Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/e5dfe2-a967-4712-bee6-32187e24889f/1/7c4I4WE2q3WyBbPPZVP7eskq6Ho.roa
File: 7c4I4WE2q3WyBbPPZVP7eskq6Ho.roa (raw, json)
Hash identifier: awrrxmDjhYi2URkupjW4KY3IFAYUPr4G+c6DrUsVxqI=
Subject key identifier: ED:CE:08:E1:61:36:AB:75:B2:05:B3:CF:65:53:FB:7A:C9:2A:E8:7A
Certificate issuer: /CN=e8df3e9cb69cca58ac702a2d5e9135c3bcab7200
Certificate serial: 070DBC42
Authority key identifier: E8:DF:3E:9C:B6:9C:CA:58:AC:70:2A:2D:5E:91:35:C3:BC:AB:72:00
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6N8-nLacyliscCotXpE1w7yrcgA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/e5dfe2-a967-4712-bee6-32187e24889f/1/7c4I4WE2q3WyBbPPZVP7eskq6Ho.roa
Signing time: Sat 01 Jan 2022 10:03:51 +0000
ROA not before: Sat 01 Jan 2022 10:03:51 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 56466
IP address blocks: 185.162.216.0/24 maxlen: 24
31.24.204.0/22 maxlen: 22
31.24.200.0/21 maxlen: 21
31.24.200.0/22 maxlen: 22
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 118340674 (0x70dbc42)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e8df3e9cb69cca58ac702a2d5e9135c3bcab7200
Validity
Not Before: Jan 1 10:03:51 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=edce08e16136ab75b205b3cf6553fb7ac92ae87a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:b6:2f:81:2d:e8:e2:42:05:2b:00:ee:0c:5e:
71:f5:03:47:a8:2b:1c:8b:12:25:5a:1f:ed:83:8c:
d8:31:d3:04:9e:de:22:94:43:b8:eb:79:ad:46:59:
af:6b:e5:a6:13:3f:a5:2c:86:88:48:79:a4:54:d7:
cc:ed:f7:5c:26:47:89:7f:b8:5c:a1:1e:6d:57:98:
77:c9:bf:83:42:14:ae:da:7b:1c:d5:7e:c6:94:5f:
3d:d6:2a:ea:75:e2:b7:67:49:ac:23:76:c2:74:1f:
5e:59:a1:83:c7:9a:d4:b2:86:99:40:9e:c7:d8:a1:
c8:6d:c1:3f:d4:1c:b2:2a:76:55:66:1c:ff:08:f1:
27:2d:ed:d2:71:c9:c9:c6:79:71:36:48:d0:03:d0:
5f:c7:f1:83:75:19:51:81:0d:bf:c1:23:01:d5:aa:
18:4d:c3:bc:72:ec:09:27:ec:ce:80:0b:7a:5a:06:
b0:0b:38:2f:e8:14:9e:1e:23:50:9d:b5:ff:d5:d3:
45:4f:b2:28:fe:0b:0b:64:44:b8:6a:50:25:2c:a1:
fd:5a:9d:5f:72:08:65:fe:94:19:ad:17:77:12:e7:
97:75:56:1c:c2:6a:2f:79:e7:d8:2b:ec:90:35:d6:
94:fc:8a:2e:1c:46:07:fe:5f:37:1e:04:10:5c:b5:
c0:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:CE:08:E1:61:36:AB:75:B2:05:B3:CF:65:53:FB:7A:C9:2A:E8:7A
X509v3 Authority Key Identifier:
keyid:E8:DF:3E:9C:B6:9C:CA:58:AC:70:2A:2D:5E:91:35:C3:BC:AB:72:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6N8-nLacyliscCotXpE1w7yrcgA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/e5dfe2-a967-4712-bee6-32187e24889f/1/7c4I4WE2q3WyBbPPZVP7eskq6Ho.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/e5dfe2-a967-4712-bee6-32187e24889f/1/6N8-nLacyliscCotXpE1w7yrcgA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.24.200.0/21
185.162.216.0/24
Signature Algorithm: sha256WithRSAEncryption
75:a7:0c:be:f5:b1:f6:02:79:25:f9:b0:e6:77:f5:83:db:37:
d4:72:52:91:21:2b:8c:b5:95:e6:23:e0:31:56:2e:ff:98:7e:
d1:51:6c:70:58:58:e1:0a:84:44:46:07:61:53:87:aa:49:dd:
9b:91:79:68:30:fe:97:f7:b3:9e:bd:d5:d9:1b:f1:76:8f:d5:
fa:5d:7d:75:aa:96:54:46:7c:bc:2d:1f:57:74:8a:57:89:14:
d3:fd:44:09:c5:9a:f4:09:07:cb:21:a3:72:d0:b0:2a:fb:d5:
38:6a:d1:4a:24:33:c2:77:31:65:be:7b:44:90:a7:16:3b:e6:
2b:06:73:95:27:6c:ed:10:85:37:9e:58:e9:36:16:a5:39:20:
3f:85:be:e8:0f:07:dc:44:d6:fa:b4:7a:0e:c7:5a:8b:30:82:
69:8d:48:b4:22:c3:1c:a2:b5:54:63:e9:f7:9d:7c:0e:84:d3:
90:03:e7:5c:b7:90:64:73:91:42:c5:97:c7:05:d9:28:13:cb:
73:d4:17:bf:24:b1:66:a8:3d:42:db:8c:f1:25:7d:54:5b:0f:
3f:46:0d:92:80:a3:22:46:ac:ec:26:4d:28:14:66:d9:9f:85:
c9:7c:10:86:e5:db:31:4e:f3:1a:9d:bd:7d:7a:d1:2d:6d:29:
8b:7a:b0:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:02:01 2023 by rpki-client on console-ams.rpki-client.org