Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/30883a-16d7-4212-9199-09d0aa28e551/1/V2pXJAfp4Ji3e8QuDip8KQWvsYU.roa
File: V2pXJAfp4Ji3e8QuDip8KQWvsYU.roa (raw, json)
Hash identifier: SKnK/unYIq8fhm+nlNw8EMDfZcuO3VCqkisT7dPVod8=
Subject key identifier: 57:6A:57:24:07:E9:E0:98:B7:7B:C4:2E:0E:2A:7C:29:05:AF:B1:85
Certificate issuer: /CN=798f7b1fd802b3dc6abd7a5cda786a6311e1d63d
Certificate serial: 01856C1CAEFFF7C04F95D183C5DF365FD900
Authority key identifier: 79:8F:7B:1F:D8:02:B3:DC:6A:BD:7A:5C:DA:78:6A:63:11:E1:D6:3D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eY97H9gCs9xqvXpc2nhqYxHh1j0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/30883a-16d7-4212-9199-09d0aa28e551/1/V2pXJAfp4Ji3e8QuDip8KQWvsYU.roa
Signing time: Sun 01 Jan 2023 06:54:57 +0000
ROA not before: Sun 01 Jan 2023 06:54:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 210000
IP address blocks: 31.41.34.0/24 maxlen: 24
176.119.223.0/24 maxlen: 24
194.156.188.0/24 maxlen: 24
2a12:3fc0::/44 maxlen: 44
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:1c:ae:ff:f7:c0:4f:95:d1:83:c5:df:36:5f:d9:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=798f7b1fd802b3dc6abd7a5cda786a6311e1d63d
Validity
Not Before: Jan 1 06:54:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=576a572407e9e098b77bc42e0e2a7c2905afb185
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:2c:05:ad:1c:19:83:b4:7b:ca:ba:5f:ee:b9:
a4:c5:ff:db:ed:ed:f1:d9:bd:fd:48:8c:e3:62:2f:
3b:ea:39:34:a5:35:71:e7:ac:b0:0f:01:44:7e:14:
39:0c:c3:2f:bf:6e:9c:18:82:26:99:1e:b4:b4:68:
02:47:96:c5:c4:0a:77:22:89:7c:69:38:70:23:95:
b5:1b:c4:0d:2c:f4:06:f5:45:d7:32:80:c1:47:3a:
02:7e:31:fb:0d:87:fb:9a:36:e4:f6:f1:0b:44:3f:
d4:08:27:20:99:11:d7:2b:80:41:9d:62:de:b3:8e:
b3:85:8e:38:78:6c:0c:57:f9:27:22:7c:07:e7:74:
0d:37:0b:9b:0b:12:8d:a2:0e:a2:6e:bc:41:26:81:
b7:91:68:64:3f:08:c9:3a:5c:6a:55:8f:df:ee:fe:
cf:19:16:33:29:10:d6:fa:69:97:51:32:1d:a0:65:
8f:45:8e:6f:3f:76:bd:71:78:1b:fb:7b:f3:82:93:
dd:6c:96:75:ba:d5:b8:ea:f9:43:bb:be:db:25:df:
4e:1b:67:56:89:90:f7:cd:67:42:74:4c:cb:b5:d1:
73:0a:4e:16:d0:76:89:33:01:1d:7d:66:28:d7:5e:
ea:ae:32:0d:32:33:27:47:31:dc:4b:a4:4f:6b:cf:
cf:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:6A:57:24:07:E9:E0:98:B7:7B:C4:2E:0E:2A:7C:29:05:AF:B1:85
X509v3 Authority Key Identifier:
keyid:79:8F:7B:1F:D8:02:B3:DC:6A:BD:7A:5C:DA:78:6A:63:11:E1:D6:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eY97H9gCs9xqvXpc2nhqYxHh1j0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/30883a-16d7-4212-9199-09d0aa28e551/1/V2pXJAfp4Ji3e8QuDip8KQWvsYU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/30883a-16d7-4212-9199-09d0aa28e551/1/eY97H9gCs9xqvXpc2nhqYxHh1j0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.41.34.0/24
176.119.223.0/24
194.156.188.0/24
IPv6:
2a12:3fc0::/44
Signature Algorithm: sha256WithRSAEncryption
12:be:45:bf:16:58:cb:5f:d6:4b:14:3c:78:6b:51:b2:6c:6b:
8f:f1:20:f9:9e:95:8d:c8:ea:9a:6e:12:16:f3:06:09:0b:b6:
a2:8b:e4:b6:0a:b0:9e:29:0e:d8:1b:a8:31:b8:f7:16:e2:1d:
bf:e9:5a:b7:54:4b:5f:d2:e4:fc:a3:86:41:c6:c1:da:ca:ba:
25:af:12:85:0b:aa:ff:1f:70:d2:40:04:7f:67:6d:00:54:87:
6b:eb:52:ec:01:27:f8:0a:0c:81:1b:86:93:8c:fe:b3:05:c7:
e2:09:eb:df:4e:22:c6:f1:c3:27:ed:46:e2:c4:72:c5:3d:8c:
4f:99:67:db:40:8f:23:08:46:e6:2e:73:1f:d6:fc:d4:99:14:
18:d0:76:ea:1f:d1:1c:27:04:3b:89:a6:95:81:39:17:ed:35:
9d:8f:b7:e8:8a:30:ee:13:66:2a:20:d2:07:09:61:bc:b7:fb:
9c:40:91:26:4a:ae:5c:63:67:01:26:26:f7:99:37:30:68:bf:
10:51:74:66:4c:3a:c2:59:b8:b2:72:2a:6f:36:c7:e7:c0:fd:
93:40:f2:2b:86:4d:11:1e:ab:bd:67:19:8f:90:99:a2:a8:a5:
f7:07:ee:00:7c:77:96:48:d1:59:9d:db:cb:a7:76:50:13:27:
9c:9a:97:f1
-----BEGIN CERTIFICATE-----
MIIFGjCCBAKgAwIBAgISAYVsHK7/98BPldGDxd82X9kAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc5OGY3YjFmZDgwMmIzZGM2YWJkN2E1Y2RhNzg2YTYzMTFl
MWQ2M2QwHhcNMjMwMTAxMDY1NDU3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1NzZhNTcyNDA3ZTllMDk4Yjc3YmM0MmUwZTJhN2MyOTA1YWZiMTg1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnCwFrRwZg7R7yrpf7rmkxf/b7e3x
2b39SIzjYi876jk0pTVx56ywDwFEfhQ5DMMvv26cGIImmR60tGgCR5bFxAp3Iol8
aThwI5W1G8QNLPQG9UXXMoDBRzoCfjH7DYf7mjbk9vELRD/UCCcgmRHXK4BBnWLe
s46zhY44eGwMV/knInwH53QNNwubCxKNog6ibrxBJoG3kWhkPwjJOlxqVY/f7v7P
GRYzKRDW+mmXUTIdoGWPRY5vP3a9cXgb+3vzgpPdbJZ1utW46vlDu77bJd9OG2dW
iZD3zWdCdEzLtdFzCk4W0HaJMwEdfWYo117qrjINMjMnRzHcS6RPa8/PHQIDAQAB
o4ICJjCCAiIwHQYDVR0OBBYEFFdqVyQH6eCYt3vELg4qfCkFr7GFMB8GA1UdIwQY
MBaAFHmPex/YArPcar16XNp4amMR4dY9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZVk5N0g5Z0NzOXhxdlhwYzJuaHFZeEhoMWowLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84My8zMDg4M2EtMTZkNy00MjEyLTkxOTkt
MDlkMGFhMjhlNTUxLzEvVjJwWEpBZnA0SmkzZThRdURpcDhLUVd2c1lVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84My8zMDg4M2EtMTZkNy00MjEyLTkxOTktMDlkMGFhMjhlNTUx
LzEvZVk5N0g5Z0NzOXhxdlhwYzJuaHFZeEhoMWowLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDwGCCsGAQUFBwEHAQH/BC0wKzAYBAIAATASAwQAHykiAwQA
sHffAwQAwpy8MA8EAgACMAkDBwQqEj/AAAAwDQYJKoZIhvcNAQELBQADggEBABK+
Rb8WWMtf1ksUPHhrUbJsa4/xIPmelY3I6ppuEhbzBgkLtqKL5LYKsJ4pDtgbqDG4
9xbiHb/pWrdUS1/S5PyjhkHGwdrKuiWvEoULqv8fcNJABH9nbQBUh2vrUuwBJ/gK
DIEbhpOM/rMFx+IJ699OIsbxwyftRuLEcsU9jE+ZZ9tAjyMIRuYucx/W/NSZFBjQ
duof0RwnBDuJppWBORftNZ2Pt+iKMO4TZiog0gcJYby3+5xAkSZKrlxjZwEmJveZ
NzBovxBRdGZMOsJZuLJyKm82x+fA/ZNA8iuGTREeq71nGY+QmaKopfcH7gB8d5ZI
0Vmd28undlATJ5yal/E=
-----END CERTIFICATE-----
Generated at Wed Feb 19 22:11:40 2025 by rpki-client