Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/qc_V3JbBjef2cQpcSQC0yS_QSsM.roa
File: qc_V3JbBjef2cQpcSQC0yS_QSsM.roa (raw, json)
Hash identifier: qfLEyoeDdPKOuRPw3TKGpkmVroRcpzNxePBC0MA0L3g=
Subject key identifier: A9:CF:D5:DC:96:C1:8D:E7:F6:71:0A:5C:49:00:B4:C9:2F:D0:4A:C3
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 0185A5EFAD2691ABC2C6492E95CA2C834A1C
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/qc_V3JbBjef2cQpcSQC0yS_QSsM.roa
Signing time: Thu 12 Jan 2023 12:23:46 +0000
ROA not before: Thu 12 Jan 2023 12:23:46 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 43561
IP address blocks: 31.13.252.0/24 maxlen: 24
31.13.253.0/24 maxlen: 24
31.13.254.0/24 maxlen: 24
31.13.255.0/24 maxlen: 24
87.121.104.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:a5:ef:ad:26:91:ab:c2:c6:49:2e:95:ca:2c:83:4a:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Jan 12 12:23:46 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a9cfd5dc96c18de7f6710a5c4900b4c92fd04ac3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:14:6a:43:5b:11:f0:cc:51:2a:77:72:b7:2f:
42:fc:1c:50:0a:51:77:1f:63:de:47:5c:e1:52:f6:
d2:21:70:b3:81:c2:79:6a:fc:08:e5:fb:ba:f1:70:
9b:19:c3:92:ab:58:9d:bf:29:10:ce:62:02:01:d5:
b4:24:f7:d2:82:23:00:4e:2b:69:eb:1a:dc:99:78:
7d:2f:1c:d5:13:7e:c3:07:e3:0f:fe:8c:b5:74:69:
22:44:f7:68:5a:af:17:cd:ac:fd:0c:9a:be:c8:32:
9c:99:37:4b:8b:f2:4d:19:77:94:cc:81:d7:e1:40:
24:35:2d:06:c9:73:64:08:3b:f6:a9:c3:aa:10:cd:
62:9e:c4:ee:c5:ef:6e:7e:d7:bd:83:23:27:8b:fb:
24:6d:70:23:d8:cd:19:73:68:9a:12:f5:5b:f4:8a:
c4:d5:8e:03:66:8e:80:e4:bb:23:10:10:fe:0c:cc:
24:ef:a4:40:82:00:fa:52:89:48:3e:bf:83:56:2c:
9e:35:24:9b:19:0e:5a:13:52:5d:89:03:78:b7:4a:
cd:d2:9b:54:73:c8:15:08:52:02:12:26:be:30:03:
df:52:83:7b:6d:df:20:d5:e7:1d:77:eb:46:ea:c1:
ea:55:d8:52:0e:82:55:fd:55:7e:39:86:a0:d2:bd:
14:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:CF:D5:DC:96:C1:8D:E7:F6:71:0A:5C:49:00:B4:C9:2F:D0:4A:C3
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/qc_V3JbBjef2cQpcSQC0yS_QSsM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.13.252.0/22
87.121.104.0/24
Signature Algorithm: sha256WithRSAEncryption
92:46:5e:b2:96:63:30:a4:b8:2c:39:13:43:44:4a:a7:b4:e1:
a4:2a:63:8c:1d:dc:b2:bf:f0:15:48:d8:f1:1a:bb:2f:4a:d1:
60:2e:25:6a:01:0b:ad:71:fd:2d:4d:86:30:29:8c:59:20:66:
06:65:7d:3f:b6:ec:b7:b4:73:61:c3:74:21:a5:f1:1e:e2:5f:
94:c8:2e:62:6d:dc:46:c9:0e:19:b2:b7:d4:cf:a6:48:48:ed:
f6:53:7e:f8:70:cf:ee:08:21:5e:67:ff:93:88:76:22:33:dd:
9e:2c:74:fd:2d:c3:59:c3:f8:f9:8b:00:60:8a:52:4d:30:d7:
d9:b5:dc:55:d0:f1:24:c8:0d:e6:1b:72:df:57:92:c5:69:e4:
b2:57:81:db:0a:be:5e:c2:fd:cf:db:74:b3:43:85:78:30:6e:
49:7a:44:ac:5a:11:57:19:1b:5c:c1:29:fc:97:d3:5d:df:ae:
77:6c:ee:68:ec:61:52:90:41:d5:6c:03:c7:0b:93:d8:c9:eb:
e5:27:6d:7f:97:7d:c2:8d:fa:00:a5:33:18:be:1b:07:c8:8a:
30:b7:52:e7:f4:40:44:c4:bd:78:17:54:73:d8:44:26:6f:4f:
c0:fd:6a:64:0f:ec:1d:ba:b5:9c:e3:ed:be:5c:d6:14:33:04:
75:e4:13:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:46:42 2023 by rpki-client on console-ams.rpki-client.org