Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/ebacbd-8190-4e5a-a03a-cd439492b7ae/1/KD68iyKrSe4Z6GaK0hThr030-po.roa
File: KD68iyKrSe4Z6GaK0hThr030-po.roa (raw, json)
Hash identifier: h6iVyU6XhKwq++AOgbJqflmZllxeDO12bYQ+x2Ai6BI=
Subject key identifier: 28:3E:BC:8B:22:AB:49:EE:19:E8:66:8A:D2:14:E1:AF:4D:F4:FA:9A
Certificate issuer: /CN=6811e125cb357076f2fa3138c93e9a2681b17893
Certificate serial: 1280D720
Authority key identifier: 68:11:E1:25:CB:35:70:76:F2:FA:31:38:C9:3E:9A:26:81:B1:78:93
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aBHhJcs1cHby-jE4yT6aJoGxeJM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/ebacbd-8190-4e5a-a03a-cd439492b7ae/1/KD68iyKrSe4Z6GaK0hThr030-po.roa
Signing time: Sat 01 Jan 2022 03:52:23 +0000
ROA not before: Sat 01 Jan 2022 03:52:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2639
IP address blocks: 31.186.226.0/24 maxlen: 24
31.186.243.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 310433568 (0x1280d720)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6811e125cb357076f2fa3138c93e9a2681b17893
Validity
Not Before: Jan 1 03:52:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=283ebc8b22ab49ee19e8668ad214e1af4df4fa9a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:52:12:c3:3d:1a:05:ab:db:a3:26:47:63:19:
3e:e1:79:d7:da:c4:5c:03:f7:12:61:75:fe:a6:ec:
ea:bf:ab:65:49:b3:4d:5b:34:20:da:a9:0b:b4:c6:
a7:34:bf:3b:7b:55:4b:a1:67:e4:5e:51:3d:0e:2e:
a9:d1:9e:11:94:93:c4:60:92:d0:49:cb:18:2f:32:
dc:5d:d3:f2:52:c1:25:a8:1b:47:9e:5e:ee:5d:b8:
1d:ec:38:1b:d7:19:90:c0:88:cf:42:48:58:75:04:
5f:89:b6:15:25:1b:cb:eb:4b:01:08:31:80:e8:f5:
86:45:b0:18:ff:fd:64:92:89:b4:99:4d:9b:6b:11:
37:44:18:b2:44:5e:bf:5e:c2:18:1a:0a:d5:88:fa:
36:fb:63:3d:3e:af:09:35:e1:2b:65:4e:f4:bf:94:
09:0e:ac:b0:0c:ec:b1:39:52:17:57:1f:f2:08:39:
8d:bd:6a:38:bf:06:76:56:8e:e8:41:10:c9:b6:db:
1a:5e:34:b1:0d:56:d9:22:fd:b8:77:4c:d4:05:de:
50:59:1c:18:c4:8b:3d:67:1e:18:1c:61:5f:4b:7b:
0f:01:3f:f3:55:2d:79:9d:8b:ef:1f:95:07:4c:ae:
09:75:2f:51:9d:83:3c:d0:49:de:46:b3:d3:aa:38:
8c:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:3E:BC:8B:22:AB:49:EE:19:E8:66:8A:D2:14:E1:AF:4D:F4:FA:9A
X509v3 Authority Key Identifier:
keyid:68:11:E1:25:CB:35:70:76:F2:FA:31:38:C9:3E:9A:26:81:B1:78:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aBHhJcs1cHby-jE4yT6aJoGxeJM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/ebacbd-8190-4e5a-a03a-cd439492b7ae/1/KD68iyKrSe4Z6GaK0hThr030-po.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/ebacbd-8190-4e5a-a03a-cd439492b7ae/1/aBHhJcs1cHby-jE4yT6aJoGxeJM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.186.226.0/24
31.186.243.0/24
Signature Algorithm: sha256WithRSAEncryption
0a:95:72:9a:37:7e:b5:cd:4f:05:98:66:07:85:d7:fb:15:e8:
c2:e8:03:1e:3f:47:7d:33:e0:b8:58:e0:8e:da:0a:cc:be:9d:
16:a9:ac:db:b2:f8:c4:54:d5:bd:ec:13:47:ce:03:22:d2:b9:
11:0f:46:e5:54:aa:ab:10:42:62:b2:fe:6d:cf:49:73:9b:c6:
43:42:c9:2f:ec:d1:2c:c5:20:18:48:4d:9a:f1:d9:63:64:6b:
49:ed:6c:04:c8:6a:40:ce:86:5d:98:33:da:fc:02:10:71:4f:
d3:bf:32:42:9b:61:fb:21:46:db:a1:54:c7:77:8b:05:a9:00:
e8:8d:fb:3f:1c:5b:a2:cd:18:5d:64:54:f6:7f:32:93:01:73:
76:60:10:68:00:36:72:dc:d4:c3:8e:48:b2:c0:77:56:4f:ad:
b8:1a:bc:9a:51:b9:c5:11:7a:14:fd:ac:ce:a5:46:8c:10:57:
e6:9e:be:39:e1:a7:e2:9d:84:9a:08:7b:94:06:33:e0:5e:f4:
63:09:60:fb:4a:1d:5b:91:0a:70:50:ea:03:8a:55:32:fd:0b:
f4:20:c4:87:01:37:e4:3c:7c:47:dc:10:2f:82:81:15:b6:7b:
37:b0:fe:d2:30:9b:19:35:70:49:57:f9:d3:5a:fd:60:fa:42:
ce:82:03:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:54:08 2024 by rpki-client on console-ams.rpki-client.org