Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/b1a82a-490f-43fb-986e-26170da4a0b1/1/j0p5K5go7lPlnqMtr7EkG_-G-YU.roa
File: j0p5K5go7lPlnqMtr7EkG_-G-YU.roa (raw, json)
Hash identifier: C2F8zyjokqirzjUMNFc5yGCAF6gABHixWE4kJ+tZHZs=
Subject key identifier: 8F:4A:79:2B:98:28:EE:53:E5:9E:A3:2D:AF:B1:24:1B:FF:86:F9:85
Certificate issuer: /CN=6d69da44ae067fc1a98a5f6f05f12e545d0fc62a
Certificate serial: 3766ABC6
Authority key identifier: 6D:69:DA:44:AE:06:7F:C1:A9:8A:5F:6F:05:F1:2E:54:5D:0F:C6:2A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bWnaRK4Gf8Gpil9vBfEuVF0Pxio.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/b1a82a-490f-43fb-986e-26170da4a0b1/1/j0p5K5go7lPlnqMtr7EkG_-G-YU.roa
Signing time: Sat 29 Jan 2022 20:55:51 +0000
ROA not before: Sat 29 Jan 2022 20:55:51 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 9121
IP address blocks: 185.33.61.0/24 maxlen: 24
185.33.63.0/24 maxlen: 24
31.169.68.0/24 maxlen: 24
31.169.69.0/24 maxlen: 24
31.169.70.0/24 maxlen: 24
31.169.65.0/24 maxlen: 24
31.169.66.0/24 maxlen: 24
31.169.67.0/24 maxlen: 24
31.169.71.0/24 maxlen: 24
31.169.78.0/24 maxlen: 24
31.169.76.0/24 maxlen: 24
31.169.77.0/24 maxlen: 24
31.169.72.0/24 maxlen: 24
31.169.74.0/24 maxlen: 24
31.169.81.0/24 maxlen: 24
31.169.88.0/24 maxlen: 24
31.169.90.0/24 maxlen: 24
31.169.91.0/24 maxlen: 24
31.169.95.0/24 maxlen: 24
31.169.92.0/24 maxlen: 24
31.169.93.0/24 maxlen: 24
31.169.94.0/24 maxlen: 24
31.169.64.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 929475526 (0x3766abc6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d69da44ae067fc1a98a5f6f05f12e545d0fc62a
Validity
Not Before: Jan 29 20:55:51 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=8f4a792b9828ee53e59ea32dafb1241bff86f985
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:f7:a4:7f:ed:fe:df:8b:32:fa:27:6b:62:92:
bd:7f:8e:57:74:d2:1c:ef:8d:24:85:a7:af:bb:12:
4b:16:5f:0a:4c:70:5b:c6:53:23:d3:68:e7:3b:6a:
b7:f7:d7:4a:6d:6a:d4:10:f8:73:6f:37:28:6b:f9:
06:05:11:da:fc:b1:a7:e0:13:84:55:9e:3b:75:0b:
88:1d:dd:c7:b1:91:22:a3:fe:41:9c:1c:17:59:c8:
49:3a:5a:8f:6f:64:15:7e:2b:82:1e:94:91:7d:8c:
dd:a9:b3:4c:31:3c:d6:56:17:5e:b2:4b:49:e9:eb:
50:ea:d9:12:78:14:85:58:99:be:15:54:01:77:5d:
0f:9d:76:b3:be:d0:26:5d:38:57:5a:2a:e7:32:7a:
f7:90:3f:9d:3e:c0:bc:03:f7:36:1b:10:d8:d9:73:
3e:8d:72:4c:9e:31:88:28:28:f4:bc:53:6a:b3:70:
63:1d:9a:1f:03:04:65:f3:e8:2d:dc:d3:cd:eb:f8:
ec:1f:2d:c1:bb:54:59:99:c6:6c:0e:16:a5:80:b4:
a3:7f:7c:2f:1c:15:f1:2d:01:43:37:3a:98:5c:47:
cb:82:a1:d6:88:2b:22:a3:57:c9:44:a3:f4:36:29:
9c:ea:f3:e0:73:b4:e0:a3:be:25:01:45:e9:b2:5c:
93:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:4A:79:2B:98:28:EE:53:E5:9E:A3:2D:AF:B1:24:1B:FF:86:F9:85
X509v3 Authority Key Identifier:
keyid:6D:69:DA:44:AE:06:7F:C1:A9:8A:5F:6F:05:F1:2E:54:5D:0F:C6:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bWnaRK4Gf8Gpil9vBfEuVF0Pxio.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/b1a82a-490f-43fb-986e-26170da4a0b1/1/j0p5K5go7lPlnqMtr7EkG_-G-YU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/b1a82a-490f-43fb-986e-26170da4a0b1/1/bWnaRK4Gf8Gpil9vBfEuVF0Pxio.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.169.64.0-31.169.72.255
31.169.74.0/24
31.169.76.0-31.169.78.255
31.169.81.0/24
31.169.88.0/24
31.169.90.0-31.169.95.255
185.33.61.0/24
185.33.63.0/24
Signature Algorithm: sha256WithRSAEncryption
32:bb:ab:85:be:f5:8b:01:28:18:62:d2:0c:4b:fc:8e:d0:7a:
1a:26:36:01:3d:59:52:c8:20:df:0b:97:b3:93:8a:46:9f:9c:
d7:61:32:41:7d:cc:7a:5e:d4:93:3f:6c:3b:30:10:17:b7:0d:
30:c0:5d:75:9b:66:a3:bd:21:8e:dd:01:be:ef:fa:da:4b:fb:
11:4e:dd:ad:94:99:bf:30:26:2f:a3:79:30:55:84:76:d9:e8:
0e:ac:ec:5c:7d:2b:14:ba:66:55:2a:07:44:53:b1:a1:bc:14:
b8:7b:99:f1:38:77:50:c8:7d:3a:59:74:d0:37:68:35:41:5c:
8d:69:a8:08:09:0e:fd:5a:fd:fd:13:1a:92:77:f4:85:9b:5a:
ea:33:eb:ad:0e:62:d4:33:23:1c:48:08:99:28:88:71:f4:77:
db:1a:bb:55:b1:1b:f7:62:d2:b3:40:ac:81:b5:a0:c2:e8:79:
1b:5e:e5:9a:f0:b2:d7:d6:e8:08:d2:fb:21:23:26:f4:90:c1:
53:96:94:23:62:56:53:97:b3:a3:aa:30:9c:10:20:21:b1:17:
b9:d7:dd:2a:8b:40:a8:6b:ca:a4:bc:2b:ce:ab:73:e8:a5:ed:
77:52:c4:0e:c3:18:5f:b9:b2:18:ae:b6:f2:e7:ef:0c:b5:2a:
1e:fe:36:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:54:56 2024 by rpki-client on console-fra.rpki-client.org