Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/c12a7b-5caf-4e7c-970d-5c476e3325f5/1/0dx_D6xVgmLDOv633t1T8pROe8I.roa
File: 0dx_D6xVgmLDOv633t1T8pROe8I.roa (raw, json)
Hash identifier: ZwQD2x2GpBc6Pekw7m7krChAY39vCEoVHXQFXfunXJQ=
Subject key identifier: D1:DC:7F:0F:AC:55:82:62:C3:3A:FE:B7:DE:DD:53:F2:94:4E:7B:C2
Certificate issuer: /CN=465eba5c1a80f86a4589278edd9304b3f5169f83
Certificate serial: 01859637D54F35C29EE99D2644DA0CD03E12
Authority key identifier: 46:5E:BA:5C:1A:80:F8:6A:45:89:27:8E:DD:93:04:B3:F5:16:9F:83
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Rl66XBqA-GpFiSeO3ZMEs_UWn4M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/c12a7b-5caf-4e7c-970d-5c476e3325f5/1/0dx_D6xVgmLDOv633t1T8pROe8I.roa
Signing time: Mon 09 Jan 2023 11:08:39 +0000
ROA not before: Mon 09 Jan 2023 11:08:39 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 395800
IP address blocks: 185.244.50.0/24 maxlen: 24
185.244.48.0/24 maxlen: 24
193.39.170.0/24 maxlen: 24
194.187.120.0/24 maxlen: 24
91.200.151.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:96:37:d5:4f:35:c2:9e:e9:9d:26:44:da:0c:d0:3e:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=465eba5c1a80f86a4589278edd9304b3f5169f83
Validity
Not Before: Jan 9 11:08:39 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d1dc7f0fac558262c33afeb7dedd53f2944e7bc2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:f9:eb:5a:02:a4:40:8d:91:25:ac:62:bd:63:
dc:85:2a:bb:3d:b7:aa:35:fe:72:fb:46:ce:85:a9:
6c:28:ae:5a:f1:a6:6b:f8:7a:10:3e:c0:2c:94:d6:
ec:ec:a8:97:42:99:a1:77:bc:b4:dd:9c:c2:72:46:
97:dd:c8:df:92:78:c3:b8:f9:7f:b4:5f:04:33:46:
26:ba:93:40:66:87:44:f4:93:5a:fd:fc:6f:1e:b7:
c2:06:06:f0:6c:40:2b:43:61:63:c6:ca:20:ba:45:
e1:ae:c4:a4:3c:01:95:9d:39:d2:03:67:55:e2:4b:
46:02:af:2f:b6:6b:4a:d1:1f:c9:27:28:55:c1:b9:
9a:30:65:a9:87:13:27:66:78:b8:24:3b:cc:3d:88:
84:f1:c4:ef:c6:36:68:57:28:41:e2:f4:b1:8b:99:
51:25:a9:4d:29:fb:e8:71:a4:35:8d:ae:f1:24:33:
04:93:a4:ac:ec:98:85:3f:97:4a:37:a5:72:74:dc:
14:14:cd:9b:3f:e2:12:11:36:97:c5:ea:86:13:d3:
c1:c9:dd:a5:b6:45:71:7f:f1:06:0d:a4:a4:4a:f3:
3f:d4:4c:a1:22:a4:d4:d2:e0:24:c1:dd:e9:61:2d:
e5:da:2c:0b:fb:21:66:15:7f:72:10:55:cd:b7:13:
1a:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:DC:7F:0F:AC:55:82:62:C3:3A:FE:B7:DE:DD:53:F2:94:4E:7B:C2
X509v3 Authority Key Identifier:
keyid:46:5E:BA:5C:1A:80:F8:6A:45:89:27:8E:DD:93:04:B3:F5:16:9F:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Rl66XBqA-GpFiSeO3ZMEs_UWn4M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/c12a7b-5caf-4e7c-970d-5c476e3325f5/1/0dx_D6xVgmLDOv633t1T8pROe8I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/c12a7b-5caf-4e7c-970d-5c476e3325f5/1/Rl66XBqA-GpFiSeO3ZMEs_UWn4M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.200.151.0/24
185.244.48.0/24
185.244.50.0/24
193.39.170.0/24
194.187.120.0/24
Signature Algorithm: sha256WithRSAEncryption
0f:2a:3c:34:79:a4:ad:95:6e:08:b0:c3:37:00:e8:8c:a8:c4:
c3:9c:98:ae:0f:75:d7:2d:4a:78:65:7d:c2:53:4f:d8:0d:73:
3c:94:1d:59:93:21:bd:f8:9a:16:6f:5a:3c:b6:26:2b:90:61:
a3:18:90:12:12:88:b7:f8:44:03:ac:3e:87:95:fe:3b:4e:6a:
d2:58:dd:aa:43:32:cf:1b:f3:fb:30:2c:6f:56:7a:f1:71:0d:
b6:ff:e0:2d:59:70:6e:62:3c:91:00:f8:44:d4:8e:00:d0:49:
26:5c:cf:31:cb:9f:0d:9c:b0:b3:31:72:5a:4e:81:07:10:a2:
78:ae:75:b6:cd:74:cf:e5:3a:db:07:75:bc:84:05:be:f4:b2:
bf:c2:3c:7d:af:b0:df:10:1e:3b:65:ec:b2:58:ef:cd:30:72:
58:33:12:af:f2:12:ad:d4:78:aa:7e:ce:77:8e:f7:ab:28:ae:
d5:15:03:44:ae:07:c8:c6:8a:e2:d7:d5:bb:65:b8:3b:ea:3e:
be:eb:e2:de:c6:b2:4c:4f:5a:27:28:a6:18:a1:8c:f0:1d:3d:
c2:fd:0e:7f:6c:61:92:26:af:51:64:21:5c:14:fb:8f:b9:98:
1e:fe:e0:a3:e5:ad:e5:30:e6:37:e2:59:32:a3:6b:85:19:09:
13:36:aa:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:03:19 2023 by rpki-client on console-ams.rpki-client.org