Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/b1a82a-490f-43fb-986e-26170da4a0b1/1/PwrrZHLcLuj4JmUMgVyaw_XG6oI.roa
File: PwrrZHLcLuj4JmUMgVyaw_XG6oI.roa (raw, json)
Hash identifier: 8q7Kj69udxU3LPEVE3TO+kQHKRbC/iyc510xm7LXk4w=
Subject key identifier: 3F:0A:EB:64:72:DC:2E:E8:F8:26:65:0C:81:5C:9A:C3:F5:C6:EA:82
Certificate issuer: /CN=6d69da44ae067fc1a98a5f6f05f12e545d0fc62a
Certificate serial: 373711BF
Authority key identifier: 6D:69:DA:44:AE:06:7F:C1:A9:8A:5F:6F:05:F1:2E:54:5D:0F:C6:2A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bWnaRK4Gf8Gpil9vBfEuVF0Pxio.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/b1a82a-490f-43fb-986e-26170da4a0b1/1/PwrrZHLcLuj4JmUMgVyaw_XG6oI.roa
Signing time: Sat 08 Jan 2022 09:43:01 +0000
ROA not before: Sat 08 Jan 2022 09:43:01 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 56582
IP address blocks: 185.33.61.0/24 maxlen: 24
185.33.63.0/24 maxlen: 24
31.169.65.0/24 maxlen: 24
31.169.70.0/24 maxlen: 24
31.169.69.0/24 maxlen: 24
31.169.71.0/24 maxlen: 24
31.169.67.0/24 maxlen: 24
31.169.66.0/24 maxlen: 24
31.169.68.0/24 maxlen: 24
31.169.72.0/24 maxlen: 24
31.169.77.0/24 maxlen: 24
31.169.76.0/24 maxlen: 24
31.169.78.0/24 maxlen: 24
31.169.74.0/24 maxlen: 24
31.169.79.0/24 maxlen: 24
31.169.81.0/24 maxlen: 24
31.169.91.0/24 maxlen: 24
31.169.90.0/24 maxlen: 24
31.169.88.0/24 maxlen: 24
31.169.93.0/24 maxlen: 24
31.169.92.0/24 maxlen: 24
31.169.94.0/24 maxlen: 24
31.169.95.0/24 maxlen: 24
31.169.64.0/24 maxlen: 24
2a00:5740::/32 maxlen: 32
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 926355903 (0x373711bf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d69da44ae067fc1a98a5f6f05f12e545d0fc62a
Validity
Not Before: Jan 8 09:43:01 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=3f0aeb6472dc2ee8f826650c815c9ac3f5c6ea82
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:6c:bb:f3:f5:e8:1d:6a:36:16:51:df:e2:b1:
44:95:5a:2b:2e:8f:b2:8d:dc:87:1f:d5:38:8e:07:
53:8a:77:a3:68:a1:e5:5b:46:37:cc:5d:49:52:10:
b7:48:92:f5:7b:90:86:c7:29:af:bd:ba:13:75:89:
19:c7:c1:8c:a2:77:3e:e6:e0:d8:27:4c:5d:83:07:
c4:cf:91:48:bc:0f:62:49:83:d5:12:3a:af:2a:d2:
46:8d:a9:f3:d2:49:af:6c:f7:ca:72:4f:79:f5:49:
ee:f3:2f:63:87:9b:8d:b6:4a:d2:d9:9e:c0:3b:4a:
3c:4c:15:c1:05:23:f3:91:d1:df:82:1b:4c:c8:2b:
44:57:a1:d8:bc:77:d6:2d:14:5e:fe:a2:ad:4b:2c:
02:4a:d7:06:f7:05:b3:8b:1a:f1:9c:0f:84:59:71:
19:e9:6a:9f:29:89:3c:1d:57:66:1b:e6:f3:16:f1:
12:6d:f6:74:d9:91:a6:41:1d:80:87:91:e6:c9:a1:
89:99:d6:03:ce:68:cd:c7:3b:80:6b:4d:69:3d:37:
ac:8c:75:2c:2b:11:cd:c0:af:ed:c3:d0:8c:4b:28:
de:00:53:6d:86:73:67:cc:b1:a9:2c:91:35:a7:27:
3e:61:97:16:47:47:4f:b5:c1:1f:86:7c:4b:23:d3:
6f:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:0A:EB:64:72:DC:2E:E8:F8:26:65:0C:81:5C:9A:C3:F5:C6:EA:82
X509v3 Authority Key Identifier:
keyid:6D:69:DA:44:AE:06:7F:C1:A9:8A:5F:6F:05:F1:2E:54:5D:0F:C6:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bWnaRK4Gf8Gpil9vBfEuVF0Pxio.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/b1a82a-490f-43fb-986e-26170da4a0b1/1/PwrrZHLcLuj4JmUMgVyaw_XG6oI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/b1a82a-490f-43fb-986e-26170da4a0b1/1/bWnaRK4Gf8Gpil9vBfEuVF0Pxio.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.169.64.0-31.169.72.255
31.169.74.0/24
31.169.76.0/22
31.169.81.0/24
31.169.88.0/24
31.169.90.0-31.169.95.255
185.33.61.0/24
185.33.63.0/24
IPv6:
2a00:5740::/32
Signature Algorithm: sha256WithRSAEncryption
49:f9:f9:6a:c9:38:63:37:70:40:14:ec:4c:65:d9:43:39:78:
19:33:a6:0b:2f:20:6f:4c:4c:16:45:6c:73:4c:94:31:be:df:
00:b1:8f:c2:67:68:00:ca:76:9d:65:49:04:03:2c:e0:78:34:
e8:ab:d5:4e:14:57:cf:e3:66:10:5e:f3:ec:f2:ee:83:8c:b6:
0e:c2:7a:4a:96:d5:92:02:7a:2f:71:cd:c5:f9:6c:fd:42:15:
ef:6c:84:f1:8b:d3:bc:55:1e:3b:15:4b:61:9c:10:7b:ee:6c:
d4:73:7c:9c:5d:18:63:8f:01:0f:ee:e4:55:79:cc:9d:38:ab:
1e:2a:ed:26:45:68:c4:bc:ab:bf:93:eb:f9:d4:f8:bf:64:d7:
b8:25:9f:ca:9a:c5:92:40:43:0d:6a:e8:bf:ff:ef:97:3a:92:
45:66:69:e3:0b:70:1d:9a:2a:a3:82:24:73:f2:b8:f9:0a:09:
4e:de:74:09:23:46:3f:78:a7:09:7c:c3:5a:b9:b6:39:77:71:
0c:9f:08:e3:71:76:41:ac:21:ff:32:9f:65:2a:86:86:f3:d6:
90:9b:8a:2e:c7:93:73:13:c2:54:97:62:70:f0:f4:a6:b0:06:
61:f1:9c:b8:5e:20:f8:b7:9e:79:9b:57:13:3c:2a:96:bd:da:
c7:da:09:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:45:47 2024 by rpki-client on console-ams.rpki-client.org