Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/4bba7c-a81f-40e1-8814-65daad632957/1/puRYcnI5yL7acRGk_pt_ESGHOr4.roa
File: puRYcnI5yL7acRGk_pt_ESGHOr4.roa (raw, json)
Hash identifier: Mv0RX1RE+LGpdEWVhb6vBDlP4GjGevq3NpzwMxPD8LE=
Subject key identifier: A6:E4:58:72:72:39:C8:BE:DA:71:11:A4:FE:9B:7F:11:21:87:3A:BE
Certificate issuer: /CN=942588b91da9cca81b49e603a988e2b1eabddc98
Certificate serial: 09233481
Authority key identifier: 94:25:88:B9:1D:A9:CC:A8:1B:49:E6:03:A9:88:E2:B1:EA:BD:DC:98
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lCWIuR2pzKgbSeYDqYjiseq93Jg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/4bba7c-a81f-40e1-8814-65daad632957/1/puRYcnI5yL7acRGk_pt_ESGHOr4.roa
Signing time: Thu 09 Jun 2022 11:24:02 +0000
ROA not before: Thu 09 Jun 2022 11:24:02 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 15596
IP address blocks: 31.42.112.0/20 maxlen: 20
31.42.124.0/22 maxlen: 22
91.210.144.0/22 maxlen: 22
89.251.24.0/22 maxlen: 22
89.251.20.0/22 maxlen: 22
193.110.20.0/22 maxlen: 22
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 153302145 (0x9233481)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=942588b91da9cca81b49e603a988e2b1eabddc98
Validity
Not Before: Jun 9 11:24:02 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a6e458727239c8beda7111a4fe9b7f1121873abe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:2a:15:31:be:46:ab:b6:07:47:28:b9:13:7e:
35:09:4e:3e:ec:ee:e8:aa:87:f9:3a:4c:70:02:3a:
2d:4e:ea:7b:08:2e:5d:cb:32:00:7b:ce:29:12:7c:
a7:b1:b6:70:c7:44:1d:78:70:38:91:ff:4a:dc:91:
f8:c6:02:14:0c:98:05:6c:be:9a:9b:e9:52:b1:4f:
cc:a8:a9:2d:42:68:32:c1:f7:01:1d:6a:0f:5d:15:
a8:eb:92:b0:52:c3:27:e4:e0:dc:a4:08:e3:bb:79:
f3:32:a0:a7:ec:2d:0c:8c:c7:c9:79:b4:57:3f:d6:
17:c1:8b:32:ff:a0:fa:0b:b5:1e:fd:69:50:7a:f9:
4e:49:4f:b5:b6:97:27:35:de:14:96:38:b1:f6:1b:
7e:1e:cb:ea:61:fc:18:ba:57:98:9a:47:2d:ff:09:
9a:bf:72:eb:c6:fb:97:6e:c2:8d:fd:2f:d8:c0:1e:
12:49:3d:c0:fb:65:b9:87:4c:b9:8c:70:b1:6c:50:
ba:3f:6f:fc:5b:c6:cf:45:54:7d:88:d2:8a:d2:f0:
78:fb:bd:8a:f5:0c:20:b7:c1:15:50:f3:cf:5a:89:
d3:94:00:30:3c:a9:7f:c4:8f:80:3d:8e:7f:38:51:
06:39:dc:d3:ba:c6:e5:8d:68:93:e0:dc:fc:9b:4d:
ba:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:E4:58:72:72:39:C8:BE:DA:71:11:A4:FE:9B:7F:11:21:87:3A:BE
X509v3 Authority Key Identifier:
keyid:94:25:88:B9:1D:A9:CC:A8:1B:49:E6:03:A9:88:E2:B1:EA:BD:DC:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lCWIuR2pzKgbSeYDqYjiseq93Jg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/4bba7c-a81f-40e1-8814-65daad632957/1/puRYcnI5yL7acRGk_pt_ESGHOr4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/4bba7c-a81f-40e1-8814-65daad632957/1/lCWIuR2pzKgbSeYDqYjiseq93Jg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.42.112.0/20
89.251.20.0-89.251.27.255
91.210.144.0/22
193.110.20.0/22
Signature Algorithm: sha256WithRSAEncryption
2c:5d:e3:0b:7c:09:cd:79:0c:b1:54:8a:09:a0:39:3d:34:49:
b2:ea:d1:65:8d:51:a3:90:49:f0:ea:7f:3e:d3:be:16:7d:a1:
36:12:8c:38:51:26:31:9e:4f:d4:93:3b:df:37:39:f8:c7:32:
fe:c0:0e:f3:fb:a9:47:d8:57:d7:66:bd:34:b7:3c:4b:c5:68:
88:77:0c:3c:f2:16:4c:53:9c:2d:81:67:f3:96:7c:7b:d4:b5:
af:79:bf:67:7c:fb:68:e9:70:7d:44:f8:46:c6:ee:2b:04:33:
d4:80:69:12:d7:30:44:64:4a:22:14:73:6e:f3:37:13:91:cd:
37:9e:4e:a7:24:d0:bb:b9:d4:f5:e3:ae:7d:25:fc:19:65:3a:
d3:12:55:43:49:18:4c:98:3d:5b:f7:5e:f8:1e:32:65:02:18:
8d:1f:16:06:78:66:bb:12:6b:38:fa:f1:84:15:7f:bf:88:02:
ad:e8:53:f8:ab:b5:8a:9a:3f:af:30:d3:89:13:28:e4:09:f9:
aa:b3:c8:68:f8:2a:b7:5a:b3:cb:f0:42:a0:09:07:31:49:7a:
f5:c3:d1:86:41:01:07:05:88:82:a1:38:eb:33:4b:c3:33:a7:
d3:a8:30:3a:4d:46:16:57:21:c6:b1:50:43:7c:84:a4:66:68:
17:ba:e1:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 05:27:45 2025 by rpki-client