Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/43ff8f-cd54-4cf1-8aaf-4be18ef128b4/1/4fdxSuhtwTlYrs99rfFu5qfzyyc.roa
File: 4fdxSuhtwTlYrs99rfFu5qfzyyc.roa (raw, json)
Hash identifier: gOodHdtQ7LUK1KPvHGCb9bV6oHvNORMDOT5qSNS4Law=
Subject key identifier: E1:F7:71:4A:E8:6D:C1:39:58:AE:CF:7D:AD:F1:6E:E6:A7:F3:CB:27
Certificate issuer: /CN=94166b704843d3d9754095c83a91b493828200a2
Certificate serial: 0186D50FECAC059FABDF13DB389455C1D756
Authority key identifier: 94:16:6B:70:48:43:D3:D9:75:40:95:C8:3A:91:B4:93:82:82:00:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lBZrcEhD09l1QJXIOpG0k4KCAKI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/43ff8f-cd54-4cf1-8aaf-4be18ef128b4/1/4fdxSuhtwTlYrs99rfFu5qfzyyc.roa
Signing time: Sun 12 Mar 2023 09:03:55 +0000
ROA not before: Sun 12 Mar 2023 09:03:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 61317
IP address blocks: 31.43.174.0/23 maxlen: 24
89.46.99.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:d5:0f:ec:ac:05:9f:ab:df:13:db:38:94:55:c1:d7:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=94166b704843d3d9754095c83a91b493828200a2
Validity
Not Before: Mar 12 09:03:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e1f7714ae86dc13958aecf7dadf16ee6a7f3cb27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:08:4d:ce:3e:5c:4a:24:95:42:26:2e:ca:64:
0a:ce:e7:ea:0f:f1:c1:f0:ff:f3:01:a2:95:c4:cb:
11:90:61:2a:b7:d7:fc:3e:ff:bb:97:6b:40:8e:5b:
a8:d9:fa:1f:19:6c:66:58:62:1d:ff:b9:8c:5f:1b:
53:b2:64:41:66:8f:6d:6c:2e:2f:37:47:a5:ec:c2:
bc:e2:1e:7f:66:4c:ec:ca:fe:13:fd:aa:f2:53:ba:
d3:f8:8d:a0:f3:60:fa:a7:a4:f8:c2:d0:54:1e:9e:
d8:98:35:eb:db:d5:4f:56:7d:a9:b5:79:ce:b5:f6:
c8:94:61:e2:04:65:a5:c1:e0:a6:d4:00:12:cc:37:
fb:5e:5d:51:8d:1b:c5:9b:b3:12:20:65:d7:ec:49:
bd:7a:28:39:e6:f2:14:74:75:84:5d:98:91:de:1e:
69:9f:78:87:42:66:3e:b2:c7:5f:7c:23:ac:39:53:
17:11:f8:7c:5c:77:6a:36:81:a1:9c:a1:a4:04:b3:
91:3f:84:0b:c4:7d:c0:8f:f8:4d:63:64:b3:1d:7b:
ee:1e:8c:7c:bd:c5:b5:46:8b:0c:c4:a4:79:89:8e:
93:bb:44:ce:f9:55:55:e0:ec:fc:af:a5:aa:c0:97:
bc:c8:85:1f:6c:8b:14:44:9f:1a:14:a3:d1:30:be:
52:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:F7:71:4A:E8:6D:C1:39:58:AE:CF:7D:AD:F1:6E:E6:A7:F3:CB:27
X509v3 Authority Key Identifier:
keyid:94:16:6B:70:48:43:D3:D9:75:40:95:C8:3A:91:B4:93:82:82:00:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lBZrcEhD09l1QJXIOpG0k4KCAKI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/43ff8f-cd54-4cf1-8aaf-4be18ef128b4/1/4fdxSuhtwTlYrs99rfFu5qfzyyc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/43ff8f-cd54-4cf1-8aaf-4be18ef128b4/1/lBZrcEhD09l1QJXIOpG0k4KCAKI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.43.174.0/23
89.46.99.0/24
Signature Algorithm: sha256WithRSAEncryption
3a:09:a5:b2:6b:88:bb:39:5f:1a:f5:3d:fe:cd:d7:a6:b5:bf:
23:01:0c:2b:89:d7:b9:78:50:b5:7e:54:74:04:85:1a:ad:25:
a3:5e:d7:83:8f:e3:4a:9f:c0:55:02:e0:87:b8:7d:50:46:ef:
b9:3a:1e:f6:d1:d3:dd:15:b7:24:ca:4c:fb:10:4f:38:05:af:
f6:13:7c:64:55:1c:e2:b9:c1:bb:55:45:eb:8f:28:b0:ee:a3:
cd:04:08:1d:03:a4:7e:a4:a6:c8:48:d4:8f:02:10:eb:00:03:
b5:b2:78:d5:82:a0:68:27:45:3b:58:c1:88:84:e7:04:11:f6:
a4:4e:50:f2:f9:39:b7:40:80:2d:0a:c9:2e:b2:1d:55:e7:3d:
fd:05:50:b1:e8:c7:d5:48:ed:0f:28:8c:21:05:95:6b:ec:63:
c4:d5:2a:ec:e8:98:df:46:8a:0d:42:75:5d:7c:e5:75:66:4b:
d2:b5:a3:6f:89:12:59:36:25:2d:bf:db:df:ac:77:25:f4:71:
65:32:21:0a:88:bf:76:14:2c:8e:b5:bf:50:08:dd:66:3d:f6:
3a:c8:f0:71:42:67:ea:ee:ed:63:a0:3c:52:27:31:10:8d:40:
81:88:54:9f:2e:b4:ac:53:36:f5:63:e0:25:d6:07:92:46:dd:
5f:b3:2b:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:57:01 2023 by rpki-client on console-fra.rpki-client.org