Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/b1a82a-490f-43fb-986e-26170da4a0b1/1/wHXI37cTs9pQT-xkEYJqUrPKL5k.roa
File: wHXI37cTs9pQT-xkEYJqUrPKL5k.roa (raw, json)
Hash identifier: mcJnmBdlcJsyPb5G0XSELmd3DaY3pi2R1EI84xJXq1s=
Subject key identifier: C0:75:C8:DF:B7:13:B3:DA:50:4F:EC:64:11:82:6A:52:B3:CA:2F:99
Certificate issuer: /CN=6d69da44ae067fc1a98a5f6f05f12e545d0fc62a
Certificate serial: 01884959D888832E76640465B05D004891B0
Authority key identifier: 6D:69:DA:44:AE:06:7F:C1:A9:8A:5F:6F:05:F1:2E:54:5D:0F:C6:2A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bWnaRK4Gf8Gpil9vBfEuVF0Pxio.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/b1a82a-490f-43fb-986e-26170da4a0b1/1/wHXI37cTs9pQT-xkEYJqUrPKL5k.roa
Signing time: Tue 23 May 2023 16:03:24 +0000
ROA not before: Tue 23 May 2023 16:03:24 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 56582
IP address blocks: 185.33.61.0/24 maxlen: 24
185.33.63.0/24 maxlen: 24
31.169.65.0/24 maxlen: 24
31.169.70.0/24 maxlen: 24
31.169.69.0/24 maxlen: 24
31.169.71.0/24 maxlen: 24
31.169.67.0/24 maxlen: 24
31.169.66.0/24 maxlen: 24
31.169.72.0/24 maxlen: 24
31.169.77.0/24 maxlen: 24
31.169.76.0/24 maxlen: 24
31.169.78.0/24 maxlen: 24
31.169.74.0/24 maxlen: 24
31.169.81.0/24 maxlen: 24
31.169.91.0/24 maxlen: 24
31.169.90.0/24 maxlen: 24
31.169.88.0/24 maxlen: 24
31.169.93.0/24 maxlen: 24
31.169.92.0/24 maxlen: 24
31.169.94.0/24 maxlen: 24
31.169.95.0/24 maxlen: 24
31.169.64.0/24 maxlen: 24
2a00:5740::/29 maxlen: 29
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:49:59:d8:88:83:2e:76:64:04:65:b0:5d:00:48:91:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d69da44ae067fc1a98a5f6f05f12e545d0fc62a
Validity
Not Before: May 23 16:03:24 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c075c8dfb713b3da504fec6411826a52b3ca2f99
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:de:0e:2b:08:76:20:71:65:41:1d:a8:15:cd:
80:4b:9e:3f:ed:68:b0:82:05:37:f4:7f:e5:19:0f:
d8:b6:63:7b:a2:7e:7d:22:1e:91:bf:43:6c:4c:8d:
80:c3:db:c3:6f:43:63:ab:8e:45:05:f5:05:64:3c:
9f:0f:57:32:87:de:63:95:99:fc:a8:43:3b:af:42:
97:f8:79:7a:23:c9:6f:18:52:55:00:9d:ca:73:c1:
3d:e0:a4:b5:bb:70:ce:c8:01:ad:9a:75:52:7f:c2:
74:22:37:32:c9:8a:89:3e:95:27:31:1e:ec:92:35:
34:a0:d7:2a:01:9a:50:f1:9c:f5:0a:4c:15:77:d0:
84:99:53:11:29:89:01:66:64:88:2d:3d:ce:c3:a4:
6a:bf:03:38:04:76:77:da:a4:88:13:ce:b4:65:04:
58:4a:77:0e:ef:5d:2c:3d:9c:c0:9f:9a:2a:85:58:
17:d3:36:c5:33:fe:4d:3c:12:97:a1:4e:57:5e:db:
39:f7:ad:13:af:5a:4e:1a:7a:87:0b:fb:ec:24:87:
9b:31:35:ee:ca:f4:34:02:bf:5c:fe:9b:ac:96:a0:
d1:a5:3a:59:b7:b2:60:59:d2:f7:da:27:f8:a2:aa:
cd:b9:cf:f0:31:bc:29:b7:50:2c:c8:7b:2d:32:3b:
77:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:75:C8:DF:B7:13:B3:DA:50:4F:EC:64:11:82:6A:52:B3:CA:2F:99
X509v3 Authority Key Identifier:
keyid:6D:69:DA:44:AE:06:7F:C1:A9:8A:5F:6F:05:F1:2E:54:5D:0F:C6:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bWnaRK4Gf8Gpil9vBfEuVF0Pxio.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/b1a82a-490f-43fb-986e-26170da4a0b1/1/wHXI37cTs9pQT-xkEYJqUrPKL5k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/b1a82a-490f-43fb-986e-26170da4a0b1/1/bWnaRK4Gf8Gpil9vBfEuVF0Pxio.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.169.64.0/22
31.169.69.0-31.169.72.255
31.169.74.0/24
31.169.76.0-31.169.78.255
31.169.81.0/24
31.169.88.0/24
31.169.90.0-31.169.95.255
185.33.61.0/24
185.33.63.0/24
IPv6:
2a00:5740::/29
Signature Algorithm: sha256WithRSAEncryption
4f:7e:b6:6e:c1:2e:7e:86:7d:dc:33:12:aa:d9:f3:08:d0:4f:
8c:4b:ad:76:ce:e6:c5:c1:bb:2e:21:99:fa:b6:33:20:21:80:
0e:c7:98:5a:e9:d1:31:70:7d:30:b1:6c:7a:c7:f8:b3:ab:ff:
a6:55:e7:0b:6d:d9:c3:0d:3d:ab:0e:07:e3:96:6f:b8:d4:86:
af:72:ab:77:c0:ed:07:14:41:6c:2f:71:45:97:d7:14:92:5d:
86:b4:35:da:85:63:46:cb:6d:4b:d4:3a:42:8d:28:62:72:cc:
15:90:41:00:25:07:53:18:34:5f:5a:69:b8:1c:39:34:84:c2:
6d:cf:fb:55:95:17:31:65:92:69:67:e6:73:28:32:76:82:0e:
72:12:2d:19:a5:38:1a:96:f7:91:bc:0e:00:46:1b:af:51:b4:
f8:4d:3a:b5:b1:d6:74:5b:99:05:6f:8e:71:ca:06:09:2d:fe:
b9:f3:43:aa:25:a8:ee:7d:d8:82:a6:f9:f4:4a:63:ba:8b:d1:
94:6f:a7:3b:90:1a:71:8d:9e:bd:d0:99:e0:23:14:da:82:d9:
7f:ad:6e:bd:bf:c7:ac:dc:cd:68:50:eb:81:5e:3f:34:59:5a:
5e:ca:3e:4f:fd:5e:ae:2a:1e:6b:e2:d0:a7:15:04:2c:32:26:
f2:8c:a8:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:45:47 2024 by rpki-client on console-ams.rpki-client.org