Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/c12a7b-5caf-4e7c-970d-5c476e3325f5/1/P0iddXd7NyK9YvjFmKRX1oUd_0w.roa
File: P0iddXd7NyK9YvjFmKRX1oUd_0w.roa (raw, json)
Hash identifier: DhHguFIdWbskOSjJCxuRrDnHpcSxJvZraxInw0EmcFk=
Subject key identifier: 3F:48:9D:75:77:7B:37:22:BD:62:F8:C5:98:A4:57:D6:85:1D:FF:4C
Certificate issuer: /CN=465eba5c1a80f86a4589278edd9304b3f5169f83
Certificate serial: 018708FDB64FAC1BF36409AE23750AA291A1
Authority key identifier: 46:5E:BA:5C:1A:80:F8:6A:45:89:27:8E:DD:93:04:B3:F5:16:9F:83
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Rl66XBqA-GpFiSeO3ZMEs_UWn4M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/c12a7b-5caf-4e7c-970d-5c476e3325f5/1/P0iddXd7NyK9YvjFmKRX1oUd_0w.roa
Signing time: Wed 22 Mar 2023 11:04:17 +0000
ROA not before: Wed 22 Mar 2023 11:04:17 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 41789
IP address blocks: 45.82.14.0/23 maxlen: 23
185.250.44.0/23 maxlen: 23
185.250.46.0/23 maxlen: 23
193.39.168.0/24 maxlen: 24
193.39.171.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:08:fd:b6:4f:ac:1b:f3:64:09:ae:23:75:0a:a2:91:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=465eba5c1a80f86a4589278edd9304b3f5169f83
Validity
Not Before: Mar 22 11:04:17 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3f489d75777b3722bd62f8c598a457d6851dff4c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:c6:7e:09:cf:6c:8d:21:59:81:14:ee:e7:e0:
c2:58:09:84:28:3d:91:87:ee:1e:16:8c:dd:45:0f:
92:8b:30:17:32:00:ad:2f:e9:fa:6f:2c:48:ab:3f:
d6:dd:01:34:b8:c7:7e:99:ac:49:5b:35:93:b5:be:
89:c8:b1:52:e1:da:a7:7c:da:2b:ce:da:0c:75:a4:
0c:5a:9c:9a:d4:dd:f4:db:5c:c5:84:20:a0:5d:c6:
4b:74:2d:b6:65:81:67:f0:34:7c:c6:24:2c:fd:20:
a1:b5:f7:50:c1:2b:2e:c4:a1:a3:f6:65:63:e2:3f:
91:b3:00:b2:1c:67:c1:de:68:d2:b2:60:27:69:64:
47:8a:cb:49:d4:8f:dd:85:ee:94:e9:8b:af:ac:12:
06:08:7f:49:1c:be:f7:e9:80:62:d3:54:66:65:ee:
16:81:d2:82:90:cf:09:dd:a2:b1:ba:0e:24:fa:3f:
83:af:4c:29:ae:c0:5e:8b:27:f2:1c:dc:f3:cd:5b:
23:ff:6a:4b:ef:64:de:46:95:dd:a9:9f:b1:cd:88:
d6:d0:85:10:94:4b:f5:ba:68:22:ab:f4:17:a0:f1:
b1:64:0c:f5:d5:ad:00:bf:30:01:ab:5f:8d:9b:75:
7a:05:cb:15:03:b8:15:9a:32:8b:b5:33:c5:03:cd:
49:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:48:9D:75:77:7B:37:22:BD:62:F8:C5:98:A4:57:D6:85:1D:FF:4C
X509v3 Authority Key Identifier:
keyid:46:5E:BA:5C:1A:80:F8:6A:45:89:27:8E:DD:93:04:B3:F5:16:9F:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Rl66XBqA-GpFiSeO3ZMEs_UWn4M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/c12a7b-5caf-4e7c-970d-5c476e3325f5/1/P0iddXd7NyK9YvjFmKRX1oUd_0w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/c12a7b-5caf-4e7c-970d-5c476e3325f5/1/Rl66XBqA-GpFiSeO3ZMEs_UWn4M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.82.14.0/23
185.250.44.0/22
193.39.168.0/24
193.39.171.0/24
Signature Algorithm: sha256WithRSAEncryption
b4:2b:c0:00:db:c5:5b:ed:26:6d:b1:90:cb:a7:60:cb:99:b2:
8b:7e:92:c6:84:3f:72:e4:e3:1e:6d:7d:06:06:1e:04:49:20:
88:2a:c7:8d:1f:70:c8:b5:69:af:66:f8:1b:76:67:b4:91:6a:
28:ce:e4:9c:a0:78:4a:e7:ca:90:c4:66:5b:3e:87:17:82:57:
e1:32:82:c4:62:61:ab:1a:b6:51:f9:0d:7c:d0:00:10:9e:6a:
35:c2:0e:e1:6d:9f:7c:1a:e4:69:ff:e1:35:db:8c:23:23:32:
e6:56:9f:11:30:dd:e4:d9:81:87:84:b7:7d:6a:7a:50:de:00:
c3:5e:89:59:e1:17:06:dc:ef:8d:56:c1:b9:ab:20:21:24:b8:
d9:95:d8:c2:8b:52:5b:39:fd:b9:35:66:8c:63:e0:f8:11:4b:
3d:d4:23:ea:fe:eb:a8:cc:6a:a8:a3:7d:2a:66:f3:9c:3a:ac:
4d:46:05:54:c0:c0:ba:5f:a1:9e:57:86:05:10:84:87:3f:6f:
e1:89:b9:55:bf:16:1a:8f:f9:9b:e9:b6:44:da:44:17:5d:8d:
99:92:b1:0c:9f:55:b3:47:09:d9:68:72:38:44:61:e1:ee:49:
d1:e7:27:bf:49:a1:92:62:85:bd:c5:da:15:82:3c:04:0f:0b:
0f:2d:10:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:03:19 2023 by rpki-client on console-ams.rpki-client.org