Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/ac770e-41da-4d36-97e2-1618d5eeaae8/1/bEU-p_hw2AMaL1eFz8P9WFrsYX8.roa
File: bEU-p_hw2AMaL1eFz8P9WFrsYX8.roa (raw, json)
Hash identifier: KnwqcWL/qX0IJ9vDoEMqK4PgfyuihGSojLB9AGOyCr8=
Subject key identifier: 6C:45:3E:A7:F8:70:D8:03:1A:2F:57:85:CF:C3:FD:58:5A:EC:61:7F
Certificate issuer: /CN=8e7fb5f52847f2170e67fcc25adf0b5d686ffafc
Certificate serial: 018CC2DB1D31B9EE8D009BB56D241ED68D8D
Authority key identifier: 8E:7F:B5:F5:28:47:F2:17:0E:67:FC:C2:5A:DF:0B:5D:68:6F:FA:FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jn-19ShH8hcOZ_zCWt8LXWhv-vw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/ac770e-41da-4d36-97e2-1618d5eeaae8/1/bEU-p_hw2AMaL1eFz8P9WFrsYX8.roa
Signing time: Mon 01 Jan 2024 02:29:48 +0000
ROA not before: Mon 01 Jan 2024 02:29:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 49055
IP address blocks: 95.215.208.0/22 maxlen: 22
95.215.208.0/23 maxlen: 23
95.215.210.0/23 maxlen: 23
31.128.32.0/24 maxlen: 24
31.128.32.0/22 maxlen: 22
31.128.32.0/23 maxlen: 23
31.128.36.0/22 maxlen: 22
31.128.36.0/23 maxlen: 23
31.128.34.0/23 maxlen: 23
31.128.44.0/23 maxlen: 23
31.128.44.0/22 maxlen: 22
31.128.44.0/24 maxlen: 24
31.128.40.0/22 maxlen: 22
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:db:1d:31:b9:ee:8d:00:9b:b5:6d:24:1e:d6:8d:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e7fb5f52847f2170e67fcc25adf0b5d686ffafc
Validity
Not Before: Jan 1 02:29:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6c453ea7f870d8031a2f5785cfc3fd585aec617f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:b3:a6:58:b4:c3:4d:14:31:13:b8:25:7b:9f:
5a:65:1d:b9:98:e6:6b:a5:a2:67:6b:c0:6b:f5:6c:
26:fb:3c:b4:55:68:b3:ff:95:45:b7:35:6d:20:55:
21:e4:68:bc:d4:c2:65:e0:fa:a8:3d:2f:88:67:90:
04:54:dc:95:4d:4e:06:71:65:b1:7f:2e:12:a1:d3:
28:55:8f:51:d1:f5:0f:11:c3:fd:7f:25:d2:08:fb:
7e:31:27:b1:15:e3:a0:92:40:f5:04:f1:ba:e9:03:
d1:83:49:96:c0:96:f2:36:0f:5c:9b:fb:91:8f:a1:
6a:a1:8e:d7:7e:eb:98:2a:d8:57:1b:18:b2:78:23:
a7:e7:a0:2a:d5:6a:83:fd:64:f5:97:71:ba:3b:b2:
45:1b:b9:3e:e8:44:e3:a8:e7:e9:35:e6:ed:eb:46:
d4:a4:ab:36:7d:7a:49:df:6a:9b:ce:be:1d:e5:3e:
3e:a6:aa:53:f7:42:8d:78:ae:2b:0d:6f:6d:94:44:
2d:e0:08:9b:2d:7d:1b:64:3d:ca:8c:65:3f:d5:db:
fa:9e:00:37:90:38:d0:3f:26:9a:f2:8c:d1:a4:ba:
6d:34:ae:63:16:63:e3:3a:b8:6a:b0:cc:38:f5:c8:
1d:c1:9e:db:fb:f6:3a:90:5e:31:5c:bf:fa:9e:6c:
4f:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:45:3E:A7:F8:70:D8:03:1A:2F:57:85:CF:C3:FD:58:5A:EC:61:7F
X509v3 Authority Key Identifier:
keyid:8E:7F:B5:F5:28:47:F2:17:0E:67:FC:C2:5A:DF:0B:5D:68:6F:FA:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jn-19ShH8hcOZ_zCWt8LXWhv-vw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/ac770e-41da-4d36-97e2-1618d5eeaae8/1/bEU-p_hw2AMaL1eFz8P9WFrsYX8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/ac770e-41da-4d36-97e2-1618d5eeaae8/1/jn-19ShH8hcOZ_zCWt8LXWhv-vw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.128.32.0/20
95.215.208.0/22
Signature Algorithm: sha256WithRSAEncryption
a2:ed:15:7a:cf:80:af:f8:a2:73:80:2f:37:a8:b9:da:80:70:
67:bb:e1:1a:b6:76:e3:be:9a:50:91:79:f6:ea:ed:55:0e:63:
4d:ad:06:eb:47:b2:17:a2:02:21:a5:a3:b9:65:fd:84:c8:16:
83:5c:b4:0a:3c:df:23:2f:fa:3a:53:8a:69:0b:4f:54:93:f2:
bd:be:c5:bd:58:e5:ed:43:cc:b6:66:ec:5d:3e:13:09:79:8c:
b9:1b:b4:77:be:c3:52:3e:b8:30:79:56:68:b4:f5:cd:c6:fd:
ac:12:34:e2:b7:bf:80:a2:e7:b9:b4:be:86:82:e0:da:ef:3b:
79:b0:e7:49:ba:c7:a8:63:9b:d8:33:7f:b5:8f:96:d9:4d:68:
db:d3:b7:79:46:f8:b4:6c:06:b3:fa:b3:6a:9c:7d:ea:15:42:
55:fe:1f:fe:b2:44:75:fb:76:52:b7:3b:b5:89:92:27:0d:2c:
ee:91:b1:28:8b:c3:42:a7:5d:0b:65:4b:5b:ea:ad:a8:f8:28:
4b:3e:92:38:ab:57:44:01:66:f6:ff:39:93:29:69:ee:ac:4b:
51:13:62:1b:f2:ca:b4:d4:9a:1e:24:a6:fe:e9:dd:a0:64:bd:
50:93:9f:2b:e0:34:05:89:e9:43:15:36:a2:eb:08:f4:4c:40:
75:80:f4:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:46:24 2025 by rpki-client