Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/b9c1d7-2aed-4696-80a7-d5abf5031d21/1/tKn2q45-DrYdGnwMxSA7qEgYrU0.roa
File: tKn2q45-DrYdGnwMxSA7qEgYrU0.roa (raw, json)
Hash identifier: HE+HTGHRxgeP5raL8uO6p23Pp/383kS3nqeJkt+iaMo=
Subject key identifier: B4:A9:F6:AB:8E:7E:0E:B6:1D:1A:7C:0C:C5:20:3B:A8:48:18:AD:4D
Certificate issuer: /CN=9984b9eb122237111c1f8ca57707ec7307291ee8
Certificate serial: 0185719586F0C0CF1162FA371D665DE076A5
Authority key identifier: 99:84:B9:EB:12:22:37:11:1C:1F:8C:A5:77:07:EC:73:07:29:1E:E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mYS56xIiNxEcH4yldwfscwcpHug.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/b9c1d7-2aed-4696-80a7-d5abf5031d21/1/tKn2q45-DrYdGnwMxSA7qEgYrU0.roa
Signing time: Mon 02 Jan 2023 08:25:02 +0000
ROA not before: Mon 02 Jan 2023 08:25:02 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 15372
IP address blocks: 193.36.120.0/22 maxlen: 22
212.111.224.0/19 maxlen: 24
188.239.190.0/24 maxlen: 24
188.239.188.0/23 maxlen: 23
31.42.180.0/24 maxlen: 24
2a01:7700::/32 maxlen: 32
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:95:86:f0:c0:cf:11:62:fa:37:1d:66:5d:e0:76:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9984b9eb122237111c1f8ca57707ec7307291ee8
Validity
Not Before: Jan 2 08:25:02 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b4a9f6ab8e7e0eb61d1a7c0cc5203ba84818ad4d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:51:84:a7:6d:c7:cc:e0:99:34:1c:31:6a:f0:
f9:89:be:37:38:1a:ac:22:ac:8f:95:c7:85:3a:01:
22:97:6c:0d:e8:46:0a:6e:d5:00:8d:53:ab:74:23:
6f:e7:5e:e9:0f:2d:7a:42:6c:b8:51:8c:a1:bd:54:
5b:b2:46:cc:47:40:41:7c:20:eb:bf:e4:de:27:8c:
27:07:68:3e:5e:fc:94:23:6a:c3:2d:5b:43:25:df:
21:bc:95:01:7f:28:9d:95:c7:fa:4b:d9:d4:a0:bc:
42:fa:da:46:72:c2:ee:20:d7:1a:8f:c6:5e:2c:ab:
00:64:7a:a4:64:7d:a1:4f:fa:74:29:c9:58:21:90:
c9:4c:36:83:97:31:c7:a0:82:a0:06:4f:7b:f7:4b:
18:8c:90:b2:1f:8f:60:8a:8f:88:49:86:32:eb:7f:
d9:5c:56:f2:d2:fe:f8:b8:d0:1f:46:ee:d8:31:11:
f7:24:54:fb:09:36:ba:53:b8:67:34:68:04:84:ed:
a6:cf:a7:32:a9:4e:82:cd:d7:53:af:0b:3d:4c:c5:
28:0f:10:11:a6:5d:94:c2:4b:7c:69:44:08:f8:6f:
32:f6:ff:d0:cf:3d:9f:02:6a:d2:7e:00:54:e1:ae:
f7:55:b1:6b:e0:82:9a:da:5b:96:8f:db:93:e4:7d:
bc:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:A9:F6:AB:8E:7E:0E:B6:1D:1A:7C:0C:C5:20:3B:A8:48:18:AD:4D
X509v3 Authority Key Identifier:
keyid:99:84:B9:EB:12:22:37:11:1C:1F:8C:A5:77:07:EC:73:07:29:1E:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mYS56xIiNxEcH4yldwfscwcpHug.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/b9c1d7-2aed-4696-80a7-d5abf5031d21/1/tKn2q45-DrYdGnwMxSA7qEgYrU0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/b9c1d7-2aed-4696-80a7-d5abf5031d21/1/mYS56xIiNxEcH4yldwfscwcpHug.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.42.180.0/24
188.239.188.0-188.239.190.255
193.36.120.0/22
212.111.224.0/19
IPv6:
2a01:7700::/32
Signature Algorithm: sha256WithRSAEncryption
56:a7:74:ff:f1:98:72:7e:1f:9f:65:5d:15:73:28:e8:34:de:
b2:61:84:ac:02:ee:b7:a1:dc:77:cb:0f:db:6a:45:1b:45:17:
1d:86:3d:d0:85:f3:a2:0b:2a:0f:f9:d4:c4:4d:01:89:39:fe:
02:bd:86:ec:d7:c7:99:f1:06:b4:9e:05:e9:87:d6:ea:72:ed:
12:a4:79:b1:d2:3e:f4:46:9c:da:74:64:da:e6:ec:d0:3c:3a:
3f:fc:58:c7:ae:c4:9f:d4:d6:e5:45:4d:07:1c:f1:d3:58:2e:
6a:c3:02:1c:9b:22:47:3c:b1:9a:58:f3:07:f0:d0:c1:61:50:
ec:17:05:86:03:ca:41:49:40:7d:0c:24:fc:fa:88:57:2b:6b:
51:03:bb:e0:82:1a:ef:b3:7a:5d:93:98:b4:92:db:a1:7a:9f:
39:62:4a:69:4e:93:d3:c7:f0:1b:f0:59:d5:03:dd:35:a8:15:
c8:0a:ed:b0:fa:c0:ec:f6:48:75:3c:45:d1:e4:07:9c:e9:36:
85:56:5a:54:81:74:c0:88:ee:ec:9a:ef:62:4c:d0:3f:3b:84:
67:10:ec:a8:0a:08:52:ea:0b:99:85:b8:af:10:79:4e:0e:55:
b6:fa:b3:d7:c4:dd:73:50:5f:04:0a:1d:81:f8:38:33:22:0a:
94:50:a3:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:54:03 2025 by rpki-client