Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/c12a7b-5caf-4e7c-970d-5c476e3325f5/1/2wwdBuxg67XTvMBreSbdIzEffc0.roa
File: 2wwdBuxg67XTvMBreSbdIzEffc0.roa (raw, json)
Hash identifier: 2iCMuvpw/+yWluMMMl2RbhLz4JWPzPspnTgOoo2KlFE=
Subject key identifier: DB:0C:1D:06:EC:60:EB:B5:D3:BC:C0:6B:79:26:DD:23:31:1F:7D:CD
Certificate issuer: /CN=465eba5c1a80f86a4589278edd9304b3f5169f83
Certificate serial: 0185A0045E4C1C20F4426E231533D5E4F391
Authority key identifier: 46:5E:BA:5C:1A:80:F8:6A:45:89:27:8E:DD:93:04:B3:F5:16:9F:83
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Rl66XBqA-GpFiSeO3ZMEs_UWn4M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/c12a7b-5caf-4e7c-970d-5c476e3325f5/1/2wwdBuxg67XTvMBreSbdIzEffc0.roa
Signing time: Wed 11 Jan 2023 08:48:38 +0000
ROA not before: Wed 11 Jan 2023 08:48:38 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 26636
IP address blocks: 45.91.65.0/24 maxlen: 24
45.82.15.0/24 maxlen: 24
45.82.14.0/24 maxlen: 24
185.244.50.0/24 maxlen: 24
193.39.170.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:a0:04:5e:4c:1c:20:f4:42:6e:23:15:33:d5:e4:f3:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=465eba5c1a80f86a4589278edd9304b3f5169f83
Validity
Not Before: Jan 11 08:48:38 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=db0c1d06ec60ebb5d3bcc06b7926dd23311f7dcd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:6e:8d:be:9b:4e:d0:86:1e:f6:79:0f:c0:37:
a9:cd:b6:b1:b0:c6:e2:57:33:c9:5b:69:99:f7:fe:
bc:39:f3:a8:65:05:fe:8b:f4:69:cc:8e:b9:81:0d:
3f:98:d5:9b:d4:07:b4:98:c5:3d:73:24:25:98:2a:
a0:19:75:3f:68:c2:e4:39:30:59:c5:2a:cb:6f:c3:
14:bd:e6:05:0c:fe:63:93:c9:18:35:2e:75:07:5c:
49:04:64:57:b7:3f:e7:88:e1:37:ef:3d:9c:64:9c:
a9:72:67:2b:16:54:89:7c:dd:5a:3b:fe:53:95:f7:
06:0b:af:fe:ec:22:58:06:99:b9:87:3c:01:58:86:
bd:29:ff:a7:10:ea:e8:84:46:10:85:b0:4f:38:ad:
5f:4d:d1:b0:de:15:44:f1:f3:d7:7b:f4:61:8f:71:
8e:af:85:6b:02:62:23:d3:8f:eb:5c:8d:5c:d8:e6:
df:82:28:63:ec:7b:1d:79:7e:b2:d7:13:64:ae:ec:
08:3a:8f:0f:81:bf:1c:ea:c6:95:c7:b0:9c:05:22:
bf:ea:e6:62:17:0a:80:08:38:91:fb:fc:71:82:d5:
78:3a:f3:c1:03:e7:cf:7f:6a:7c:00:cb:c2:65:82:
38:df:a6:ae:cf:8c:c4:27:39:b9:a0:37:c4:28:74:
a1:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:0C:1D:06:EC:60:EB:B5:D3:BC:C0:6B:79:26:DD:23:31:1F:7D:CD
X509v3 Authority Key Identifier:
keyid:46:5E:BA:5C:1A:80:F8:6A:45:89:27:8E:DD:93:04:B3:F5:16:9F:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Rl66XBqA-GpFiSeO3ZMEs_UWn4M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/c12a7b-5caf-4e7c-970d-5c476e3325f5/1/2wwdBuxg67XTvMBreSbdIzEffc0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/c12a7b-5caf-4e7c-970d-5c476e3325f5/1/Rl66XBqA-GpFiSeO3ZMEs_UWn4M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.82.14.0/23
45.91.65.0/24
185.244.50.0/24
193.39.170.0/24
Signature Algorithm: sha256WithRSAEncryption
83:54:ce:7c:3c:e8:27:ea:03:1c:cd:d7:44:e4:3d:5e:cd:57:
96:56:21:93:73:e5:91:b5:d4:42:a7:7a:67:3d:bc:78:13:61:
5b:bf:ab:f3:8c:36:0c:02:1d:4a:e2:d4:00:ef:18:6f:f8:73:
ae:d3:90:72:1b:de:d4:e1:3a:a5:95:a4:c7:ca:b2:8d:81:1c:
5f:52:9b:18:22:93:08:1c:7c:77:00:6d:aa:7f:ab:a2:bf:c0:
52:ed:85:f2:ca:83:10:00:96:3b:91:63:e6:2f:31:56:97:22:
fb:fb:9e:89:38:82:6e:89:18:c3:eb:23:af:a3:4d:1f:f5:10:
dd:44:8d:9a:96:96:e8:06:ed:8a:5a:e3:ec:04:83:e9:0a:f9:
f0:a5:49:96:ee:4d:fc:9b:96:d7:fe:73:29:9f:e6:b9:e0:a0:
28:ac:6f:ea:90:bc:40:07:67:6f:5e:aa:69:d8:3d:c5:92:81:
d0:eb:e3:b5:bb:bc:a0:f9:31:cf:e1:6a:be:63:61:b0:eb:94:
e2:78:a0:2c:c1:5f:7a:de:f6:97:1f:d8:34:39:a1:af:b4:e0:
77:8f:64:77:28:f1:61:2c:cd:f6:d4:c2:5a:66:92:96:f4:b4:
4f:92:e7:e3:5c:1a:6d:86:43:1b:95:d7:ad:a8:b1:c0:2a:89:
2b:1d:2f:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:03:19 2023 by rpki-client on console-ams.rpki-client.org