Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/brndZWvPHlrWNjvIrOVwPEF70x8.roa
File: brndZWvPHlrWNjvIrOVwPEF70x8.roa (raw, json)
Hash identifier: yWnPeFW8LzU+Ovxe4DnVZ0zKRCv9zfDZpQgGu11/gSw=
Subject key identifier: 6E:B9:DD:65:6B:CF:1E:5A:D6:36:3B:C8:AC:E5:70:3C:41:7B:D3:1F
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 1E599286
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/brndZWvPHlrWNjvIrOVwPEF70x8.roa
Signing time: Wed 11 May 2022 07:29:02 +0000
ROA not before: Wed 11 May 2022 07:29:02 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 22653
IP address blocks: 31.169.124.0/24 maxlen: 24
31.169.125.0/24 maxlen: 24
31.169.126.0/24 maxlen: 24
31.169.127.0/24 maxlen: 24
194.55.226.0/24 maxlen: 24
194.55.224.0/24 maxlen: 24
194.55.225.0/24 maxlen: 24
194.55.227.0/24 maxlen: 24
85.31.44.0/24 maxlen: 24
85.31.46.0/24 maxlen: 24
85.31.45.0/24 maxlen: 24
85.31.47.0/24 maxlen: 24
79.110.60.0/24 maxlen: 24
79.110.62.0/24 maxlen: 24
79.110.61.0/24 maxlen: 24
79.110.63.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 509186694 (0x1e599286)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: May 11 07:29:02 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6eb9dd656bcf1e5ad6363bc8ace5703c417bd31f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:9a:60:42:57:9b:f9:97:99:d0:01:ef:3a:0c:
12:db:23:a9:53:62:f0:af:fa:d8:b3:4a:4a:0a:d4:
69:55:de:b8:ec:ef:23:72:cc:60:c7:12:3c:ff:41:
c6:94:2a:92:d4:fd:df:0a:47:e6:65:66:75:1c:68:
94:f4:a9:7d:e9:02:d5:2a:54:4e:19:d1:62:97:be:
e6:68:53:77:ac:78:1e:34:5b:49:4c:71:06:61:0e:
79:42:9f:23:a2:32:a5:77:73:68:d7:20:4c:15:02:
61:85:7e:c6:b2:54:54:6e:09:1d:df:6b:e7:05:47:
ab:8d:bc:e3:8a:aa:9e:3b:9f:d1:54:86:59:18:be:
40:56:4d:70:ff:3c:26:d1:03:57:be:4d:6b:71:09:
a3:df:73:6c:8f:3c:49:27:79:67:2f:0a:32:7f:e2:
5d:87:49:c5:53:36:9d:72:de:4d:62:16:24:a1:23:
18:b9:b6:e4:77:98:25:2d:51:b3:2a:ba:85:e0:e8:
45:ac:3e:3f:cb:1d:35:0b:62:d5:4b:8e:05:98:89:
75:1e:52:e3:45:1c:fc:e6:2c:5d:48:bf:4c:07:6c:
c5:e0:ff:aa:06:12:3d:76:c1:8f:5b:c1:65:d7:40:
d6:27:ba:56:90:2f:2c:38:13:85:cc:ea:cc:1c:66:
56:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:B9:DD:65:6B:CF:1E:5A:D6:36:3B:C8:AC:E5:70:3C:41:7B:D3:1F
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/brndZWvPHlrWNjvIrOVwPEF70x8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.169.124.0/22
79.110.60.0/22
85.31.44.0/22
194.55.224.0/22
Signature Algorithm: sha256WithRSAEncryption
19:d4:a4:b7:08:00:01:6d:47:5d:12:cc:86:65:f4:73:d5:be:
7a:d6:d9:29:40:94:18:26:a8:92:bc:48:42:01:e8:1a:62:c7:
61:18:88:d8:a7:6c:4b:c3:53:da:75:5e:8c:d7:22:ad:26:5a:
81:1b:1f:4a:6a:65:b3:b4:87:2c:f9:57:4b:7e:f8:59:ef:f3:
88:74:17:1c:5c:95:60:80:42:cf:14:55:f6:e1:98:58:a9:79:
d6:7d:2f:b9:5f:c6:61:7d:18:16:c4:ed:5c:08:4d:34:fc:88:
3f:73:3a:81:11:07:18:47:28:d1:65:69:ed:50:13:73:9f:0b:
a7:b8:3a:64:03:6a:df:b2:57:b8:e1:c5:58:d8:fa:c7:d7:38:
d6:c6:f6:a6:f2:c2:1d:ca:2a:9d:d1:13:c5:17:c6:9b:20:18:
fd:f7:7c:ef:e4:1c:39:75:59:0c:a5:41:2e:53:05:d5:20:93:
5e:e9:3a:97:46:74:9d:0e:80:18:b5:3d:86:76:96:8a:9e:e4:
43:f1:ba:d6:85:a9:b7:21:11:85:a2:7b:b1:31:6a:d7:32:75:
57:1e:94:2b:b4:9e:3c:95:ab:11:8c:ec:3b:a5:f6:02:cc:31:
51:55:fa:52:49:64:49:02:f2:02:9b:f1:44:9b:bc:e8:a5:31:
7e:34:fc:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:42:45 2023 by rpki-client on console-fra.rpki-client.org