Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/4bba7c-a81f-40e1-8814-65daad632957/1/XLb6leUoviRfT8Q3BMkmdFUAgdY.roa
File: XLb6leUoviRfT8Q3BMkmdFUAgdY.roa (raw, json)
Hash identifier: bDkRrd4pQEqXXiaeXfcf98D9RjREVrtHVgl5rOUOhP0=
Subject key identifier: 5C:B6:FA:95:E5:28:BE:24:5F:4F:C4:37:04:C9:26:74:55:00:81:D6
Certificate issuer: /CN=942588b91da9cca81b49e603a988e2b1eabddc98
Certificate serial: 018DC6784ED2856073450D050CD6B61EBFC6
Authority key identifier: 94:25:88:B9:1D:A9:CC:A8:1B:49:E6:03:A9:88:E2:B1:EA:BD:DC:98
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lCWIuR2pzKgbSeYDqYjiseq93Jg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/4bba7c-a81f-40e1-8814-65daad632957/1/XLb6leUoviRfT8Q3BMkmdFUAgdY.roa
Signing time: Tue 20 Feb 2024 12:23:09 +0000
ROA not before: Tue 20 Feb 2024 12:23:09 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 15596
IP address blocks: 31.42.112.0/20 maxlen: 20
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:c6:78:4e:d2:85:60:73:45:0d:05:0c:d6:b6:1e:bf:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=942588b91da9cca81b49e603a988e2b1eabddc98
Validity
Not Before: Feb 20 12:23:09 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5cb6fa95e528be245f4fc43704c92674550081d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:8d:1a:61:27:91:1d:77:22:47:9b:bf:14:a3:
e1:33:ba:47:75:67:02:99:81:63:6b:30:5d:6c:0e:
5d:05:1c:b8:6b:0d:f4:46:43:48:c8:a2:8a:35:a3:
3c:18:30:aa:37:2b:f0:dd:8f:1a:a0:b1:33:bd:61:
92:4e:36:43:e4:87:62:ec:69:23:9e:af:d8:bf:0d:
1e:61:b6:b6:76:03:da:4a:7d:74:c3:6a:fc:28:bf:
fd:7c:0c:53:4c:0b:2d:26:f2:30:e6:3a:50:e6:4d:
b3:cf:34:70:ff:1d:d0:ce:ca:1d:1a:d8:6d:df:31:
94:a6:6f:7a:0e:7c:4b:ca:be:9b:ed:8c:46:aa:1a:
7b:41:4e:d7:14:bb:5e:21:60:8d:0c:0b:53:c0:e6:
a4:5b:68:29:bc:23:f6:88:9d:ac:9c:07:a6:41:9f:
30:4a:e5:41:7f:11:6e:04:bf:13:03:f3:b9:31:0d:
d7:56:60:81:69:60:ec:f7:b3:8e:cb:04:a8:55:2b:
bd:2f:57:b2:b6:e3:f7:01:f8:7b:13:68:4e:17:26:
f5:6d:fb:9a:04:c1:fd:26:ec:55:4b:e0:d2:ee:db:
ad:3a:e1:8b:5c:87:62:25:cc:c7:3f:1b:13:56:9e:
8a:70:0f:93:05:81:10:5e:05:9f:80:11:c6:80:76:
75:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:B6:FA:95:E5:28:BE:24:5F:4F:C4:37:04:C9:26:74:55:00:81:D6
X509v3 Authority Key Identifier:
keyid:94:25:88:B9:1D:A9:CC:A8:1B:49:E6:03:A9:88:E2:B1:EA:BD:DC:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lCWIuR2pzKgbSeYDqYjiseq93Jg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/4bba7c-a81f-40e1-8814-65daad632957/1/XLb6leUoviRfT8Q3BMkmdFUAgdY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/4bba7c-a81f-40e1-8814-65daad632957/1/lCWIuR2pzKgbSeYDqYjiseq93Jg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.42.112.0/20
Signature Algorithm: sha256WithRSAEncryption
8d:ee:99:53:9b:47:00:a1:4d:33:b3:c7:0c:cd:3c:8d:6f:ae:
a9:e0:10:03:3b:13:91:17:64:fc:e6:5e:5c:0d:e8:cb:2f:26:
70:50:da:c0:84:d9:66:2d:4a:a0:63:0f:1d:6f:ec:7d:0b:40:
95:3f:0e:2b:87:82:29:c3:d8:8a:ff:32:26:30:42:95:5b:b8:
a0:37:d7:00:96:16:64:d7:70:d9:64:65:7d:a2:3e:85:f0:fa:
07:f0:0f:00:d7:16:fd:f6:67:18:04:82:28:6e:13:9a:ab:60:
c9:8b:7e:a6:9d:b4:fd:a0:77:90:5d:56:47:59:0a:2c:04:1c:
e0:fb:5c:e3:11:8e:4b:42:33:c2:de:bb:7b:40:63:ba:33:ac:
97:c2:e3:e6:f9:0c:6a:ca:cd:7f:80:cc:ca:52:4d:ef:76:0a:
e6:93:72:a6:0f:3d:9a:5d:b1:89:36:94:00:89:cd:96:0a:90:
96:3a:f0:ba:06:12:83:88:9e:09:24:57:57:58:a9:94:5c:44:
1d:7a:77:92:75:1c:57:a5:bf:c2:44:ea:88:a4:25:38:13:87:
c8:80:b0:08:1c:d3:22:44:0b:b0:83:4f:e4:74:b3:15:92:5c:
77:bd:f0:e6:7e:85:e5:7f:32:1b:4c:99:2a:d9:6d:fb:9f:71:
d6:50:61:28
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAY3GeE7ShWBzRQ0FDNa2Hr/GMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk0MjU4OGI5MWRhOWNjYTgxYjQ5ZTYwM2E5ODhlMmIxZWFi
ZGRjOTgwHhcNMjQwMjIwMTIyMzA5WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1Y2I2ZmE5NWU1MjhiZTI0NWY0ZmM0MzcwNGM5MjY3NDU1MDA4MWQ2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsY0aYSeRHXciR5u/FKPhM7pHdWcC
mYFjazBdbA5dBRy4aw30RkNIyKKKNaM8GDCqNyvw3Y8aoLEzvWGSTjZD5Idi7Gkj
nq/Yvw0eYba2dgPaSn10w2r8KL/9fAxTTAstJvIw5jpQ5k2zzzRw/x3QzsodGtht
3zGUpm96DnxLyr6b7YxGqhp7QU7XFLteIWCNDAtTwOakW2gpvCP2iJ2snAemQZ8w
SuVBfxFuBL8TA/O5MQ3XVmCBaWDs97OOywSoVSu9L1eytuP3Afh7E2hOFyb1bfua
BMH9JuxVS+DS7tutOuGLXIdiJczHPxsTVp6KcA+TBYEQXgWfgBHGgHZ18QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFFy2+pXlKL4kX0/ENwTJJnRVAIHWMB8GA1UdIwQY
MBaAFJQliLkdqcyoG0nmA6mI4rHqvdyYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbENXSXVSMnB6S2diU2VZRHFZamlzZXE5M0pnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZC80YmJhN2MtYTgxZi00MGUxLTg4MTQt
NjVkYWFkNjMyOTU3LzEvWExiNmxlVW92aVJmVDhRM0JNa21kRlVBZ2RZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83ZC80YmJhN2MtYTgxZi00MGUxLTg4MTQtNjVkYWFkNjMyOTU3
LzEvbENXSXVSMnB6S2diU2VZRHFZamlzZXE5M0pnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEHypwMA0G
CSqGSIb3DQEBCwUAA4IBAQCN7plTm0cAoU0zs8cMzTyNb66p4BADOxORF2T85l5c
DejLLyZwUNrAhNlmLUqgYw8db+x9C0CVPw4rh4Ipw9iK/zImMEKVW7igN9cAlhZk
13DZZGV9oj6F8PoH8A8A1xb99mcYBIIobhOaq2DJi36mnbT9oHeQXVZHWQosBBzg
+1zjEY5LQjPC3rt7QGO6M6yXwuPm+Qxqys1/gMzKUk3vdgrmk3KmDz2aXbGJNpQA
ic2WCpCWOvC6BhKDiJ4JJFdXWKmUXEQdeneSdRxXpb/CROqIpCU4E4fIgLAIHNMi
RAuwg0/kdLMVklx3vfDmfoXlfzIbTJkq2W37n3HWUGEo
-----END CERTIFICATE-----
Generated at Fri Apr 18 23:39:38 2025 by rpki-client