Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/c12a7b-5caf-4e7c-970d-5c476e3325f5/1/lCGpWfzMkz-IFtn4iniCQk_udG4.roa
File: lCGpWfzMkz-IFtn4iniCQk_udG4.roa (raw, json)
Hash identifier: MmUFBupH0KCPrtNigGD8VWEusWC12sILcViOG6FJylA=
Subject key identifier: 94:21:A9:59:FC:CC:93:3F:88:16:D9:F8:8A:78:82:42:4F:EE:74:6E
Certificate issuer: /CN=465eba5c1a80f86a4589278edd9304b3f5169f83
Certificate serial: 0187FA55E969E0C6BB2F8A5061400478F4F1
Authority key identifier: 46:5E:BA:5C:1A:80:F8:6A:45:89:27:8E:DD:93:04:B3:F5:16:9F:83
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Rl66XBqA-GpFiSeO3ZMEs_UWn4M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/c12a7b-5caf-4e7c-970d-5c476e3325f5/1/lCGpWfzMkz-IFtn4iniCQk_udG4.roa
Signing time: Mon 08 May 2023 07:49:06 +0000
ROA not before: Mon 08 May 2023 07:49:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 41789
IP address blocks: 45.82.14.0/23 maxlen: 23
185.250.44.0/23 maxlen: 23
185.250.46.0/23 maxlen: 23
193.39.168.0/24 maxlen: 24
193.39.171.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:fa:55:e9:69:e0:c6:bb:2f:8a:50:61:40:04:78:f4:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=465eba5c1a80f86a4589278edd9304b3f5169f83
Validity
Not Before: May 8 07:49:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9421a959fccc933f8816d9f88a7882424fee746e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:14:2c:81:e2:be:65:d8:c6:7b:e3:15:9d:a6:
c9:fb:fd:06:39:19:03:1b:5f:2d:93:e5:af:25:59:
9d:3e:f6:c3:38:b0:83:cb:b2:3f:56:35:ee:67:67:
ea:4f:40:f4:ec:91:6a:eb:06:42:3e:f3:e9:6d:97:
08:5a:bf:d7:7d:70:1a:1c:c9:45:ae:71:b7:f0:d3:
a6:f4:74:25:70:9e:00:d4:71:95:68:28:6e:7b:e1:
4d:8a:24:91:49:13:63:8f:33:53:9c:a1:ab:b6:20:
b0:8e:a5:9b:1d:ee:05:c2:2b:d7:65:aa:12:6e:52:
73:53:95:30:5c:1a:5f:d4:66:86:5e:96:0a:30:0b:
0a:bc:27:83:9d:ac:60:11:93:85:13:31:e0:69:5e:
e7:0b:31:15:4e:77:d2:dd:75:07:5a:e3:80:b0:c6:
de:fc:8f:c1:20:14:6d:13:01:1b:35:61:d4:4d:0f:
8f:b9:68:32:ca:7d:71:2c:86:ac:d1:73:9a:dd:39:
c2:ba:d7:1b:38:a9:b1:90:43:e1:70:86:69:6f:12:
2b:83:be:73:1f:dd:92:73:ff:28:2b:8a:15:6f:12:
ed:88:a3:9c:32:a8:02:20:09:cf:b5:3c:a8:3d:81:
82:e5:62:2e:c2:a5:04:bf:f6:0b:42:73:47:d7:36:
87:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:21:A9:59:FC:CC:93:3F:88:16:D9:F8:8A:78:82:42:4F:EE:74:6E
X509v3 Authority Key Identifier:
keyid:46:5E:BA:5C:1A:80:F8:6A:45:89:27:8E:DD:93:04:B3:F5:16:9F:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Rl66XBqA-GpFiSeO3ZMEs_UWn4M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/c12a7b-5caf-4e7c-970d-5c476e3325f5/1/lCGpWfzMkz-IFtn4iniCQk_udG4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/c12a7b-5caf-4e7c-970d-5c476e3325f5/1/Rl66XBqA-GpFiSeO3ZMEs_UWn4M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.82.14.0/23
185.250.44.0/22
193.39.168.0/24
193.39.171.0/24
Signature Algorithm: sha256WithRSAEncryption
2d:00:ef:d4:32:53:b5:fd:e6:d1:d5:61:80:1b:ce:ea:aa:2d:
bf:7d:73:18:77:0a:3a:3c:80:4b:f4:79:1e:7b:07:5a:fd:dd:
96:25:82:ac:f0:77:59:71:d6:d6:16:7a:46:85:81:2e:02:a4:
b2:79:b0:7d:92:01:33:f2:0d:ea:98:6c:6c:a0:fc:21:28:02:
4e:ba:65:3e:4b:77:b8:3d:84:7e:8e:5f:d3:4d:0b:5c:cf:ba:
6d:c5:f9:79:71:0d:22:04:b2:13:ec:56:b7:22:6c:a2:7e:aa:
48:3d:92:1e:50:f2:5d:a2:6d:a4:23:c4:58:f4:ae:e8:82:e4:
79:d4:ea:0e:fb:88:2f:59:dd:49:1b:62:fd:bb:cb:5a:a5:74:
6c:ff:c5:f5:0c:22:38:08:9d:c0:12:14:00:5d:fb:0c:e5:0b:
30:30:31:37:39:4b:ef:64:67:ea:b9:8a:87:89:fd:37:b3:32:
fe:91:d6:f8:ed:a6:7d:4f:0e:3f:53:36:e8:ab:fe:50:2d:fa:
75:87:15:c4:7e:66:8a:19:e7:bb:b4:ea:e1:72:96:55:36:80:
16:5f:94:8f:d3:38:0b:43:a5:6f:81:74:3a:28:6c:a3:92:3b:
55:08:a1:c2:1d:15:47:2b:0c:ca:eb:03:f4:e3:f2:a0:b5:7e:
19:57:2d:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:03:19 2023 by rpki-client on console-ams.rpki-client.org