Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/b1a82a-490f-43fb-986e-26170da4a0b1/1/6UaSMAYLI0y9q47wwYL2msnupc0.roa
File: 6UaSMAYLI0y9q47wwYL2msnupc0.roa (raw, json)
Hash identifier: iKTNJntggwCTV/zNSpArt9SBmSQvrVqpJHZCm3BzECw=
Subject key identifier: E9:46:92:30:06:0B:23:4C:BD:AB:8E:F0:C1:82:F6:9A:C9:EE:A5:CD
Certificate issuer: /CN=6d69da44ae067fc1a98a5f6f05f12e545d0fc62a
Certificate serial: 0185728CA6F767711CF866C56EF2529D2951
Authority key identifier: 6D:69:DA:44:AE:06:7F:C1:A9:8A:5F:6F:05:F1:2E:54:5D:0F:C6:2A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bWnaRK4Gf8Gpil9vBfEuVF0Pxio.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/b1a82a-490f-43fb-986e-26170da4a0b1/1/6UaSMAYLI0y9q47wwYL2msnupc0.roa
Signing time: Mon 02 Jan 2023 12:54:58 +0000
ROA not before: Mon 02 Jan 2023 12:54:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 9121
IP address blocks: 185.33.61.0/24 maxlen: 24
185.33.63.0/24 maxlen: 24
31.169.69.0/24 maxlen: 24
31.169.70.0/24 maxlen: 24
31.169.65.0/24 maxlen: 24
31.169.66.0/24 maxlen: 24
31.169.67.0/24 maxlen: 24
31.169.71.0/24 maxlen: 24
31.169.78.0/24 maxlen: 24
31.169.76.0/24 maxlen: 24
31.169.77.0/24 maxlen: 24
31.169.72.0/24 maxlen: 24
31.169.74.0/24 maxlen: 24
31.169.81.0/24 maxlen: 24
31.169.88.0/24 maxlen: 24
31.169.90.0/24 maxlen: 24
31.169.91.0/24 maxlen: 24
31.169.95.0/24 maxlen: 24
31.169.92.0/24 maxlen: 24
31.169.93.0/24 maxlen: 24
31.169.94.0/24 maxlen: 24
31.169.64.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:8c:a6:f7:67:71:1c:f8:66:c5:6e:f2:52:9d:29:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d69da44ae067fc1a98a5f6f05f12e545d0fc62a
Validity
Not Before: Jan 2 12:54:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e9469230060b234cbdab8ef0c182f69ac9eea5cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:9d:ef:fc:f3:f5:ed:60:d6:1d:6f:86:20:d7:
40:8b:a0:57:48:9b:b0:ac:e8:37:f8:47:45:f1:f7:
78:a7:ba:f7:7a:ae:73:ab:51:f6:50:08:0a:76:51:
2d:63:bf:fa:c3:df:b5:89:40:2c:40:f1:20:a5:e5:
f7:b7:bd:3c:fa:89:9a:4a:48:ae:b1:59:a4:ea:50:
b9:cc:fa:8a:0b:75:54:21:df:88:29:0b:17:44:05:
08:7e:3d:57:fe:3e:98:9b:39:33:8e:de:29:5b:af:
62:99:ec:91:2f:50:df:10:27:d4:a4:38:4c:15:28:
2a:c7:79:47:47:33:e1:d8:24:74:88:19:bf:f1:b9:
46:26:1f:a0:79:20:12:3d:66:4e:e7:5b:12:49:4d:
2a:8e:a4:16:4a:e3:f6:86:28:e5:24:d4:b9:64:5f:
4b:26:f5:ce:a4:77:3a:c2:14:3b:08:f7:c5:d4:24:
4d:1d:4b:68:64:43:1e:86:79:54:89:75:a3:1d:bc:
df:de:64:08:92:6f:28:02:ff:cf:d3:1b:1e:3e:06:
fe:cf:64:70:63:3b:6e:eb:d3:df:cd:c9:2f:08:94:
6d:6a:25:ce:c8:1a:c0:a7:76:fe:ec:b1:2b:45:8b:
b2:d5:5c:0e:37:8b:3a:85:7f:62:47:78:17:c3:d4:
0e:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:46:92:30:06:0B:23:4C:BD:AB:8E:F0:C1:82:F6:9A:C9:EE:A5:CD
X509v3 Authority Key Identifier:
keyid:6D:69:DA:44:AE:06:7F:C1:A9:8A:5F:6F:05:F1:2E:54:5D:0F:C6:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bWnaRK4Gf8Gpil9vBfEuVF0Pxio.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/b1a82a-490f-43fb-986e-26170da4a0b1/1/6UaSMAYLI0y9q47wwYL2msnupc0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/b1a82a-490f-43fb-986e-26170da4a0b1/1/bWnaRK4Gf8Gpil9vBfEuVF0Pxio.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.169.64.0/22
31.169.69.0-31.169.72.255
31.169.74.0/24
31.169.76.0-31.169.78.255
31.169.81.0/24
31.169.88.0/24
31.169.90.0-31.169.95.255
185.33.61.0/24
185.33.63.0/24
Signature Algorithm: sha256WithRSAEncryption
4f:2a:94:b0:d5:0a:d2:c2:ea:f1:c9:10:dd:5c:8a:4d:3a:2e:
fd:f3:0e:d7:d9:b1:50:18:5f:69:d6:54:5b:b3:35:b7:9b:d8:
89:c0:69:29:3c:bf:ee:f0:0b:c9:2e:20:47:2a:57:83:ef:bc:
3e:d6:8d:be:8a:6d:6e:1f:ca:9c:bd:1d:bc:78:af:0f:75:0a:
e9:71:1e:80:6b:d0:93:0e:ae:9c:2e:0d:7e:aa:9c:5a:ff:0e:
c6:5e:75:0b:bf:c1:ee:c0:21:96:75:ad:dc:f2:0f:4d:53:42:
3a:5a:14:fc:f2:65:d4:75:37:1a:31:23:ec:e3:15:e4:07:a5:
47:ee:b1:dd:8d:7c:30:e6:7f:1f:df:bc:b3:f6:09:ca:08:bc:
b0:46:b1:d9:ef:d7:b6:5f:12:51:31:d2:c0:dd:05:00:22:e8:
19:e9:92:8e:c0:f1:8b:4d:b6:3d:80:eb:28:2e:2f:35:66:7d:
92:b1:38:fb:e5:7e:51:03:ce:17:84:97:5b:0a:87:f5:2c:4c:
22:ac:08:2d:f1:cc:f6:ce:e5:25:81:28:a8:7a:01:fa:9b:ca:
55:64:52:4b:5d:f0:15:a2:85:e9:10:d5:e3:b6:2b:10:20:d8:
e0:70:a2:7c:86:c4:c2:3d:9b:e4:b3:33:9d:dc:c2:7d:65:b2:
c1:07:eb:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:54:56 2024 by rpki-client on console-fra.rpki-client.org