Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/3630cb-ebec-4d86-b12b-bffb757c3134/1/SD2c0_9UHnqONlDIypRvMNAwxNU.roa
File: SD2c0_9UHnqONlDIypRvMNAwxNU.roa (raw, json)
Hash identifier: j1fUozfTxm6vqUh0UmHMUZKLpbl2K/RxUwFrQDpc36U=
Subject key identifier: 48:3D:9C:D3:FF:54:1E:7A:8E:36:50:C8:CA:94:6F:30:D0:30:C4:D5
Certificate issuer: /CN=96bfc5a172654dd6009db1d82d92ffaf71234120
Certificate serial: 01839BF469CADEB2736620307F796784597C
Authority key identifier: 96:BF:C5:A1:72:65:4D:D6:00:9D:B1:D8:2D:92:FF:AF:71:23:41:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lr_FoXJlTdYAnbHYLZL_r3EjQSA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/3630cb-ebec-4d86-b12b-bffb757c3134/1/SD2c0_9UHnqONlDIypRvMNAwxNU.roa
Signing time: Mon 03 Oct 2022 03:47:09 +0000
ROA not before: Mon 03 Oct 2022 03:47:09 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 207996
IP address blocks: 91.194.139.0/24 maxlen: 24
147.78.192.0/22 maxlen: 24
147.78.194.0/23 maxlen: 24
2a0a:e5c0::/29 maxlen: 48
2a09:2940::/29 maxlen: 48
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:9b:f4:69:ca:de:b2:73:66:20:30:7f:79:67:84:59:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=96bfc5a172654dd6009db1d82d92ffaf71234120
Validity
Not Before: Oct 3 03:47:09 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=483d9cd3ff541e7a8e3650c8ca946f30d030c4d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:0d:b5:42:0e:56:ad:25:0e:4e:07:51:24:5a:
eb:4e:3b:f3:e0:51:01:07:b3:5e:b5:10:4b:e3:3d:
8d:c6:7a:7b:1e:f8:57:8e:cc:a4:71:1f:08:ec:b9:
23:14:b1:42:bc:c5:01:3b:f4:54:80:61:d1:4c:d7:
a9:d7:c7:a6:32:36:eb:c8:c3:90:95:a5:50:d1:c3:
21:f4:4c:36:69:d1:84:90:32:5d:62:97:4f:1a:9b:
4d:e5:0a:8f:8f:2d:cd:d6:b6:0d:b9:d8:34:84:4c:
e0:79:38:dd:d8:29:88:eb:9f:71:21:e5:ed:e9:ff:
8d:e8:5b:05:a1:52:83:50:21:5e:57:eb:27:be:8d:
bf:22:1f:20:f7:67:a4:3c:42:ae:bb:96:99:8b:a8:
82:be:41:37:bb:d7:cc:fb:8c:94:21:b7:de:73:d6:
9b:1c:1f:18:c1:9c:4b:4d:2a:c4:45:52:2c:09:e4:
b9:db:54:1f:eb:0b:d3:92:84:8a:ce:86:5e:8c:e5:
d9:87:06:c7:f6:4d:66:53:40:1c:fc:5a:41:96:8e:
ba:b6:46:17:6c:84:ad:59:b8:dc:4e:98:ac:a6:66:
19:b0:e8:1c:ee:18:80:24:d2:50:21:09:74:9e:40:
0e:82:a3:09:97:31:36:a3:c6:1b:fc:56:04:76:54:
c1:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:3D:9C:D3:FF:54:1E:7A:8E:36:50:C8:CA:94:6F:30:D0:30:C4:D5
X509v3 Authority Key Identifier:
keyid:96:BF:C5:A1:72:65:4D:D6:00:9D:B1:D8:2D:92:FF:AF:71:23:41:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lr_FoXJlTdYAnbHYLZL_r3EjQSA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/3630cb-ebec-4d86-b12b-bffb757c3134/1/SD2c0_9UHnqONlDIypRvMNAwxNU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/3630cb-ebec-4d86-b12b-bffb757c3134/1/lr_FoXJlTdYAnbHYLZL_r3EjQSA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.194.139.0/24
147.78.192.0/22
IPv6:
2a09:2940::/29
2a0a:e5c0::/29
Signature Algorithm: sha256WithRSAEncryption
37:cd:db:3a:3b:09:23:a1:39:27:ed:c6:b9:ff:02:3a:73:ad:
b5:2c:5d:4a:26:c5:e0:30:8b:9a:02:e8:5b:d7:9a:21:06:ca:
16:4b:08:26:e1:83:2f:2f:5e:3e:33:d7:9b:d0:eb:ce:bd:5e:
38:1b:e2:c5:99:9b:47:5c:63:47:3e:6d:e2:4a:b3:a1:b0:a7:
89:c4:39:83:ef:9c:9c:4a:c6:92:e1:ca:9d:66:47:56:66:7e:
4d:97:8d:80:2c:b7:d0:72:2e:de:88:7f:ad:e3:db:57:34:e7:
e0:7c:15:10:8b:91:7f:fc:86:17:d6:05:3b:93:c0:c4:d9:ca:
5f:70:4e:24:11:39:19:ac:18:02:a0:73:fd:c7:5a:7d:d7:a8:
f6:fe:c8:50:e1:22:f4:29:03:56:a6:1f:ad:15:44:95:27:12:
6f:80:7c:cf:b7:f0:32:98:c2:bc:59:ec:9b:0e:7d:c6:48:48:
d6:27:55:91:11:7f:ca:9a:26:98:a2:b5:77:12:26:75:7a:eb:
b3:4f:33:58:62:1b:59:47:ad:3e:d9:99:29:15:04:46:64:68:
e6:64:25:23:62:78:7c:fa:75:0e:09:31:84:a6:05:aa:67:0f:
bf:00:bb:ba:18:1d:26:12:e5:ae:c4:8b:e2:bf:20:40:40:0e:
ee:25:b2:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:54:07 2024 by rpki-client on console-fra.rpki-client.org