Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/c12a7b-5caf-4e7c-970d-5c476e3325f5/1/lfUN6UMFiiHfniyBWjFQzs5KAEc.roa
File: lfUN6UMFiiHfniyBWjFQzs5KAEc.roa (raw, json)
Hash identifier: 41JhltF+kf10q9D6gNpzaeckQ/C3/RJELGz0KzCmwJI=
Subject key identifier: 95:F5:0D:E9:43:05:8A:21:DF:9E:2C:81:5A:31:50:CE:CE:4A:00:47
Certificate issuer: /CN=465eba5c1a80f86a4589278edd9304b3f5169f83
Certificate serial: 01859637D4D44D6C8FCC21314C0480F3B82C
Authority key identifier: 46:5E:BA:5C:1A:80:F8:6A:45:89:27:8E:DD:93:04:B3:F5:16:9F:83
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Rl66XBqA-GpFiSeO3ZMEs_UWn4M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/c12a7b-5caf-4e7c-970d-5c476e3325f5/1/lfUN6UMFiiHfniyBWjFQzs5KAEc.roa
Signing time: Mon 09 Jan 2023 11:08:39 +0000
ROA not before: Mon 09 Jan 2023 11:08:39 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 41789
IP address blocks: 185.244.51.0/24 maxlen: 24
193.111.250.0/24 maxlen: 24
185.250.44.0/23 maxlen: 23
185.250.46.0/23 maxlen: 23
193.39.168.0/24 maxlen: 24
193.39.171.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:96:37:d4:d4:4d:6c:8f:cc:21:31:4c:04:80:f3:b8:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=465eba5c1a80f86a4589278edd9304b3f5169f83
Validity
Not Before: Jan 9 11:08:39 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=95f50de943058a21df9e2c815a3150cece4a0047
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:43:5f:11:ed:d7:c0:bc:dd:af:57:3d:2e:45:
d9:82:d1:95:99:a0:c8:48:d4:6b:6b:c5:89:6e:64:
71:0a:20:11:fe:50:00:1b:24:11:73:93:f5:51:04:
32:b1:7d:2e:7c:92:47:dc:8c:97:cc:a3:83:5c:ae:
13:78:e9:0a:55:47:0c:52:bf:eb:bf:63:3c:c3:34:
4c:0c:43:cd:b7:23:86:e2:a0:c3:79:03:de:35:c0:
37:9c:ec:6c:55:9e:d3:60:77:9c:92:3b:8f:c3:b7:
d3:cc:b2:bc:1a:b4:70:18:cb:e1:52:97:10:84:06:
e8:b3:6b:bf:e6:3c:b2:ec:f7:ad:2d:0c:b2:99:06:
6a:51:50:37:46:ca:bb:bf:b6:39:22:a9:b9:b0:ab:
70:b9:fa:b9:de:9a:60:97:be:e4:81:cc:0b:98:5e:
aa:59:ed:1d:29:1b:b1:01:12:54:83:08:76:7f:e0:
0a:ae:f2:80:94:aa:1b:a2:48:80:a6:0c:f8:14:30:
c6:95:e5:3f:fe:da:63:f6:f5:59:49:52:ae:1f:b3:
e5:36:8f:08:27:ce:be:8b:ea:25:a9:25:81:f7:da:
ff:13:29:cf:de:3e:df:ed:48:8c:47:8a:96:8f:92:
5f:b1:29:72:5d:cb:7f:cc:32:ff:5a:6c:ba:e4:d8:
f4:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:F5:0D:E9:43:05:8A:21:DF:9E:2C:81:5A:31:50:CE:CE:4A:00:47
X509v3 Authority Key Identifier:
keyid:46:5E:BA:5C:1A:80:F8:6A:45:89:27:8E:DD:93:04:B3:F5:16:9F:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Rl66XBqA-GpFiSeO3ZMEs_UWn4M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/c12a7b-5caf-4e7c-970d-5c476e3325f5/1/lfUN6UMFiiHfniyBWjFQzs5KAEc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/c12a7b-5caf-4e7c-970d-5c476e3325f5/1/Rl66XBqA-GpFiSeO3ZMEs_UWn4M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.244.51.0/24
185.250.44.0/22
193.39.168.0/24
193.39.171.0/24
193.111.250.0/24
Signature Algorithm: sha256WithRSAEncryption
23:e1:2f:cd:56:c1:35:27:ae:e5:fe:4d:5f:08:bd:18:81:73:
6c:a0:1c:8c:52:b1:53:73:f2:1f:4c:64:79:dc:18:23:af:58:
d7:c3:3b:21:20:d3:22:a9:b9:86:a6:8a:89:ff:46:5c:9d:ad:
f3:42:29:56:db:49:1a:77:f2:d9:95:37:f1:2e:ec:c0:b7:d4:
8e:0d:67:42:ed:e3:d5:a4:09:f2:fe:04:9f:ae:26:0a:72:dd:
f7:fc:cc:87:9a:e6:b7:77:d0:5d:c3:b3:c5:46:64:d6:22:6c:
d8:d3:03:31:eb:eb:99:26:ea:b3:12:97:08:0c:c6:00:56:d2:
e8:52:f7:f9:83:ab:98:d2:83:5e:d9:98:21:93:b3:92:1a:11:
f2:e8:00:1a:dc:48:dd:e4:93:84:4d:ee:f5:53:ee:a1:f3:83:
e8:f2:29:f2:e3:1b:7f:f7:7a:70:03:4c:c1:ad:98:6e:b8:e2:
db:96:52:a8:3e:6a:db:33:6a:38:35:00:2b:a3:50:1a:e3:70:
85:49:15:f1:8b:3f:2c:12:09:1f:f0:7b:77:a5:d1:c1:56:d9:
fc:ff:02:02:80:c7:8e:32:60:13:56:f2:75:01:aa:96:a9:8f:
96:36:9b:42:ab:af:d4:6e:7c:f8:ab:cf:a4:08:71:b1:4b:d0:
f8:82:24:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:03:19 2023 by rpki-client on console-ams.rpki-client.org