Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/6K1F1WGEwk4rjbcug171sAVwIRk.roa
File: 6K1F1WGEwk4rjbcug171sAVwIRk.roa (raw, json)
Hash identifier: iOe9Bgp/h/nTYB8MZivNUScYyg34INnJLNQRqS10Gc8=
Subject key identifier: E8:AD:45:D5:61:84:C2:4E:2B:8D:B7:2E:83:5E:F5:B0:05:70:21:19
Certificate issuer: /CN=2ac3daa1b14850f2e61c592b2191915a5e65a478
Certificate serial: 0190E130B7CFCA313A75CB8C722A360409F2
Authority key identifier: 2A:C3:DA:A1:B1:48:50:F2:E6:1C:59:2B:21:91:91:5A:5E:65:A4:78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/6K1F1WGEwk4rjbcug171sAVwIRk.roa
Signing time: Tue 23 Jul 2024 20:03:04 +0000
ROA not before: Tue 23 Jul 2024 20:03:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 59598
IP address blocks: 31.25.88.0/23 maxlen: 24
91.132.56.0/24 maxlen: 24
185.215.247.0/24 maxlen: 24
185.217.108.0/22 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:e1:30:b7:cf:ca:31:3a:75:cb:8c:72:2a:36:04:09:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ac3daa1b14850f2e61c592b2191915a5e65a478
Validity
Not Before: Jul 23 20:03:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e8ad45d56184c24e2b8db72e835ef5b005702119
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:73:80:9d:f8:c7:3d:9a:55:24:b0:3e:fe:20:
52:5b:0f:7c:a5:36:eb:37:34:c4:5c:3d:66:fb:16:
c8:24:22:a4:a3:4d:f3:84:12:61:c0:29:05:0b:2b:
de:e5:96:a3:69:c2:c7:ec:79:57:a8:e9:b2:bb:2f:
eb:fe:b2:bd:ce:cd:37:2b:7d:11:a6:e6:86:dc:ef:
96:18:35:6d:8e:fd:4a:fd:c9:6f:62:50:20:37:72:
61:2c:d1:86:3b:0d:ff:af:30:24:10:27:0f:1a:f4:
8b:cf:df:fb:f4:61:ce:a0:f3:23:9d:85:11:dc:67:
6d:05:bd:a5:f9:f6:ba:a9:92:91:19:45:69:1e:85:
71:2d:0a:d7:a0:81:b1:47:04:ac:ea:b2:7b:f2:0f:
86:18:e9:5d:24:aa:c2:82:53:24:df:7d:bc:89:3e:
d3:04:93:01:96:12:ee:9d:40:e1:f5:55:81:bf:72:
9f:9e:b2:00:f5:37:8b:39:db:60:a0:a5:7f:f7:34:
62:a5:bd:aa:89:ab:f2:cb:b7:40:4c:6b:8b:d0:a2:
75:4d:01:6d:3f:19:97:8b:2d:da:d2:7b:59:23:b1:
8d:50:81:ba:07:56:54:c1:11:08:41:8b:84:8f:ba:
e2:fd:45:e9:50:ab:d7:aa:5d:85:f6:3d:a2:65:65:
85:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:AD:45:D5:61:84:C2:4E:2B:8D:B7:2E:83:5E:F5:B0:05:70:21:19
X509v3 Authority Key Identifier:
keyid:2A:C3:DA:A1:B1:48:50:F2:E6:1C:59:2B:21:91:91:5A:5E:65:A4:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/6K1F1WGEwk4rjbcug171sAVwIRk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/KsPaobFIUPLmHFkrIZGRWl5lpHg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.25.88.0/23
91.132.56.0/24
185.215.247.0/24
185.217.108.0/22
Signature Algorithm: sha256WithRSAEncryption
37:b5:ba:86:01:55:ac:45:6f:2c:27:5d:24:b6:a3:64:59:d7:
22:e3:5f:1e:05:2f:d4:54:0c:2d:9e:3a:c7:ea:e8:3d:02:c3:
39:b5:3c:ca:35:23:72:a2:96:82:3d:6a:62:db:06:15:c7:cb:
27:85:c4:c1:cb:c4:49:d5:4f:33:2c:21:56:2d:30:cd:09:c1:
8a:6e:10:32:d9:1e:e8:ec:58:6f:8b:0d:99:b4:ea:02:0c:1a:
ac:85:7e:41:7d:93:7f:7d:df:c6:6f:01:15:1c:40:66:7b:a9:
6e:ed:7a:97:3c:9b:be:39:9d:15:52:18:95:96:fd:2d:bf:e8:
8c:81:4d:9a:b0:6f:77:a8:00:a2:c9:c6:76:27:17:56:7f:fd:
e3:66:65:46:dc:fe:ce:4c:49:bf:d6:30:8c:ab:6e:67:b8:18:
75:52:a2:3a:66:9d:05:9f:04:a2:1c:07:b2:13:74:bc:0f:3a:
99:df:5d:98:9c:2a:5b:30:d6:3d:18:c8:d8:34:df:30:4f:ea:
1c:ba:b3:13:76:8b:ef:22:4c:87:d2:60:99:63:5e:25:45:60:
d4:bf:c6:90:29:42:fb:40:97:c8:5f:0b:f2:8e:69:08:e0:84:
ef:04:51:27:3c:3e:de:f6:9a:ed:71:02:82:c5:c6:b2:5e:58:
05:a9:ac:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 6 13:23:26 2024 by rpki-client on console-fra.rpki-client.org