9b:f1:40:e8:f3:3e:80:c1:ff:b7:
43:84:f5:99:14:64:f7:8e:d0:84:15:66:11:4a:da:ca:c6:1f:
f1:75:4d:f0:4a:2c:90:51:fd:fe:ce:5d:17:63:94:6b:bf:67:
f4:b4:00:39:33:40:e1:b3:a3:35:94:e8:42:01:0c:70:fc:a0:
65:6a:e2:a5:2f:1f:21:90:63:a9:79:ad:27:2c:47:5b:80:58:
18:3e:1f:51:31:90:47:fe:18:23:fa:9c:e1:48:e0:24:e0:36:
40:cc:e3:66:65:eb:3e:89:73:b4:4b:ac:38:bb:99:b4:e2:fc:
52:ab:41:af:eb:36:97:55:4c:8f:59:60:de:54:2f:d5:58:e2:
ed:01:4d:c6:2a:89:34:e9:7e:23:3c:c3:29:c8:95:61:0e:7a:
ae:2c:6b:10:97:4b:cf:75:e5:6b:63:be:c7:41:71:7e:2e:f2:
3e:ab:72:63:7e:89:0c:42:ee:9a:71:7a:d1:d3:4b:46:aa:26:
87:cc:41:32:c2:cf:ec:f9:d7:1f:c4:38:95:2c:0a:c0:d3:58:
f9:bc:b9:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:08 2024 by rpki-client on console-fra.rpki-client.org