Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/43ff8f-cd54-4cf1-8aaf-4be18ef128b4/1/vapEkSp2wFaNkmLDoQ-JMjI7fIk.roa
File: vapEkSp2wFaNkmLDoQ-JMjI7fIk.roa (raw, json)
Hash identifier: Tj6r8DJJfvR/E1gU6AqB3tT8+vkRp4uynJSS0y3Mhdw=
Subject key identifier: BD:AA:44:91:2A:76:C0:56:8D:92:62:C3:A1:0F:89:32:32:3B:7C:89
Certificate issuer: /CN=94166b704843d3d9754095c83a91b493828200a2
Certificate serial: 018894633FAEAB77495FD0BFD93D38970F16
Authority key identifier: 94:16:6B:70:48:43:D3:D9:75:40:95:C8:3A:91:B4:93:82:82:00:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lBZrcEhD09l1QJXIOpG0k4KCAKI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/43ff8f-cd54-4cf1-8aaf-4be18ef128b4/1/vapEkSp2wFaNkmLDoQ-JMjI7fIk.roa
Signing time: Wed 07 Jun 2023 05:45:12 +0000
ROA not before: Wed 07 Jun 2023 05:45:12 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 61317
IP address blocks: 31.43.174.0/23 maxlen: 24
91.103.124.0/22 maxlen: 24
89.46.99.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:94:63:3f:ae:ab:77:49:5f:d0:bf:d9:3d:38:97:0f:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=94166b704843d3d9754095c83a91b493828200a2
Validity
Not Before: Jun 7 05:45:12 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=bdaa44912a76c0568d9262c3a10f8932323b7c89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:15:cf:62:73:bf:44:4b:b9:eb:cc:d1:91:63:
49:8a:cd:9f:a6:be:a7:8f:73:49:1a:86:94:4c:fb:
85:26:90:1f:95:3a:89:ef:d5:2a:fc:e0:b0:58:cb:
65:5e:f5:1f:26:81:38:88:54:00:07:a7:66:5e:21:
02:1f:27:27:61:09:9f:56:de:50:84:79:8b:9c:98:
1d:97:01:2b:af:18:a9:d4:4a:22:d2:c4:70:ee:3e:
46:00:e5:cb:eb:ca:b6:65:a1:1e:91:c6:41:c3:86:
c2:a8:5b:d4:c1:bf:49:e3:48:c5:33:4b:98:62:89:
5b:e5:72:4c:12:70:3f:4f:84:ef:20:46:40:76:26:
49:bf:56:96:02:45:33:27:25:6a:2d:46:fb:09:e5:
f9:94:1b:57:90:ef:04:b6:0c:c7:e7:ae:90:90:62:
7e:fa:89:74:13:5b:97:bd:24:7b:fa:f7:66:42:51:
6b:7f:fa:7b:cf:35:0e:9c:19:c6:40:5a:a0:cb:08:
02:c7:f8:d4:34:fc:86:ef:15:46:e0:f7:e8:3e:32:
51:5e:7e:d0:3c:64:4e:5a:1c:07:f9:a1:f3:ed:59:
72:fd:6b:9b:06:a5:5b:75:09:7d:41:19:c2:67:55:
1f:c2:b7:7d:e9:5e:3d:5f:f9:1f:a6:f6:f6:24:22:
67:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:AA:44:91:2A:76:C0:56:8D:92:62:C3:A1:0F:89:32:32:3B:7C:89
X509v3 Authority Key Identifier:
keyid:94:16:6B:70:48:43:D3:D9:75:40:95:C8:3A:91:B4:93:82:82:00:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lBZrcEhD09l1QJXIOpG0k4KCAKI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/43ff8f-cd54-4cf1-8aaf-4be18ef128b4/1/vapEkSp2wFaNkmLDoQ-JMjI7fIk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/43ff8f-cd54-4cf1-8aaf-4be18ef128b4/1/lBZrcEhD09l1QJXIOpG0k4KCAKI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.43.174.0/23
89.46.99.0/24
91.103.124.0/22
Signature Algorithm: sha256WithRSAEncryption
58:59:6f:cc:77:46:7f:4e:c2:fb:68:dd:0a:1f:39:d9:4f:9e:
2f:ac:3d:54:73:fe:96:4f:32:ac:05:66:ba:e6:4f:77:dd:d6:
7e:e1:4c:90:0c:df:0d:c1:5b:a6:0f:ab:3a:bd:e1:32:88:71:
82:50:e8:09:b1:87:9e:3b:67:ea:70:df:d5:65:3b:c2:a4:d1:
60:e5:2a:ea:83:cc:27:bd:6d:64:fb:f7:61:0e:32:f6:22:03:
cb:c6:ea:51:13:ab:f5:3f:86:59:9e:f2:3c:32:e5:3c:4f:e7:
39:c6:d3:aa:20:f1:09:73:fa:d9:b4:f9:ea:36:5b:2d:ab:a6:
00:9b:b2:66:b7:fe:12:83:93:84:25:a4:8e:30:92:7f:fe:f8:
aa:2b:c7:1f:91:e9:14:1b:27:4e:c2:57:a0:f9:c3:b1:3c:0d:
83:7c:0f:35:ce:73:af:b8:97:ef:c1:a7:1b:42:df:e0:dc:4c:
da:ac:ab:c9:4c:27:be:55:8f:66:d3:df:bb:7a:76:9f:a6:9c:
1d:fa:c0:8f:48:74:6a:b5:0b:37:3c:ba:c1:8b:f3:8a:f8:5a:
1b:da:06:96:f5:5e:8f:9f:54:d6:64:e8:d8:82:c0:9f:2f:f6:
ee:21:16:e5:ef:ce:4b:44:8c:12:59:5d:5b:64:94:a6:01:9b:
1c:42:6c:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:57:01 2023 by rpki-client on console-fra.rpki-client.org