Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS31898.roa
File: AS31898.roa (raw, json)
Hash identifier: DEN7bsUKyD7Yjp4hiZtuOxl4F0m38yTRATfhlOCmopM=
Subject key identifier: 3A:73:9B:02:1A:D9:9E:37:D2:48:7C:68:97:7B:0B:16:41:47:34:30
Certificate issuer: /CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Certificate serial: 205B208957F6F553DBD3E34DCBEFD7DD2574757C
Authority key identifier: 61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS31898.roa
Signing time: Mon 12 Jun 2023 12:30:09 +0000
ROA not before: Mon 12 Jun 2023 12:25:09 +0000
ROA not after: Mon 10 Jun 2024 12:30:09 +0000
asID: 31898
IP address blocks: 193.227.135.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
20:5b:20:89:57:f6:f5:53:db:d3:e3:4d:cb:ef:d7:dd:25:74:75:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Validity
Not Before: Jun 12 12:25:09 2023 GMT
Not After : Jun 10 12:30:09 2024 GMT
Subject: CN=3A739B021AD99E37D2487C68977B0B1641473430
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:66:1e:f7:19:e1:f7:1c:63:92:57:8f:c2:0d:
32:85:03:8f:63:8a:6f:dc:01:c6:d8:65:85:30:e6:
74:42:ce:fe:b8:6c:8c:83:9d:2f:4a:9c:fd:4d:6e:
8c:ca:ef:32:a5:00:dc:b6:ae:a0:94:b8:0f:11:02:
d1:57:3e:b0:3b:20:23:a2:da:4c:c8:e2:1f:d3:e4:
d5:c8:86:64:25:d3:a7:14:90:ef:18:23:b4:d6:5b:
2d:0b:b0:d6:10:21:26:16:f4:b2:4c:9f:ea:f2:ee:
42:d4:90:47:74:bf:ff:4b:d1:fc:7a:e3:fa:b3:ae:
f2:1e:d3:df:19:1e:6d:5a:a2:36:db:b0:75:a2:f3:
2f:ff:a5:0d:df:9d:3f:35:49:dd:c2:fe:ba:b3:c0:
2d:e6:2e:02:3e:9e:8c:ef:7a:c4:7f:b3:08:1a:8e:
36:b1:86:16:54:99:47:48:61:9a:90:da:82:4d:2a:
27:d2:bc:fe:dd:38:d8:6e:c7:95:9c:18:61:b5:bd:
33:a2:c9:db:93:79:e2:17:d7:5a:65:7d:6e:9f:01:
29:96:3e:4d:60:bf:a5:64:97:fd:05:c1:15:93:88:
6c:57:97:0f:9a:c0:22:86:cd:b3:d5:42:93:d7:f0:
8c:5c:79:b4:6e:05:9d:35:a6:c3:54:e9:0f:4a:2d:
56:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:73:9B:02:1A:D9:9E:37:D2:48:7C:68:97:7B:0B:16:41:47:34:30
X509v3 Authority Key Identifier:
keyid:61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS31898.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.227.135.0/24
Signature Algorithm: sha256WithRSAEncryption
21:e1:ae:55:68:c4:e3:7c:72:46:52:7d:a8:27:bb:30:50:0c:
52:79:fa:1e:69:8a:b0:16:9a:2d:a9:24:f8:44:27:1d:b1:2f:
b8:a3:17:c1:3f:42:83:11:2e:fa:95:1a:7f:c3:14:16:fc:84:
a8:48:2d:dd:b6:74:3c:17:c5:0e:db:5a:03:2b:e4:6d:b2:d5:
6e:6d:3d:3d:7d:74:de:8d:47:01:22:0e:d3:ed:18:e7:3d:da:
77:68:da:ce:9c:ec:c2:50:64:24:87:62:2e:a9:44:1d:7d:f3:
f3:11:62:05:d0:86:69:81:26:06:fc:34:07:60:d2:6b:3e:4c:
fd:9b:6b:ea:cf:b8:99:4e:77:7c:91:ff:18:30:75:e3:52:fe:
c0:78:e2:6e:e8:26:94:b4:70:8f:56:86:c9:8f:86:03:0e:9d:
0f:aa:81:ca:04:7b:c0:4e:52:1c:44:3e:f8:64:09:aa:fa:0c:
89:f8:b5:2e:ba:52:4e:be:61:90:df:00:0c:42:a5:14:6a:d9:
62:a0:37:d9:05:93:f1:dc:f4:3c:9d:bb:6e:5c:af:77:4b:52:
5a:81:21:51:35:2e:29:58:e8:d9:06:8a:84:fd:b8:9d:2e:db:
f6:30:57:5c:ab:a3:d4:aa:69:55:ba:9b:04:55:a7:df:c6:f8:
93:29:cf:88
-----BEGIN CERTIFICATE-----
MIIE/zCCA+egAwIBAgIUIFsgiVf29VPb0+NNy+/X3SV0dXwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjFiMWJiNDQ0NzcxOGYxNmIzZDM2Njc1ZDIwNWM0ZGVh
NDFiYmEwYTAeFw0yMzA2MTIxMjI1MDlaFw0yNDA2MTAxMjMwMDlaMDMxMTAvBgNV
BAMTKDNBNzM5QjAyMUFEOTlFMzdEMjQ4N0M2ODk3N0IwQjE2NDE0NzM0MzAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqZh73GeH3HGOSV4/CDTKFA49j
im/cAcbYZYUw5nRCzv64bIyDnS9KnP1NbozK7zKlANy2rqCUuA8RAtFXPrA7ICOi
2kzI4h/T5NXIhmQl06cUkO8YI7TWWy0LsNYQISYW9LJMn+ry7kLUkEd0v/9L0fx6
4/qzrvIe098ZHm1aojbbsHWi8y//pQ3fnT81Sd3C/rqzwC3mLgI+nozvesR/swga
jjaxhhZUmUdIYZqQ2oJNKifSvP7dONhux5WcGGG1vTOiyduTeeIX11plfW6fASmW
Pk1gv6Vkl/0FwRWTiGxXlw+awCKGzbPVQpPX8IxcebRuBZ01psNU6Q9KLVb9AgMB
AAGjggIJMIICBTAdBgNVHQ4EFgQUOnObAhrZnjfSSHxol3sLFkFHNDAwHwYDVR0j
BBgwFoAUYbG7REdxjxaz02Z10gXE3qQbugowDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvNTM3NDU5ZTctMmE4My00M2QxLTlhYTEtNTg0MTdhYmFj
NGI2LzEvNjFCMUJCNDQ0NzcxOEYxNkIzRDM2Njc1RDIwNUM0REVBNDFCQkEwQS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1liRzdSRWR4anhhejAyWjEwZ1hFM3FR
YnVnby5jZXIwegYIKwYBBQUHAQsEbjBsMGoGCCsGAQUFBzALhl5yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzUzNzQ1OWU3LTJhODMt
NDNkMS05YWExLTU4NDE3YWJhYzRiNi8xL0FTMzE4OTgucm9hMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADB44cw
DQYJKoZIhvcNAQELBQADggEBACHhrlVoxON8ckZSfagnuzBQDFJ5+h5pirAWmi2p
JPhEJx2xL7ijF8E/QoMRLvqVGn/DFBb8hKhILd22dDwXxQ7bWgMr5G2y1W5tPT19
dN6NRwEiDtPtGOc92ndo2s6c7MJQZCSHYi6pRB198/MRYgXQhmmBJgb8NAdg0ms+
TP2ba+rPuJlOd3yR/xgwdeNS/sB44m7oJpS0cI9WhsmPhgMOnQ+qgcoEe8BOUhxE
PvhkCar6DIn4tS66Uk6+YZDfAAxCpRRq2WKgN9kFk/Hc9Dydu25cr3dLUlqBIVE1
LilY6NkGioT9uJ0u2/YwV1yro9SqaVW6mwRVp9/G+JMpz4g=
-----END CERTIFICATE-----
Generated at Thu Jun 6 20:01:04 2024 by rpki-client on console-ams.rpki-client.org