Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/c12a7b-5caf-4e7c-970d-5c476e3325f5/1/Xd1EF0Nd09LhnNn90iXDMhIBiK8.roa
File: Xd1EF0Nd09LhnNn90iXDMhIBiK8.roa (raw, json)
Hash identifier: ERlkGFBoRfLmqHoy+qMQONFLgUclofL9rJZVx2X8DXA=
Subject key identifier: 5D:DD:44:17:43:5D:D3:D2:E1:9C:D9:FD:D2:25:C3:32:12:01:88:AF
Certificate issuer: /CN=465eba5c1a80f86a4589278edd9304b3f5169f83
Certificate serial: 0187930FD8E4C4E55BAF30FC203A02932076
Authority key identifier: 46:5E:BA:5C:1A:80:F8:6A:45:89:27:8E:DD:93:04:B3:F5:16:9F:83
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Rl66XBqA-GpFiSeO3ZMEs_UWn4M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/c12a7b-5caf-4e7c-970d-5c476e3325f5/1/Xd1EF0Nd09LhnNn90iXDMhIBiK8.roa
Signing time: Tue 18 Apr 2023 06:31:41 +0000
ROA not before: Tue 18 Apr 2023 06:31:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 41789
IP address blocks: 45.82.14.0/23 maxlen: 23
185.233.186.0/24 maxlen: 24
185.250.44.0/23 maxlen: 23
185.250.46.0/23 maxlen: 23
193.39.168.0/24 maxlen: 24
193.39.171.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:93:0f:d8:e4:c4:e5:5b:af:30:fc:20:3a:02:93:20:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=465eba5c1a80f86a4589278edd9304b3f5169f83
Validity
Not Before: Apr 18 06:31:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5ddd4417435dd3d2e19cd9fdd225c332120188af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:0d:ba:99:9c:28:67:92:5c:5a:96:e6:5f:af:
31:90:ce:c2:f0:0e:be:c1:d8:65:17:51:c1:e6:f9:
c3:8a:c3:64:a0:15:67:c4:f3:09:7d:9c:5b:b7:a9:
2b:5a:4e:5d:22:e7:6c:f2:b3:c5:a6:34:c4:39:b3:
1a:c3:51:82:5f:64:b9:12:10:35:03:47:0b:f1:c2:
ba:80:ab:b9:a4:2f:f0:44:8a:ca:3f:29:18:21:b1:
b6:c5:37:1f:08:9b:15:e1:0a:74:b9:43:6a:5d:3a:
c6:a1:7b:80:fa:de:9b:4d:7f:f4:4a:5e:a8:7c:59:
f5:0d:c1:d0:c7:28:df:8d:98:b2:43:e0:8f:29:43:
58:d1:c1:4e:16:e4:7d:ea:15:72:7a:2d:0d:b9:57:
f3:5f:82:49:24:8f:a6:a5:82:56:f7:ab:e2:4b:98:
35:4b:e8:63:04:66:5e:f6:24:e1:34:ac:28:d9:8d:
0b:6c:93:88:a8:4a:a4:84:37:b8:5f:22:1b:02:c0:
6a:bf:a5:9e:42:40:5f:e0:c2:2a:ad:2f:19:7a:f5:
fd:7e:21:89:bd:24:f8:98:bb:36:b3:d4:0e:23:2b:
2d:77:ee:31:b9:35:96:bf:d9:65:7a:5b:81:6e:91:
21:5e:b2:8a:81:a0:1f:0f:68:bb:da:00:a2:05:a3:
88:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:DD:44:17:43:5D:D3:D2:E1:9C:D9:FD:D2:25:C3:32:12:01:88:AF
X509v3 Authority Key Identifier:
keyid:46:5E:BA:5C:1A:80:F8:6A:45:89:27:8E:DD:93:04:B3:F5:16:9F:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Rl66XBqA-GpFiSeO3ZMEs_UWn4M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/c12a7b-5caf-4e7c-970d-5c476e3325f5/1/Xd1EF0Nd09LhnNn90iXDMhIBiK8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/c12a7b-5caf-4e7c-970d-5c476e3325f5/1/Rl66XBqA-GpFiSeO3ZMEs_UWn4M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.82.14.0/23
185.233.186.0/24
185.250.44.0/22
193.39.168.0/24
193.39.171.0/24
Signature Algorithm: sha256WithRSAEncryption
54:5e:c6:ea:73:33:8c:c3:cd:17:08:5d:05:cb:4a:fc:3e:e5:
00:84:a8:fb:45:30:18:c2:fa:73:e7:32:e6:a8:61:24:b7:eb:
97:d9:be:a6:a1:dc:8f:78:48:8b:c0:b5:de:3e:0f:43:30:62:
17:9e:81:fc:8c:2c:6e:9d:12:48:3f:69:6f:03:c2:82:f8:0f:
78:67:ca:14:ab:33:a3:40:2b:1a:cf:96:f6:ec:9b:e9:68:68:
b7:c1:ca:b0:68:07:67:b2:be:94:32:49:43:18:af:c6:db:6b:
30:54:6f:ff:9d:9c:5d:fa:75:98:38:4e:ba:51:be:bb:f5:89:
e3:7e:ab:37:04:48:0b:d5:d8:13:20:fa:b6:aa:cd:0c:d5:e8:
7c:0e:98:1c:1d:9a:01:7c:0a:dc:a9:53:e5:29:5a:3a:01:be:
a9:b0:fd:51:7e:a3:84:d4:54:4f:96:98:dd:79:db:76:47:4c:
2f:1a:5f:84:d0:b5:ef:a6:c4:d2:50:30:3b:cf:aa:71:70:c4:
1d:4f:90:f8:0d:8c:0f:8b:15:45:87:6f:bf:aa:d4:31:67:25:
6c:f0:de:ff:55:d4:cb:d2:c5:91:5a:62:29:5a:56:71:95:35:
a8:75:f4:5e:62:92:82:51:42:8d:c9:21:dc:83:1a:71:c7:6b:
47:3b:7e:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:03:19 2023 by rpki-client on console-ams.rpki-client.org