Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/897449-e9cf-4a79-89cf-41bb21ac2801/1/fyK7agN3tV1dhVZv7nRgeJG1JVM.roa
File: fyK7agN3tV1dhVZv7nRgeJG1JVM.roa (raw, json)
Hash identifier: PHxLSfzgPttOyVHQx+q60ocs3wykKyXfH7x2999LlQI=
Subject key identifier: 7F:22:BB:6A:03:77:B5:5D:5D:85:56:6F:EE:74:60:78:91:B5:25:53
Certificate issuer: /CN=c38280c5300b74888ac7eb4bfa6417d9a2e7b0be
Certificate serial: 018E3243C49C43FFA316015EE99448B5600B
Authority key identifier: C3:82:80:C5:30:0B:74:88:8A:C7:EB:4B:FA:64:17:D9:A2:E7:B0:BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w4KAxTALdIiKx-tL-mQX2aLnsL4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/897449-e9cf-4a79-89cf-41bb21ac2801/1/fyK7agN3tV1dhVZv7nRgeJG1JVM.roa
Signing time: Tue 12 Mar 2024 10:44:45 +0000
ROA not before: Tue 12 Mar 2024 10:44:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 204957
IP address blocks: 31.222.242.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:32:43:c4:9c:43:ff:a3:16:01:5e:e9:94:48:b5:60:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c38280c5300b74888ac7eb4bfa6417d9a2e7b0be
Validity
Not Before: Mar 12 10:44:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7f22bb6a0377b55d5d85566fee74607891b52553
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:7c:05:c7:8b:89:c8:71:55:4d:55:06:71:ff:
2c:65:ab:14:4a:37:9a:fc:b2:27:c2:3f:23:33:03:
c6:d6:16:87:c2:87:50:15:77:81:e0:4f:a3:5f:7c:
a9:fc:2e:99:ed:a2:4d:48:b8:db:a0:da:6a:01:af:
ab:63:7a:8c:ad:f4:2c:df:0f:e1:50:de:eb:62:eb:
17:13:40:22:3f:d0:30:6a:89:25:0c:86:aa:40:a3:
5d:06:63:57:b5:29:f4:a3:53:9f:c5:b3:0b:f5:2d:
22:58:cc:56:f7:54:da:c6:20:8c:61:7b:f7:94:6b:
ff:8f:6a:04:a0:d1:09:97:71:29:bd:48:63:e8:bf:
18:d3:4e:f5:9f:30:26:5f:3e:e8:3f:06:81:c5:71:
20:1b:0a:19:a1:f3:99:e0:b8:bd:10:6a:e3:79:e4:
40:e7:0f:fe:51:c4:b9:3b:3d:84:c2:6e:40:29:80:
24:d9:29:a7:45:fd:67:0b:2c:7e:32:c5:e7:b8:53:
40:5c:4a:d8:69:9e:39:2f:56:29:e3:46:3d:c8:98:
45:46:92:47:cb:7b:3f:a9:7a:04:0d:c6:8d:d5:40:
84:48:a3:bc:7c:a9:f6:d6:75:44:c2:8c:80:a1:5c:
43:04:3d:3f:a8:63:a8:95:49:41:86:a3:d7:df:da:
b1:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:22:BB:6A:03:77:B5:5D:5D:85:56:6F:EE:74:60:78:91:B5:25:53
X509v3 Authority Key Identifier:
keyid:C3:82:80:C5:30:0B:74:88:8A:C7:EB:4B:FA:64:17:D9:A2:E7:B0:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w4KAxTALdIiKx-tL-mQX2aLnsL4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/897449-e9cf-4a79-89cf-41bb21ac2801/1/fyK7agN3tV1dhVZv7nRgeJG1JVM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/897449-e9cf-4a79-89cf-41bb21ac2801/1/w4KAxTALdIiKx-tL-mQX2aLnsL4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.222.242.0/24
Signature Algorithm: sha256WithRSAEncryption
01:3d:9a:76:56:ef:ff:f1:d1:af:24:a3:7b:53:22:42:a7:ac:
15:80:63:c7:2e:98:69:f2:df:4c:06:43:55:a5:b8:ef:1a:28:
f7:4e:ff:3e:80:f8:5f:d0:4f:62:bf:65:87:d4:72:d9:fd:ef:
74:47:e5:4e:c8:35:81:b6:d2:82:4b:64:b9:c2:0c:75:b0:ea:
45:3d:d2:21:54:42:eb:9a:ac:83:5b:fb:ee:ab:05:c1:9c:4b:
2d:fa:0a:14:fb:39:1a:38:fa:a6:87:fd:70:97:b7:71:f3:64:
74:2c:b9:87:f3:39:ba:40:b4:c1:86:c6:28:d1:9e:ea:6b:ef:
65:59:5c:7e:51:eb:c8:b0:ce:d6:99:f9:e8:ea:42:6b:9b:f8:
aa:f4:1c:02:ce:fe:04:7c:a4:e6:03:c9:ba:01:33:7c:f0:d4:
a8:3f:17:39:75:e7:8f:d3:82:71:c9:06:39:cb:29:e5:a4:a0:
d4:af:81:cd:d1:82:57:6c:db:1b:f3:4b:ac:fb:a4:52:88:05:
a3:1c:a1:25:9a:4f:a8:13:70:0e:35:29:38:e8:0b:ec:5f:64:
6b:da:be:a5:a1:4e:fd:d4:21:52:8b:3b:88:00:d7:a8:18:f9:
ce:59:b2:53:17:4a:d7:bc:4e:b5:4f:3d:ca:63:47:24:ef:d5:
9b:c5:4a:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:59:31 2024 by rpki-client on console-fra.rpki-client.org