Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/c12a7b-5caf-4e7c-970d-5c476e3325f5/1/4aDC-F6zuUTyu3MqDpyNLmm6aOs.roa
File: 4aDC-F6zuUTyu3MqDpyNLmm6aOs.roa (raw, json)
Hash identifier: 19y7RI9zkYJiiZM00HF1H+vJvqG4gSWlElMzChS0A14=
Subject key identifier: E1:A0:C2:F8:5E:B3:B9:44:F2:BB:73:2A:0E:9C:8D:2E:69:BA:68:EB
Certificate issuer: /CN=465eba5c1a80f86a4589278edd9304b3f5169f83
Certificate serial: 01865F74375870F67C4996C6A7DA36D43A3D
Authority key identifier: 46:5E:BA:5C:1A:80:F8:6A:45:89:27:8E:DD:93:04:B3:F5:16:9F:83
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Rl66XBqA-GpFiSeO3ZMEs_UWn4M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/c12a7b-5caf-4e7c-970d-5c476e3325f5/1/4aDC-F6zuUTyu3MqDpyNLmm6aOs.roa
Signing time: Fri 17 Feb 2023 12:58:17 +0000
ROA not before: Fri 17 Feb 2023 12:58:17 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 41789
IP address blocks: 45.82.14.0/23 maxlen: 23
185.244.48.0/24 maxlen: 24
185.244.51.0/24 maxlen: 24
185.250.44.0/23 maxlen: 23
185.250.46.0/23 maxlen: 23
193.39.168.0/24 maxlen: 24
193.39.171.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:5f:74:37:58:70:f6:7c:49:96:c6:a7:da:36:d4:3a:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=465eba5c1a80f86a4589278edd9304b3f5169f83
Validity
Not Before: Feb 17 12:58:17 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e1a0c2f85eb3b944f2bb732a0e9c8d2e69ba68eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:58:b4:73:3f:c4:e7:3b:fa:41:48:5b:4e:77:
31:0b:e3:c5:fd:de:87:33:4e:c9:02:b8:9b:01:73:
37:01:11:f0:9c:b7:e8:e0:08:fa:bc:96:20:8a:5f:
56:0a:71:6e:5f:c2:1d:37:00:78:4e:12:0f:6b:1a:
f7:81:a3:b6:e3:06:95:42:67:b8:39:6a:8a:83:66:
09:6b:c1:e0:d6:58:b1:35:f8:d1:8d:26:1f:74:b2:
0e:7e:6c:39:cd:d5:81:11:48:e4:98:82:2c:86:e4:
70:df:01:77:08:77:50:5a:c7:43:a2:87:58:ef:a6:
f8:f9:be:b3:87:54:1f:c4:55:44:ca:b9:b4:80:5d:
ce:6a:85:9b:f8:79:9c:34:3a:93:36:56:2b:47:03:
99:17:91:d6:08:71:0b:49:85:21:1f:81:19:d4:44:
ab:63:22:30:99:60:be:72:76:92:91:6c:38:94:2a:
b8:a0:25:11:4b:8e:52:0e:1a:de:75:c2:12:35:93:
bc:b6:6f:64:2c:13:1f:56:2a:7d:4d:eb:7d:4f:d5:
fb:08:20:85:47:74:ae:62:a5:2a:88:3d:c9:61:ef:
14:e7:5a:07:63:a2:c0:dc:85:a4:49:97:66:fa:60:
a0:a1:8a:57:e8:99:99:0c:77:bd:e6:94:db:98:4f:
0a:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:A0:C2:F8:5E:B3:B9:44:F2:BB:73:2A:0E:9C:8D:2E:69:BA:68:EB
X509v3 Authority Key Identifier:
keyid:46:5E:BA:5C:1A:80:F8:6A:45:89:27:8E:DD:93:04:B3:F5:16:9F:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Rl66XBqA-GpFiSeO3ZMEs_UWn4M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/c12a7b-5caf-4e7c-970d-5c476e3325f5/1/4aDC-F6zuUTyu3MqDpyNLmm6aOs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/c12a7b-5caf-4e7c-970d-5c476e3325f5/1/Rl66XBqA-GpFiSeO3ZMEs_UWn4M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.82.14.0/23
185.244.48.0/24
185.244.51.0/24
185.250.44.0/22
193.39.168.0/24
193.39.171.0/24
Signature Algorithm: sha256WithRSAEncryption
aa:e6:74:77:76:dc:5a:b9:02:78:aa:1e:71:81:83:fd:e3:24:
25:08:23:66:8e:e8:bd:f8:7d:6c:10:9e:9e:64:c0:95:22:67:
9b:25:52:99:09:02:23:0e:0d:50:62:2e:a0:68:14:da:e1:57:
91:96:92:f9:a6:66:56:b2:a5:7f:33:5d:66:71:4b:c8:ef:0a:
0f:bd:f8:a5:54:10:f7:2d:97:72:1b:d1:12:ba:7f:73:8a:3d:
fe:df:16:f2:41:f6:4f:45:f2:4c:bb:39:45:d8:58:1c:e4:07:
4b:0e:ed:93:f4:3e:22:23:33:75:03:09:45:c3:bd:ef:0e:d1:
e3:03:4b:2d:cf:58:c0:be:53:9b:83:f4:b6:41:c5:f9:bb:6f:
ed:26:26:0f:d6:d2:63:02:00:ad:4d:20:74:f6:74:da:12:ca:
34:5d:16:4c:05:9c:58:c9:1a:76:68:a2:92:ff:bf:86:1d:ed:
0f:c1:3f:e6:fa:c5:37:0e:98:a1:d2:82:36:60:8e:c0:6f:db:
ed:fb:1b:2a:f1:f7:db:5f:77:5e:dd:c0:73:10:a2:5c:5b:b2:
c2:84:40:a5:96:0d:47:f1:d1:70:4f:5a:3e:52:07:19:7b:b1:
3b:d5:27:32:a5:b5:4d:66:0a:fa:62:1b:ca:41:1f:25:8a:45:
f4:35:9a:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:03:19 2023 by rpki-client on console-ams.rpki-client.org