Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/715d15-2810-4827-8dbd-0bee06126b1a/1/58RbTruKT-YwKfW1HDSxVEgaNLE.roa
File: 58RbTruKT-YwKfW1HDSxVEgaNLE.roa (raw, json)
Hash identifier: aus+1Z72N8nW4KokuQ1dcwi/wQU55f3rCvxY2YO2910=
Subject key identifier: E7:C4:5B:4E:BB:8A:4F:E6:30:29:F5:B5:1C:34:B1:54:48:1A:34:B1
Certificate issuer: /CN=adf491488a7cd8448a420945871c0b99672dc66e
Certificate serial: 38F646FC
Authority key identifier: AD:F4:91:48:8A:7C:D8:44:8A:42:09:45:87:1C:0B:99:67:2D:C6:6E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rfSRSIp82ESKQglFhxwLmWctxm4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/715d15-2810-4827-8dbd-0bee06126b1a/1/58RbTruKT-YwKfW1HDSxVEgaNLE.roa
Signing time: Wed 25 May 2022 06:08:13 +0000
ROA not before: Wed 25 May 2022 06:08:13 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 34369
IP address blocks: 151.240.0.0/13 maxlen: 24
94.182.151.0/24 maxlen: 24
94.182.109.0/24 maxlen: 24
31.56.0.0/14 maxlen: 24
94.182.0.0/15 maxlen: 24
84.241.0.0/18 maxlen: 24
151.238.0.0/15 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 955664124 (0x38f646fc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=adf491488a7cd8448a420945871c0b99672dc66e
Validity
Not Before: May 25 06:08:13 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e7c45b4ebb8a4fe63029f5b51c34b154481a34b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:bb:61:40:cb:b4:ba:2d:9b:70:a2:e2:51:80:
62:6b:4b:ca:a4:a0:34:cb:d3:09:51:2b:00:72:ac:
5d:4e:fd:ac:a3:1a:39:a2:0c:5e:eb:fa:8b:07:2f:
09:0e:5d:40:f1:a3:df:c7:14:29:7b:ab:ea:79:e6:
6a:2c:09:3e:c1:be:38:5d:8e:77:e3:d7:b1:42:f7:
7d:66:8f:a4:a0:17:60:a4:19:fe:22:37:1f:e2:2c:
c4:95:5f:ea:78:86:11:1f:e1:92:85:58:03:7e:ce:
b4:24:56:12:43:f1:f0:d3:3b:2d:b9:9d:fa:fc:15:
a8:10:a9:e4:85:4d:f7:04:db:c2:dd:d4:52:05:b7:
b1:05:92:d4:2a:e2:6f:8c:c6:2c:3d:3d:37:d9:f9:
eb:2b:48:76:b2:32:8e:45:fd:be:39:58:08:8e:4f:
29:e0:d6:a7:89:25:de:be:bf:80:fa:cc:3a:6a:13:
61:ad:eb:12:5e:d3:40:d5:16:86:6b:61:57:ef:20:
c6:f0:b9:d3:cd:99:cf:ea:f8:f5:f3:e2:8a:34:15:
31:b5:93:59:5e:9c:b7:b3:8c:69:15:06:42:12:4a:
6c:91:53:67:5c:40:cc:12:74:a8:9a:a4:69:99:cf:
67:14:09:20:87:f5:60:28:3a:d2:d1:44:89:db:c0:
bb:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:C4:5B:4E:BB:8A:4F:E6:30:29:F5:B5:1C:34:B1:54:48:1A:34:B1
X509v3 Authority Key Identifier:
keyid:AD:F4:91:48:8A:7C:D8:44:8A:42:09:45:87:1C:0B:99:67:2D:C6:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rfSRSIp82ESKQglFhxwLmWctxm4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/715d15-2810-4827-8dbd-0bee06126b1a/1/58RbTruKT-YwKfW1HDSxVEgaNLE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/715d15-2810-4827-8dbd-0bee06126b1a/1/rfSRSIp82ESKQglFhxwLmWctxm4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.0.0/14
84.241.0.0/18
94.182.0.0/15
151.238.0.0-151.247.255.255
Signature Algorithm: sha256WithRSAEncryption
a4:74:63:a0:10:15:74:67:ea:a2:61:3d:9d:20:3d:ba:e4:f8:
37:58:bc:a6:ad:39:a1:70:eb:24:57:54:06:65:f1:8e:a8:d5:
df:fd:4e:22:a2:7c:46:27:f1:67:d0:5c:5f:39:40:0a:5b:38:
6c:0b:67:cd:5a:59:0f:f3:cb:bd:cb:60:96:a1:fc:29:5b:b2:
bd:6a:2b:9c:6f:18:29:79:64:86:9b:b1:33:ac:c8:7d:63:ea:
ce:7b:7e:e3:9b:8c:47:0c:05:9a:06:bc:1b:ab:ff:3c:85:7e:
ef:49:94:43:51:15:e7:68:13:37:e0:ec:8b:a9:bd:f2:a5:02:
c4:30:be:8f:e0:cd:8a:03:c5:ca:2a:40:07:85:c8:d8:07:71:
19:40:a0:b9:f3:79:4e:f9:d2:c0:49:b1:a0:03:38:e0:59:ca:
fa:37:ff:3d:97:f7:c5:cf:56:c9:53:c2:be:32:55:65:70:18:
d5:49:09:30:bc:54:88:bd:fd:e2:2d:51:59:db:1e:ec:9f:a7:
af:34:32:29:7e:4f:c1:52:59:a2:db:56:cd:59:80:7e:f8:82:
5a:4d:5c:24:14:1c:21:eb:10:18:56:28:ed:26:a6:c8:a0:ee:
d3:1f:42:4c:cc:6f:df:5b:0e:69:d1:81:cf:b7:bd:db:12:4d:
c5:d2:00:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:34:51 2024 by rpki-client on console-fra.rpki-client.org