Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/c61092-734a-4eef-9d67-4905243bc828/1/U_Bl2S9HW-aTAWu35WIS1CK7k-I.roa
File: U_Bl2S9HW-aTAWu35WIS1CK7k-I.roa (raw, json)
Hash identifier: 1iML5oxGprW5hSJL1f0nAjAGRgpZsDwJ60wziv7HV3w=
Subject key identifier: 53:F0:65:D9:2F:47:5B:E6:93:01:6B:B7:E5:62:12:D4:22:BB:93:E2
Certificate issuer: /CN=05b1d13c2e26e12786246a5ec4c5bea69864b20f
Certificate serial: 0185966FABD3884F2F37387707AB33AA720A
Authority key identifier: 05:B1:D1:3C:2E:26:E1:27:86:24:6A:5E:C4:C5:BE:A6:98:64:B2:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BbHRPC4m4SeGJGpexMW-pphksg8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/c61092-734a-4eef-9d67-4905243bc828/1/U_Bl2S9HW-aTAWu35WIS1CK7k-I.roa
Signing time: Mon 09 Jan 2023 12:09:38 +0000
ROA not before: Mon 09 Jan 2023 12:09:38 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 41789
IP address blocks: 31.129.17.0/24 maxlen: 24
31.129.16.0/24 maxlen: 24
31.129.18.0/24 maxlen: 24
31.129.21.0/24 maxlen: 24
31.129.20.0/24 maxlen: 24
31.129.19.0/24 maxlen: 24
31.129.24.0/24 maxlen: 24
31.129.23.0/24 maxlen: 24
31.129.29.0/24 maxlen: 24
31.129.28.0/24 maxlen: 24
31.129.27.0/24 maxlen: 24
31.129.26.0/24 maxlen: 24
31.129.31.0/24 maxlen: 24
31.129.25.0/24 maxlen: 24
46.16.12.0/24 maxlen: 24
46.16.15.0/24 maxlen: 24
46.16.14.0/24 maxlen: 24
31.129.0.0/20 maxlen: 24
195.80.50.0/24 maxlen: 24
89.191.232.0/24 maxlen: 24
45.8.98.0/24 maxlen: 24
45.8.97.0/24 maxlen: 24
91.107.124.0/23 maxlen: 23
37.220.80.0/22 maxlen: 22
91.107.127.0/24 maxlen: 24
5.44.46.0/24 maxlen: 24
5.44.47.0/24 maxlen: 24
194.28.192.0/24 maxlen: 24
45.66.117.0/24 maxlen: 24
45.66.119.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:96:6f:ab:d3:88:4f:2f:37:38:77:07:ab:33:aa:72:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05b1d13c2e26e12786246a5ec4c5bea69864b20f
Validity
Not Before: Jan 9 12:09:38 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=53f065d92f475be693016bb7e56212d422bb93e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:f3:f4:25:92:fa:de:5b:d3:fb:99:a4:1d:14:
91:95:a5:d5:91:6a:83:a6:ac:db:ea:4b:1d:05:a2:
62:89:f8:eb:3b:9d:15:b0:db:23:8a:27:c7:c3:9a:
54:77:23:f4:7f:8c:71:aa:76:e3:ac:e6:e1:68:3f:
4d:a1:87:bb:c9:ac:a4:7f:82:5a:e7:74:2d:6e:63:
2e:50:b3:64:5d:1d:df:b7:f1:e7:3f:d7:e2:eb:d6:
6d:fb:f8:1d:5d:eb:ee:86:7e:97:b9:4d:84:29:32:
f8:df:af:cd:64:3b:57:b0:64:b9:98:44:b0:ef:a7:
59:31:3c:c5:97:a0:b7:1a:f9:34:46:b7:95:2d:21:
43:b6:55:bd:f7:53:6f:11:0c:c6:21:e4:a2:fa:c7:
6b:92:af:d1:fd:5a:eb:54:73:14:c3:f3:f1:5d:76:
e8:64:a3:40:79:a2:ea:ae:45:d9:8a:58:49:e7:ef:
72:9c:7d:e0:b0:9d:13:c8:1c:b1:54:a0:99:ac:44:
57:bd:ac:c9:4a:e2:0d:65:75:bc:52:c4:24:70:92:
61:d9:71:2b:dd:47:2c:44:f8:56:cb:d7:fe:71:6e:
21:36:5f:4f:25:f2:27:03:a7:f1:98:fb:1b:4e:da:
9a:a8:da:b3:64:dc:2b:0b:47:03:72:65:12:68:c0:
5a:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:F0:65:D9:2F:47:5B:E6:93:01:6B:B7:E5:62:12:D4:22:BB:93:E2
X509v3 Authority Key Identifier:
keyid:05:B1:D1:3C:2E:26:E1:27:86:24:6A:5E:C4:C5:BE:A6:98:64:B2:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BbHRPC4m4SeGJGpexMW-pphksg8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/c61092-734a-4eef-9d67-4905243bc828/1/U_Bl2S9HW-aTAWu35WIS1CK7k-I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/c61092-734a-4eef-9d67-4905243bc828/1/BbHRPC4m4SeGJGpexMW-pphksg8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.44.46.0/23
31.129.0.0-31.129.21.255
31.129.23.0-31.129.29.255
31.129.31.0/24
37.220.80.0/22
45.8.97.0-45.8.98.255
45.66.117.0/24
45.66.119.0/24
46.16.12.0/24
46.16.14.0/23
89.191.232.0/24
91.107.124.0/23
91.107.127.0/24
194.28.192.0/24
195.80.50.0/24
Signature Algorithm: sha256WithRSAEncryption
03:d4:f0:98:66:70:de:b5:ff:5b:3d:9b:27:02:18:bc:27:b0:
43:77:95:4a:8f:09:f7:ae:ab:d0:05:fe:41:03:2c:4b:20:1b:
41:b4:f9:89:13:60:4c:22:01:2e:9d:90:5f:6e:30:2a:5d:b4:
a6:d5:16:5f:2a:7c:c7:73:3f:91:43:cf:41:9c:0a:5c:4e:b3:
ea:e8:7f:14:01:27:08:f9:d2:e6:81:11:71:94:92:3a:ae:c1:
23:f4:e4:3d:41:4c:5d:2c:2e:c1:59:77:5b:4c:08:59:10:24:
94:98:c1:22:99:ff:0c:41:bb:17:31:45:ca:c9:92:95:63:dc:
5f:10:21:c2:9f:13:d8:a4:83:89:ac:23:a2:08:28:c8:86:20:
b6:01:86:8e:a7:4a:95:9a:5d:e3:41:bc:61:a9:fc:12:73:c5:
d6:cc:2e:75:5f:e3:33:be:df:14:53:35:f5:e9:05:4c:02:70:
7b:ce:b1:05:a8:6b:4a:7c:df:ca:c5:a6:93:5e:27:6d:14:73:
9c:de:3b:7f:a8:11:12:ea:4d:0b:f4:23:0a:b8:ec:99:6b:d9:
19:60:04:35:d0:b4:b8:3f:93:d5:a4:78:a1:43:0f:fb:e0:93:
bf:f1:c5:15:3d:9b:8d:d2:a2:93:b9:ff:34:26:4c:0d:9e:5e:
bd:66:fe:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:01:54 2023 by rpki-client on console-fra.rpki-client.org