Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/413e91-acfe-47e1-add2-79d5b46d9c0e/1/4mLpJ5vicX5jFjT2jGxJU9slW5Y.roa
File: 4mLpJ5vicX5jFjT2jGxJU9slW5Y.roa (raw, json)
Hash identifier: oC+UOX9ZD7Dl7jqNxj2SghNWKzw36DATd/Tr9d6cqIw=
Subject key identifier: E2:62:E9:27:9B:E2:71:7E:63:16:34:F6:8C:6C:49:53:DB:25:5B:96
Certificate issuer: /CN=1966b4da4891fb8090182bc33b49b59624fc9d9b
Certificate serial: 057E7CC1
Authority key identifier: 19:66:B4:DA:48:91:FB:80:90:18:2B:C3:3B:49:B5:96:24:FC:9D:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GWa02kiR-4CQGCvDO0m1liT8nZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/413e91-acfe-47e1-add2-79d5b46d9c0e/1/4mLpJ5vicX5jFjT2jGxJU9slW5Y.roa
Signing time: Tue 22 Feb 2022 10:06:58 +0000
ROA not before: Tue 22 Feb 2022 10:06:58 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 47187
IP address blocks: 31.185.19.0/24 maxlen: 24
31.185.21.0/24 maxlen: 24
31.185.22.0/24 maxlen: 24
31.185.23.0/24 maxlen: 24
31.185.18.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 92175553 (0x57e7cc1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1966b4da4891fb8090182bc33b49b59624fc9d9b
Validity
Not Before: Feb 22 10:06:58 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e262e9279be2717e631634f68c6c4953db255b96
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:f5:2c:00:11:6a:49:97:d3:a9:d9:ea:d2:01:
04:9a:72:4e:12:f2:9d:da:79:6e:e4:c4:72:f7:4b:
08:11:05:b5:1c:6e:e5:b6:9b:33:be:6b:f2:ab:18:
c2:eb:14:42:70:e1:51:c5:ea:29:d9:0c:d4:b0:ad:
ad:e1:b3:6b:37:f8:6e:0e:70:33:79:16:56:29:91:
36:72:83:05:25:51:6c:52:aa:e5:8e:ad:bc:c3:7a:
1d:be:58:aa:d4:cb:5a:92:06:30:b0:49:58:41:dd:
b5:3b:89:66:8b:95:76:48:82:b4:8f:ee:54:5b:eb:
0a:fc:26:7f:33:ac:9c:3e:05:17:d9:f0:ce:d5:e3:
10:d9:d4:6a:ca:81:39:5f:1d:e6:b7:c5:19:8b:b4:
79:98:d5:0a:db:3b:f5:8c:9f:b8:b8:6e:f6:90:33:
dc:86:1f:0c:54:a4:0b:d0:01:95:ff:e0:75:f5:f3:
22:bf:36:cd:f5:cf:c2:1c:79:85:ee:62:a4:47:41:
2d:b6:84:d3:3a:56:4a:12:44:2c:e5:2f:06:55:19:
3e:2e:7a:85:72:9f:a2:fc:2d:fa:11:61:b1:ed:13:
42:5f:78:62:2d:de:25:ba:90:2c:62:dd:25:93:26:
32:f3:e5:5e:05:7b:a4:06:6e:f7:3a:43:da:b8:0f:
a2:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:62:E9:27:9B:E2:71:7E:63:16:34:F6:8C:6C:49:53:DB:25:5B:96
X509v3 Authority Key Identifier:
keyid:19:66:B4:DA:48:91:FB:80:90:18:2B:C3:3B:49:B5:96:24:FC:9D:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GWa02kiR-4CQGCvDO0m1liT8nZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/413e91-acfe-47e1-add2-79d5b46d9c0e/1/4mLpJ5vicX5jFjT2jGxJU9slW5Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/413e91-acfe-47e1-add2-79d5b46d9c0e/1/GWa02kiR-4CQGCvDO0m1liT8nZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.185.18.0/23
31.185.21.0-31.185.23.255
Signature Algorithm: sha256WithRSAEncryption
9c:16:87:8e:86:fc:4e:70:90:f7:1b:89:e9:d8:d2:19:49:2c:
e9:5b:32:1a:9d:dd:be:48:7c:ca:36:bd:a7:ba:6a:1c:c7:2f:
1d:36:51:36:67:5e:db:3c:96:84:cb:d2:c2:9e:64:9a:87:cd:
ba:db:74:84:76:f7:8f:67:bc:c3:69:69:37:9d:1d:ab:c8:bc:
8b:39:54:2a:0c:a8:87:65:ab:82:0f:60:6c:05:97:f9:b9:27:
f8:88:cf:87:b8:ce:db:80:1c:fc:0e:d8:a1:20:66:aa:88:fa:
9d:c6:92:2f:87:6b:21:8b:ca:5f:84:f6:91:d3:3b:0c:5c:eb:
9a:fc:35:df:76:0c:97:75:cf:24:1e:58:44:ec:c9:28:84:5b:
47:b1:6e:2a:55:48:10:e6:e2:99:15:f4:63:1c:0e:33:32:2e:
b5:97:57:b1:54:b4:a0:e5:55:f2:62:8b:ef:de:81:1b:09:09:
97:ee:b6:0c:32:4f:db:11:4c:d6:23:77:61:08:d3:ae:12:2c:
18:fc:ea:fa:85:08:dd:45:88:ce:fa:11:73:54:8d:e1:78:f7:
18:47:2a:39:a0:41:49:be:a1:38:19:3a:0e:18:8b:6d:bb:ff:
98:62:d1:56:07:8b:40:ba:3c:69:6a:e9:6d:e6:b9:6f:7e:c1:
28:33:a3:cb
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgIEBX58wTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygx
OTY2YjRkYTQ4OTFmYjgwOTAxODJiYzMzYjQ5YjU5NjI0ZmM5ZDliMB4XDTIyMDIy
MjEwMDY1OFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoZTI2MmU5Mjc5YmUy
NzE3ZTYzMTYzNGY2OGM2YzQ5NTNkYjI1NWI5NjCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAKj1LAARakmX06nZ6tIBBJpyThLyndp5buTEcvdLCBEFtRxu
5babM75r8qsYwusUQnDhUcXqKdkM1LCtreGzazf4bg5wM3kWVimRNnKDBSVRbFKq
5Y6tvMN6Hb5YqtTLWpIGMLBJWEHdtTuJZouVdkiCtI/uVFvrCvwmfzOsnD4FF9nw
ztXjENnUasqBOV8d5rfFGYu0eZjVCts79YyfuLhu9pAz3IYfDFSkC9ABlf/gdfXz
Ir82zfXPwhx5he5ipEdBLbaE0zpWShJELOUvBlUZPi56hXKfovwt+hFhse0TQl94
Yi3eJbqQLGLdJZMmMvPlXgV7pAZu9zpD2rgPojcCAwEAAaOCAhcwggITMB0GA1Ud
DgQWBBTiYuknm+JxfmMWNPaMbElT2yVbljAfBgNVHSMEGDAWgBQZZrTaSJH7gJAY
K8M7SbWWJPydmzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L0dXYTAya2lSLTRDUUdDdkRPMG0xbGlUOG5acy5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvMzkvNDEzZTkxLWFjZmUtNDdlMS1hZGQyLTc5ZDViNDZkOWMwZS8x
LzRtTHBKNXZpY1g1akZqVDJqR3hKVTlzbFc1WS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMzkv
NDEzZTkxLWFjZmUtNDdlMS1hZGQyLTc5ZDViNDZkOWMwZS8xL0dXYTAya2lSLTRD
UUdDdkRPMG0xbGlUOG5acy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAt
BggrBgEFBQcBBwEB/wQeMBwwGgQCAAEwFAMEAR+5EjAMAwQAH7kVAwQDH7kQMA0G
CSqGSIb3DQEBCwUAA4IBAQCcFoeOhvxOcJD3G4np2NIZSSzpWzIand2+SHzKNr2n
umocxy8dNlE2Z17bPJaEy9LCnmSah82623SEdvePZ7zDaWk3nR2ryLyLOVQqDKiH
ZauCD2BsBZf5uSf4iM+HuM7bgBz8DtihIGaqiPqdxpIvh2shi8pfhPaR0zsMXOua
/DXfdgyXdc8kHlhE7MkohFtHsW4qVUgQ5uKZFfRjHA4zMi61l1exVLSg5VXyYovv
3oEbCQmX7rYMMk/bEUzWI3dhCNOuEiwY/Or6hQjdRYjO+hFzVI3hePcYRyo5oEFJ
vqE4GToOGIttu/+YYtFWB4tAujxpault5rlvfsEoM6PL
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:50:26 2023 by rpki-client on console-ams.rpki-client.org