Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/c61092-734a-4eef-9d67-4905243bc828/1/xke6Rf_B5EJjwKWfCTr183rkofs.roa
File: xke6Rf_B5EJjwKWfCTr183rkofs.roa (raw, json)
Hash identifier: vJNXlnUmrHI574YRSFMwcDlh0PLxvcl/gbC1U33JfAE=
Subject key identifier: C6:47:BA:45:FF:C1:E4:42:63:C0:A5:9F:09:3A:F5:F3:7A:E4:A1:FB
Certificate issuer: /CN=05b1d13c2e26e12786246a5ec4c5bea69864b20f
Certificate serial: 018972B191FDBF0C90FF44587A42FACD14D5
Authority key identifier: 05:B1:D1:3C:2E:26:E1:27:86:24:6A:5E:C4:C5:BE:A6:98:64:B2:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BbHRPC4m4SeGJGpexMW-pphksg8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/c61092-734a-4eef-9d67-4905243bc828/1/xke6Rf_B5EJjwKWfCTr183rkofs.roa
Signing time: Thu 20 Jul 2023 09:46:27 +0000
ROA not before: Thu 20 Jul 2023 09:46:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 41789
IP address blocks: 31.129.17.0/24 maxlen: 24
31.129.16.0/24 maxlen: 24
31.129.18.0/24 maxlen: 24
31.129.20.0/24 maxlen: 24
31.129.19.0/24 maxlen: 24
31.129.24.0/24 maxlen: 24
31.129.23.0/24 maxlen: 24
31.129.29.0/24 maxlen: 24
31.129.28.0/24 maxlen: 24
31.129.27.0/24 maxlen: 24
31.129.26.0/24 maxlen: 24
31.129.31.0/24 maxlen: 24
31.129.25.0/24 maxlen: 24
141.98.234.0/24 maxlen: 24
46.16.12.0/24 maxlen: 24
46.16.15.0/24 maxlen: 24
46.16.14.0/24 maxlen: 24
31.129.0.0/20 maxlen: 24
37.220.80.0/22 maxlen: 22
185.166.196.0/23 maxlen: 24
94.198.216.0/22 maxlen: 24
94.198.220.0/23 maxlen: 24
81.200.144.0/21 maxlen: 24
81.200.152.0/22 maxlen: 24
81.200.156.0/23 maxlen: 24
46.19.64.0/22 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:72:b1:91:fd:bf:0c:90:ff:44:58:7a:42:fa:cd:14:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05b1d13c2e26e12786246a5ec4c5bea69864b20f
Validity
Not Before: Jul 20 09:46:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c647ba45ffc1e44263c0a59f093af5f37ae4a1fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:81:de:78:c1:13:3c:ea:4f:48:a8:ec:a2:d4:
d0:98:47:a4:72:ae:32:57:28:69:1f:d1:5c:22:6a:
23:de:a3:97:5c:50:2b:f6:29:3d:f6:18:e7:54:a9:
c8:3e:fe:6b:6f:2e:7c:9d:22:63:b7:11:0a:33:a1:
be:44:48:c9:17:2e:bd:3e:24:30:67:bf:a9:1e:8e:
9e:a7:8e:46:75:f6:72:8a:c1:1a:bf:17:13:3d:69:
24:b0:f9:66:96:cc:55:a7:fd:b3:ac:8a:ad:b8:b7:
ea:c3:50:ce:38:d8:e9:43:14:0d:c3:bf:76:53:a7:
2f:c2:06:2d:99:89:f6:b4:4f:b9:8d:6e:b1:3b:4e:
4c:a2:f3:d6:f2:cc:ab:48:3e:50:93:6a:b0:16:90:
d4:da:bc:bc:4b:2b:d7:f4:c5:6c:e4:44:eb:0f:ae:
cd:e1:1a:68:bb:84:22:38:f0:40:3b:1a:25:bf:82:
09:51:0b:e3:9b:0c:8b:57:67:fa:3a:66:3c:7a:e9:
58:45:c9:05:c9:f9:e5:af:43:d4:26:e0:96:25:e4:
d8:fc:b6:e3:a4:63:b9:3f:40:9d:5e:de:ab:fa:cd:
21:6f:8f:df:0e:13:a4:17:d1:4e:fa:8b:11:82:e4:
8a:ca:4e:e9:d7:f5:5e:f8:d8:47:69:a0:14:89:cf:
21:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:47:BA:45:FF:C1:E4:42:63:C0:A5:9F:09:3A:F5:F3:7A:E4:A1:FB
X509v3 Authority Key Identifier:
keyid:05:B1:D1:3C:2E:26:E1:27:86:24:6A:5E:C4:C5:BE:A6:98:64:B2:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BbHRPC4m4SeGJGpexMW-pphksg8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/c61092-734a-4eef-9d67-4905243bc828/1/xke6Rf_B5EJjwKWfCTr183rkofs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/c61092-734a-4eef-9d67-4905243bc828/1/BbHRPC4m4SeGJGpexMW-pphksg8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.129.0.0-31.129.20.255
31.129.23.0-31.129.29.255
31.129.31.0/24
37.220.80.0/22
46.16.12.0/24
46.16.14.0/23
46.19.64.0/22
81.200.144.0-81.200.157.255
94.198.216.0-94.198.221.255
141.98.234.0/24
185.166.196.0/23
Signature Algorithm: sha256WithRSAEncryption
65:02:bb:75:f5:b5:6d:99:8e:fe:d4:d2:5c:77:f3:e4:a0:e4:
27:d1:1e:b9:77:4a:c1:c6:4e:72:10:88:57:5c:b7:75:a7:d2:
1f:b5:27:4d:a6:fd:0d:7a:0b:05:e2:09:3f:b6:1d:82:94:76:
b5:ce:8c:59:4b:1f:28:82:57:63:d2:f4:ff:c5:e3:cb:52:3c:
c3:1c:f1:9c:12:b0:e6:9c:5d:f0:90:00:3e:7d:6a:22:c5:87:
15:e5:c4:e2:7e:86:64:38:7f:a8:e4:f7:0d:9a:e5:de:f8:35:
cd:88:84:b5:64:5f:3e:6a:c1:bc:42:df:56:9c:dd:d8:c7:e9:
af:4c:b9:0c:9d:28:31:12:1b:d9:9b:0e:d6:a9:b1:47:af:2d:
ce:d8:c6:17:f2:0d:c5:20:11:f2:b2:d6:d1:c9:54:0d:7e:7e:
f6:73:f2:5c:2a:b7:8a:dd:16:65:11:20:d9:01:51:95:fb:1f:
73:1c:70:e0:64:0a:09:02:23:f0:31:bc:02:57:84:49:02:44:
63:c1:f3:29:56:6b:25:94:7f:33:c5:9f:e6:43:dc:81:c0:b8:
f5:e4:37:4b:bd:39:83:a4:6a:c9:19:3c:50:f9:4b:a4:3a:a9:
d9:ff:4c:ac:29:3c:21:b5:a4:7d:8a:61:75:cd:50:1b:77:1c:
85:6b:f2:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:48:55 2024 by rpki-client on console-fra.rpki-client.org