Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/6e5dc3-c7fa-4d36-9095-c19232bda430/1/b1WcXQ-Wod4t_zyYAFxg_zFpf2o.roa
File: b1WcXQ-Wod4t_zyYAFxg_zFpf2o.roa (raw, json)
Hash identifier: 9VLlgYhUK3/0r8k2KwqwqnrcrBOIeZ1MdJfPRkxkwU4=
Subject key identifier: 6F:55:9C:5D:0F:96:A1:DE:2D:FF:3C:98:00:5C:60:FF:31:69:7F:6A
Certificate issuer: /CN=13b89b80186332d441bb0515c47261c5ffa0616b
Certificate serial: 04665B51
Authority key identifier: 13:B8:9B:80:18:63:32:D4:41:BB:05:15:C4:72:61:C5:FF:A0:61:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/E7ibgBhjMtRBuwUVxHJhxf-gYWs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/6e5dc3-c7fa-4d36-9095-c19232bda430/1/b1WcXQ-Wod4t_zyYAFxg_zFpf2o.roa
Signing time: Fri 11 Mar 2022 12:10:38 +0000
ROA not before: Fri 11 Mar 2022 12:10:38 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 39018
IP address blocks: 193.143.224.0/24 maxlen: 24
193.143.227.0/24 maxlen: 24
193.143.231.0/24 maxlen: 24
193.143.248.0/24 maxlen: 24
2a10:8f00::/29 maxlen: 48
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 73816913 (0x4665b51)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=13b89b80186332d441bb0515c47261c5ffa0616b
Validity
Not Before: Mar 11 12:10:38 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6f559c5d0f96a1de2dff3c98005c60ff31697f6a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:e5:d3:09:9f:5c:5b:f6:5b:1b:ef:5f:84:59:
ed:83:37:8a:81:bb:2b:e6:1e:b6:fb:7a:78:16:2f:
f0:bc:ca:b3:02:39:21:a5:b9:78:c2:1b:bc:b5:65:
67:37:fc:49:01:5d:f8:11:7b:ea:db:e7:6d:d4:0d:
89:a6:60:a1:f5:77:81:f5:93:bf:ea:6d:4f:b7:c1:
fe:5a:c8:47:8f:d0:c3:ea:73:39:96:34:e7:f6:7a:
35:9d:45:8e:88:54:32:73:ae:4e:89:37:4c:06:bb:
14:20:d0:40:a4:76:6c:28:64:fb:06:92:0d:f8:ad:
4a:2d:f2:86:36:4f:85:c6:50:80:45:9f:ad:59:f4:
7e:1d:e5:ff:d6:fd:d5:15:08:99:31:0f:dd:0e:61:
b8:61:87:42:fe:bb:b9:cd:76:34:87:fa:79:ba:fb:
7f:5f:0e:2b:0d:5d:49:db:f6:9a:b0:9f:06:1e:05:
8d:ea:39:ec:e9:70:01:ad:5b:a3:53:75:1a:05:2a:
4b:41:83:a7:a4:5e:85:91:20:e6:8d:7e:be:09:48:
83:dd:a0:9e:f0:75:93:72:9f:8e:b4:09:11:0d:c0:
a4:75:9e:0b:6b:28:fd:1c:ba:3e:42:73:66:4c:e8:
55:ea:d0:1d:08:96:b9:f2:5f:27:42:77:42:4b:34:
64:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:55:9C:5D:0F:96:A1:DE:2D:FF:3C:98:00:5C:60:FF:31:69:7F:6A
X509v3 Authority Key Identifier:
keyid:13:B8:9B:80:18:63:32:D4:41:BB:05:15:C4:72:61:C5:FF:A0:61:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E7ibgBhjMtRBuwUVxHJhxf-gYWs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/6e5dc3-c7fa-4d36-9095-c19232bda430/1/b1WcXQ-Wod4t_zyYAFxg_zFpf2o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/6e5dc3-c7fa-4d36-9095-c19232bda430/1/E7ibgBhjMtRBuwUVxHJhxf-gYWs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.143.224.0/24
193.143.227.0/24
193.143.231.0/24
193.143.248.0/24
IPv6:
2a10:8f00::/29
Signature Algorithm: sha256WithRSAEncryption
5c:5b:b9:5f:76:aa:b6:d8:3f:a9:d6:04:42:70:8d:5d:07:d9:
fb:8b:eb:9e:4f:2d:cb:4e:24:1e:ca:f2:6e:20:c0:f4:38:3e:
a7:08:4f:31:32:49:ae:92:bf:07:1b:5d:82:a4:0c:88:5a:5e:
60:2c:7a:c8:f2:ec:cd:0a:1c:52:55:20:60:2b:bc:e8:77:55:
c8:7e:d0:34:a5:2b:3d:bf:2e:77:89:ba:72:4a:b7:5e:06:03:
ff:b1:1b:7e:fb:bc:59:d9:74:7f:cf:58:8c:dc:fd:47:bc:64:
f3:93:30:2c:fd:8c:c6:35:3e:c3:a9:6b:cb:80:ec:41:be:69:
f5:5b:2e:60:30:4b:2d:64:e2:c6:ad:df:2c:bb:22:ac:51:79:
2a:e6:5f:25:2f:ec:50:de:a4:f8:ea:49:c9:b2:72:3c:23:5d:
6c:ea:34:f2:2e:2c:6f:c2:43:b9:59:b1:4e:f3:86:e7:51:dc:
b6:1e:8d:4a:40:f3:fe:bf:bc:c7:ea:f8:9e:08:5d:12:d7:bc:
9a:27:dd:86:1a:77:c7:73:8a:8e:0e:3c:26:8f:c0:63:39:c1:
55:93:25:d8:d0:87:25:a0:8e:dd:d5:10:9a:08:e9:ee:c2:37:
7c:7f:b3:ca:9e:92:3e:1c:ff:23:36:f0:85:3e:a5:39:79:84:
fe:04:cb:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:50:31 2023 by rpki-client on console-ams.rpki-client.org