Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/30883a-16d7-4212-9199-09d0aa28e551/1/tv_AfcLLHyph_L3hlOqJICJ1cEY.roa
File: tv_AfcLLHyph_L3hlOqJICJ1cEY.roa (raw, json)
Hash identifier: PVIk9Kg59xHCu6GcKkBZNdfPiRv1PgHMZ5eVMQrntyQ=
Subject key identifier: B6:FF:C0:7D:C2:CB:1F:2A:61:FC:BD:E1:94:EA:89:20:22:75:70:46
Certificate issuer: /CN=798f7b1fd802b3dc6abd7a5cda786a6311e1d63d
Certificate serial: 018402EFA9E4417CB26B0D7822DB337373E6
Authority key identifier: 79:8F:7B:1F:D8:02:B3:DC:6A:BD:7A:5C:DA:78:6A:63:11:E1:D6:3D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eY97H9gCs9xqvXpc2nhqYxHh1j0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/30883a-16d7-4212-9199-09d0aa28e551/1/tv_AfcLLHyph_L3hlOqJICJ1cEY.roa
Signing time: Sun 23 Oct 2022 03:42:51 +0000
ROA not before: Sun 23 Oct 2022 03:42:51 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 210000
IP address blocks: 31.41.34.0/24 maxlen: 24
176.119.223.0/24 maxlen: 24
194.156.188.0/24 maxlen: 24
2a12:3fc0::/44 maxlen: 44
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:02:ef:a9:e4:41:7c:b2:6b:0d:78:22:db:33:73:73:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=798f7b1fd802b3dc6abd7a5cda786a6311e1d63d
Validity
Not Before: Oct 23 03:42:51 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b6ffc07dc2cb1f2a61fcbde194ea892022757046
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:0d:9a:76:96:e5:38:27:40:5a:62:b4:d1:de:
e2:4d:02:bb:fb:f7:5a:64:26:66:c4:bb:22:78:d6:
3b:24:30:f8:61:57:fc:7d:b3:84:19:19:3f:12:e9:
f3:99:d7:89:4e:a4:6e:14:f9:35:71:63:9b:72:e3:
fa:10:8d:95:76:bc:24:d7:35:4d:1a:21:f7:30:86:
95:11:57:45:ef:2b:45:d8:b2:31:83:99:df:71:03:
55:41:5f:25:e1:fd:47:4e:65:da:9d:52:2b:65:b3:
8f:60:ac:1c:62:6d:b1:28:c4:73:76:0c:e8:f8:9e:
7b:ca:0e:65:74:1a:47:95:b2:ef:98:80:27:92:b5:
94:86:0a:57:a8:7d:1e:ee:a3:c2:32:fb:ce:8e:ca:
b8:f5:a3:56:10:aa:0e:6c:79:16:e2:44:0d:63:19:
8b:14:5a:56:a6:d9:b5:43:fc:6a:a5:01:57:01:eb:
f6:a0:0e:e0:8a:e3:36:37:7a:1b:1c:d9:9a:f2:cc:
e8:26:f8:01:06:52:06:c6:06:60:f9:7a:c9:16:4f:
c6:03:59:d8:41:b2:e3:e7:55:6e:df:1c:9d:26:f1:
95:b2:01:40:c1:ff:2c:c0:51:8e:4e:f6:f0:75:a0:
6b:d2:4b:58:5f:04:cb:5b:09:bb:dd:5c:09:94:a0:
09:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:FF:C0:7D:C2:CB:1F:2A:61:FC:BD:E1:94:EA:89:20:22:75:70:46
X509v3 Authority Key Identifier:
keyid:79:8F:7B:1F:D8:02:B3:DC:6A:BD:7A:5C:DA:78:6A:63:11:E1:D6:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eY97H9gCs9xqvXpc2nhqYxHh1j0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/30883a-16d7-4212-9199-09d0aa28e551/1/tv_AfcLLHyph_L3hlOqJICJ1cEY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/30883a-16d7-4212-9199-09d0aa28e551/1/eY97H9gCs9xqvXpc2nhqYxHh1j0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.41.34.0/24
176.119.223.0/24
194.156.188.0/24
IPv6:
2a12:3fc0::/44
Signature Algorithm: sha256WithRSAEncryption
a2:ee:bf:b3:6a:da:ae:23:85:95:22:fa:fb:82:ac:2b:87:b6:
ae:34:57:6e:b1:b3:db:76:d6:3d:28:6b:21:c4:71:0b:07:dd:
ce:1b:05:12:e4:2b:82:ea:db:ed:bb:db:0c:41:7d:0a:5c:e7:
aa:8d:71:23:3a:05:96:e4:18:14:95:0f:71:cc:7b:2e:8e:92:
5b:00:1d:28:d5:71:0e:f7:86:b8:ca:04:3f:2e:c7:e4:25:6a:
a1:86:a0:58:52:88:a5:79:b8:2a:3d:54:06:05:1d:52:6b:a8:
29:0e:89:1a:b3:6e:92:89:8d:d7:b2:42:ca:d5:08:27:c8:c9:
93:d6:c1:28:4a:6d:40:35:8a:75:f4:e9:0a:97:8c:14:89:5c:
ce:8a:ae:5b:38:39:fe:3c:20:35:b5:b9:84:6a:ff:22:b7:ae:
53:fd:c9:11:43:0b:99:b0:f5:24:30:ae:91:31:8a:55:4f:77:
13:62:fe:df:ec:6a:ad:96:16:ec:1c:fc:fa:dd:4f:4f:f5:69:
d6:ef:94:c1:b0:59:3b:cd:cc:d5:3e:ab:d8:84:2d:01:67:28:
b6:83:50:9e:e5:1a:04:fc:b0:9f:a4:d1:5e:e7:f5:1d:7e:a7:
16:d3:b6:34:7f:50:ed:b2:71:7d:69:6d:69:71:bf:5c:62:b2:
88:30:13:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 21:58:39 2025 by rpki-client