Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/715d15-2810-4827-8dbd-0bee06126b1a/1/UhzGClAVaJudoP4tFFll_sAAzWQ.roa
File: UhzGClAVaJudoP4tFFll_sAAzWQ.roa (raw, json)
Hash identifier: VCCwYvXXxaIz70ow41Kioq39/48fd6YSQwMaEgaAOXo=
Subject key identifier: 52:1C:C6:0A:50:15:68:9B:9D:A0:FE:2D:14:59:65:FE:C0:00:CD:64
Certificate issuer: /CN=adf491488a7cd8448a420945871c0b99672dc66e
Certificate serial: 018DB799BADD235190DE7EFC064DBC182B0D
Authority key identifier: AD:F4:91:48:8A:7C:D8:44:8A:42:09:45:87:1C:0B:99:67:2D:C6:6E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rfSRSIp82ESKQglFhxwLmWctxm4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/715d15-2810-4827-8dbd-0bee06126b1a/1/UhzGClAVaJudoP4tFFll_sAAzWQ.roa
Signing time: Sat 17 Feb 2024 15:05:21 +0000
ROA not before: Sat 17 Feb 2024 15:05:21 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 44559
IP address blocks: 31.56.0.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:b7:99:ba:dd:23:51:90:de:7e:fc:06:4d:bc:18:2b:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=adf491488a7cd8448a420945871c0b99672dc66e
Validity
Not Before: Feb 17 15:05:21 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=521cc60a5015689b9da0fe2d145965fec000cd64
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:d2:d4:ae:9b:77:f2:fe:3a:26:af:04:af:b5:
77:cd:c3:91:f2:45:c0:57:83:14:34:1b:0f:6c:50:
4d:8f:0f:9e:4e:e3:02:0b:16:44:82:43:4a:86:a1:
6d:21:1a:1b:dd:2d:6f:90:0d:a3:71:47:00:71:f3:
38:b3:bc:22:d0:65:35:f5:72:ba:aa:4d:0d:a4:ab:
9e:b9:20:2a:9f:a2:a5:d5:46:2f:3b:ae:15:c9:a1:
dc:e6:33:01:13:80:2a:a6:29:b6:3f:b3:43:63:d3:
be:25:6e:c3:f6:c3:ff:01:b8:9e:49:43:ff:3a:61:
9a:2a:46:51:c2:c6:37:96:ae:dd:69:4a:ce:46:cf:
bc:c5:90:79:17:82:11:90:a0:c7:dd:f9:f4:79:1c:
a7:29:ca:bc:83:54:2a:ff:56:bb:e3:a1:c0:06:cd:
17:8d:3a:6b:54:05:f2:14:25:6d:55:95:8a:f4:b4:
f1:e3:67:6c:8e:32:5b:01:0b:03:08:8d:6f:3c:1f:
39:fc:6c:2f:0c:38:59:b9:a1:e4:db:cd:4c:c3:e6:
74:09:68:d9:b6:42:63:3c:c1:8b:1b:19:ff:45:94:
8b:2b:a4:9b:eb:84:c5:f9:2f:bb:19:45:f9:e5:07:
b4:19:30:4b:c9:08:24:72:15:c7:8f:35:c3:92:f8:
ae:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:1C:C6:0A:50:15:68:9B:9D:A0:FE:2D:14:59:65:FE:C0:00:CD:64
X509v3 Authority Key Identifier:
keyid:AD:F4:91:48:8A:7C:D8:44:8A:42:09:45:87:1C:0B:99:67:2D:C6:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rfSRSIp82ESKQglFhxwLmWctxm4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/715d15-2810-4827-8dbd-0bee06126b1a/1/UhzGClAVaJudoP4tFFll_sAAzWQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/715d15-2810-4827-8dbd-0bee06126b1a/1/rfSRSIp82ESKQglFhxwLmWctxm4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.0.0/24
Signature Algorithm: sha256WithRSAEncryption
6c:94:98:02:a6:73:df:91:8c:4b:c5:9c:dd:5a:3c:66:1d:3d:
12:05:20:23:c7:74:36:fd:1b:0b:c0:90:20:b3:d5:17:01:9b:
56:e6:4b:75:3b:81:c2:35:8a:a9:e0:29:9b:16:91:51:26:03:
4e:62:35:25:52:70:d3:49:a1:ab:ae:47:44:a1:0d:bc:ab:3a:
71:c8:46:8e:36:42:28:1c:fc:7d:f2:65:e5:cc:5d:30:7b:a0:
79:bc:a8:03:c7:64:01:03:81:51:97:73:d7:b8:8e:bb:65:70:
e5:33:53:b5:8d:57:90:1a:f4:bb:81:fb:e9:1e:00:78:94:e8:
7d:d3:c1:03:96:8a:57:6a:1a:5f:02:2e:3b:d4:f1:05:2e:d7:
d3:d9:46:96:25:fa:59:aa:bb:86:39:bc:d8:93:37:7b:f5:df:
ea:0a:70:7c:71:90:b2:c2:1a:09:17:40:ee:fd:6b:32:1f:88:
66:04:c5:4e:8f:92:71:a9:e2:d0:9d:10:9e:6a:8a:b8:c5:a2:
42:69:44:ab:48:ef:26:66:36:c2:59:7a:ab:6c:24:9e:49:b6:
1e:ba:15:14:fb:c4:b8:cb:12:47:f5:cd:24:f7:b7:cd:13:ea:
b4:75:1f:5f:6c:ee:9e:84:05:e1:98:a6:d7:50:4c:d7:cb:d1:
f8:7e:60:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:34:51 2024 by rpki-client on console-fra.rpki-client.org