Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/43ff8f-cd54-4cf1-8aaf-4be18ef128b4/1/iQ5_Yn0G4WKTCUayOPSFaRiecgM.roa
File: iQ5_Yn0G4WKTCUayOPSFaRiecgM.roa (raw, json)
Hash identifier: p+ub+fm0TTo0JKvcXdnU0adIexL1OAbHae70O5iYZRk=
Subject key identifier: 89:0E:7F:62:7D:06:E1:62:93:09:46:B2:38:F4:85:69:18:9E:72:03
Certificate issuer: /CN=94166b704843d3d9754095c83a91b493828200a2
Certificate serial: 09FD1A60
Authority key identifier: 94:16:6B:70:48:43:D3:D9:75:40:95:C8:3A:91:B4:93:82:82:00:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lBZrcEhD09l1QJXIOpG0k4KCAKI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/43ff8f-cd54-4cf1-8aaf-4be18ef128b4/1/iQ5_Yn0G4WKTCUayOPSFaRiecgM.roa
Signing time: Mon 07 Feb 2022 14:26:19 +0000
ROA not before: Mon 07 Feb 2022 14:26:19 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 61317
IP address blocks: 91.222.43.0/24 maxlen: 24
171.22.147.0/24 maxlen: 24
171.22.146.0/24 maxlen: 24
31.43.174.0/23 maxlen: 24
185.235.71.0/24 maxlen: 24
185.149.15.0/24 maxlen: 24
185.149.14.0/24 maxlen: 24
185.149.12.0/24 maxlen: 24
89.46.96.0/22 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 167582304 (0x9fd1a60)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=94166b704843d3d9754095c83a91b493828200a2
Validity
Not Before: Feb 7 14:26:19 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=890e7f627d06e162930946b238f48569189e7203
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:c6:00:3f:8a:c9:53:0a:78:9f:e7:8b:07:83:
8a:a7:ba:38:f4:31:f5:16:1c:99:61:06:3b:08:18:
bb:ce:a2:b2:16:67:82:e9:c8:0d:a8:22:24:e9:d2:
f7:d6:10:ee:28:c6:e2:0c:08:c8:41:f5:c6:d7:5c:
18:7e:8c:e7:d4:8a:67:32:27:89:fc:4e:63:47:7b:
b6:ca:0f:35:55:5f:28:6b:51:6d:d7:43:f9:b2:a5:
76:b0:f1:ca:7c:db:8e:6e:7e:90:7b:f3:62:bc:4f:
69:4f:a5:d2:c8:42:25:3a:bd:88:24:66:43:0b:8e:
7b:60:f0:33:b4:a0:a8:02:3d:03:28:05:de:0a:2c:
8c:ab:91:81:bc:16:f9:21:1b:46:7e:da:52:12:63:
7e:fc:56:5d:d0:dd:9e:68:69:81:17:04:29:66:04:
af:8a:7c:06:e0:a7:b6:66:14:94:87:35:e7:68:47:
c1:02:ee:9d:1c:28:9c:12:4f:af:ea:a5:8d:0a:a4:
37:09:12:2e:aa:34:7f:f4:da:d9:fb:06:8a:3a:e4:
0a:ba:60:ad:90:f7:3e:2d:b6:77:97:3e:40:aa:8c:
17:dc:3b:28:50:ee:e0:30:62:37:5b:a6:cd:bf:76:
b3:17:a5:ee:66:b3:f7:24:83:72:a1:a4:e9:4e:16:
b3:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:0E:7F:62:7D:06:E1:62:93:09:46:B2:38:F4:85:69:18:9E:72:03
X509v3 Authority Key Identifier:
keyid:94:16:6B:70:48:43:D3:D9:75:40:95:C8:3A:91:B4:93:82:82:00:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lBZrcEhD09l1QJXIOpG0k4KCAKI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/43ff8f-cd54-4cf1-8aaf-4be18ef128b4/1/iQ5_Yn0G4WKTCUayOPSFaRiecgM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/43ff8f-cd54-4cf1-8aaf-4be18ef128b4/1/lBZrcEhD09l1QJXIOpG0k4KCAKI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.43.174.0/23
89.46.96.0/22
91.222.43.0/24
171.22.146.0/23
185.149.12.0/24
185.149.14.0/23
185.235.71.0/24
Signature Algorithm: sha256WithRSAEncryption
02:b5:42:b5:f8:22:8b:2d:3a:14:db:ce:fc:ae:2b:11:e9:e0:
13:23:dd:f7:cf:49:ac:b4:f6:6b:1f:e9:6f:ac:f3:39:0b:ca:
b5:d3:15:ae:4e:3c:75:e8:6a:00:54:b0:89:54:49:7b:ed:a4:
1d:20:73:0a:ae:a3:67:90:8b:2e:7d:0b:ad:26:13:93:c0:74:
1d:18:22:d9:67:f8:dc:8c:ff:ab:aa:9b:8b:30:a6:c1:56:ce:
f3:27:34:b1:15:62:5a:aa:00:6a:e5:dd:82:5d:d3:d1:6a:37:
05:e1:90:39:40:5f:6b:75:37:bb:08:12:3a:e2:64:a5:44:a0:
4d:e9:6e:d2:5b:38:b0:40:75:ab:b7:b7:c0:79:bb:f9:70:c1:
4f:6f:d4:68:ca:88:38:d8:12:01:8a:b3:60:6a:fc:8c:51:05:
23:78:4d:e1:2a:23:6f:46:33:73:b7:28:7e:c8:f6:f0:b6:ca:
6d:d1:66:c6:dd:82:2c:c4:c2:7d:b9:68:3a:54:0a:b2:14:f2:
f9:71:63:f2:a5:14:c5:ef:b0:bf:48:86:c7:88:cf:a0:9e:4e:
2e:54:b2:6c:c3:91:39:76:30:6b:d4:b4:b7:e7:d3:f3:00:6f:
0a:ea:e4:4e:1e:d2:1c:f5:6b:b5:00:ac:e9:66:c7:9d:92:eb:
c2:0d:05:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:57:01 2023 by rpki-client on console-fra.rpki-client.org