Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/43ff8f-cd54-4cf1-8aaf-4be18ef128b4/1/pP-_KdE4HuWLLbQ2h4N3LbpEkJg.roa
File: pP-_KdE4HuWLLbQ2h4N3LbpEkJg.roa (raw, json)
Hash identifier: fS3703ubVJIpIDL+UsP9OXVG8eQo0M6gtU8p3MPi/A4=
Subject key identifier: A4:FF:BF:29:D1:38:1E:E5:8B:2D:B4:36:87:83:77:2D:BA:44:90:98
Certificate issuer: /CN=94166b704843d3d9754095c83a91b493828200a2
Certificate serial: 01825427616DA480E1CB703CE2614E7F247B
Authority key identifier: 94:16:6B:70:48:43:D3:D9:75:40:95:C8:3A:91:B4:93:82:82:00:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lBZrcEhD09l1QJXIOpG0k4KCAKI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/43ff8f-cd54-4cf1-8aaf-4be18ef128b4/1/pP-_KdE4HuWLLbQ2h4N3LbpEkJg.roa
Signing time: Sun 31 Jul 2022 12:07:23 +0000
ROA not before: Sun 31 Jul 2022 12:07:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 61317
IP address blocks: 31.43.174.0/23 maxlen: 24
185.235.71.0/24 maxlen: 24
185.149.15.0/24 maxlen: 24
89.46.99.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:54:27:61:6d:a4:80:e1:cb:70:3c:e2:61:4e:7f:24:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=94166b704843d3d9754095c83a91b493828200a2
Validity
Not Before: Jul 31 12:07:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a4ffbf29d1381ee58b2db4368783772dba449098
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:cc:ee:71:16:58:c9:70:3e:5a:fb:65:7e:82:
eb:82:25:21:c0:07:6f:5c:d2:a6:26:8d:85:b1:2a:
cf:5b:2e:07:6d:82:f1:f9:87:ab:a1:e4:67:09:de:
10:e3:7e:8a:51:a1:03:ce:a0:a4:04:12:6b:2c:3c:
ec:94:39:89:8a:eb:65:d2:ea:c5:ef:33:a5:03:de:
10:35:bf:ba:8c:00:d4:74:78:2b:81:b2:93:e3:bd:
f0:a3:7f:4f:13:e6:62:48:da:16:ae:15:09:66:2a:
10:61:a6:11:27:2b:78:47:a2:09:d3:54:2a:ed:67:
1e:01:82:80:9d:32:0c:d9:71:9a:36:85:a1:b5:16:
82:30:f6:17:ae:70:53:31:c9:92:f4:5a:bf:4d:79:
0d:77:db:de:af:29:ec:4b:ef:e6:1c:d4:cb:ba:11:
57:2a:9e:66:81:ac:3f:4b:58:22:2a:e7:af:a7:ec:
14:20:42:f9:6c:2a:06:40:12:84:c4:ca:ae:ee:50:
cb:59:83:7c:7a:11:fa:96:ca:9d:98:c8:df:f1:c8:
88:73:c9:e6:bb:0b:1d:14:8f:08:90:df:f2:c6:ed:
f9:ea:91:68:bc:e4:27:70:20:7e:bf:01:2d:c9:d8:
fe:14:39:36:df:ab:37:93:64:d0:0e:15:d0:3e:6c:
69:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:FF:BF:29:D1:38:1E:E5:8B:2D:B4:36:87:83:77:2D:BA:44:90:98
X509v3 Authority Key Identifier:
keyid:94:16:6B:70:48:43:D3:D9:75:40:95:C8:3A:91:B4:93:82:82:00:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lBZrcEhD09l1QJXIOpG0k4KCAKI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/43ff8f-cd54-4cf1-8aaf-4be18ef128b4/1/pP-_KdE4HuWLLbQ2h4N3LbpEkJg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/43ff8f-cd54-4cf1-8aaf-4be18ef128b4/1/lBZrcEhD09l1QJXIOpG0k4KCAKI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.43.174.0/23
89.46.99.0/24
185.149.15.0/24
185.235.71.0/24
Signature Algorithm: sha256WithRSAEncryption
8f:0a:75:e1:b1:bf:7e:6c:2b:0c:a1:98:bc:6e:f7:f9:7d:d1:
66:9a:ec:80:fe:8f:2f:b0:74:30:22:b4:86:3c:ef:5e:3a:32:
2e:a5:6d:12:23:83:35:21:cb:c1:e6:82:0c:1a:7b:6a:1f:08:
fb:88:65:5d:1a:60:43:8c:af:20:c9:78:43:06:95:f0:b6:73:
80:ee:06:e9:64:48:e6:51:b7:56:bd:77:9a:2d:6d:59:cb:6c:
af:75:21:fc:dc:ac:5d:33:5e:89:4d:f8:ab:23:43:43:39:ee:
41:47:d2:a7:9e:38:19:d2:b8:cc:39:94:b5:9d:55:20:7d:88:
65:de:5b:df:40:56:ae:23:03:13:79:9f:10:44:c0:49:a9:71:
62:13:28:8f:6e:09:19:8a:de:57:2e:8b:30:d6:8b:c8:3e:6f:
d9:7f:69:54:75:99:be:03:36:b0:78:fb:1e:3c:b5:02:63:5a:
22:0d:b4:63:e4:7f:c7:6f:ec:64:ac:87:82:c7:a0:e9:5a:84:
14:bf:3f:ab:d1:78:cc:cd:e4:bf:a6:e9:d3:5e:ef:44:87:d4:
34:95:5a:32:6e:70:06:b1:ee:bc:ae:92:36:7b:df:d9:56:f0:
60:46:1e:05:d0:eb:04:ab:97:6f:4b:fb:97:e0:16:80:71:ff:
e2:db:f6:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:00:42 2023 by rpki-client on console-ams.rpki-client.org