Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/ebacbd-8190-4e5a-a03a-cd439492b7ae/1/DzPSWnppJY-g9UE3RPc96kqx4Ec.roa
File: DzPSWnppJY-g9UE3RPc96kqx4Ec.roa (raw, json)
Hash identifier: XkpWaMANrzIWtW1qgUZQOCYJ/n552NIjtmW7Ur+MDgk=
Subject key identifier: 0F:33:D2:5A:7A:69:25:8F:A0:F5:41:37:44:F7:3D:EA:4A:B1:E0:47
Certificate issuer: /CN=6811e125cb357076f2fa3138c93e9a2681b17893
Certificate serial: 13E4B692
Authority key identifier: 68:11:E1:25:CB:35:70:76:F2:FA:31:38:C9:3E:9A:26:81:B1:78:93
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aBHhJcs1cHby-jE4yT6aJoGxeJM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/ebacbd-8190-4e5a-a03a-cd439492b7ae/1/DzPSWnppJY-g9UE3RPc96kqx4Ec.roa
Signing time: Fri 03 Jun 2022 10:09:20 +0000
ROA not before: Fri 03 Jun 2022 10:09:20 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 19905
IP address blocks: 31.186.226.0/24 maxlen: 24
31.186.243.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 333756050 (0x13e4b692)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6811e125cb357076f2fa3138c93e9a2681b17893
Validity
Not Before: Jun 3 10:09:20 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=0f33d25a7a69258fa0f5413744f73dea4ab1e047
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:63:9d:a0:ad:9b:5c:27:d9:a3:17:2c:58:e2:
bb:d1:63:b4:9b:fb:db:71:8c:19:9a:14:ca:ab:bc:
b1:f7:13:de:53:9f:19:a7:43:3a:71:35:44:3d:45:
55:94:8c:5e:99:9c:9f:e7:02:ad:c9:84:7e:bd:47:
ff:78:6f:bb:91:d2:f1:64:9d:be:a0:2b:58:1f:35:
2d:c9:57:79:84:98:b8:43:9c:7c:bd:db:5f:98:4e:
d9:97:99:85:2f:91:3f:37:58:f5:5c:7f:f8:48:e0:
2e:91:ff:8d:c3:51:01:ea:c9:4c:01:dc:74:b7:3d:
b2:cb:da:18:39:55:f8:53:12:02:6f:44:ab:83:87:
49:df:81:c2:3b:36:23:53:78:20:18:03:52:52:97:
d6:cc:68:32:2d:b9:f9:6f:4e:14:73:2e:6b:dd:16:
73:93:01:23:87:5c:4e:72:f2:ff:da:cf:be:b1:0f:
79:02:2e:d1:8f:92:a2:7a:f7:9d:ae:6b:83:f5:93:
7b:46:7a:9f:66:1b:38:7c:f5:49:33:03:1f:b5:81:
dc:98:d1:5a:d6:7e:9c:3e:d0:66:44:2e:4c:de:4c:
a0:85:2d:b7:ce:ec:12:03:bd:77:a9:7a:64:d4:19:
83:b9:00:dc:62:f3:4c:3d:61:35:f4:ea:ed:8f:85:
3b:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:33:D2:5A:7A:69:25:8F:A0:F5:41:37:44:F7:3D:EA:4A:B1:E0:47
X509v3 Authority Key Identifier:
keyid:68:11:E1:25:CB:35:70:76:F2:FA:31:38:C9:3E:9A:26:81:B1:78:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aBHhJcs1cHby-jE4yT6aJoGxeJM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/ebacbd-8190-4e5a-a03a-cd439492b7ae/1/DzPSWnppJY-g9UE3RPc96kqx4Ec.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/ebacbd-8190-4e5a-a03a-cd439492b7ae/1/aBHhJcs1cHby-jE4yT6aJoGxeJM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.186.226.0/24
31.186.243.0/24
Signature Algorithm: sha256WithRSAEncryption
9d:18:0a:c6:94:9a:f1:94:a9:ef:b6:e7:0b:84:83:8f:3e:ad:
1b:e6:09:40:b9:b8:93:e3:ca:de:cb:ee:7d:c7:80:85:f8:54:
fc:67:00:b5:8a:f9:c4:be:4c:b7:52:72:2c:51:07:5c:e2:7b:
f3:2f:8a:18:1e:f7:60:08:3f:74:79:ae:97:c8:28:df:1e:93:
1d:87:73:2f:96:44:6d:e2:b8:b1:7c:c6:5f:59:bb:ee:bc:a0:
d4:1d:07:ab:5d:66:23:a5:37:34:c6:b6:03:87:a3:25:2e:83:
45:02:4d:3c:11:e2:19:52:8f:13:24:f1:1c:cf:b3:45:fd:20:
ec:69:8f:08:54:12:da:26:9a:b5:ee:1b:b1:c0:79:67:54:e4:
b8:03:f6:7c:51:83:76:d4:98:41:d9:5e:55:f5:74:68:69:dc:
06:fd:96:57:ee:d5:86:8c:9c:52:85:34:c3:4c:95:86:04:9f:
1c:2f:02:c5:07:33:7c:c1:23:7e:d4:bc:17:1e:4e:c5:c4:4b:
48:7f:9f:dc:29:aa:9c:71:27:c0:f6:ce:a9:09:be:a8:4d:20:
ea:fd:a8:f6:c7:87:92:fd:55:ec:14:6a:da:b3:f3:05:d3:ae:
c8:de:b2:cb:33:de:82:1e:9c:04:2e:70:17:96:3f:a5:95:8c:
4d:2f:db:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:19:43 2024 by rpki-client on console-fra.rpki-client.org