Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/69ed29-af4e-4524-adfb-e15437380099/1/W9RTm9zbesQUEDuynySDr-UehAs.roa
File: W9RTm9zbesQUEDuynySDr-UehAs.roa (raw, json)
Hash identifier: UZgK6Gpv/3Kb7mTeAOehfM1QOoTrm5gdTBguT0YmmS8=
Subject key identifier: 5B:D4:53:9B:DC:DB:7A:C4:14:10:3B:B2:9F:24:83:AF:E5:1E:84:0B
Certificate issuer: /CN=83991afcd455eb1b174fcf89f8e10eaf7f70b355
Certificate serial: 01863021E6EC44CE585E4DB7FDE4E2EE7CCC
Authority key identifier: 83:99:1A:FC:D4:55:EB:1B:17:4F:CF:89:F8:E1:0E:AF:7F:70:B3:55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g5ka_NRV6xsXT8-J-OEOr39ws1U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/69ed29-af4e-4524-adfb-e15437380099/1/W9RTm9zbesQUEDuynySDr-UehAs.roa
Signing time: Wed 08 Feb 2023 08:26:13 +0000
ROA not before: Wed 08 Feb 2023 08:26:13 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 203061
IP address blocks: 31.223.187.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:30:21:e6:ec:44:ce:58:5e:4d:b7:fd:e4:e2:ee:7c:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=83991afcd455eb1b174fcf89f8e10eaf7f70b355
Validity
Not Before: Feb 8 08:26:13 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5bd4539bdcdb7ac414103bb29f2483afe51e840b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:88:4a:34:f8:de:38:93:a1:22:07:ca:3d:23:
c9:be:7d:0d:ed:51:2b:ad:c3:24:6e:53:10:ba:63:
a9:d3:26:d8:f0:91:04:db:82:14:a6:88:7c:ff:ba:
9a:d5:38:23:0a:75:4e:7c:0f:54:26:be:58:af:38:
dd:fe:f5:1b:71:76:3f:b2:e1:44:a0:90:39:48:14:
91:41:4e:b6:04:c9:70:fa:ba:c5:f6:29:bb:73:dc:
19:a4:8b:9b:ce:f5:8d:86:18:db:07:43:94:8c:0b:
02:a0:f0:ba:78:ba:2d:b6:5b:5d:bb:60:26:5b:26:
9b:c7:ef:58:ad:4e:2e:75:a2:ae:02:e7:32:9a:fb:
a3:9c:b5:f7:67:cb:bc:75:5d:2f:98:aa:32:58:fc:
0c:fa:27:53:79:f6:ad:d4:13:08:86:56:d5:bb:f4:
04:ad:1f:95:dc:c5:d6:ee:eb:25:85:6d:66:32:92:
bf:f7:8e:12:f3:46:95:60:46:b2:35:ee:ea:a5:a9:
f3:73:69:f1:7e:f1:23:54:b8:1c:0d:59:ed:bb:0f:
3a:11:97:c7:29:34:6a:2c:37:d3:44:70:79:99:48:
b0:24:28:53:1c:42:09:cc:eb:20:64:eb:df:43:43:
42:86:f3:13:bf:53:b1:d1:bd:f4:7c:89:3a:27:41:
11:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:D4:53:9B:DC:DB:7A:C4:14:10:3B:B2:9F:24:83:AF:E5:1E:84:0B
X509v3 Authority Key Identifier:
keyid:83:99:1A:FC:D4:55:EB:1B:17:4F:CF:89:F8:E1:0E:AF:7F:70:B3:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g5ka_NRV6xsXT8-J-OEOr39ws1U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/69ed29-af4e-4524-adfb-e15437380099/1/W9RTm9zbesQUEDuynySDr-UehAs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/69ed29-af4e-4524-adfb-e15437380099/1/g5ka_NRV6xsXT8-J-OEOr39ws1U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.223.187.0/24
Signature Algorithm: sha256WithRSAEncryption
50:d3:a1:79:db:86:be:86:00:1f:bb:71:e7:70:c7:89:78:d5:
47:b0:43:dd:d5:cb:bc:d6:93:b8:c6:d2:c4:50:7d:93:4d:9f:
e2:1b:8a:cf:6a:62:88:73:7d:71:e2:cf:1b:72:41:06:10:a7:
ef:f8:fb:f1:ea:4f:9b:ba:43:47:dc:50:e6:08:5a:81:30:ee:
06:23:b5:51:3e:3c:f3:fd:56:7c:ce:f4:cf:24:ee:4a:7e:72:
3d:31:40:00:b9:c0:56:17:c0:38:8d:2f:d3:5b:a6:c3:71:02:
98:7b:4c:bf:06:90:b7:cf:72:69:b2:f8:22:d3:60:fa:23:8e:
4d:78:38:d4:5a:71:d8:1e:dd:c0:83:8f:19:f6:2b:93:0c:81:
3b:0e:d4:ef:39:25:cb:a1:47:dc:00:f8:64:5a:31:29:05:9e:
91:bf:4d:0a:dd:43:0e:4c:5c:c0:d4:ec:3d:01:68:fb:60:0e:
6b:a5:0a:fa:bb:09:50:30:55:0e:d0:b4:76:1c:e3:ee:cb:38:
8d:34:6a:b2:fb:ff:e9:10:65:53:e3:4b:c9:c7:67:9b:3f:f4:
7a:35:71:d1:4e:b9:52:05:6d:aa:14:17:7a:44:11:7c:bf:92:
b8:c3:1b:ad:91:b6:4b:44:a4:34:ab:a8:16:03:98:0a:9d:53:
cc:2e:6f:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:18:07 2024 by rpki-client on console-fra.rpki-client.org