Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/dffa9b-1d69-4869-9dc4-867d1d877140/1/FXraYhajpX0wkqZjgBvdssOwy10.roa
File: FXraYhajpX0wkqZjgBvdssOwy10.roa (raw, json)
Hash identifier: nPY3VVq1XyWINHFYR8nEWYVD62nXt82CTuIMYnmMEnM=
Subject key identifier: 15:7A:DA:62:16:A3:A5:7D:30:92:A6:63:80:1B:DD:B2:C3:B0:CB:5D
Certificate issuer: /CN=a0a8631e6e5a7ac66da4fb160fd5b4fca9378805
Certificate serial: 0182C605A7DB9F311AAE5DE6F587D2FD7AD7
Authority key identifier: A0:A8:63:1E:6E:5A:7A:C6:6D:A4:FB:16:0F:D5:B4:FC:A9:37:88:05
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oKhjHm5aesZtpPsWD9W0_Kk3iAU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/dffa9b-1d69-4869-9dc4-867d1d877140/1/FXraYhajpX0wkqZjgBvdssOwy10.roa
Signing time: Mon 22 Aug 2022 14:47:15 +0000
ROA not before: Mon 22 Aug 2022 14:47:15 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 60198
IP address blocks: 46.17.217.0/24 maxlen: 24
46.17.216.0/23 maxlen: 23
46.17.216.0/24 maxlen: 24
2a02:4f63::/32 maxlen: 32
2a02:4f61::/32 maxlen: 32
2a02:4f64::/32 maxlen: 32
2a02:4f67::/32 maxlen: 32
2a02:4f60::/32 maxlen: 32
2a02:4f66::/32 maxlen: 32
2a02:4f65::/32 maxlen: 32
2a02:4f62::/32 maxlen: 32
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:c6:05:a7:db:9f:31:1a:ae:5d:e6:f5:87:d2:fd:7a:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a0a8631e6e5a7ac66da4fb160fd5b4fca9378805
Validity
Not Before: Aug 22 14:47:15 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=157ada6216a3a57d3092a663801bddb2c3b0cb5d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:c8:ec:e4:4e:00:44:15:55:24:3e:ce:f9:77:
41:92:f0:ce:be:16:8a:14:94:12:d9:ec:be:a8:de:
0e:4b:2a:e1:22:04:52:41:86:0b:f3:3c:68:b2:bf:
b6:ce:2d:94:32:75:e3:bc:f7:a5:58:a9:45:d1:7f:
ed:3b:1a:17:c6:42:03:0b:6e:0c:12:af:48:7e:6d:
e0:ec:ad:5b:cd:64:91:95:c5:04:8b:fa:b0:52:ae:
1a:61:91:76:ca:db:0d:65:15:a8:c4:b0:cd:c9:83:
b5:bc:de:e5:b0:b2:f5:ef:da:82:0d:8d:d7:61:86:
0a:e7:b5:79:c3:97:93:a6:ca:d9:e8:e4:22:a9:30:
5b:99:4f:6b:30:b1:50:a6:4a:9f:e8:57:c6:03:4e:
a7:0b:d7:c3:53:c4:c1:56:98:6c:73:3c:46:4c:d8:
40:da:a7:33:5a:6b:a4:d3:be:96:cc:87:47:49:a7:
c9:7a:db:a0:1c:bb:fd:2a:16:86:b5:b2:99:cb:af:
43:e3:17:9c:fa:8a:f9:ec:a6:2a:a0:bb:ce:ad:eb:
e8:ee:94:71:3b:fd:54:e6:71:d6:44:e6:49:f7:51:
b5:b1:8b:5b:01:44:01:42:4a:db:73:05:f4:ef:70:
52:44:c7:6e:54:b9:c8:de:5c:10:df:7a:bd:ed:c8:
91:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:7A:DA:62:16:A3:A5:7D:30:92:A6:63:80:1B:DD:B2:C3:B0:CB:5D
X509v3 Authority Key Identifier:
keyid:A0:A8:63:1E:6E:5A:7A:C6:6D:A4:FB:16:0F:D5:B4:FC:A9:37:88:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oKhjHm5aesZtpPsWD9W0_Kk3iAU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/dffa9b-1d69-4869-9dc4-867d1d877140/1/FXraYhajpX0wkqZjgBvdssOwy10.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/dffa9b-1d69-4869-9dc4-867d1d877140/1/oKhjHm5aesZtpPsWD9W0_Kk3iAU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.17.216.0/23
IPv6:
2a02:4f60::/29
Signature Algorithm: sha256WithRSAEncryption
4a:78:2b:e2:64:76:92:d9:f1:5a:6d:13:3c:45:31:94:4f:db:
85:bf:78:af:3d:28:23:63:c4:81:95:ec:d0:61:be:d6:ab:f2:
c4:cf:e6:f6:7c:2f:39:84:cd:75:61:3a:36:4b:e4:9c:63:17:
04:9b:6a:0c:0c:5c:1f:dc:71:b1:f2:17:db:b2:e8:f8:da:31:
1f:ff:cd:33:91:c1:a4:25:4f:27:17:e0:24:b1:c2:65:be:a4:
4d:27:08:89:a3:65:af:68:99:d1:a4:4c:af:83:63:1c:4d:24:
3b:87:13:62:0d:72:96:ad:af:39:19:50:92:99:c9:54:91:34:
d6:b8:fa:da:2c:3a:67:7d:88:0c:5f:07:0a:69:0f:6f:89:34:
d3:8b:27:ac:31:84:ee:94:cf:f7:fa:0e:5a:81:0b:9f:60:e2:
f7:f9:9a:48:85:10:b4:34:0f:53:54:ee:cc:ce:e2:7f:2a:9d:
ea:cc:d2:2a:44:25:74:ae:18:69:03:fb:07:71:aa:1d:b9:5b:
28:94:df:5b:56:99:ae:e2:ea:3f:98:30:54:b5:33:b1:ac:2a:
a9:d6:1f:47:b0:7b:3c:c2:5f:39:73:65:e0:46:d5:c5:6a:8c:
2d:4f:56:d2:30:b4:70:38:d7:50:c4:fd:f7:e6:fe:d5:27:f4:
c8:32:4d:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:33:15 2024 by rpki-client on console-fra.rpki-client.org