Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/rySPn951CMz-0yOE4rOXqb7egWM.roa
File: rySPn951CMz-0yOE4rOXqb7egWM.roa (raw, json)
Hash identifier: kohaiOCxDUhP/ORcHFGspCTQvorDbCwPy66MbJb5zj0=
Subject key identifier: AF:24:8F:9F:DE:75:08:CC:FE:D3:23:84:E2:B3:97:A9:BE:DE:81:63
Certificate issuer: /CN=f8e62634e1bd5133a9de4512ae98cad1b2219b59
Certificate serial: 018EEC291666B10773A050EE349400FA20A2
Authority key identifier: F8:E6:26:34:E1:BD:51:33:A9:DE:45:12:AE:98:CA:D1:B2:21:9B:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/rySPn951CMz-0yOE4rOXqb7egWM.roa
Signing time: Wed 17 Apr 2024 13:04:59 +0000
ROA not before: Wed 17 Apr 2024 13:04:59 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 12325
IP address blocks: 31.14.10.0/24 maxlen: 24
77.81.101.0/24 maxlen: 24
89.37.185.0/24 maxlen: 24
89.45.44.0/23 maxlen: 24
89.46.128.0/22 maxlen: 24
89.46.232.0/21 maxlen: 24
185.18.224.0/23 maxlen: 24
188.215.40.0/22 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:ec:29:16:66:b1:07:73:a0:50:ee:34:94:00:fa:20:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8e62634e1bd5133a9de4512ae98cad1b2219b59
Validity
Not Before: Apr 17 13:04:59 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=af248f9fde7508ccfed32384e2b397a9bede8163
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:49:1a:94:c7:b5:01:61:d9:8b:41:9f:fd:8d:
6d:e0:a2:3d:9e:2d:dd:d5:53:bc:e9:b6:f1:f0:0e:
64:52:61:2f:97:fe:7d:8e:b8:4c:8a:ce:23:38:e4:
06:18:ab:98:e7:e1:fd:4a:dc:0f:e9:45:db:04:48:
8d:14:44:8b:f5:81:12:22:31:36:d1:f1:a1:f6:1f:
de:d9:e1:ef:63:86:6c:e8:df:81:4e:95:59:40:7a:
ac:62:27:9b:db:a5:ff:20:64:44:31:4c:61:27:5f:
ed:75:0e:df:37:09:9f:b0:6b:f2:98:20:89:39:c1:
e4:2a:0a:fb:18:39:65:17:ff:79:41:e2:ce:0e:67:
9c:7d:41:16:2a:7e:bf:10:b3:fd:d0:b2:07:95:be:
b9:2a:d2:88:ed:72:8f:9b:60:6b:a7:7e:93:f5:ad:
90:b8:ae:2c:84:6f:fb:fc:a9:12:46:eb:1d:9e:f6:
0b:bd:05:10:4c:06:37:ad:30:8d:f0:79:51:da:cb:
75:23:d0:39:10:2b:b3:cb:20:b7:bf:f5:5a:a6:19:
ed:7e:2b:b0:ce:cb:4e:8d:a3:b3:2c:f1:0f:78:49:
9c:dd:43:9d:72:dd:7f:52:c8:89:02:e0:d2:54:6d:
d0:b6:35:54:a0:63:94:0f:5e:c4:a5:96:fb:87:85:
bb:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:24:8F:9F:DE:75:08:CC:FE:D3:23:84:E2:B3:97:A9:BE:DE:81:63
X509v3 Authority Key Identifier:
keyid:F8:E6:26:34:E1:BD:51:33:A9:DE:45:12:AE:98:CA:D1:B2:21:9B:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/rySPn951CMz-0yOE4rOXqb7egWM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.14.10.0/24
77.81.101.0/24
89.37.185.0/24
89.45.44.0/23
89.46.128.0/22
89.46.232.0/21
185.18.224.0/23
188.215.40.0/22
Signature Algorithm: sha256WithRSAEncryption
ab:e1:bb:04:c1:79:c8:81:d7:f3:6d:0e:9b:49:2f:6b:2b:3c:
02:ba:83:5c:a2:b5:2c:32:13:ed:5d:bb:47:de:4d:c2:bd:68:
4d:aa:59:47:2a:1c:dd:81:dc:01:c5:65:68:02:f3:f9:e4:15:
a6:75:41:6e:ef:90:81:9a:ff:98:0c:d8:08:11:3a:7e:fb:3b:
d2:af:1e:5c:74:ea:cb:10:52:96:74:f6:e4:cc:0f:1a:9f:86:
67:a7:17:d2:6c:a5:d1:67:83:16:45:d8:ef:9f:92:5f:d9:88:
48:e4:54:82:81:2c:ad:ca:4c:48:07:90:e3:87:5a:b4:a1:d0:
78:3d:e9:30:c9:4a:b9:84:50:3b:1d:10:9a:9f:bd:0e:52:3a:
4c:50:50:88:bf:dc:f0:c7:0c:f8:d2:ed:a6:cc:6f:f6:79:2d:
ad:5f:ef:c9:ec:b9:33:1c:46:f5:11:bb:ac:12:ad:ea:d7:81:
23:ce:11:88:7c:71:48:79:49:64:44:36:46:a3:6f:df:e7:b5:
85:88:44:0d:34:98:2b:7e:98:50:4d:3b:1b:d9:d0:db:c2:a0:
68:0c:07:ca:f4:45:43:58:83:24:6f:7b:fe:91:c4:63:c4:5a:
c4:db:ba:bd:ae:93:9b:e3:f5:66:7e:2f:da:7e:37:29:17:eb:
46:93:53:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:41:17 2025 by rpki-client