Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/e005c2-affa-458f-aaf8-8af56e733600/1/8uCmN1cNCBO7aE2lqiE_sr9MiAs.roa
File: 8uCmN1cNCBO7aE2lqiE_sr9MiAs.roa (raw, json)
Hash identifier: dhRdXkKxuEJ6DC0hbSiykZJKDWv8OT2E6loRPfSdXMs=
Subject key identifier: F2:E0:A6:37:57:0D:08:13:BB:68:4D:A5:AA:21:3F:B2:BF:4C:88:0B
Certificate issuer: /CN=4b57725b0a605d4ddcc464b70dcb3a162a5f055b
Certificate serial: 11CCD690
Authority key identifier: 4B:57:72:5B:0A:60:5D:4D:DC:C4:64:B7:0D:CB:3A:16:2A:5F:05:5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S1dyWwpgXU3cxGS3Dcs6FipfBVs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/e005c2-affa-458f-aaf8-8af56e733600/1/8uCmN1cNCBO7aE2lqiE_sr9MiAs.roa
Signing time: Tue 22 Mar 2022 06:48:04 +0000
ROA not before: Tue 22 Mar 2022 06:48:04 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 51407
IP address blocks: 46.32.192.0/21 maxlen: 21
46.32.192.0/23 maxlen: 23
46.32.194.0/23 maxlen: 23
37.60.144.0/23 maxlen: 23
37.60.144.0/21 maxlen: 21
46.32.198.0/23 maxlen: 23
46.32.196.0/23 maxlen: 23
37.60.148.0/23 maxlen: 23
37.60.146.0/23 maxlen: 23
37.60.150.0/23 maxlen: 23
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 298636944 (0x11ccd690)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b57725b0a605d4ddcc464b70dcb3a162a5f055b
Validity
Not Before: Mar 22 06:48:04 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f2e0a637570d0813bb684da5aa213fb2bf4c880b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:13:21:08:f2:1b:e0:cc:b3:da:85:79:85:fb:
5c:7a:72:1c:cf:a2:c3:2d:71:2a:c9:c6:85:1d:e7:
c1:e8:0f:61:2f:89:97:0c:e3:5e:9a:23:37:bb:8e:
b2:9d:31:6f:a4:e7:0e:17:5c:29:1c:66:ba:6a:ed:
1c:a6:98:1c:44:cb:0f:46:c7:49:56:35:8d:3a:f8:
42:19:6f:27:c8:b4:50:87:d3:e8:59:7a:8c:aa:7a:
be:45:9d:64:c7:70:c5:25:53:b2:56:2f:44:07:ff:
92:f1:6a:19:d2:5a:02:66:75:57:10:75:96:e8:f6:
f8:61:dc:f7:9c:dc:69:26:0b:62:63:2b:23:5d:d5:
0d:3c:b9:8e:5a:ab:0c:22:2c:19:45:2b:1c:c6:c2:
71:b6:0b:47:be:be:49:b1:1e:a2:e8:c4:f7:65:01:
51:d5:4d:64:b8:b9:80:43:16:9c:cf:6f:bd:6c:40:
41:23:6a:1e:a4:06:a3:97:0d:a5:e6:34:35:b5:da:
97:1d:fb:e7:28:77:dc:cb:f8:b4:7b:1c:e3:34:33:
85:03:66:15:17:0d:a9:52:9c:e9:23:be:72:90:23:
6c:db:e3:0c:5b:ee:1e:82:be:89:77:92:da:09:f0:
01:04:ef:0b:f0:e7:65:46:09:a5:52:3a:24:00:89:
15:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:E0:A6:37:57:0D:08:13:BB:68:4D:A5:AA:21:3F:B2:BF:4C:88:0B
X509v3 Authority Key Identifier:
keyid:4B:57:72:5B:0A:60:5D:4D:DC:C4:64:B7:0D:CB:3A:16:2A:5F:05:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S1dyWwpgXU3cxGS3Dcs6FipfBVs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/e005c2-affa-458f-aaf8-8af56e733600/1/8uCmN1cNCBO7aE2lqiE_sr9MiAs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/e005c2-affa-458f-aaf8-8af56e733600/1/S1dyWwpgXU3cxGS3Dcs6FipfBVs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.60.144.0/21
46.32.192.0/21
Signature Algorithm: sha256WithRSAEncryption
3a:d0:6c:c0:ff:02:de:b9:a1:3a:f8:d9:c9:66:dd:f3:0e:3a:
f3:d9:be:a5:55:20:53:6f:11:e2:88:b5:1b:d6:d0:74:9e:9d:
4e:d0:c5:2a:29:db:bb:09:ad:64:59:0e:8a:95:11:ae:b0:6e:
fe:40:99:e8:92:c4:df:84:d3:3e:45:0b:69:e4:b6:2c:80:35:
94:d6:cd:20:7a:9c:25:92:35:ee:a7:09:c9:48:6e:fb:a6:f3:
b8:8a:f5:a1:06:dd:a5:55:f9:c8:91:9b:4d:29:28:fc:09:26:
0f:a9:bb:2e:79:bd:f4:59:2a:58:46:b8:0a:5f:ff:74:e3:af:
9d:77:99:cf:5d:88:2d:eb:42:1c:76:64:45:cb:42:46:50:e1:
e8:c6:3d:71:d1:2d:53:cb:4c:7b:d0:ca:4d:96:10:86:6e:a7:
b3:ad:d2:02:ab:f8:a1:60:89:3c:68:90:6f:46:53:da:98:9a:
2c:62:e6:e9:e2:a2:fa:a0:2f:a9:68:ea:d8:a5:d2:2c:dc:60:
13:7a:ca:70:7c:e6:90:8d:a6:2c:02:ec:ae:67:14:7d:f2:55:
86:e5:8d:8e:21:1c:6b:fc:b0:00:62:65:48:41:37:2f:c0:01:
48:d0:9e:12:8d:4c:59:e4:78:d0:73:4f:79:9f:c8:f7:37:89:
4a:43:e3:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:41:43 2024 by rpki-client on console-ams.rpki-client.org