Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/2d5337-da24-4ce8-a3b7-c302c10ec5c0/1/bRzeBXZ-KfCRo4NZI17XAS4gUNI.roa
File: bRzeBXZ-KfCRo4NZI17XAS4gUNI.roa (raw, json)
Hash identifier: hGsKzAhM4de5B/BrRWB2S2jztma3xH8ay6QDBXEqUW8=
Subject key identifier: 6D:1C:DE:05:76:7E:29:F0:91:A3:83:59:23:5E:D7:01:2E:20:50:D2
Certificate issuer: /CN=e363a9d7023b3cb0032912dcaac9c563c90a9772
Certificate serial: 01856D5D26068FBFB88ABFAA0956C150B3E4
Authority key identifier: E3:63:A9:D7:02:3B:3C:B0:03:29:12:DC:AA:C9:C5:63:C9:0A:97:72
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/42Op1wI7PLADKRLcqsnFY8kKl3I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/2d5337-da24-4ce8-a3b7-c302c10ec5c0/1/bRzeBXZ-KfCRo4NZI17XAS4gUNI.roa
Signing time: Sun 01 Jan 2023 12:44:59 +0000
ROA not before: Sun 01 Jan 2023 12:44:59 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 198024
IP address blocks: 185.31.68.0/22 maxlen: 24
2a00:89e0::/32 maxlen: 32
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:5d:26:06:8f:bf:b8:8a:bf:aa:09:56:c1:50:b3:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e363a9d7023b3cb0032912dcaac9c563c90a9772
Validity
Not Before: Jan 1 12:44:59 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6d1cde05767e29f091a38359235ed7012e2050d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:eb:04:be:07:31:8b:c7:c7:9d:c0:f5:da:f8:
c9:85:6c:2e:42:b3:ee:3c:57:57:b8:5a:ad:bf:c4:
be:98:c7:8a:41:b7:93:d0:75:0a:f2:d8:c4:eb:94:
44:1c:bc:b2:6f:3f:09:77:fb:d4:10:50:bc:0d:71:
26:d4:da:6c:e4:1d:34:3e:88:02:98:3c:51:e1:de:
cf:c2:2f:42:7f:47:71:23:46:b5:b7:7e:c2:da:76:
6a:88:81:34:57:59:fe:eb:a8:05:1d:00:1f:6c:19:
79:0d:8d:d3:66:ba:7b:bd:6c:e4:84:44:f6:b4:57:
5b:66:f9:28:ee:08:35:ce:ec:c1:3d:0c:20:0c:eb:
14:3a:c4:eb:df:ee:06:87:ef:31:65:bd:e2:f3:b2:
1e:75:59:0c:48:cc:e2:08:ea:dd:08:d3:72:40:ad:
31:c1:57:1a:cf:8e:42:b0:1a:a6:89:d8:9b:34:a8:
3c:c3:e7:7b:56:cd:ae:db:c4:35:e1:86:b1:b4:2e:
e5:f1:57:7e:7c:d1:28:f2:02:3f:1d:0b:9e:1f:6b:
ae:1a:fb:7e:bf:0e:21:18:5b:0f:4c:a7:bb:33:99:
2c:0f:21:e5:a3:41:60:87:3b:9d:62:d6:d1:9a:f0:
1b:77:eb:b7:12:16:3f:97:2c:f5:95:8d:1d:f7:0c:
fd:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:1C:DE:05:76:7E:29:F0:91:A3:83:59:23:5E:D7:01:2E:20:50:D2
X509v3 Authority Key Identifier:
keyid:E3:63:A9:D7:02:3B:3C:B0:03:29:12:DC:AA:C9:C5:63:C9:0A:97:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/42Op1wI7PLADKRLcqsnFY8kKl3I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/2d5337-da24-4ce8-a3b7-c302c10ec5c0/1/bRzeBXZ-KfCRo4NZI17XAS4gUNI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/2d5337-da24-4ce8-a3b7-c302c10ec5c0/1/42Op1wI7PLADKRLcqsnFY8kKl3I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.31.68.0/22
IPv6:
2a00:89e0::/32
Signature Algorithm: sha256WithRSAEncryption
75:3e:7f:0d:23:ce:d1:a3:86:db:ea:b8:57:fb:c2:93:ed:2e:
15:e8:9e:aa:1e:2b:06:c7:3f:ff:8b:d8:ed:f3:14:bb:8f:34:
13:93:3d:7f:79:58:50:a5:5a:46:2a:0c:04:1c:5d:c1:81:ef:
8e:5a:e1:e4:35:1d:be:d9:03:f4:ad:b2:87:7a:f3:d4:f7:16:
a5:ca:87:74:02:e1:38:b7:8a:d1:12:98:85:00:62:53:3d:df:
42:0a:6f:6a:8f:44:6b:a1:0e:a7:55:b0:c8:3d:d9:4f:ae:79:
ce:42:b6:f2:42:c6:14:7b:e7:38:6c:4c:c1:8e:9c:af:f8:c0:
8e:5d:87:f4:39:90:c4:af:dd:65:18:87:cc:67:15:92:8a:47:
1b:f1:9c:f4:e7:b3:83:67:ca:87:a6:62:2a:1c:07:1e:1b:2e:
8f:40:f4:ad:7c:97:91:d8:b6:2d:83:4d:ca:b7:da:e3:c8:d9:
ba:86:5a:37:77:a6:c7:5c:b3:84:ef:6d:28:52:36:51:3f:7e:
3c:ab:1a:a1:6a:59:fa:9b:25:ec:ee:b2:e6:a9:93:b3:ba:26:
ad:6b:2a:14:90:77:7c:23:c5:56:cf:e7:f9:e8:64:77:49:6c:
46:15:b7:db:78:34:b1:52:7e:0d:9b:cf:cf:49:c6:be:77:2b:
55:0c:ed:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:18:05 2024 by rpki-client on console-fra.rpki-client.org