Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/c61092-734a-4eef-9d67-4905243bc828/1/CMDSneTiMsoGu_NLYAk5RZRn8gs.roa
File: CMDSneTiMsoGu_NLYAk5RZRn8gs.roa (raw, json)
Hash identifier: 0J3Ly6YYqndTJ07FGStftN3eFGy+xqBbxtUy3h/czcw=
Subject key identifier: 08:C0:D2:9D:E4:E2:32:CA:06:BB:F3:4B:60:09:39:45:94:67:F2:0B
Certificate issuer: /CN=05b1d13c2e26e12786246a5ec4c5bea69864b20f
Certificate serial: 01853D5A716BFF0B8A216964939C9590B11C
Authority key identifier: 05:B1:D1:3C:2E:26:E1:27:86:24:6A:5E:C4:C5:BE:A6:98:64:B2:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BbHRPC4m4SeGJGpexMW-pphksg8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/c61092-734a-4eef-9d67-4905243bc828/1/CMDSneTiMsoGu_NLYAk5RZRn8gs.roa
Signing time: Fri 23 Dec 2022 05:00:15 +0000
ROA not before: Fri 23 Dec 2022 05:00:15 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 41789
IP address blocks: 31.129.17.0/24 maxlen: 24
31.129.16.0/24 maxlen: 24
31.129.18.0/24 maxlen: 24
31.129.21.0/24 maxlen: 24
31.129.20.0/24 maxlen: 24
31.129.19.0/24 maxlen: 24
31.129.24.0/24 maxlen: 24
31.129.23.0/24 maxlen: 24
31.129.29.0/24 maxlen: 24
31.129.28.0/24 maxlen: 24
31.129.27.0/24 maxlen: 24
31.129.26.0/24 maxlen: 24
31.129.31.0/24 maxlen: 24
31.129.25.0/24 maxlen: 24
46.16.12.0/24 maxlen: 24
46.16.15.0/24 maxlen: 24
46.16.14.0/24 maxlen: 24
31.129.0.0/20 maxlen: 24
85.92.111.0/24 maxlen: 24
45.8.99.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:3d:5a:71:6b:ff:0b:8a:21:69:64:93:9c:95:90:b1:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05b1d13c2e26e12786246a5ec4c5bea69864b20f
Validity
Not Before: Dec 23 05:00:15 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=08c0d29de4e232ca06bbf34b600939459467f20b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:e9:28:77:6c:47:1f:c2:8e:a7:60:3b:4d:13:
1e:1e:73:54:28:14:a6:a8:6e:31:b2:f9:e9:84:8a:
22:0a:ac:7e:c9:88:e0:95:c3:88:72:d5:13:4d:e5:
8b:3b:23:4e:6c:3a:bc:2c:89:39:78:86:d8:66:57:
2f:b3:34:69:f3:57:d5:e7:12:b0:35:d2:8b:fe:0c:
4f:4e:45:9d:30:0d:34:ac:c7:ae:37:ce:f4:6d:28:
17:8c:42:5a:ec:3c:af:92:0f:a2:7f:b3:8c:95:9a:
3a:0e:22:9f:22:f1:d8:cf:59:e7:06:c0:e1:cd:98:
ed:af:6d:ca:75:4c:fa:0c:7f:e0:53:f7:a9:bc:b7:
26:62:c4:1e:ec:a1:fc:a1:48:f0:fc:c8:7e:c2:c4:
84:31:a4:5d:80:1b:1a:60:0b:cf:7d:50:b8:9d:58:
49:d5:54:49:a5:c6:62:46:b1:f4:86:ee:fe:0a:7c:
b2:d4:26:70:0d:19:71:a8:ae:4f:bf:c2:fe:c5:cb:
e4:b5:41:87:03:18:41:18:67:5f:fe:da:e0:44:e7:
a6:ad:1a:06:d2:73:32:d4:2e:35:73:15:db:68:3a:
0f:9f:9e:38:5f:00:b2:fe:c1:bc:f6:b8:5d:24:ab:
e2:b2:a0:7c:c6:90:5a:d0:7e:11:ca:e0:6e:1e:4d:
ee:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:C0:D2:9D:E4:E2:32:CA:06:BB:F3:4B:60:09:39:45:94:67:F2:0B
X509v3 Authority Key Identifier:
keyid:05:B1:D1:3C:2E:26:E1:27:86:24:6A:5E:C4:C5:BE:A6:98:64:B2:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BbHRPC4m4SeGJGpexMW-pphksg8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/c61092-734a-4eef-9d67-4905243bc828/1/CMDSneTiMsoGu_NLYAk5RZRn8gs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/c61092-734a-4eef-9d67-4905243bc828/1/BbHRPC4m4SeGJGpexMW-pphksg8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.129.0.0-31.129.21.255
31.129.23.0-31.129.29.255
31.129.31.0/24
45.8.99.0/24
46.16.12.0/24
46.16.14.0/23
85.92.111.0/24
Signature Algorithm: sha256WithRSAEncryption
8d:60:a2:ac:02:37:86:92:46:79:b5:a3:1e:4a:13:5b:54:bd:
88:9e:f0:62:a8:7d:38:96:ae:d6:59:d2:d6:42:de:43:1a:54:
89:71:37:6a:53:f2:88:d2:c7:da:d5:14:a1:73:76:5a:de:fb:
eb:74:fb:95:9c:3b:dc:9f:25:29:29:a4:7a:34:c1:4e:f1:04:
fa:90:e1:f2:24:d4:43:9f:c7:b7:c9:d4:5b:f0:b5:53:a5:ca:
54:b7:44:3e:77:76:40:fd:a7:a5:d7:20:79:df:9e:85:b8:c3:
43:a2:84:a6:c6:1b:51:b5:ad:61:08:72:e6:dd:7f:69:18:bd:
ff:7a:75:7e:e7:0a:dc:76:e9:39:cf:df:df:5d:89:15:76:34:
bd:e0:af:2f:19:ec:5a:32:7e:18:c4:02:1a:8d:ce:3e:b8:61:
d7:45:8e:75:dd:7a:b3:c7:0e:a0:64:e1:8d:44:38:4b:54:77:
05:05:a5:73:14:c4:02:e7:53:2c:f9:43:78:73:b2:30:1f:a7:
cf:fd:22:52:68:36:00:5b:60:5b:0d:eb:31:6a:83:b0:16:fe:
e9:ce:09:6f:bb:0e:f0:74:a1:2b:01:1d:0a:1c:e6:3a:c1:76:
f3:29:13:ee:d7:8f:34:ad:3b:2b:0f:9b:28:61:1f:6a:aa:78:
ae:af:b9:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:37:15 2024 by rpki-client on console-ams.rpki-client.org