Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/1k6uIH0J-GUVtzbgHtHRYcDngj0.roa
File: 1k6uIH0J-GUVtzbgHtHRYcDngj0.roa (raw, json)
Hash identifier: wxwL9vqbBfSHkMnnAqbvQzRmIgUFWbFqy7fvPrGrok4=
Subject key identifier: D6:4E:AE:20:7D:09:F8:65:15:B7:36:E0:1E:D1:D1:61:C0:E7:82:3D
Certificate issuer: /CN=2ac3daa1b14850f2e61c592b2191915a5e65a478
Certificate serial: 01887D6ACFDC9E7EEE593732012D4045BE8F
Authority key identifier: 2A:C3:DA:A1:B1:48:50:F2:E6:1C:59:2B:21:91:91:5A:5E:65:A4:78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/1k6uIH0J-GUVtzbgHtHRYcDngj0.roa
Signing time: Fri 02 Jun 2023 18:42:12 +0000
ROA not before: Fri 02 Jun 2023 18:42:12 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 46.249.104.0/22 maxlen: 22
46.249.108.0/22 maxlen: 24
185.129.108.0/23 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:7d:6a:cf:dc:9e:7e:ee:59:37:32:01:2d:40:45:be:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ac3daa1b14850f2e61c592b2191915a5e65a478
Validity
Not Before: Jun 2 18:42:12 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d64eae207d09f86515b736e01ed1d161c0e7823d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:db:fe:3e:63:16:54:63:e9:77:2d:8c:73:b2:
28:9a:60:28:4f:58:ea:8c:ae:7d:16:b1:fd:ee:9b:
ad:ae:6e:3d:b9:15:e6:7f:b1:04:12:77:11:2f:dd:
35:e6:5e:c5:23:2a:18:92:cb:a3:59:f7:20:e5:1a:
e8:78:9b:64:2b:32:db:22:68:f9:6d:41:4b:d8:2e:
90:4b:75:09:6c:c2:e5:df:c4:02:b0:8a:a0:68:e5:
05:c0:4a:d0:94:a3:e4:03:cd:b4:7c:40:20:48:25:
6f:8a:0e:dc:2b:f6:ed:45:df:dc:54:54:41:5b:59:
82:b5:d6:ed:7e:8b:5d:fb:9d:62:4c:40:90:15:20:
bd:61:2b:29:cf:7c:55:0f:df:b8:5a:6e:3a:d4:51:
b5:7f:47:65:f8:44:b4:36:99:9c:3d:ff:c4:8b:d3:
4f:1f:3b:77:08:78:09:f6:15:02:e3:dc:37:85:8f:
53:7a:34:23:34:ba:9c:c0:ef:5e:dd:e3:54:e4:74:
ea:bc:61:6d:5b:dc:b2:09:76:98:b6:fe:19:0e:2a:
66:ad:2c:6c:a4:e5:41:d3:a6:28:cc:97:f5:21:18:
19:1b:01:78:9f:fd:44:91:62:25:53:b2:68:8d:45:
ff:68:4f:28:48:9a:73:ad:fe:77:84:dd:b1:6b:b3:
f2:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:4E:AE:20:7D:09:F8:65:15:B7:36:E0:1E:D1:D1:61:C0:E7:82:3D
X509v3 Authority Key Identifier:
keyid:2A:C3:DA:A1:B1:48:50:F2:E6:1C:59:2B:21:91:91:5A:5E:65:A4:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/1k6uIH0J-GUVtzbgHtHRYcDngj0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/KsPaobFIUPLmHFkrIZGRWl5lpHg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.249.104.0/21
185.129.108.0/23
Signature Algorithm: sha256WithRSAEncryption
67:56:41:06:f7:ac:e8:2e:60:c2:81:6b:ff:6d:a8:cc:93:27:
8d:65:da:d5:f4:f8:af:97:24:9b:25:d4:e9:27:5e:6b:1c:d7:
60:52:b1:e0:b6:8a:21:38:c3:83:6a:18:3a:30:e2:0f:45:ae:
01:56:62:40:8a:c8:8c:44:f2:14:22:d3:b3:26:0e:7d:30:c5:
9b:44:23:48:7f:53:7c:c5:4f:ab:74:09:f1:ff:80:51:7b:08:
d3:da:c3:6c:ab:5c:6f:7e:7e:14:31:2e:70:b4:9d:f8:10:fa:
f6:6d:7c:10:75:f0:27:8c:38:88:66:bf:c2:f4:3b:ce:88:c0:
c5:89:fa:fb:43:c9:1f:0b:12:51:3e:9a:c7:c2:74:54:97:18:
36:ff:f9:92:8e:d7:5c:01:ee:f3:84:ed:0f:5f:31:18:71:0c:
02:be:79:9d:13:8d:74:77:3c:3c:91:10:e7:e9:a7:30:ac:10:
a9:a5:62:e4:c5:3e:b2:33:7e:15:86:f7:54:84:67:e5:c1:3f:
67:86:76:63:ce:73:a9:69:5d:81:ad:70:23:1e:de:2a:eb:37:
d2:ef:18:95:5c:14:83:32:1e:04:7c:14:8d:fc:c1:40:a0:10:
24:1a:a4:ad:9e:84:d2:14:39:5b:11:c8:22:12:5d:33:07:79:
26:46:c0:61
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYh9as/cnn7uWTcyAS1ARb6PMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhYzNkYWExYjE0ODUwZjJlNjFjNTkyYjIxOTE5MTVhNWU2
NWE0NzgwHhcNMjMwNjAyMTg0MjEyWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkNjRlYWUyMDdkMDlmODY1MTViNzM2ZTAxZWQxZDE2MWMwZTc4MjNkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAutv+PmMWVGPpdy2Mc7IommAoT1jq
jK59FrH97putrm49uRXmf7EEEncRL9015l7FIyoYksujWfcg5RroeJtkKzLbImj5
bUFL2C6QS3UJbMLl38QCsIqgaOUFwErQlKPkA820fEAgSCVvig7cK/btRd/cVFRB
W1mCtdbtfotd+51iTECQFSC9YSspz3xVD9+4Wm461FG1f0dl+ES0NpmcPf/Ei9NP
Hzt3CHgJ9hUC49w3hY9TejQjNLqcwO9e3eNU5HTqvGFtW9yyCXaYtv4ZDipmrSxs
pOVB06YozJf1IRgZGwF4n/1EkWIlU7JojUX/aE8oSJpzrf53hN2xa7PyhQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFNZOriB9CfhlFbc24B7R0WHA54I9MB8GA1UdIwQY
MBaAFCrD2qGxSFDy5hxZKyGRkVpeZaR4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS3NQYW9iRklVUExtSEZrcklaR1JXbDVscEhnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MC80MDViYmQtNTkxMy00ZTk1LThlNzUt
ZmUwNjU5MTc2YTU2LzEvMWs2dUlIMEotR1VWdHpiZ0h0SFJZY0RuZ2owLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83MC80MDViYmQtNTkxMy00ZTk1LThlNzUtZmUwNjU5MTc2YTU2
LzEvS3NQYW9iRklVUExtSEZrcklaR1JXbDVscEhnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQDLvloAwQB
uYFsMA0GCSqGSIb3DQEBCwUAA4IBAQBnVkEG96zoLmDCgWv/bajMkyeNZdrV9Piv
lySbJdTpJ15rHNdgUrHgtoohOMODahg6MOIPRa4BVmJAisiMRPIUItOzJg59MMWb
RCNIf1N8xU+rdAnx/4BRewjT2sNsq1xvfn4UMS5wtJ34EPr2bXwQdfAnjDiIZr/C
9DvOiMDFifr7Q8kfCxJRPprHwnRUlxg2//mSjtdcAe7zhO0PXzEYcQwCvnmdE410
dzw8kRDn6acwrBCppWLkxT6yM34VhvdUhGflwT9nhnZjznOpaV2BrXAjHt4q6zfS
7xiVXBSDMh4EfBSN/MFAoBAkGqStnoTSFDlbEcgiEl0zB3kmRsBh
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:34:34 2024 by rpki-client on console-fra.rpki-client.org