Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/hyfS7yAtC8oGLM7SnDn_HjR7xz4.roa
File: hyfS7yAtC8oGLM7SnDn_HjR7xz4.roa (raw, json)
Hash identifier: 3zX9X4UgogML/Y7BGUxbGLsHOvZDbfdS4OZtxaBe/Ws=
Subject key identifier: 87:27:D2:EF:20:2D:0B:CA:06:2C:CE:D2:9C:39:FF:1E:34:7B:C7:3E
Certificate issuer: /CN=f8e62634e1bd5133a9de4512ae98cad1b2219b59
Certificate serial: 01856FD5219A4A07156D352C9C94F51BA264
Authority key identifier: F8:E6:26:34:E1:BD:51:33:A9:DE:45:12:AE:98:CA:D1:B2:21:9B:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/hyfS7yAtC8oGLM7SnDn_HjR7xz4.roa
Signing time: Mon 02 Jan 2023 00:15:16 +0000
ROA not before: Mon 02 Jan 2023 00:15:16 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 42731
IP address blocks: 31.14.10.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:d5:21:9a:4a:07:15:6d:35:2c:9c:94:f5:1b:a2:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8e62634e1bd5133a9de4512ae98cad1b2219b59
Validity
Not Before: Jan 2 00:15:16 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8727d2ef202d0bca062cced29c39ff1e347bc73e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:68:aa:24:6d:3c:ca:c5:c0:4e:34:da:55:39:
d5:9e:5d:8a:bd:fc:a5:7e:03:41:bf:58:f2:c2:9c:
ca:60:e8:10:c1:dc:8e:c2:ae:b6:9f:67:8b:8f:83:
ca:90:f5:88:ec:5c:af:0c:0d:b3:68:d4:98:b2:80:
48:2e:bd:8f:72:ef:c8:fa:09:0d:36:7c:34:48:d8:
24:cc:61:ca:22:1d:88:93:74:08:f2:1c:aa:ab:11:
12:4e:9e:89:97:a7:b1:d2:25:3f:38:5a:28:c2:ca:
73:77:f2:88:fe:d1:cb:d0:be:fc:b8:35:7f:fe:35:
f6:7d:c5:18:0f:29:7f:ee:71:8b:a9:79:63:a4:6d:
6b:f3:87:ba:57:30:e6:f8:ea:c7:dd:74:37:a9:a2:
b4:ce:31:00:ae:ec:37:72:f6:be:cb:85:55:13:89:
59:87:67:bd:d1:e5:0a:5a:4d:23:d1:72:50:e7:46:
6b:2c:8f:5a:da:e6:21:8f:d9:98:a0:2a:11:b2:fe:
38:5c:90:c2:14:e4:a6:be:2a:98:0a:4b:e3:30:a8:
af:7f:44:16:8e:3d:49:36:7a:8b:45:2b:32:90:1c:
4e:57:4f:71:af:71:05:37:26:f1:54:be:d9:76:f9:
0a:9d:ca:87:39:20:11:89:6d:92:4e:12:93:c7:94:
0f:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:27:D2:EF:20:2D:0B:CA:06:2C:CE:D2:9C:39:FF:1E:34:7B:C7:3E
X509v3 Authority Key Identifier:
keyid:F8:E6:26:34:E1:BD:51:33:A9:DE:45:12:AE:98:CA:D1:B2:21:9B:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/hyfS7yAtC8oGLM7SnDn_HjR7xz4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.14.10.0/24
Signature Algorithm: sha256WithRSAEncryption
92:b7:9a:db:3c:a7:25:dc:11:86:be:c2:6a:cd:6e:49:25:e7:
4d:04:61:5c:6c:1d:78:14:9b:c5:e5:09:72:68:f3:4f:a0:59:
5e:85:58:4f:92:6a:e0:26:d0:ef:d0:a0:a5:d6:f9:53:58:3d:
e7:b4:97:04:c7:57:3b:48:84:60:7a:83:69:71:61:07:c8:d9:
31:ab:4e:cb:cb:01:f8:b3:f7:2d:84:09:a1:8b:f2:0c:23:0d:
69:98:65:dc:2c:49:61:5c:d1:19:82:76:bc:38:78:99:15:e4:
65:2e:1b:9b:55:e7:e4:3d:b3:30:a9:5a:e1:50:d1:2e:b4:e7:
7f:2f:a9:14:d6:64:30:1d:c8:8a:23:36:b8:62:1c:db:e8:c2:
35:03:fb:cb:32:c2:dd:15:97:b1:ff:94:45:fd:7d:43:a8:08:
8b:cb:db:9f:36:e4:bd:c0:e8:71:45:03:2b:6c:de:70:cb:bb:
5f:82:c4:9b:e5:a0:36:ec:b4:f2:53:e6:8e:4a:32:45:50:4c:
8b:34:0e:fb:8a:21:a9:5a:0d:6e:30:45:c1:11:c8:e0:07:90:
55:e3:10:45:d2:69:c0:e5:92:06:fd:c2:98:a4:d6:33:98:11:
87:3c:85:0b:88:7f:16:b1:25:a9:9b:84:69:09:f7:27:e5:df:
f4:ea:d8:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:35:42 2024 by rpki-client on console-fra.rpki-client.org