Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/3f2-NcNxLIOQMDjFxSVqNeUrcXg.roa
File: 3f2-NcNxLIOQMDjFxSVqNeUrcXg.roa (raw, json)
Hash identifier: 9W/+bSXwwgCoDsemlY1ygmRXahYuZZigrtBz2Ua92E4=
Subject key identifier: DD:FD:BE:35:C3:71:2C:83:90:30:38:C5:C5:25:6A:35:E5:2B:71:78
Certificate issuer: /CN=cdaaa0e082360360acda347664eb8314eb11da10
Certificate serial: 01863A82B4DF412DEF9CFA6B77B35D5BD961
Authority key identifier: CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/3f2-NcNxLIOQMDjFxSVqNeUrcXg.roa
Signing time: Fri 10 Feb 2023 08:48:09 +0000
ROA not before: Fri 10 Feb 2023 08:48:09 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 213200
IP address blocks: 83.137.159.0/24 maxlen: 24
178.210.237.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:3a:82:b4:df:41:2d:ef:9c:fa:6b:77:b3:5d:5b:d9:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cdaaa0e082360360acda347664eb8314eb11da10
Validity
Not Before: Feb 10 08:48:09 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ddfdbe35c3712c83903038c5c5256a35e52b7178
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:15:41:a8:25:58:e4:7c:a5:5c:e4:9c:12:d7:
d8:f2:ab:5b:bc:28:3c:8f:49:f2:8b:1d:b4:48:07:
aa:2d:c2:62:0f:6d:a0:d2:3a:4c:52:bb:50:7c:1b:
d3:fd:b4:7e:c5:8e:33:04:9d:3f:53:4d:ac:f7:64:
90:90:1c:77:74:46:f8:47:50:5a:cf:a1:0b:c7:11:
30:81:87:3a:98:28:6d:f2:6e:cb:44:79:2f:67:d1:
40:c7:25:83:00:96:76:ba:0d:9f:fd:9b:54:2b:b0:
54:7d:db:29:76:20:cc:a6:b3:9e:e4:dd:fc:6a:24:
d3:70:9c:74:84:5c:ba:b8:78:fa:dc:e2:1b:16:51:
8a:e3:08:05:24:5f:b9:df:72:eb:e2:db:53:b6:b5:
5c:ef:fc:cb:95:05:ea:24:73:40:47:31:3d:cd:e6:
97:c4:93:90:3b:07:76:09:e5:1e:a8:66:d8:f6:0c:
63:28:6d:66:53:52:0a:e9:7f:5a:55:e6:e6:b5:0f:
d8:c4:36:88:53:45:34:07:c8:73:46:44:e4:67:70:
93:8d:38:e1:ea:e9:cf:0c:95:3a:4f:16:63:9d:21:
5f:35:23:ae:f4:cf:40:78:40:6a:dc:b1:bc:97:6c:
02:0d:8b:1d:5f:88:c3:e7:0d:ac:09:1e:ef:cd:f4:
0c:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:FD:BE:35:C3:71:2C:83:90:30:38:C5:C5:25:6A:35:E5:2B:71:78
X509v3 Authority Key Identifier:
keyid:CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/3f2-NcNxLIOQMDjFxSVqNeUrcXg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.137.159.0/24
178.210.237.0/24
Signature Algorithm: sha256WithRSAEncryption
24:17:b7:6d:68:d9:e8:cb:41:7b:38:33:58:5b:04:3e:f3:68:
cd:1c:c6:20:50:de:47:3e:c6:91:c2:93:ee:71:a5:2a:ec:a2:
3d:9e:af:a4:5b:2f:36:2d:60:89:ba:c9:c8:d8:99:1e:eb:d2:
d1:8b:f7:76:18:4b:f6:f3:23:e9:5d:cc:36:98:f0:60:33:1a:
2b:46:26:6b:b6:d6:66:ed:24:d2:41:40:13:0d:39:9d:64:15:
61:0e:22:32:32:b5:bc:ba:1a:c2:e5:bb:d6:3f:f3:dd:1d:41:
14:2c:10:f4:67:b0:3b:b8:91:01:f3:a9:8b:d2:a2:fa:f0:5d:
06:db:d1:3e:f5:83:0c:e3:d5:35:ec:84:96:cd:17:fa:1a:91:
4e:aa:a3:8c:f4:48:60:59:cd:16:49:5c:8f:49:0b:29:f4:4c:
4e:0f:a1:9b:cd:5b:6e:b8:ca:ad:34:32:1b:00:15:da:bd:0b:
eb:26:63:93:95:fe:e0:98:36:eb:f4:87:f8:9a:b7:88:60:7d:
59:51:e9:e2:b1:00:b4:a0:01:3a:09:80:c5:d8:09:41:3c:10:
48:a1:71:68:d8:09:37:99:b1:c8:cd:bc:01:f8:e2:0d:2f:6e:
fb:86:d3:72:c8:5b:52:5d:49:41:15:48:9f:40:44:9a:42:9e:
80:31:42:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:56:26 2024 by rpki-client on console-fra.rpki-client.org