Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/b8c851-16ec-476f-9918-a62473abaa91/1/ew-cU2kVdp9vsj1wFoxjjunZe3M.roa
File: ew-cU2kVdp9vsj1wFoxjjunZe3M.roa (raw, json)
Hash identifier: ATl7dxv4oMWcjAhMNweuVFvtQcXTFxe+pLHKeWwFyOc=
Subject key identifier: 7B:0F:9C:53:69:15:76:9F:6F:B2:3D:70:16:8C:63:8E:E9:D9:7B:73
Certificate issuer: /CN=d1f5d55a1bb009d181992e241851d5f9939237cc
Certificate serial: 01867992C81D75B98AD14B708E970E7BC861
Authority key identifier: D1:F5:D5:5A:1B:B0:09:D1:81:99:2E:24:18:51:D5:F9:93:92:37:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0fXVWhuwCdGBmS4kGFHV-ZOSN8w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/b8c851-16ec-476f-9918-a62473abaa91/1/ew-cU2kVdp9vsj1wFoxjjunZe3M.roa
Signing time: Wed 22 Feb 2023 14:41:47 +0000
ROA not before: Wed 22 Feb 2023 14:41:47 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 44053
IP address blocks: 31.15.16.0/21 maxlen: 32
92.53.224.0/21 maxlen: 21
95.174.88.0/21 maxlen: 21
31.177.104.0/21 maxlen: 21
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:79:92:c8:1d:75:b9:8a:d1:4b:70:8e:97:0e:7b:c8:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d1f5d55a1bb009d181992e241851d5f9939237cc
Validity
Not Before: Feb 22 14:41:47 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7b0f9c536915769f6fb23d70168c638ee9d97b73
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:a2:3e:f7:64:ee:11:e4:8d:ee:dd:81:61:d6:
43:ab:76:30:c4:c7:be:45:0f:d3:b7:b8:0d:f7:28:
db:15:47:98:bc:e2:5e:e1:9d:b3:6f:dd:0e:be:f0:
66:28:ef:aa:20:0d:99:eb:f3:8c:a8:d0:97:f8:07:
b3:63:56:d7:79:7e:2c:d5:ba:e2:62:ea:40:4d:0f:
58:c0:a4:3f:c8:1f:c8:3c:5c:2f:0d:b4:0c:9e:0a:
f5:9e:78:dd:bb:9c:05:30:17:00:8e:d8:75:82:a6:
b6:5e:c2:b9:71:15:e2:85:e0:13:a8:b3:01:37:94:
61:99:4c:70:5d:16:58:02:b9:ff:da:89:1e:85:68:
62:a0:2d:39:03:c7:60:9b:4b:c9:8f:07:ce:26:ad:
97:8a:0b:db:0c:97:3e:05:5f:eb:5f:f7:b7:65:18:
2a:27:9e:c5:23:1c:16:63:60:d3:8e:5c:bb:6a:ec:
7e:23:9d:61:bf:64:4d:9b:17:a3:fd:bd:17:68:c4:
c6:ec:f8:0d:2b:36:7d:b2:3e:95:db:00:c6:7a:38:
fa:15:59:18:4f:43:67:59:47:6d:23:85:65:25:51:
82:d3:7f:a7:8e:3c:d4:97:3c:00:a2:de:29:6b:6d:
54:97:49:51:66:57:6f:31:48:47:03:40:91:da:a1:
8e:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:0F:9C:53:69:15:76:9F:6F:B2:3D:70:16:8C:63:8E:E9:D9:7B:73
X509v3 Authority Key Identifier:
keyid:D1:F5:D5:5A:1B:B0:09:D1:81:99:2E:24:18:51:D5:F9:93:92:37:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0fXVWhuwCdGBmS4kGFHV-ZOSN8w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/b8c851-16ec-476f-9918-a62473abaa91/1/ew-cU2kVdp9vsj1wFoxjjunZe3M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/b8c851-16ec-476f-9918-a62473abaa91/1/0fXVWhuwCdGBmS4kGFHV-ZOSN8w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.15.16.0/21
31.177.104.0/21
92.53.224.0/21
95.174.88.0/21
Signature Algorithm: sha256WithRSAEncryption
20:ff:0e:72:42:26:5e:a9:fd:49:c6:44:07:64:d8:e4:78:36:
a5:18:15:5d:7c:df:10:4d:84:a7:07:5e:6a:a6:5e:cb:6c:c2:
c5:10:7e:02:c0:59:17:b1:97:73:c8:5e:3e:29:b7:e2:af:9c:
e9:77:cf:95:0b:c1:b8:94:b5:fc:a2:3e:59:be:fd:6e:a5:62:
a7:29:53:6d:f9:0b:da:6f:d6:d8:fd:d8:24:49:d3:e7:a3:26:
08:32:cf:91:d4:86:c1:62:48:1a:a6:3e:ea:b7:77:9d:de:c6:
f1:a5:89:92:f8:ea:c0:d7:d7:4e:8b:53:a3:3b:79:56:82:ba:
22:d1:30:48:c6:d0:d5:74:88:d3:a5:63:96:88:70:df:5b:49:
ad:2e:a2:25:b1:8b:0a:ca:9e:1f:26:a1:60:ce:bd:d8:62:f8:
e2:44:5b:5b:5e:18:72:72:7a:51:a4:5c:fa:22:6c:5a:ac:ca:
97:2d:ce:4b:6c:cc:ae:63:0c:95:40:46:b8:eb:ba:72:d0:e9:
07:83:83:d3:44:98:9e:9e:01:fe:13:d1:83:25:52:06:1b:f1:
54:41:63:2c:69:13:92:0b:12:91:1f:a7:3c:4e:60:29:f4:f9:
fc:b6:3b:cb:f7:64:50:30:8b:15:a0:0f:83:f0:b2:5d:eb:cf:
4a:10:51:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:07:01 2023 by rpki-client on console-ams.rpki-client.org