Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/43ff8f-cd54-4cf1-8aaf-4be18ef128b4/1/VCfHoLgKNoE_e8gI_QBsnGatayU.roa
File: VCfHoLgKNoE_e8gI_QBsnGatayU.roa (raw, json)
Hash identifier: GUrIkGH7JNlDntkEKrq5wKsO2H8yBfri+qKtw4X8p3k=
Subject key identifier: 54:27:C7:A0:B8:0A:36:81:3F:7B:C8:08:FD:00:6C:9C:66:AD:6B:25
Certificate issuer: /CN=94166b704843d3d9754095c83a91b493828200a2
Certificate serial: 0A5D2DA0
Authority key identifier: 94:16:6B:70:48:43:D3:D9:75:40:95:C8:3A:91:B4:93:82:82:00:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lBZrcEhD09l1QJXIOpG0k4KCAKI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/43ff8f-cd54-4cf1-8aaf-4be18ef128b4/1/VCfHoLgKNoE_e8gI_QBsnGatayU.roa
Signing time: Mon 07 Mar 2022 17:46:05 +0000
ROA not before: Mon 07 Mar 2022 17:46:05 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 61317
IP address blocks: 171.22.147.0/24 maxlen: 24
171.22.146.0/24 maxlen: 24
31.43.174.0/23 maxlen: 24
185.235.71.0/24 maxlen: 24
185.149.15.0/24 maxlen: 24
185.149.14.0/24 maxlen: 24
185.149.12.0/24 maxlen: 24
89.46.99.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 173878688 (0xa5d2da0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=94166b704843d3d9754095c83a91b493828200a2
Validity
Not Before: Mar 7 17:46:05 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=5427c7a0b80a36813f7bc808fd006c9c66ad6b25
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:f0:aa:f5:51:8c:99:2e:8d:f5:21:05:a9:51:
b0:d7:b2:8b:8a:9e:f5:a2:db:8e:a2:f8:87:34:28:
90:b6:2e:ce:0b:6c:38:a4:a5:c2:71:82:99:9c:c5:
53:06:66:fe:1e:21:e2:15:d2:ae:a3:62:ab:78:75:
f9:dc:39:bc:41:85:bb:3f:74:ee:73:6c:02:36:9c:
f8:ba:31:15:28:73:2f:41:ce:f5:93:34:01:d6:23:
bd:ef:06:03:10:61:0e:b4:42:96:d5:55:96:2d:c9:
f6:6e:42:33:24:8c:c6:bc:2e:04:88:ba:46:e7:be:
29:a0:d9:a7:3d:9c:98:40:3f:3a:5f:0d:a8:af:99:
0c:2d:80:7d:1e:4e:cb:31:07:53:18:91:5f:10:bf:
d1:1c:02:f7:86:4b:17:5d:bd:79:03:15:ce:c8:3c:
0a:bc:8b:62:42:5c:3a:57:c7:74:bb:26:89:e7:00:
e4:2d:24:ca:6e:c5:d4:c5:d6:cd:65:5a:f4:04:f6:
f5:eb:dd:a4:f7:40:1d:75:bc:2b:d7:aa:9a:c6:73:
73:d1:2d:7c:8c:dc:83:53:89:b1:f1:82:bc:81:7c:
21:a1:d1:8e:fb:93:c8:36:d7:ca:73:5c:2e:41:c1:
17:be:d2:1c:d6:ff:5c:b3:87:0c:49:18:43:83:f3:
03:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:27:C7:A0:B8:0A:36:81:3F:7B:C8:08:FD:00:6C:9C:66:AD:6B:25
X509v3 Authority Key Identifier:
keyid:94:16:6B:70:48:43:D3:D9:75:40:95:C8:3A:91:B4:93:82:82:00:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lBZrcEhD09l1QJXIOpG0k4KCAKI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/43ff8f-cd54-4cf1-8aaf-4be18ef128b4/1/VCfHoLgKNoE_e8gI_QBsnGatayU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/43ff8f-cd54-4cf1-8aaf-4be18ef128b4/1/lBZrcEhD09l1QJXIOpG0k4KCAKI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.43.174.0/23
89.46.99.0/24
171.22.146.0/23
185.149.12.0/24
185.149.14.0/23
185.235.71.0/24
Signature Algorithm: sha256WithRSAEncryption
0e:6d:78:44:ce:c2:52:9f:b0:76:43:e5:33:a8:dd:99:81:5d:
b9:ab:5f:0f:49:17:d1:25:1b:96:25:ba:19:33:71:b1:84:84:
06:eb:9e:f6:49:d1:fa:82:f0:20:d7:c2:0c:ca:87:54:fe:ae:
d2:56:a7:e9:fe:b3:59:7d:5a:73:50:89:bd:56:c1:21:f4:2e:
67:e3:27:12:8b:f7:76:ac:14:a6:2a:bb:b6:63:b9:17:d7:38:
68:dc:0d:66:07:d8:b0:b9:3b:fd:46:2f:ae:10:d7:eb:b6:51:
ad:26:ce:44:5a:78:11:9a:16:f8:f8:6a:d1:06:8f:aa:09:0a:
5b:7c:55:80:a5:42:c2:d3:24:d7:c3:d8:47:29:c8:0d:12:eb:
91:a4:db:88:93:cf:c0:05:ac:21:96:de:64:cd:83:fa:65:fe:
74:3d:48:94:cb:56:5b:ab:24:11:ce:4a:d4:20:2e:79:2b:4c:
9a:ad:82:f7:ea:85:92:9f:28:09:91:6a:86:aa:84:15:ca:d8:
84:8b:df:c8:da:c2:0d:dc:70:a0:3a:bc:33:81:68:c9:72:4f:
20:99:3e:6c:34:83:52:34:db:ee:05:19:a9:74:38:35:f6:ac:
bd:1e:ff:ac:71:79:7a:43:90:bc:52:01:53:96:40:c5:98:a6:
6e:8d:26:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:00:42 2023 by rpki-client on console-ams.rpki-client.org