Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/fddf47-ff64-447a-b98f-55104173b180/1/4EhRikRfzMPm38uVciIkjA6vRMg.roa
File: 4EhRikRfzMPm38uVciIkjA6vRMg.roa (raw, json)
Hash identifier: Dfo2ib2nt9dePh/Qcp9IP4Ek6KouzztZX4vF3AoRsGc=
Subject key identifier: E0:48:51:8A:44:5F:CC:C3:E6:DF:CB:95:72:22:24:8C:0E:AF:44:C8
Certificate issuer: /CN=632cd87feabe407522e06553f2eb05a0c1602fbf
Certificate serial: 018D13D7F130C3D5168B4500BA969CF59692
Authority key identifier: 63:2C:D8:7F:EA:BE:40:75:22:E0:65:53:F2:EB:05:A0:C1:60:2F:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YyzYf-q-QHUi4GVT8usFoMFgL78.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/fddf47-ff64-447a-b98f-55104173b180/1/4EhRikRfzMPm38uVciIkjA6vRMg.roa
Signing time: Tue 16 Jan 2024 19:55:35 +0000
ROA not before: Tue 16 Jan 2024 19:55:35 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 212667
IP address blocks: 31.222.243.0/24 maxlen: 24
176.56.36.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:13:d7:f1:30:c3:d5:16:8b:45:00:ba:96:9c:f5:96:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=632cd87feabe407522e06553f2eb05a0c1602fbf
Validity
Not Before: Jan 16 19:55:35 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e048518a445fccc3e6dfcb957222248c0eaf44c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:00:e7:ec:ed:b9:f9:a3:36:36:d6:4e:4d:8a:
4c:bd:85:25:c3:36:cf:d2:f1:cb:fc:82:09:dc:4e:
d4:5f:8c:d0:fc:9c:2a:f6:5d:6d:5d:78:19:7f:e3:
02:80:3a:9c:07:9b:dd:1a:fd:e9:93:a1:06:47:e1:
60:a2:89:e2:2f:a8:25:c7:ca:38:87:e5:7a:0c:70:
b2:96:91:a1:4e:2f:29:08:51:3c:b7:fd:6c:1b:c3:
d3:88:e6:16:b1:b1:7f:54:e8:c4:7c:e5:9f:6d:a8:
7c:61:b7:98:61:a5:91:82:57:6b:cc:35:cd:a0:0b:
bc:a9:d1:86:e5:0c:d2:6b:c8:f8:85:dd:8c:92:30:
f2:87:82:76:e0:27:17:34:a3:26:55:b8:f5:6c:da:
8b:f8:19:74:ec:2e:fe:38:fc:2b:1a:64:6e:5f:45:
15:b6:da:70:46:f2:0f:60:1b:59:30:5c:7a:56:23:
63:33:c6:28:ef:34:fb:f3:bc:97:69:25:44:af:fd:
f1:c8:21:75:00:1c:fa:b3:df:19:5a:c7:a0:93:cc:
2a:c2:cc:61:91:d5:fe:a1:d2:c8:5e:ec:0d:a4:a7:
59:ad:f5:53:6a:09:6c:e7:bc:e4:fa:83:26:93:7b:
73:ce:9e:59:b1:e9:17:82:44:67:5a:2e:b4:e0:e0:
9c:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:48:51:8A:44:5F:CC:C3:E6:DF:CB:95:72:22:24:8C:0E:AF:44:C8
X509v3 Authority Key Identifier:
keyid:63:2C:D8:7F:EA:BE:40:75:22:E0:65:53:F2:EB:05:A0:C1:60:2F:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YyzYf-q-QHUi4GVT8usFoMFgL78.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/fddf47-ff64-447a-b98f-55104173b180/1/4EhRikRfzMPm38uVciIkjA6vRMg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/fddf47-ff64-447a-b98f-55104173b180/1/YyzYf-q-QHUi4GVT8usFoMFgL78.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.222.243.0/24
176.56.36.0/24
Signature Algorithm: sha256WithRSAEncryption
63:bf:32:21:74:16:c9:68:93:6a:d3:b9:82:c3:3f:bc:fe:0d:
a0:d2:e6:68:ea:ed:e6:b9:a7:00:13:46:6e:45:98:b6:95:a6:
2d:67:e7:da:11:de:af:cc:88:e6:e2:ff:37:7a:78:19:49:11:
a9:b9:ad:64:c1:e9:ca:93:a7:70:3e:8a:a0:56:e1:27:8f:a4:
61:30:cd:99:19:30:ea:59:6b:d4:8b:57:9d:fb:0c:a7:ec:eb:
9b:8f:6e:d7:42:17:0f:ea:a1:f6:20:65:78:61:a8:b1:7e:8e:
30:e1:61:38:55:83:a4:a1:f7:8c:76:0c:e2:70:69:5b:88:91:
ca:01:dc:db:af:de:ad:b1:ed:15:1c:a8:d9:fd:22:60:40:a6:
c9:d2:69:a6:63:dc:35:9a:b0:e3:4f:f2:e4:89:9d:42:a8:65:
db:2a:97:52:dc:9d:a2:45:50:83:e1:c5:a4:a4:45:5f:82:50:
71:9e:72:a3:e1:06:06:e4:5b:88:6e:e4:1a:63:1a:0d:27:33:
c9:99:d1:cd:88:67:b0:4b:9c:6a:5f:a3:b1:d8:61:f3:f9:9b:
a0:96:8b:d9:39:f5:3a:ef:71:1f:9a:aa:a3:e6:c4:0e:83:81:
6a:ed:02:0d:5f:3b:ba:42:f9:81:60:bb:37:56:73:d0:a4:aa:
a9:89:b2:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:48:30 2024 by rpki-client on console-ams.rpki-client.org