Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/fdad8c-9ed3-4f01-b107-7486c0582f2a/1/L-ancYAGFIEbE5G9D40_hiv1hiM.roa
File: L-ancYAGFIEbE5G9D40_hiv1hiM.roa (raw, json)
Hash identifier: JU0+0exk8pbiYqB4EB6FNGHB4u/XArAOSBJiqoZnN6g=
Subject key identifier: 2F:E6:A7:71:80:06:14:81:1B:13:91:BD:0F:8D:3F:86:2B:F5:86:23
Certificate issuer: /CN=69f8eb366fc6c8a09bfb140f1505f9ec675d42e4
Certificate serial: 0188B0DC8A1BDC2C9E7F5144B40702F834EA
Authority key identifier: 69:F8:EB:36:6F:C6:C8:A0:9B:FB:14:0F:15:05:F9:EC:67:5D:42:E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/afjrNm_GyKCb-xQPFQX57GddQuQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/fdad8c-9ed3-4f01-b107-7486c0582f2a/1/L-ancYAGFIEbE5G9D40_hiv1hiM.roa
Signing time: Mon 12 Jun 2023 18:27:03 +0000
ROA not before: Mon 12 Jun 2023 18:27:03 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 15497
IP address blocks: 62.149.15.0/24 maxlen: 24
31.28.164.0/22 maxlen: 22
31.28.160.0/22 maxlen: 22
31.28.169.0/24 maxlen: 24
31.28.172.0/22 maxlen: 22
31.28.168.0/22 maxlen: 22
31.28.176.0/22 maxlen: 22
62.149.31.0/24 maxlen: 24
31.28.184.0/22 maxlen: 22
31.28.180.0/22 maxlen: 22
31.28.190.0/24 maxlen: 24
31.28.191.0/24 maxlen: 24
31.28.188.0/22 maxlen: 22
31.28.188.0/24 maxlen: 24
62.149.2.0/24 maxlen: 24
62.149.0.0/19 maxlen: 19
62.149.10.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:b0:dc:8a:1b:dc:2c:9e:7f:51:44:b4:07:02:f8:34:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69f8eb366fc6c8a09bfb140f1505f9ec675d42e4
Validity
Not Before: Jun 12 18:27:03 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2fe6a771800614811b1391bd0f8d3f862bf58623
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:ae:bd:ec:8e:99:63:c0:34:7b:2e:3f:f8:24:
65:37:06:0f:1e:a1:92:05:42:5c:71:1f:dd:c7:13:
2c:68:ea:d3:92:ff:01:d9:66:ed:32:17:60:e5:1e:
8a:7a:70:3a:cf:e6:7d:df:84:56:3b:b3:41:94:a8:
c6:58:ae:9c:26:1a:16:fe:5e:83:db:d4:b3:e1:79:
c3:35:a6:57:7e:ee:b5:ba:11:52:7f:25:30:e0:c6:
b8:bc:0f:10:b5:dc:45:38:bc:84:ac:4d:2e:ad:f8:
39:79:5e:2c:84:ed:95:a2:74:36:06:ce:c3:a2:dd:
ea:6b:ac:90:b9:e4:d5:5d:0d:2b:27:84:07:7b:83:
e6:fe:8e:19:f0:cf:54:a8:8d:76:03:6d:50:82:9f:
04:99:2b:83:b9:c4:45:40:0d:21:de:cb:b2:53:e2:
94:fa:d8:37:9f:7c:f5:d3:a5:f8:12:08:2c:aa:f1:
73:e9:d6:53:ce:66:7b:23:d8:fd:f6:e7:1a:cf:95:
fa:27:3d:0e:e0:cf:15:2d:7b:09:cf:10:39:bd:5b:
ae:05:da:1c:7b:44:dd:a5:b9:b5:9d:f8:45:53:58:
32:5d:c8:40:ff:4c:b1:c1:c8:17:ba:f9:66:52:0e:
ec:57:f2:d0:0b:b7:29:01:86:96:4a:38:07:73:04:
5f:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:E6:A7:71:80:06:14:81:1B:13:91:BD:0F:8D:3F:86:2B:F5:86:23
X509v3 Authority Key Identifier:
keyid:69:F8:EB:36:6F:C6:C8:A0:9B:FB:14:0F:15:05:F9:EC:67:5D:42:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/afjrNm_GyKCb-xQPFQX57GddQuQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/fdad8c-9ed3-4f01-b107-7486c0582f2a/1/L-ancYAGFIEbE5G9D40_hiv1hiM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/fdad8c-9ed3-4f01-b107-7486c0582f2a/1/afjrNm_GyKCb-xQPFQX57GddQuQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.28.160.0/19
62.149.0.0/19
Signature Algorithm: sha256WithRSAEncryption
64:a3:88:1b:a5:53:ae:fb:ed:ce:b4:9f:06:32:65:08:c2:04:
5b:c9:11:8d:a2:0e:b7:37:4a:25:34:3e:5e:ff:b7:07:8f:1d:
68:21:6a:34:86:09:01:de:c3:ae:ef:95:df:65:3b:f1:91:f3:
e9:b9:48:8c:63:48:e3:c3:0d:0d:01:16:73:84:5d:1b:89:3d:
67:46:b7:4b:0a:15:ef:95:9e:e7:98:f0:b9:8e:39:ac:f6:81:
1a:3d:49:6e:a1:57:70:d8:b4:41:ba:8d:fb:fa:0b:62:fa:27:
92:47:eb:67:95:61:ff:09:94:db:e8:af:1f:2e:ae:8c:dd:0f:
71:e3:d0:19:92:03:e2:d5:10:97:ff:33:b7:5c:6a:c5:e5:3a:
43:45:4d:a0:dc:46:9e:22:21:c2:d9:90:22:48:36:3d:a3:1c:
b5:ce:a1:23:38:c6:d1:60:8b:91:88:41:41:43:4b:28:dc:fd:
58:8f:ce:6a:c9:0a:37:bd:2d:4f:be:3c:b3:f9:3b:c0:3b:29:
16:43:6a:47:21:4a:06:0d:d1:24:fa:f9:fb:c0:ae:b1:03:dc:
9a:50:37:f3:66:1b:7b:b4:9c:01:3d:24:76:76:12:e1:da:49:
0d:48:a1:02:1c:37:c6:04:0a:0e:9c:2f:db:60:ad:e7:d6:61:
61:3b:86:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 15:03:36 2025 by rpki-client