Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/a1a88f-1dff-4eff-826b-36de657232be/1/r116kgXq0YggBK6NQk9Md8HdgsI.roa
File: r116kgXq0YggBK6NQk9Md8HdgsI.roa (raw, json)
Hash identifier: hD3/T+4KK/RDIARS65rl4cKBXH6t0DIxJ6qnQF+H67I=
Subject key identifier: AF:5D:7A:92:05:EA:D1:88:20:04:AE:8D:42:4F:4C:77:C1:DD:82:C2
Certificate issuer: /CN=6d20ddd398dac8f62cc12526325f1821fb724f75
Certificate serial: 018A69FF8C41AB4C9C8BFC7F26EE1821EFAC
Authority key identifier: 6D:20:DD:D3:98:DA:C8:F6:2C:C1:25:26:32:5F:18:21:FB:72:4F:75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bSDd05jayPYswSUmMl8YIftyT3U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/a1a88f-1dff-4eff-826b-36de657232be/1/r116kgXq0YggBK6NQk9Md8HdgsI.roa
Signing time: Wed 06 Sep 2023 10:17:49 +0000
ROA not before: Wed 06 Sep 2023 10:17:49 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 26042
IP address blocks: 194.110.246.0/24 maxlen: 24
194.113.34.0/24 maxlen: 24
194.113.35.0/24 maxlen: 24
45.143.164.0/24 maxlen: 24
45.143.165.0/24 maxlen: 24
192.144.12.0/22 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:69:ff:8c:41:ab:4c:9c:8b:fc:7f:26:ee:18:21:ef:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d20ddd398dac8f62cc12526325f1821fb724f75
Validity
Not Before: Sep 6 10:17:49 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=af5d7a9205ead1882004ae8d424f4c77c1dd82c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:4e:42:f9:3c:93:28:bd:4b:d8:57:47:c0:c6:
de:75:4c:ab:47:fe:89:ab:72:0e:57:0c:61:1e:0c:
04:d9:4c:fe:d5:ef:c8:53:71:85:4b:38:21:53:35:
44:27:e3:17:b4:f1:22:be:38:b5:10:e9:d3:fa:1f:
a1:66:3a:65:5f:94:17:30:4c:04:90:7e:c9:f8:da:
b4:25:86:c3:c0:c1:4d:dc:04:c2:82:93:22:70:06:
b8:90:11:97:e7:52:2b:ef:ae:be:46:d4:9a:ab:2a:
72:40:fc:d4:9e:70:f3:7c:50:4b:ed:2e:67:28:c5:
92:f7:12:37:bf:cd:c6:9d:32:76:a9:d2:43:5c:f5:
3e:1c:fd:2c:40:aa:d5:9f:20:06:34:ae:18:ef:9e:
b4:d8:f4:9d:c3:6f:dc:4c:61:f3:0c:4d:19:91:bb:
36:88:9a:7c:e6:0b:19:c5:e3:d8:ea:42:6a:5a:1b:
6b:3e:3b:a4:db:aa:17:3b:85:5d:76:97:8e:c3:52:
48:75:51:fc:a5:4a:ae:b3:1a:fe:bf:ef:1a:c0:e8:
b9:51:17:25:6d:7f:fd:83:da:da:46:ad:0c:5e:f8:
30:6e:62:77:10:8f:8c:17:05:d9:b8:eb:1e:0b:22:
3a:6f:65:f8:e3:24:2b:88:0b:0e:bc:54:5b:4b:94:
ab:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:5D:7A:92:05:EA:D1:88:20:04:AE:8D:42:4F:4C:77:C1:DD:82:C2
X509v3 Authority Key Identifier:
keyid:6D:20:DD:D3:98:DA:C8:F6:2C:C1:25:26:32:5F:18:21:FB:72:4F:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bSDd05jayPYswSUmMl8YIftyT3U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/a1a88f-1dff-4eff-826b-36de657232be/1/r116kgXq0YggBK6NQk9Md8HdgsI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/a1a88f-1dff-4eff-826b-36de657232be/1/bSDd05jayPYswSUmMl8YIftyT3U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.143.164.0/23
192.144.12.0/22
194.110.246.0/24
194.113.34.0/23
Signature Algorithm: sha256WithRSAEncryption
37:61:cf:5b:3d:7e:26:d2:55:8e:43:4a:92:11:9a:ab:0b:b9:
59:17:fb:f2:c2:d0:2b:05:9b:ae:3a:1e:30:de:14:24:02:8e:
99:f4:22:b1:93:d7:05:4d:79:69:98:7a:a0:c6:62:6f:65:a1:
5b:e0:79:95:e3:34:60:3f:87:a2:3d:8b:1f:f3:e3:fe:17:e1:
c1:45:e9:10:f7:70:96:38:2b:cd:60:32:a1:8a:7c:ae:ba:3e:
37:d2:cf:ed:60:54:8f:e0:3b:d3:af:16:8d:a2:46:d6:e1:a1:
06:cb:2a:dc:ea:07:b2:b8:ed:77:8d:d0:7f:af:38:ab:f9:b9:
dc:e1:0b:95:33:4f:01:8d:11:21:aa:99:bb:f6:fb:4c:08:db:
ef:92:a7:9f:8a:b4:1a:ad:b5:c1:7f:6a:30:9e:00:39:9a:9a:
30:11:d0:7d:e9:ec:5b:d5:a9:df:bd:cd:03:66:97:cf:84:99:
b1:2b:88:d4:41:ee:ab:b4:f1:fa:7c:b4:db:bb:3b:58:3c:ad:
2c:b2:af:6e:52:44:8d:4d:f8:38:4d:3c:ad:df:04:3f:85:ea:
7f:05:0e:59:ff:3a:79:8c:7e:a7:ad:80:d6:5f:e6:9e:89:92:
6a:53:12:5b:ab:aa:7d:03:f2:6b:30:9f:7b:6d:0e:d1:ec:ba:
ab:32:97:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:50:00 2024 by rpki-client on console-ams.rpki-client.org