Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/43ff8f-cd54-4cf1-8aaf-4be18ef128b4/1/2K3uEFbuAPWWEe_gIpjkcVkEwR8.roa
File: 2K3uEFbuAPWWEe_gIpjkcVkEwR8.roa (raw, json)
Hash identifier: CbrgtMzUEAuMknQ1hjCrjMu7p+x0yLFpUMTce7T17LA=
Subject key identifier: D8:AD:EE:10:56:EE:00:F5:96:11:EF:E0:22:98:E4:71:59:04:C1:1F
Certificate issuer: /CN=94166b704843d3d9754095c83a91b493828200a2
Certificate serial: 09C6AD9C
Authority key identifier: 94:16:6B:70:48:43:D3:D9:75:40:95:C8:3A:91:B4:93:82:82:00:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lBZrcEhD09l1QJXIOpG0k4KCAKI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/43ff8f-cd54-4cf1-8aaf-4be18ef128b4/1/2K3uEFbuAPWWEe_gIpjkcVkEwR8.roa
Signing time: Mon 10 Jan 2022 12:31:37 +0000
ROA not before: Mon 10 Jan 2022 12:31:37 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 61317
IP address blocks: 91.222.43.0/24 maxlen: 24
171.22.147.0/24 maxlen: 24
171.22.146.0/24 maxlen: 24
31.43.174.0/23 maxlen: 24
185.235.71.0/24 maxlen: 24
193.138.240.0/22 maxlen: 24
185.149.15.0/24 maxlen: 24
185.149.14.0/24 maxlen: 24
185.149.12.0/24 maxlen: 24
89.46.96.0/22 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 164015516 (0x9c6ad9c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=94166b704843d3d9754095c83a91b493828200a2
Validity
Not Before: Jan 10 12:31:37 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d8adee1056ee00f59611efe02298e4715904c11f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:ee:78:5f:21:3d:20:8d:af:ce:a0:01:b5:3c:
f4:be:2c:41:47:e0:0e:45:3c:14:f7:92:5c:68:a8:
25:5c:06:f4:d7:2d:4f:12:cc:0a:1b:f3:ad:ea:26:
d6:5a:29:d9:4d:61:a8:07:b5:0d:1b:21:47:a0:d3:
f7:1b:53:9a:57:2a:87:c0:41:46:ca:ea:59:6d:31:
d8:22:54:12:f4:60:da:c3:b3:81:0f:15:fc:60:3c:
69:00:fd:0e:04:8d:dd:f2:99:ec:84:ee:32:27:93:
0a:3e:a5:e3:41:3c:ba:39:eb:c6:87:69:95:59:1c:
7f:3f:bc:09:73:fe:54:2b:35:c1:c2:32:29:10:6c:
be:64:4d:ce:b0:55:f0:8a:a5:c9:6d:ac:b0:3f:8c:
84:73:57:3d:95:36:fb:e8:96:01:e4:ef:14:37:58:
63:91:9a:4b:9a:9c:62:5e:c9:15:70:95:25:d5:f8:
46:84:34:1f:58:14:8a:a2:82:c9:14:29:15:cd:9a:
cf:5e:e3:06:9c:91:99:f3:37:8b:f0:9b:5b:72:9a:
56:4d:a6:8f:19:b6:4e:62:81:93:ba:b2:19:1a:5f:
29:e4:88:66:e7:f5:df:f0:7a:8d:e9:97:bb:68:47:
99:9d:9e:fb:5f:2f:4f:93:d0:38:b8:74:81:b3:26:
5b:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:AD:EE:10:56:EE:00:F5:96:11:EF:E0:22:98:E4:71:59:04:C1:1F
X509v3 Authority Key Identifier:
keyid:94:16:6B:70:48:43:D3:D9:75:40:95:C8:3A:91:B4:93:82:82:00:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lBZrcEhD09l1QJXIOpG0k4KCAKI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/43ff8f-cd54-4cf1-8aaf-4be18ef128b4/1/2K3uEFbuAPWWEe_gIpjkcVkEwR8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/43ff8f-cd54-4cf1-8aaf-4be18ef128b4/1/lBZrcEhD09l1QJXIOpG0k4KCAKI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.43.174.0/23
89.46.96.0/22
91.222.43.0/24
171.22.146.0/23
185.149.12.0/24
185.149.14.0/23
185.235.71.0/24
193.138.240.0/22
Signature Algorithm: sha256WithRSAEncryption
21:bd:3c:26:12:43:3c:af:42:8a:66:6d:c5:6e:8d:65:75:5c:
eb:0b:99:92:45:fc:7c:e6:8e:44:8d:d2:30:8f:e9:4d:91:83:
85:3b:b0:19:41:86:2e:7d:dc:25:31:d0:5a:ed:a9:8c:ca:a5:
09:19:cc:7e:9c:62:e1:d3:a8:cc:f5:2a:d9:39:1d:66:a7:9d:
13:62:b9:b4:d7:03:12:3f:a8:48:b3:fa:4b:ac:5a:6b:e3:f3:
e6:9d:22:52:de:f4:03:ce:4d:9c:b6:6b:7e:50:98:f4:fd:be:
9d:8f:28:78:46:88:7f:5d:4d:2f:83:2a:c4:91:31:81:77:f8:
82:98:24:ec:d0:71:9c:e4:14:57:69:74:7b:b5:d5:e3:0e:c3:
2d:02:ad:f0:41:6e:f0:87:bb:5d:f9:c6:e9:13:3f:b9:f1:0f:
4c:3c:02:8d:ba:10:b6:59:07:92:b8:fb:19:79:7c:86:91:e9:
d8:5c:f3:12:97:a5:8e:82:6a:27:1b:58:d2:2f:af:db:37:0e:
c6:11:7d:54:d4:5c:28:f7:b0:b5:d2:7e:cc:4b:4c:05:1b:89:
31:61:96:8c:1c:4d:01:df:5e:35:25:47:62:b9:fb:db:02:c0:
5b:0c:8b:36:7f:d1:a7:73:2e:21:e6:f8:38:11:08:19:87:3c:
b3:8b:4a:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:57:01 2023 by rpki-client on console-fra.rpki-client.org