Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/caa743-1c13-4a25-9f6a-65be5503165d/1/DlusFAoAU_KOnjJLEaCIbrTxnrg.roa
File: DlusFAoAU_KOnjJLEaCIbrTxnrg.roa (raw, json)
Hash identifier: cIK+3O6qIGPnMBBIyJ49Z3frmZIbeLpREoIGbeykDoI=
Subject key identifier: 0E:5B:AC:14:0A:00:53:F2:8E:9E:32:4B:11:A0:88:6E:B4:F1:9E:B8
Certificate issuer: /CN=5a376c8008d6abd962341563dd2a4dccaf153cba
Certificate serial: 0183F027518124A02B273E1E006A9CBD601F
Authority key identifier: 5A:37:6C:80:08:D6:AB:D9:62:34:15:63:DD:2A:4D:CC:AF:15:3C:BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WjdsgAjWq9liNBVj3SpNzK8VPLo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/caa743-1c13-4a25-9f6a-65be5503165d/1/DlusFAoAU_KOnjJLEaCIbrTxnrg.roa
Signing time: Wed 19 Oct 2022 12:10:52 +0000
ROA not before: Wed 19 Oct 2022 12:10:52 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 197071
IP address blocks: 31.214.240.0/21 maxlen: 32
95.156.226.0/23 maxlen: 32
95.156.225.0/24 maxlen: 32
109.230.252.0/22 maxlen: 32
95.156.228.0/22 maxlen: 32
95.156.232.0/24 maxlen: 32
185.87.20.0/22 maxlen: 32
109.230.195.0/24 maxlen: 32
46.251.225.0/24 maxlen: 32
46.251.227.0/24 maxlen: 32
109.230.224.0/20 maxlen: 32
31.214.149.0/24 maxlen: 32
134.255.216.0/21 maxlen: 32
134.255.220.0/22 maxlen: 32
134.255.224.0/22 maxlen: 32
134.255.224.0/20 maxlen: 32
134.255.228.0/23 maxlen: 32
134.255.230.0/24 maxlen: 32
134.255.235.0/24 maxlen: 32
134.255.236.0/22 maxlen: 32
134.255.252.0/22 maxlen: 32
193.25.201.0/24 maxlen: 32
2a05:bec0::/29 maxlen: 128
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:f0:27:51:81:24:a0:2b:27:3e:1e:00:6a:9c:bd:60:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5a376c8008d6abd962341563dd2a4dccaf153cba
Validity
Not Before: Oct 19 12:10:52 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=0e5bac140a0053f28e9e324b11a0886eb4f19eb8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:65:30:6a:86:e1:c1:7a:d8:e1:f0:17:39:4c:
ee:1e:5e:19:5d:23:d4:ce:0e:06:21:68:e3:49:3b:
d2:40:0e:32:7c:25:53:2c:21:6f:c4:d2:7f:f0:7a:
dc:06:fc:ad:0a:fc:42:41:23:4d:b1:2a:62:46:15:
ab:c4:42:f1:8f:36:d4:18:58:75:a7:8d:40:ca:0b:
a2:24:53:e9:d3:d1:26:09:d4:8e:3e:5c:63:f8:d3:
7c:1d:19:c3:fc:9f:3d:2a:51:32:1a:4e:77:58:83:
03:17:6a:d4:1b:09:78:70:c0:d7:94:e1:1a:15:0e:
9c:3f:a8:e1:35:60:a9:e3:c9:9a:4a:17:49:f8:20:
e9:92:aa:9e:38:36:1f:2a:1a:1b:81:d7:6f:52:3f:
98:08:4f:67:2e:31:7c:ae:0c:6f:e8:00:27:35:db:
49:66:b4:1e:b9:35:72:2d:27:14:fe:f8:71:a8:02:
2f:43:5e:8d:b3:c4:a3:65:eb:b7:a3:8f:96:49:e6:
a3:cf:3a:2e:35:5f:cd:dd:00:d3:74:6c:f7:91:eb:
5b:c2:54:d6:d2:41:90:10:91:72:e7:9f:c9:6f:5c:
20:a9:e4:0a:14:77:56:f9:4c:d8:a5:32:2e:df:ae:
19:1c:a9:dc:aa:26:c2:15:15:b5:ed:1e:dd:4a:b2:
5d:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:5B:AC:14:0A:00:53:F2:8E:9E:32:4B:11:A0:88:6E:B4:F1:9E:B8
X509v3 Authority Key Identifier:
keyid:5A:37:6C:80:08:D6:AB:D9:62:34:15:63:DD:2A:4D:CC:AF:15:3C:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WjdsgAjWq9liNBVj3SpNzK8VPLo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/caa743-1c13-4a25-9f6a-65be5503165d/1/DlusFAoAU_KOnjJLEaCIbrTxnrg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/caa743-1c13-4a25-9f6a-65be5503165d/1/WjdsgAjWq9liNBVj3SpNzK8VPLo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.214.149.0/24
31.214.240.0/21
46.251.225.0/24
46.251.227.0/24
95.156.225.0-95.156.232.255
109.230.195.0/24
109.230.224.0/20
109.230.252.0/22
134.255.216.0-134.255.239.255
134.255.252.0/22
185.87.20.0/22
193.25.201.0/24
IPv6:
2a05:bec0::/29
Signature Algorithm: sha256WithRSAEncryption
82:26:8b:a9:63:d0:51:97:af:73:7b:11:99:a1:72:f1:c5:c2:
02:bf:d9:ac:da:46:1c:e1:74:e1:a5:6d:9b:cb:ba:9a:57:1a:
57:83:e9:0a:18:c8:6b:a4:7b:ba:a8:16:27:2b:a9:9f:15:2c:
cc:da:c3:5f:80:6b:6c:71:37:56:14:28:bb:bb:a4:28:b1:6f:
1c:84:58:24:f3:ae:30:79:b5:43:a5:85:ab:1c:bc:97:66:04:
d6:91:d3:77:ac:5a:75:df:c8:91:70:9b:8f:35:b0:6f:bd:9e:
0e:b4:79:3a:87:43:25:67:e7:07:3f:8e:ea:e2:a4:69:e4:6e:
9a:a8:a2:f9:89:f7:a0:40:b9:97:f0:72:f1:21:c8:84:f0:cb:
33:3b:d6:e7:8a:f7:c5:c8:79:5a:11:86:0f:2c:7c:b9:50:a9:
c5:a8:fb:ed:c7:30:79:19:82:b5:ec:9c:6f:a0:3c:63:50:d7:
e5:9e:a2:04:b8:59:ed:2d:f4:d5:30:28:af:15:26:54:c6:44:
11:13:da:01:6c:d4:cc:18:0b:d7:fe:d3:c1:aa:04:a6:f5:e7:
ce:db:e4:54:7f:b4:89:8a:28:cd:97:7b:55:d2:9c:ac:cd:02:
a8:46:f5:14:d0:d4:32:b6:18:5f:a0:d7:23:7b:b8:da:6f:4f:
7d:dd:b5:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:27:07 2024 by rpki-client on console-fra.rpki-client.org