Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/9577f8-b8b8-4994-b855-a98ef3008580/1/1-PkK3vGltDZVJa08I2HsCb77ucU.roa
File: 1-PkK3vGltDZVJa08I2HsCb77ucU.roa (raw, json)
Hash identifier: 7tFbCUTWVBVaY5zQFipBnfR993wUJuhtX5WbaMRTMgQ=
Subject key identifier: F8:F9:0A:DE:F1:A5:B4:36:55:25:AD:3C:23:61:EC:09:BE:FB:B9:C5
Certificate issuer: /CN=ce56360624cc1b4c49da72bc325f5bb6ab4d8300
Certificate serial: 018CC8DEBB0E869B25CED970B4ACC502E20E
Authority key identifier: CE:56:36:06:24:CC:1B:4C:49:DA:72:BC:32:5F:5B:B6:AB:4D:83:00
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zlY2BiTMG0xJ2nK8Ml9btqtNgwA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/9577f8-b8b8-4994-b855-a98ef3008580/1/1-PkK3vGltDZVJa08I2HsCb77ucU.roa
Signing time: Tue 02 Jan 2024 06:31:29 +0000
ROA not before: Tue 02 Jan 2024 06:31:29 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 25530
IP address blocks: 62.113.34.0/23 maxlen: 23
62.113.38.0/24 maxlen: 24
62.113.32.0/23 maxlen: 23
62.113.36.0/23 maxlen: 23
62.113.33.0/24 maxlen: 24
62.113.40.0/21 maxlen: 21
62.113.45.0/24 maxlen: 24
62.113.48.0/21 maxlen: 21
62.113.56.0/22 maxlen: 22
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:de:bb:0e:86:9b:25:ce:d9:70:b4:ac:c5:02:e2:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ce56360624cc1b4c49da72bc325f5bb6ab4d8300
Validity
Not Before: Jan 2 06:31:29 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f8f90adef1a5b4365525ad3c2361ec09befbb9c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:b0:25:e3:d0:eb:5d:12:81:fd:5e:d3:7e:6e:
9b:32:4e:7f:d2:a7:c9:a9:bf:2f:51:3d:1b:fd:d0:
dd:4e:34:de:37:f2:e0:15:b1:98:7c:11:ae:ba:9d:
8b:62:22:40:2d:8e:68:d4:9e:82:7c:66:bd:07:51:
c7:01:a3:8b:b0:d1:6b:2f:d1:00:f2:22:5e:b2:fe:
de:d7:00:a2:41:79:4f:fc:98:fa:36:b7:86:13:05:
18:67:93:50:7a:42:6f:ec:60:1d:0c:0b:a6:32:42:
1f:e4:98:58:38:a2:c5:28:ab:ba:d9:1c:79:0d:4d:
99:d7:ef:d8:2c:f6:3c:82:aa:35:7c:17:b9:84:77:
a2:d4:6d:44:ed:43:23:77:20:7e:ef:0e:a9:cd:63:
a5:bd:70:36:e5:b9:b1:db:88:8a:5d:d5:f1:2f:6c:
fb:f1:1e:8b:0e:67:3a:c1:cf:b9:47:61:38:53:10:
b0:c9:68:ab:ce:35:7f:9b:9b:47:d6:95:b2:54:a8:
62:9d:57:f0:b0:ea:71:b4:0b:0d:ef:26:ed:a6:ca:
0f:c7:cf:eb:fe:7f:a9:f8:b3:7d:8b:31:4f:89:ae:
7c:54:af:49:10:de:6b:cb:0b:eb:2a:32:ed:ff:66:
88:bd:42:85:ee:80:f3:84:da:3b:0c:28:23:a8:d3:
38:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:F9:0A:DE:F1:A5:B4:36:55:25:AD:3C:23:61:EC:09:BE:FB:B9:C5
X509v3 Authority Key Identifier:
keyid:CE:56:36:06:24:CC:1B:4C:49:DA:72:BC:32:5F:5B:B6:AB:4D:83:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zlY2BiTMG0xJ2nK8Ml9btqtNgwA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/9577f8-b8b8-4994-b855-a98ef3008580/1/1-PkK3vGltDZVJa08I2HsCb77ucU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/9577f8-b8b8-4994-b855-a98ef3008580/1/zlY2BiTMG0xJ2nK8Ml9btqtNgwA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.113.32.0-62.113.38.255
62.113.40.0-62.113.59.255
Signature Algorithm: sha256WithRSAEncryption
9e:f9:48:4e:4c:14:6b:b5:ef:76:9a:c4:46:66:41:d0:f6:ce:
4d:dc:59:fd:b6:91:7d:3e:f7:f9:aa:f1:f4:c6:71:2b:63:ad:
44:58:44:1f:67:d7:dc:d7:59:b0:3f:ab:ce:bc:85:40:4a:dc:
9b:c4:03:7d:a6:5a:78:35:de:f9:47:2f:15:91:7e:10:6b:41:
3f:31:0f:07:11:47:1a:b1:ea:d5:e2:75:6e:f5:bf:95:f5:be:
84:c1:05:8f:d8:2f:15:78:1d:84:09:37:41:e4:22:c1:e1:5d:
65:da:b4:4c:2a:2e:f8:30:f6:aa:3f:f0:71:35:ea:0b:46:d4:
ea:62:45:9a:5e:6c:64:af:53:a7:2d:71:a6:57:e8:5f:91:41:
a1:e8:35:ca:32:fb:9c:0a:5c:e3:d5:c3:ff:49:d7:cf:34:6f:
cc:1f:89:d1:39:98:fc:87:fb:94:4b:b7:07:7d:f6:0d:80:c9:
f5:fc:9d:a2:d1:d2:70:32:b7:d2:17:cd:b5:db:e5:1c:0c:a4:
ce:7f:a4:61:55:70:9d:ef:cb:96:3d:38:49:95:93:ff:3f:13:
8c:66:9e:cc:9a:89:9f:ab:b6:1e:e4:c9:75:b8:a3:75:49:f9:
ad:27:da:ae:0d:62:dc:f0:c3:90:b7:ca:1f:64:d1:25:e5:6e:
15:9b:36:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:57:11 2024 by rpki-client on console-fra.rpki-client.org