Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/b1a82a-490f-43fb-986e-26170da4a0b1/1/WRJdn98FM1w_AdMM7xNeP8ynYpo.roa
File: WRJdn98FM1w_AdMM7xNeP8ynYpo.roa (raw, json)
Hash identifier: 3olmxIFT1MgKGgA7u+QSICxhuwNhG7YKaBlm8jIzw5w=
Subject key identifier: 59:12:5D:9F:DF:05:33:5C:3F:01:D3:0C:EF:13:5E:3F:CC:A7:62:9A
Certificate issuer: /CN=6d69da44ae067fc1a98a5f6f05f12e545d0fc62a
Certificate serial: 018A2C7B1A81BDCCC41D8F8206E51062E6FD
Authority key identifier: 6D:69:DA:44:AE:06:7F:C1:A9:8A:5F:6F:05:F1:2E:54:5D:0F:C6:2A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bWnaRK4Gf8Gpil9vBfEuVF0Pxio.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/b1a82a-490f-43fb-986e-26170da4a0b1/1/WRJdn98FM1w_AdMM7xNeP8ynYpo.roa
Signing time: Fri 25 Aug 2023 11:36:19 +0000
ROA not before: Fri 25 Aug 2023 11:36:19 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 56582
IP address blocks: 185.33.61.0/24 maxlen: 24
185.33.63.0/24 maxlen: 24
31.169.65.0/24 maxlen: 24
31.169.70.0/24 maxlen: 24
31.169.69.0/24 maxlen: 24
31.169.71.0/24 maxlen: 24
31.169.67.0/24 maxlen: 24
31.169.66.0/24 maxlen: 24
31.169.72.0/24 maxlen: 24
31.169.77.0/24 maxlen: 24
31.169.76.0/24 maxlen: 24
31.169.78.0/24 maxlen: 24
31.169.74.0/24 maxlen: 24
31.169.81.0/24 maxlen: 24
31.169.91.0/24 maxlen: 24
31.169.90.0/24 maxlen: 24
31.169.88.0/24 maxlen: 24
31.169.93.0/24 maxlen: 24
31.169.92.0/24 maxlen: 24
31.169.94.0/24 maxlen: 24
31.169.95.0/24 maxlen: 24
31.169.64.0/24 maxlen: 24
2a00:5740::/29 maxlen: 29
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:2c:7b:1a:81:bd:cc:c4:1d:8f:82:06:e5:10:62:e6:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d69da44ae067fc1a98a5f6f05f12e545d0fc62a
Validity
Not Before: Aug 25 11:36:19 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=59125d9fdf05335c3f01d30cef135e3fcca7629a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:c9:86:b7:bd:ba:38:c0:da:d2:a1:b8:74:f6:
27:67:04:1a:9d:4a:7e:39:cd:ae:5d:74:84:09:89:
b5:90:5e:1b:00:ea:e3:20:19:61:8f:61:a6:32:e6:
34:75:43:b8:95:d0:5f:64:ac:bc:3e:81:c6:1d:1d:
4f:52:4e:a2:e8:b4:0d:e0:42:ff:75:c9:9a:01:a5:
da:5e:cb:bd:c1:6e:4f:5b:d4:5c:b7:51:56:e8:df:
79:56:98:60:c9:0e:13:c6:1f:da:06:b1:3d:c7:0d:
0a:00:7b:e4:b0:e4:a2:90:e0:0a:0b:b8:3b:76:71:
41:28:3b:11:e8:0a:cb:5c:7d:d7:e6:a2:16:d6:d5:
27:c0:13:34:0a:29:08:b3:56:98:82:6a:0e:f6:d0:
33:6c:19:2e:0f:b6:a9:14:12:60:03:9a:96:aa:7a:
14:f7:e7:0a:a7:b4:82:91:6a:07:27:80:70:21:48:
07:a0:2a:98:dc:cb:06:6a:63:bd:bb:7c:f9:e9:b7:
49:64:5c:09:e9:34:23:6e:d4:12:b0:0c:f3:bc:ff:
0b:87:b4:c2:8c:23:21:a9:0b:7c:e5:d7:ea:76:3b:
f9:6d:ad:25:63:1c:a0:38:ee:82:36:57:ba:61:d4:
3c:70:67:9a:a5:90:c9:38:ec:e1:39:ac:f5:90:0c:
fd:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:12:5D:9F:DF:05:33:5C:3F:01:D3:0C:EF:13:5E:3F:CC:A7:62:9A
X509v3 Authority Key Identifier:
keyid:6D:69:DA:44:AE:06:7F:C1:A9:8A:5F:6F:05:F1:2E:54:5D:0F:C6:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bWnaRK4Gf8Gpil9vBfEuVF0Pxio.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/b1a82a-490f-43fb-986e-26170da4a0b1/1/WRJdn98FM1w_AdMM7xNeP8ynYpo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/b1a82a-490f-43fb-986e-26170da4a0b1/1/bWnaRK4Gf8Gpil9vBfEuVF0Pxio.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.169.64.0/22
31.169.69.0-31.169.72.255
31.169.74.0/24
31.169.76.0-31.169.78.255
31.169.81.0/24
31.169.88.0/24
31.169.90.0-31.169.95.255
185.33.61.0/24
185.33.63.0/24
IPv6:
2a00:5740::/29
Signature Algorithm: sha256WithRSAEncryption
8e:5b:71:c7:0e:e2:d5:2c:96:f9:32:be:c2:32:0f:9c:a6:58:
f4:fe:d1:5a:8b:51:50:7f:74:7d:ef:df:62:51:ee:2e:03:89:
f7:8f:eb:4b:64:ec:e3:3e:e0:73:ec:90:88:b2:1c:49:f1:30:
5c:7f:26:dd:95:da:20:cc:7d:36:5f:e4:51:81:5e:bd:87:e3:
5d:b0:9e:34:6f:78:bf:23:e2:5f:24:ba:30:dc:06:35:b6:65:
03:c2:98:d5:a6:e3:64:88:42:80:4d:ec:06:02:14:0f:9d:5e:
9e:11:19:ce:01:46:34:09:44:51:18:ec:be:64:39:0a:49:f5:
b7:1d:46:a5:df:cb:55:28:cb:f1:74:d8:92:5f:09:cf:5d:0a:
4f:44:5e:23:15:d0:df:63:30:ba:c2:2a:0c:58:6c:e1:d9:5f:
34:32:e2:3f:a3:30:bf:8d:ff:ca:30:09:a4:67:b4:8c:f5:fa:
d9:26:3f:f9:9f:30:22:2f:6a:df:6d:7a:d8:50:27:f2:73:5a:
ae:68:93:b2:0a:02:bb:d3:52:54:c6:f3:37:15:63:5c:70:b0:
ec:14:db:65:da:ef:3b:43:7a:57:81:4b:b6:4d:bd:be:87:78:
4e:cb:aa:6a:d1:be:92:ae:f8:c8:2c:ff:99:2c:c2:b9:39:76:
cd:0e:f1:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:54:56 2024 by rpki-client on console-fra.rpki-client.org