Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/69ed29-af4e-4524-adfb-e15437380099/1/YFUTgn_m3EiERcQRTS0-gmPHqVA.roa
File: YFUTgn_m3EiERcQRTS0-gmPHqVA.roa (raw, json)
Hash identifier: a6QClSbNTLpvO5EgD+cZV2gpWigszAysnHOB8z9T5g4=
Subject key identifier: 60:55:13:82:7F:E6:DC:48:84:45:C4:11:4D:2D:3E:82:63:C7:A9:50
Certificate issuer: /CN=83991afcd455eb1b174fcf89f8e10eaf7f70b355
Certificate serial: 1A7860DF
Authority key identifier: 83:99:1A:FC:D4:55:EB:1B:17:4F:CF:89:F8:E1:0E:AF:7F:70:B3:55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g5ka_NRV6xsXT8-J-OEOr39ws1U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/69ed29-af4e-4524-adfb-e15437380099/1/YFUTgn_m3EiERcQRTS0-gmPHqVA.roa
Signing time: Sat 01 Jan 2022 05:57:29 +0000
ROA not before: Sat 01 Jan 2022 05:57:29 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 203061
IP address blocks: 92.249.16.0/22 maxlen: 32
31.223.187.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 444096735 (0x1a7860df)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=83991afcd455eb1b174fcf89f8e10eaf7f70b355
Validity
Not Before: Jan 1 05:57:29 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=605513827fe6dc488445c4114d2d3e8263c7a950
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:1e:aa:c6:5a:60:0c:27:a6:f2:3a:f7:15:59:
63:b1:5b:08:00:84:9a:a1:04:ca:cd:26:74:b7:f1:
e6:7e:3f:51:1f:cd:7a:b8:e6:66:e0:61:f4:e1:dc:
43:db:fe:07:c2:39:c2:24:23:12:f3:b0:99:14:e0:
da:5c:55:05:24:31:26:ce:3e:8d:8b:97:da:ff:2f:
08:4e:ed:a1:aa:1f:34:54:2b:38:86:2e:dc:1c:4f:
54:2a:cc:60:68:0e:77:72:11:3a:a5:f7:c7:fd:87:
5d:58:37:44:b2:51:7b:3e:8e:41:9c:96:21:49:ee:
60:16:47:65:9f:a3:90:0f:83:e1:b4:ce:9d:cd:36:
5a:0c:fa:10:16:21:1d:b7:86:cf:3d:07:cb:99:b9:
4c:e6:e7:9f:82:62:38:66:87:a7:ad:fd:98:6e:66:
6c:63:df:13:60:69:f1:ad:5a:a1:9a:15:61:f2:fb:
6b:a8:c7:c9:fc:5b:d5:73:a0:1f:95:3f:2c:be:75:
da:80:6c:95:6e:79:7e:b4:7d:78:5b:93:3c:4f:bf:
21:8e:e1:4e:f7:93:d1:84:b9:24:90:43:61:41:99:
e8:e0:00:ed:59:4b:79:4d:4a:0d:28:f7:25:20:61:
83:99:ef:fe:86:98:55:20:ca:51:97:54:39:88:1d:
f8:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:55:13:82:7F:E6:DC:48:84:45:C4:11:4D:2D:3E:82:63:C7:A9:50
X509v3 Authority Key Identifier:
keyid:83:99:1A:FC:D4:55:EB:1B:17:4F:CF:89:F8:E1:0E:AF:7F:70:B3:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g5ka_NRV6xsXT8-J-OEOr39ws1U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/69ed29-af4e-4524-adfb-e15437380099/1/YFUTgn_m3EiERcQRTS0-gmPHqVA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/69ed29-af4e-4524-adfb-e15437380099/1/g5ka_NRV6xsXT8-J-OEOr39ws1U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.223.187.0/24
92.249.16.0/22
Signature Algorithm: sha256WithRSAEncryption
b0:69:4a:0d:59:6a:9c:36:5b:d8:47:e5:2e:eb:68:2e:ba:95:
86:3d:33:0a:78:eb:76:9a:6e:0e:3c:01:75:dc:9f:5e:68:88:
b5:17:b8:1a:14:ec:71:d3:04:74:48:11:0a:d1:31:0d:84:ec:
64:10:f4:a4:e9:e6:3f:6c:58:e4:18:42:70:da:fb:81:23:7b:
18:af:ed:48:cb:61:94:91:7c:e2:4f:e9:fe:25:24:98:08:8c:
d0:81:f6:d8:f3:5c:90:ac:1d:6b:c0:74:30:b2:15:42:fb:7b:
1d:65:95:ae:ef:28:25:ad:e7:a4:12:c2:ce:f7:6e:a8:8f:f5:
3d:ef:cd:c5:fd:86:f7:70:52:88:a9:29:c9:49:95:56:9a:12:
3e:a8:cd:30:e3:13:b1:82:06:43:10:f2:83:78:91:6f:aa:82:
04:92:ab:2e:a9:44:94:e6:d8:ee:ec:d1:f9:1d:86:50:25:e2:
32:a3:90:ec:bf:39:4c:70:9d:cc:96:27:8c:9f:5d:d6:a7:32:
83:6c:c1:db:c3:48:4b:88:69:84:34:2b:ef:72:d2:e6:9a:05:
79:a7:88:ae:3d:1a:be:24:c2:f4:9d:f7:03:bb:70:e0:3d:34:
85:4a:21:8e:0a:ac:85:35:5d:2a:58:1a:be:1a:eb:bc:25:7d:
22:fc:f1:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:18:07 2024 by rpki-client on console-fra.rpki-client.org