Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/c12a7b-5caf-4e7c-970d-5c476e3325f5/1/UTdpMcWlSnCx06-KA2WALh3WbJM.roa
File: UTdpMcWlSnCx06-KA2WALh3WbJM.roa (raw, json)
Hash identifier: VDMcmqLOw4WAkj9zJY5Q6DCwSMstIVQzBYmSaIitQrk=
Subject key identifier: 51:37:69:31:C5:A5:4A:70:B1:D3:AF:8A:03:65:80:2E:1D:D6:6C:93
Certificate issuer: /CN=465eba5c1a80f86a4589278edd9304b3f5169f83
Certificate serial: 0185A0045EE31BDEBE14F54570E1A1AAFFA8
Authority key identifier: 46:5E:BA:5C:1A:80:F8:6A:45:89:27:8E:DD:93:04:B3:F5:16:9F:83
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Rl66XBqA-GpFiSeO3ZMEs_UWn4M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/c12a7b-5caf-4e7c-970d-5c476e3325f5/1/UTdpMcWlSnCx06-KA2WALh3WbJM.roa
Signing time: Wed 11 Jan 2023 08:48:39 +0000
ROA not before: Wed 11 Jan 2023 08:48:39 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 41789
IP address blocks: 45.82.14.0/23 maxlen: 23
185.244.48.0/24 maxlen: 24
185.244.51.0/24 maxlen: 24
193.111.250.0/24 maxlen: 24
185.250.44.0/23 maxlen: 23
185.250.46.0/23 maxlen: 23
193.39.168.0/24 maxlen: 24
193.39.171.0/24 maxlen: 24
194.187.120.0/24 maxlen: 24
91.200.148.0/24 maxlen: 24
91.200.151.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:a0:04:5e:e3:1b:de:be:14:f5:45:70:e1:a1:aa:ff:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=465eba5c1a80f86a4589278edd9304b3f5169f83
Validity
Not Before: Jan 11 08:48:39 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=51376931c5a54a70b1d3af8a0365802e1dd66c93
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:cd:df:81:c9:6c:9f:54:ef:1a:16:d4:4e:e8:
35:b3:eb:06:ee:d6:cd:76:e9:23:d8:7e:76:8f:f6:
63:ed:66:8c:92:eb:e7:e1:12:df:99:b3:d1:76:b2:
f4:6b:83:30:34:c7:82:a4:2f:60:5b:44:4f:a4:aa:
95:19:f5:ac:e2:a0:b8:ed:28:68:9f:84:00:fa:50:
da:67:04:b4:02:0c:37:2c:f8:4c:a2:ea:6d:97:a4:
ed:3a:65:27:e7:93:a3:f9:89:2a:10:89:1d:88:c1:
d3:25:6d:2c:c5:63:3a:c3:0a:13:49:75:5f:77:f8:
69:7c:14:c0:1e:82:22:c1:d7:6c:f3:aa:35:51:6a:
55:73:24:58:f1:fc:88:06:62:34:b5:db:d7:43:37:
ca:34:38:8d:80:50:b9:05:1e:82:1e:9a:b5:62:c8:
94:14:12:0f:4b:13:7d:2f:75:bf:43:00:23:de:62:
02:3b:aa:fa:4a:0f:84:cc:37:6c:d7:0c:b5:14:7e:
ca:cf:53:73:9b:bf:06:f0:10:ab:f6:eb:62:55:33:
d3:52:2f:fa:2c:64:e1:6e:18:13:a9:d2:7d:6c:21:
13:46:18:6a:7f:ed:8b:74:94:b6:ad:aa:31:a7:7b:
09:12:79:d8:bf:4f:33:36:28:c9:db:0f:f4:da:a2:
eb:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:37:69:31:C5:A5:4A:70:B1:D3:AF:8A:03:65:80:2E:1D:D6:6C:93
X509v3 Authority Key Identifier:
keyid:46:5E:BA:5C:1A:80:F8:6A:45:89:27:8E:DD:93:04:B3:F5:16:9F:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Rl66XBqA-GpFiSeO3ZMEs_UWn4M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/c12a7b-5caf-4e7c-970d-5c476e3325f5/1/UTdpMcWlSnCx06-KA2WALh3WbJM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/c12a7b-5caf-4e7c-970d-5c476e3325f5/1/Rl66XBqA-GpFiSeO3ZMEs_UWn4M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.82.14.0/23
91.200.148.0/24
91.200.151.0/24
185.244.48.0/24
185.244.51.0/24
185.250.44.0/22
193.39.168.0/24
193.39.171.0/24
193.111.250.0/24
194.187.120.0/24
Signature Algorithm: sha256WithRSAEncryption
9d:c0:0b:ad:dc:7a:51:30:78:fe:51:90:47:a8:b1:c4:54:74:
f6:39:9b:7b:d9:9a:87:6d:c3:f8:1a:25:5f:ac:39:e3:b1:13:
8d:f6:b5:33:11:fa:f5:4a:d9:25:cd:19:90:a6:b6:8f:6b:24:
b8:9e:f1:31:98:60:58:4e:af:32:56:a5:a3:d0:48:5b:12:34:
e3:43:63:d7:41:ee:69:ca:7c:46:56:8e:fe:47:96:e0:36:cf:
e7:a5:a5:31:9a:a4:f5:c8:36:d5:d5:d8:06:8b:cb:66:03:71:
27:27:a8:e0:4d:2d:7e:a5:1d:9b:c9:4a:e8:dd:4c:d7:3a:14:
1a:7a:f7:d6:d9:25:b0:c5:9b:e6:93:c3:27:2b:28:88:43:9e:
1b:fe:f3:ec:f4:01:27:d1:86:6f:c0:3b:bf:37:4d:0b:67:38:
8a:82:74:6f:6e:c6:84:41:fe:88:42:90:60:80:b8:1a:43:c6:
f0:1a:c6:75:02:23:4e:92:a1:5b:61:d1:94:3f:23:19:f9:fc:
6b:19:92:fe:95:03:55:93:bb:c0:f0:d3:60:a0:ec:d0:b5:54:
33:bc:0b:6c:d8:bb:e5:8d:6b:40:85:f9:97:2c:57:24:ea:2e:
90:ab:40:72:05:6f:0f:55:fc:03:d5:47:e8:3c:ec:60:aa:dd:
fc:1c:0e:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:59:33 2023 by rpki-client on console-fra.rpki-client.org