Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/c12a7b-5caf-4e7c-970d-5c476e3325f5/1/Wa8rEmCAw4QxlHqf3RM6QdgdXQM.roa
File: Wa8rEmCAw4QxlHqf3RM6QdgdXQM.roa (raw, json)
Hash identifier: B/3hyBrLJ0mkQlarSOvI22PtZOVdHAjFFroQs6rxvBI=
Subject key identifier: 59:AF:2B:12:60:80:C3:84:31:94:7A:9F:DD:13:3A:41:D8:1D:5D:03
Certificate issuer: /CN=465eba5c1a80f86a4589278edd9304b3f5169f83
Certificate serial: 018572E83113EC5E687D96D85A84B2C613EF
Authority key identifier: 46:5E:BA:5C:1A:80:F8:6A:45:89:27:8E:DD:93:04:B3:F5:16:9F:83
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Rl66XBqA-GpFiSeO3ZMEs_UWn4M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/c12a7b-5caf-4e7c-970d-5c476e3325f5/1/Wa8rEmCAw4QxlHqf3RM6QdgdXQM.roa
Signing time: Mon 02 Jan 2023 14:34:57 +0000
ROA not before: Mon 02 Jan 2023 14:34:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 26636
IP address blocks: 45.91.65.0/24 maxlen: 24
45.82.15.0/24 maxlen: 24
45.82.14.0/24 maxlen: 24
193.111.250.0/24 maxlen: 24
185.244.50.0/24 maxlen: 24
185.244.48.0/24 maxlen: 24
193.39.170.0/24 maxlen: 24
193.39.168.0/24 maxlen: 24
194.187.120.0/24 maxlen: 24
91.200.151.0/24 maxlen: 24
91.200.148.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:e8:31:13:ec:5e:68:7d:96:d8:5a:84:b2:c6:13:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=465eba5c1a80f86a4589278edd9304b3f5169f83
Validity
Not Before: Jan 2 14:34:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=59af2b126080c38431947a9fdd133a41d81d5d03
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:73:4b:76:00:21:e0:17:bb:24:84:35:de:0b:
3d:cd:35:89:3f:ce:be:1d:19:62:73:c5:5d:3a:9a:
48:02:46:0a:01:e9:2b:4e:91:a0:9b:7b:14:9e:21:
78:5d:63:3e:c3:21:ad:ce:81:45:a5:89:61:b2:6c:
ad:25:82:35:33:8c:56:6c:4e:e8:dc:07:cb:05:18:
8a:29:1a:14:d8:4a:49:be:74:1e:a3:6e:27:1c:95:
c2:26:33:54:dc:80:06:6b:48:a8:78:55:89:4c:47:
e1:cb:20:c8:f3:69:14:8b:7f:4e:c1:62:92:73:fc:
ae:21:96:a4:4b:fd:0b:cb:fe:6a:76:e2:27:0e:a5:
32:ce:81:a7:26:f8:0b:cf:4c:04:ca:79:0a:bf:26:
b3:78:09:2d:9c:b0:92:05:67:b6:a5:0e:40:1b:2f:
87:f6:be:9b:c4:b2:20:a1:a6:80:a5:4c:40:c4:b3:
83:c1:d5:09:2d:b8:72:65:84:ec:88:78:c7:c3:84:
68:37:20:cc:f6:e9:b2:0c:35:06:19:a1:70:c6:f6:
3c:35:97:86:1d:1f:17:d7:57:5f:4b:d9:e4:43:94:
c2:5e:18:41:cf:2a:f4:dd:a6:81:c5:9f:13:68:6e:
dc:e4:25:af:b4:37:95:79:6f:89:3c:c3:f9:23:57:
cc:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:AF:2B:12:60:80:C3:84:31:94:7A:9F:DD:13:3A:41:D8:1D:5D:03
X509v3 Authority Key Identifier:
keyid:46:5E:BA:5C:1A:80:F8:6A:45:89:27:8E:DD:93:04:B3:F5:16:9F:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Rl66XBqA-GpFiSeO3ZMEs_UWn4M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/c12a7b-5caf-4e7c-970d-5c476e3325f5/1/Wa8rEmCAw4QxlHqf3RM6QdgdXQM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/c12a7b-5caf-4e7c-970d-5c476e3325f5/1/Rl66XBqA-GpFiSeO3ZMEs_UWn4M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.82.14.0/23
45.91.65.0/24
91.200.148.0/24
91.200.151.0/24
185.244.48.0/24
185.244.50.0/24
193.39.168.0/24
193.39.170.0/24
193.111.250.0/24
194.187.120.0/24
Signature Algorithm: sha256WithRSAEncryption
6d:bd:f2:5d:d5:6f:32:f0:5b:bc:d8:06:a7:a9:d9:2c:94:d6:
02:91:c6:ee:e9:00:de:16:2d:d2:1d:a6:d2:ac:d6:6f:c5:96:
df:32:4d:5f:db:36:0b:c2:43:a5:fd:3a:00:3b:56:30:41:b9:
de:cd:3d:ee:b6:77:96:a1:d4:59:92:9a:48:4c:2d:cd:cb:af:
45:83:f9:f2:c1:22:7b:ef:04:7c:5e:81:32:6d:a4:dc:20:d6:
69:18:6d:06:f5:7a:7b:a9:16:3a:99:b8:f7:eb:a7:c9:c0:f1:
0e:1a:82:d3:0e:fb:ce:88:11:ca:af:37:d7:10:3d:5b:db:65:
2c:2d:9f:5d:b7:ed:86:b7:5c:ae:99:b3:7e:91:28:4a:87:a1:
8a:f4:f1:97:ed:14:94:21:04:f0:b1:53:4e:a7:0b:03:37:79:
4d:e6:45:6a:ce:59:b6:dd:77:b8:60:36:e8:0d:81:07:19:79:
28:da:db:7b:d8:76:de:21:58:dd:90:0f:37:24:43:e1:82:ca:
fc:8f:b1:49:e9:af:f0:a9:be:45:6b:7f:24:2f:a7:a6:76:0e:
d5:52:ac:d4:d3:74:45:eb:e8:22:54:94:8e:88:de:e9:0a:18:
d0:b0:c8:ad:0b:e1:77:0f:cb:81:22:fc:b8:bf:c7:ac:41:56:
f8:d2:03:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:03:19 2023 by rpki-client on console-ams.rpki-client.org