Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/DKd5N1OgySETd1-qoN3xP85lERQ.roa
File: DKd5N1OgySETd1-qoN3xP85lERQ.roa (raw, json)
Hash identifier: 0hV9VwznJMGPN0ci38YmxQsp7jBpwOdojDvKVo1nQq4=
Subject key identifier: 0C:A7:79:37:53:A0:C9:21:13:77:5F:AA:A0:DD:F1:3F:CE:65:11:14
Certificate issuer: /CN=cdaaa0e082360360acda347664eb8314eb11da10
Certificate serial: 0185BFE6EA4375B36579122EA4EDCB245DCF
Authority key identifier: CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/DKd5N1OgySETd1-qoN3xP85lERQ.roa
Signing time: Tue 17 Jan 2023 13:24:19 +0000
ROA not before: Tue 17 Jan 2023 13:24:19 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 213200
IP address blocks: 83.137.159.0/24 maxlen: 24
83.137.158.0/24 maxlen: 24
178.210.237.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:bf:e6:ea:43:75:b3:65:79:12:2e:a4:ed:cb:24:5d:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cdaaa0e082360360acda347664eb8314eb11da10
Validity
Not Before: Jan 17 13:24:19 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0ca7793753a0c92113775faaa0ddf13fce651114
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:4e:54:67:55:9f:d5:ed:17:e8:74:72:b5:a8:
6f:b8:66:9d:b5:c1:62:b7:62:5f:1d:20:f7:cd:67:
5e:ed:c2:11:c1:c6:56:35:2f:86:7d:1e:29:a9:22:
84:5c:ec:f9:fb:e4:37:8a:11:b6:e1:be:d9:62:f1:
ee:05:57:4c:5d:07:23:aa:99:05:9b:4f:e0:fc:a9:
3c:39:43:8a:6b:cc:99:2e:5c:c5:f6:ae:47:df:46:
6a:67:9c:15:16:e5:ad:dd:f7:6e:c1:1f:a2:95:92:
70:67:bc:0e:f6:91:16:e9:c4:a5:6b:48:95:0d:c4:
2b:cb:b9:0e:57:91:61:e2:15:a2:02:97:ef:f8:c8:
9a:83:2a:b2:20:b5:21:c2:78:2a:d9:70:6a:52:dc:
f0:16:b7:ac:04:c7:c9:65:62:bc:2d:fc:97:84:97:
89:37:02:31:d9:7d:a1:ab:97:17:90:20:c1:9e:ed:
ec:49:0a:bb:82:d5:a1:76:e8:e6:e0:75:82:9e:1b:
9d:e0:ea:63:43:d2:31:4d:04:01:0b:21:07:68:26:
88:d8:d4:3a:c3:e3:ac:e8:46:15:1f:75:43:f6:27:
c8:ca:06:77:62:c8:9d:8c:df:f2:70:6f:ed:06:9f:
3a:92:13:50:26:73:33:75:65:ea:5d:dc:cd:18:d2:
e1:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:A7:79:37:53:A0:C9:21:13:77:5F:AA:A0:DD:F1:3F:CE:65:11:14
X509v3 Authority Key Identifier:
keyid:CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/DKd5N1OgySETd1-qoN3xP85lERQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.137.158.0/23
178.210.237.0/24
Signature Algorithm: sha256WithRSAEncryption
9d:2e:a9:79:f9:06:64:3c:cb:cf:f8:c2:4e:27:9e:5e:9b:74:
a6:1f:4d:d0:83:53:d2:92:23:1d:67:70:28:15:9e:a0:f3:df:
ee:a5:de:9c:76:53:06:f9:e6:6e:0c:06:ac:b2:01:f5:67:1c:
e1:e2:81:2e:05:10:01:d5:e1:07:1b:34:eb:a1:da:66:68:cb:
90:d6:54:23:5a:10:07:dd:17:cb:bb:3f:2b:b2:56:dd:47:13:
78:1d:aa:50:57:15:c7:64:32:1d:ec:23:86:c6:bf:a3:c1:3d:
10:56:f7:9e:7b:9c:c9:6a:da:1f:5f:fc:92:63:36:c3:93:17:
a9:4e:d2:c8:ac:5e:35:f7:7e:56:77:6e:99:f6:4a:59:04:ee:
90:cc:22:3c:5b:a6:a6:04:97:cc:21:6a:eb:8b:ac:12:73:3c:
00:6b:cf:82:7c:74:fa:03:09:f8:e9:a4:1b:6e:94:8f:21:9d:
2e:22:a6:e2:d3:80:35:a1:bb:ad:7b:ba:24:c7:ca:1c:bf:3b:
90:7a:09:e8:ea:f9:0a:98:17:06:de:53:ad:04:1e:5f:33:9d:
51:5f:e0:00:82:4f:a7:ba:73:cc:7f:a0:9a:9d:b2:a2:b4:4e:
66:2f:5b:6f:83:d7:8c:93:e8:d3:c1:4b:04:e1:92:ea:5e:ba:
f2:8c:69:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:47:55 2024 by rpki-client on console-ams.rpki-client.org