Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/b1a82a-490f-43fb-986e-26170da4a0b1/1/ariemRq2tu5RqL0tl6WcZ2LASJo.roa
File: ariemRq2tu5RqL0tl6WcZ2LASJo.roa (raw, json)
Hash identifier: NCnpe7J3X/ZM+2WGIo16SJPzB2HgbrYPTyhPMdd+b3g=
Subject key identifier: 6A:B8:9E:99:1A:B6:B6:EE:51:A8:BD:2D:97:A5:9C:67:62:C0:48:9A
Certificate issuer: /CN=6d69da44ae067fc1a98a5f6f05f12e545d0fc62a
Certificate serial: 37386F36
Authority key identifier: 6D:69:DA:44:AE:06:7F:C1:A9:8A:5F:6F:05:F1:2E:54:5D:0F:C6:2A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bWnaRK4Gf8Gpil9vBfEuVF0Pxio.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/b1a82a-490f-43fb-986e-26170da4a0b1/1/ariemRq2tu5RqL0tl6WcZ2LASJo.roa
Signing time: Sat 08 Jan 2022 09:51:19 +0000
ROA not before: Sat 08 Jan 2022 09:51:19 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 9121
IP address blocks: 185.33.61.0/24 maxlen: 24
185.33.63.0/24 maxlen: 24
31.169.68.0/24 maxlen: 24
31.169.69.0/24 maxlen: 24
31.169.70.0/24 maxlen: 24
31.169.65.0/24 maxlen: 24
31.169.66.0/24 maxlen: 24
31.169.67.0/24 maxlen: 24
31.169.71.0/24 maxlen: 24
31.169.78.0/24 maxlen: 24
31.169.76.0/24 maxlen: 24
31.169.77.0/24 maxlen: 24
31.169.72.0/24 maxlen: 24
31.169.74.0/24 maxlen: 24
31.169.81.0/24 maxlen: 24
31.169.79.0/24 maxlen: 24
31.169.88.0/24 maxlen: 24
31.169.90.0/24 maxlen: 24
31.169.91.0/24 maxlen: 24
31.169.95.0/24 maxlen: 24
31.169.92.0/24 maxlen: 24
31.169.93.0/24 maxlen: 24
31.169.94.0/24 maxlen: 24
31.169.64.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 926445366 (0x37386f36)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d69da44ae067fc1a98a5f6f05f12e545d0fc62a
Validity
Not Before: Jan 8 09:51:19 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6ab89e991ab6b6ee51a8bd2d97a59c6762c0489a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:b7:78:ba:c3:b4:c5:84:19:eb:27:dd:74:74:
6c:60:d2:4d:cc:70:91:99:f3:3e:d6:30:6e:39:a3:
78:5b:5e:09:eb:20:92:20:06:58:f0:6e:f2:94:c9:
1f:42:48:60:d6:d5:96:79:a9:0a:92:38:f4:16:e7:
80:2c:2e:d5:84:6e:63:21:b4:3c:a1:29:83:3a:3c:
61:a2:e2:b6:5c:e8:fe:e6:51:ab:24:eb:51:63:de:
35:08:f7:28:b5:98:ff:ec:86:65:66:97:87:9a:92:
1b:27:94:a5:f2:47:89:4b:a6:67:c9:97:f1:8e:fb:
d6:d0:66:07:8e:10:ec:e8:6a:6e:63:74:aa:fb:c7:
e9:a4:d9:cd:17:da:82:e5:b6:e6:0d:14:53:ec:ec:
11:e4:2f:63:c9:89:30:ee:4b:f6:2d:6b:3a:30:40:
5b:9e:e3:44:5a:ee:42:7c:8c:ac:37:53:a8:9e:b3:
e7:80:ed:53:8f:cb:a5:3b:f4:75:62:61:b4:da:4a:
33:07:8f:a3:22:46:90:f0:50:ef:cd:9f:86:86:9e:
7d:57:ce:b9:89:f4:21:a8:85:c2:f9:08:e4:65:9d:
56:c8:1d:d6:ab:97:1b:ef:4e:82:b9:da:f6:84:fb:
a1:c7:64:82:66:0e:09:9f:cd:dd:6f:0a:fb:d6:db:
6e:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:B8:9E:99:1A:B6:B6:EE:51:A8:BD:2D:97:A5:9C:67:62:C0:48:9A
X509v3 Authority Key Identifier:
keyid:6D:69:DA:44:AE:06:7F:C1:A9:8A:5F:6F:05:F1:2E:54:5D:0F:C6:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bWnaRK4Gf8Gpil9vBfEuVF0Pxio.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/b1a82a-490f-43fb-986e-26170da4a0b1/1/ariemRq2tu5RqL0tl6WcZ2LASJo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/b1a82a-490f-43fb-986e-26170da4a0b1/1/bWnaRK4Gf8Gpil9vBfEuVF0Pxio.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.169.64.0-31.169.72.255
31.169.74.0/24
31.169.76.0/22
31.169.81.0/24
31.169.88.0/24
31.169.90.0-31.169.95.255
185.33.61.0/24
185.33.63.0/24
Signature Algorithm: sha256WithRSAEncryption
47:6a:18:02:99:cb:0b:0e:63:a9:2b:78:f1:29:93:d6:79:96:
36:be:6d:ee:37:74:2f:e5:80:74:73:b3:72:f7:8d:88:a5:33:
4b:7d:d2:ae:4c:49:be:35:8e:e6:e2:1f:40:da:17:0e:1f:29:
45:c9:2f:d1:30:e8:60:16:24:a7:47:be:ad:31:2f:fb:a5:1c:
0b:71:4c:f9:52:33:0e:f2:b4:b6:5f:44:c1:0d:a4:03:80:14:
10:da:8c:2b:35:c8:6d:dc:ec:95:cd:6e:09:59:f2:7e:6d:a2:
d6:e8:f4:9a:b1:fc:fe:32:84:3e:2d:ee:4b:fc:4e:f5:a0:38:
d4:e0:46:2b:b8:7d:bb:b8:f3:f0:cc:65:6a:79:34:dc:b6:ac:
47:00:ef:ce:ea:07:8a:02:9e:d1:77:6e:91:0e:37:28:75:05:
0b:55:78:98:22:50:cc:27:51:da:6a:1c:d7:c3:b1:23:37:1d:
37:68:a5:0e:78:5a:39:d2:6f:46:4d:bc:02:38:d5:23:f7:f4:
8c:57:70:d1:cd:cb:7d:c7:e1:96:f2:00:05:b9:fc:6b:42:77:
b6:0b:5a:2b:70:a6:ec:dd:40:f3:97:61:39:15:ff:9f:ce:61:
c4:f2:6a:c5:0d:60:96:87:89:63:11:5b:e1:9e:bc:ea:a3:f6:
e2:ec:3e:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:45:47 2024 by rpki-client on console-ams.rpki-client.org