Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/699e85-1027-4c7e-8ae7-df4a2e760ccb/1/q7ugT9v2ndgHYqZJTcjBq9ijTAk.roa
File: q7ugT9v2ndgHYqZJTcjBq9ijTAk.roa (raw, json)
Hash identifier: HtFGEkOmSMIXVqjdNe7hTV4L0BJKKQQDLtcsYCNKMLc=
Subject key identifier: AB:BB:A0:4F:DB:F6:9D:D8:07:62:A6:49:4D:C8:C1:AB:D8:A3:4C:09
Certificate issuer: /CN=e4a2b8e90d157ea022f8e700024a93dc356a514d
Certificate serial: 018B4C8DB1E075B69567AEF9809311056FFF
Authority key identifier: E4:A2:B8:E9:0D:15:7E:A0:22:F8:E7:00:02:4A:93:DC:35:6A:51:4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5KK46Q0VfqAi-OcAAkqT3DVqUU0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/699e85-1027-4c7e-8ae7-df4a2e760ccb/1/q7ugT9v2ndgHYqZJTcjBq9ijTAk.roa
Signing time: Fri 20 Oct 2023 10:07:16 +0000
ROA not before: Fri 20 Oct 2023 10:07:16 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 48678
IP address blocks: 31.210.48.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:4c:8d:b1:e0:75:b6:95:67:ae:f9:80:93:11:05:6f:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e4a2b8e90d157ea022f8e700024a93dc356a514d
Validity
Not Before: Oct 20 10:07:16 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=abbba04fdbf69dd80762a6494dc8c1abd8a34c09
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:5b:d8:4c:32:19:42:d7:c2:18:40:d7:fd:94:
9a:5b:0e:15:f3:da:74:8f:c0:2e:af:c3:53:44:0f:
30:3c:d2:6f:26:fd:77:a7:43:79:27:a4:af:8e:54:
cb:2d:ea:17:63:08:22:a5:4c:7d:b1:cc:2f:f6:0e:
f6:93:82:fb:d9:f2:23:22:e0:ee:bf:b6:c3:0a:73:
df:65:00:36:cb:44:be:63:67:c7:46:b4:e6:56:6f:
fd:b3:ca:8a:89:59:28:48:1e:ef:d1:13:d8:3e:0d:
5b:3f:d3:8b:da:0c:68:00:98:b1:56:dc:22:ac:02:
a9:e3:09:0b:1c:7d:62:83:2b:ab:cb:88:16:6b:5f:
a6:90:a7:d1:86:fe:b0:5f:e1:22:c3:16:ca:d0:2d:
9d:32:21:98:d7:16:c9:59:5f:89:04:2c:16:8d:a8:
45:a2:f2:15:7e:c4:65:6c:63:7f:87:40:37:57:27:
77:85:33:f6:fb:60:0a:b1:28:e3:ad:99:ca:59:9c:
fd:af:4d:ee:e2:91:6d:c4:13:31:81:59:cc:36:a1:
fa:11:83:2c:d3:47:48:b6:66:44:1d:ee:06:0c:d1:
90:13:eb:5d:05:7c:0f:38:02:07:b5:3a:4f:bb:5e:
e3:2c:fd:f9:ef:fb:bb:b2:22:66:4c:4c:cb:98:73:
32:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:BB:A0:4F:DB:F6:9D:D8:07:62:A6:49:4D:C8:C1:AB:D8:A3:4C:09
X509v3 Authority Key Identifier:
keyid:E4:A2:B8:E9:0D:15:7E:A0:22:F8:E7:00:02:4A:93:DC:35:6A:51:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5KK46Q0VfqAi-OcAAkqT3DVqUU0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/699e85-1027-4c7e-8ae7-df4a2e760ccb/1/q7ugT9v2ndgHYqZJTcjBq9ijTAk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/699e85-1027-4c7e-8ae7-df4a2e760ccb/1/5KK46Q0VfqAi-OcAAkqT3DVqUU0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.210.48.0/24
Signature Algorithm: sha256WithRSAEncryption
11:8e:ae:f2:66:9c:eb:43:3b:d2:80:43:29:7a:1e:22:cf:38:
9a:66:84:a7:84:d9:19:77:1f:53:6b:8f:0f:3a:d7:72:68:07:
bc:65:08:b4:d7:81:21:eb:4e:cc:c0:84:a3:f3:71:4a:d7:4c:
c6:70:03:a9:73:79:6b:b1:fa:0f:17:f4:36:98:f1:99:a0:3b:
77:fe:0e:43:f5:3c:92:00:2f:02:6b:34:d8:eb:da:1e:2b:51:
90:47:29:0f:c0:99:50:79:d1:22:81:05:9f:49:cb:c3:c0:af:
d1:fa:54:8b:51:de:a6:5b:24:2f:3f:54:23:dc:91:e6:73:e7:
ce:00:25:a4:9e:f7:b5:1e:a0:b6:b8:4b:80:e1:d9:fe:6a:88:
13:cf:d8:40:74:37:36:74:9d:91:ff:32:a7:30:25:89:73:cb:
ab:ff:32:c5:22:8b:a1:ae:56:0f:4a:d6:7b:0f:74:85:d7:37:
33:c8:5c:68:53:a5:45:10:a1:7b:05:f7:b3:76:ca:6a:00:4c:
92:db:df:c8:98:59:1a:92:46:4a:d6:79:8c:75:ae:c6:8c:2e:
f0:e4:7d:8c:eb:00:58:ee:20:8a:2f:95:11:53:ae:20:25:08:
7f:cd:be:35:7c:84:99:4d:9f:a8:47:b6:4c:33:ef:71:02:b8:
9c:ea:c2:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 25 11:20:31 2023 by rpki-client on console-ams.rpki-client.org