Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/413e91-acfe-47e1-add2-79d5b46d9c0e/1/K1HlTaW_rstzf11ru-QsgU7kO9s.roa
File: K1HlTaW_rstzf11ru-QsgU7kO9s.roa (raw, json)
Hash identifier: Yhg6rD6lEwf65ZWuMFDk+G3LSKspsCGh/KSoPICJgVE=
Subject key identifier: 2B:51:E5:4D:A5:BF:AE:CB:73:7F:5D:6B:BB:E4:2C:81:4E:E4:3B:DB
Certificate issuer: /CN=1966b4da4891fb8090182bc33b49b59624fc9d9b
Certificate serial: 04FA9AB4
Authority key identifier: 19:66:B4:DA:48:91:FB:80:90:18:2B:C3:3B:49:B5:96:24:FC:9D:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GWa02kiR-4CQGCvDO0m1liT8nZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/413e91-acfe-47e1-add2-79d5b46d9c0e/1/K1HlTaW_rstzf11ru-QsgU7kO9s.roa
Signing time: Sat 01 Jan 2022 06:58:55 +0000
ROA not before: Sat 01 Jan 2022 06:58:55 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 47187
IP address blocks: 31.185.19.0/24 maxlen: 24
31.185.21.0/24 maxlen: 24
31.185.22.0/24 maxlen: 24
31.185.23.0/24 maxlen: 24
31.185.18.0/24 maxlen: 24
93.189.137.0/24 maxlen: 24
93.189.138.0/24 maxlen: 24
93.189.139.0/24 maxlen: 24
93.189.143.0/24 maxlen: 24
93.189.140.0/24 maxlen: 24
93.189.141.0/24 maxlen: 24
93.189.142.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 83532468 (0x4fa9ab4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1966b4da4891fb8090182bc33b49b59624fc9d9b
Validity
Not Before: Jan 1 06:58:55 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=2b51e54da5bfaecb737f5d6bbbe42c814ee43bdb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:9d:5e:f6:dc:6d:77:c6:56:31:83:84:98:d6:
d5:c1:05:1c:cc:b4:43:d2:59:90:1b:7a:d9:62:34:
dd:b1:bf:4e:ca:0d:f7:b2:70:bc:6c:91:26:e3:0e:
f1:dd:3f:44:dd:10:3d:0d:93:87:58:18:de:c8:bc:
ce:4c:c0:1e:ad:44:1c:02:e1:6a:47:54:df:1f:87:
e7:b3:25:a3:49:75:29:ea:68:f0:bc:47:ff:42:c2:
68:26:aa:8e:84:5e:5f:8b:b4:09:7b:12:db:f1:18:
b1:ea:01:2d:8e:63:54:e5:b0:85:fb:0f:dd:16:8e:
21:60:ab:a5:0d:91:0f:1b:19:7f:2d:05:d1:64:00:
9d:81:1d:da:07:9c:7f:88:2a:95:fb:e4:67:45:a3:
37:39:fb:b0:a9:43:56:52:61:39:bf:b0:3a:e2:37:
a5:cd:37:cd:d8:c8:b3:df:4f:49:a5:6e:96:c0:b9:
83:29:03:26:b0:c1:e8:0b:c8:dd:0d:d5:ea:cd:88:
a6:db:21:d6:a3:45:af:02:16:42:f4:f1:29:a6:b0:
ed:5b:56:8a:53:ea:54:0d:ca:57:1d:8d:e3:27:a4:
89:bb:7b:43:b9:0c:e6:b1:a0:15:04:72:cf:0f:1d:
5b:c3:9a:bc:c8:13:05:7c:16:5a:8a:6e:3d:f3:b2:
8a:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:51:E5:4D:A5:BF:AE:CB:73:7F:5D:6B:BB:E4:2C:81:4E:E4:3B:DB
X509v3 Authority Key Identifier:
keyid:19:66:B4:DA:48:91:FB:80:90:18:2B:C3:3B:49:B5:96:24:FC:9D:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GWa02kiR-4CQGCvDO0m1liT8nZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/413e91-acfe-47e1-add2-79d5b46d9c0e/1/K1HlTaW_rstzf11ru-QsgU7kO9s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/413e91-acfe-47e1-add2-79d5b46d9c0e/1/GWa02kiR-4CQGCvDO0m1liT8nZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.185.18.0/23
31.185.21.0-31.185.23.255
93.189.137.0-93.189.143.255
Signature Algorithm: sha256WithRSAEncryption
7b:ab:d2:09:8c:3f:2d:e6:d6:df:44:0e:e7:c5:e4:07:5f:0d:
a3:0a:47:3b:4c:e0:db:ab:69:35:9b:eb:84:d5:d3:56:6b:ab:
85:5d:b9:7a:b9:04:77:f8:33:88:23:db:fa:26:24:b6:20:41:
65:f5:ea:f8:73:36:2d:3d:fb:57:35:61:c6:e0:cc:7a:94:14:
90:e2:dd:82:f0:f6:e2:6e:b0:4c:c3:de:8c:16:58:9f:c7:ed:
8c:32:cf:ba:48:2a:ac:41:53:d3:60:20:d4:16:ee:af:8e:ab:
2d:ce:47:5f:74:d1:eb:ed:15:fd:5e:67:89:7a:8d:01:12:b6:
15:78:15:99:7e:58:6e:b7:9d:f2:ce:67:8f:57:d9:b7:40:22:
37:6e:a6:d0:70:93:0f:98:4e:a4:af:7e:40:b9:ca:30:3e:3d:
0c:0c:28:f0:3a:05:ee:56:04:00:7c:bb:43:7f:08:f9:07:42:
f0:a7:5d:3f:af:69:6a:85:33:4b:36:b4:ab:a6:76:58:b6:12:
47:fd:af:55:d9:d9:85:85:8f:f0:6f:93:86:f2:4c:83:04:63:
e2:c4:b2:d5:92:ab:85:8a:25:d9:f6:3e:da:86:77:fb:d6:e0:
50:a3:97:f1:fa:77:8e:10:42:64:00:8f:7d:33:d8:e8:58:e2:
c0:eb:f6:12
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:46:42 2023 by rpki-client on console-fra.rpki-client.org