Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/ebbac9-fee7-4f3b-8cd5-7a41254eaaca/1/3-g3JTKF4xRyCPIaViaqYDC7l1o.roa
File: 3-g3JTKF4xRyCPIaViaqYDC7l1o.roa (raw, json)
Hash identifier: fkDu8NARcKd1dM1lWUlsR143SuNr8aqSeEwXrJRNbi8=
Subject key identifier: DF:E8:37:25:32:85:E3:14:72:08:F2:1A:56:26:AA:60:30:BB:97:5A
Certificate issuer: /CN=b72588c00eef715809eb5fdd6d6717cc28c0dfac
Certificate serial: 019348D181C0D77FC3319FABAE445BB76674
Authority key identifier: B7:25:88:C0:0E:EF:71:58:09:EB:5F:DD:6D:67:17:CC:28:C0:DF:AC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tyWIwA7vcVgJ61_dbWcXzCjA36w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/ebbac9-fee7-4f3b-8cd5-7a41254eaaca/1/3-g3JTKF4xRyCPIaViaqYDC7l1o.roa
Signing time: Wed 20 Nov 2024 09:05:09 +0000
ROA not before: Wed 20 Nov 2024 09:05:09 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 44843
IP address blocks: 31.207.64.0/20 maxlen: 20
31.207.66.0/24 maxlen: 24
31.207.67.0/24 maxlen: 24
31.207.70.0/24 maxlen: 24
31.207.79.0/24 maxlen: 24
152.89.134.0/24 maxlen: 24
178.236.128.0/21 maxlen: 21
178.236.128.0/24 maxlen: 24
178.236.129.0/24 maxlen: 24
178.236.130.0/24 maxlen: 24
178.236.131.0/24 maxlen: 24
178.236.132.0/24 maxlen: 24
178.236.133.0/24 maxlen: 24
178.236.134.0/24 maxlen: 24
178.236.135.0/24 maxlen: 24
2a02:1710:4::/48 maxlen: 48
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:48:d1:81:c0:d7:7f:c3:31:9f:ab:ae:44:5b:b7:66:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b72588c00eef715809eb5fdd6d6717cc28c0dfac
Validity
Not Before: Nov 20 09:05:09 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=dfe837253285e3147208f21a5626aa6030bb975a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:b9:35:36:0f:20:56:ea:2b:54:19:72:d6:a1:
13:0f:36:58:c0:3f:16:33:be:52:3b:4f:94:bd:09:
7e:76:ca:db:0a:b4:80:09:1a:ee:18:ca:37:2f:21:
56:15:b5:53:55:27:9d:9c:5e:3f:44:65:67:d4:09:
fc:b0:1d:e1:7f:88:5d:cf:33:7a:5c:98:a0:d0:a2:
ae:d8:5a:9c:d9:e9:1c:61:cb:29:78:f0:ea:d4:ab:
52:2e:84:88:55:fa:e1:c4:f2:6e:06:44:5e:51:1b:
93:6a:df:f3:b4:4c:f8:56:5a:75:d4:6d:57:13:1b:
08:29:18:5e:89:9d:08:1a:f8:4a:e2:a7:7a:f5:82:
7b:61:bb:2f:7c:94:c0:e3:a3:d2:82:7f:33:a2:de:
5d:4b:9f:76:78:1b:fd:bf:13:91:7c:14:6f:d2:b5:
7b:c4:eb:5c:a5:6f:2c:a7:21:06:aa:a5:4d:a6:0e:
d8:45:85:5d:4c:b9:16:df:1b:36:3e:74:e7:b5:79:
e7:60:a1:47:ec:b1:86:a5:85:0e:61:7c:f1:ce:4b:
32:16:15:08:d1:d5:64:5c:2b:fd:56:f4:94:d7:0c:
b9:09:5b:a5:e5:41:da:28:28:c9:32:18:65:26:c1:
44:09:6d:43:ff:c6:98:00:b6:c3:44:a7:1b:2a:f5:
42:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:E8:37:25:32:85:E3:14:72:08:F2:1A:56:26:AA:60:30:BB:97:5A
X509v3 Authority Key Identifier:
keyid:B7:25:88:C0:0E:EF:71:58:09:EB:5F:DD:6D:67:17:CC:28:C0:DF:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tyWIwA7vcVgJ61_dbWcXzCjA36w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/ebbac9-fee7-4f3b-8cd5-7a41254eaaca/1/3-g3JTKF4xRyCPIaViaqYDC7l1o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/ebbac9-fee7-4f3b-8cd5-7a41254eaaca/1/tyWIwA7vcVgJ61_dbWcXzCjA36w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.207.64.0/20
152.89.134.0/24
178.236.128.0/21
IPv6:
2a02:1710:4::/48
Signature Algorithm: sha256WithRSAEncryption
0f:fa:38:ff:77:93:c6:3f:45:0a:ab:c5:a9:87:95:6e:cb:41:
6b:56:4c:5b:8c:ac:1a:5e:ca:1d:0b:59:9a:f0:a5:4d:6d:ef:
46:06:11:86:c7:f5:7c:e5:55:6b:d9:91:4e:18:f5:10:92:64:
cd:36:93:65:94:3f:b5:ce:09:56:1c:f3:59:6b:ef:77:5a:ce:
51:79:c9:29:21:03:ac:7a:00:0e:c6:3f:40:06:53:8e:42:43:
dc:d6:f6:34:b4:ed:08:5f:51:e7:3a:ab:46:17:c9:4d:c8:98:
05:dc:74:00:53:fe:4d:91:03:d4:f3:d0:aa:8e:9f:3a:81:0b:
7f:57:fc:12:a4:ed:fc:4a:83:6f:b3:1f:23:68:ae:34:9d:4f:
23:cf:80:83:c9:46:04:0f:39:af:88:18:fc:55:88:53:c5:69:
ae:6c:d4:5c:58:df:91:b2:8e:aa:06:9b:7b:97:30:8f:7c:08:
e5:6a:d3:62:72:f8:d3:dd:13:e2:38:ef:dc:be:d5:a7:d6:9a:
bd:fe:4d:e9:5f:0b:9a:47:2d:4c:08:ad:0f:0d:5c:fa:27:8f:
8e:52:e8:20:c0:a6:cc:f2:01:c2:a4:76:c5:06:41:1c:c1:a3:
6d:f7:62:aa:51:43:af:83:29:89:61:8b:d8:84:46:fc:39:f7:
28:36:f0:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:18:44 2025 by rpki-client