Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/IvrGImTdNBZV5InlHloFljRdnNQ.roa
File: IvrGImTdNBZV5InlHloFljRdnNQ.roa (raw, json)
Hash identifier: QdanI0DSXQAZ+BYb0QT5H+Zfbhrn8pEp/rgwwqBcfHw=
Subject key identifier: 22:FA:C6:22:64:DD:34:16:55:E4:89:E5:1E:5A:05:96:34:5D:9C:D4
Certificate issuer: /CN=b557ccd43afe816e4953228bf14a75dc29014b8d
Certificate serial: 01851AAC6E5C566E56DA10621BC202BBED26
Authority key identifier: B5:57:CC:D4:3A:FE:81:6E:49:53:22:8B:F1:4A:75:DC:29:01:4B:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tVfM1Dr-gW5JUyKL8Up13CkBS40.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/IvrGImTdNBZV5InlHloFljRdnNQ.roa
Signing time: Fri 16 Dec 2022 11:23:06 +0000
ROA not before: Fri 16 Dec 2022 11:23:06 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 7018
IP address blocks: 185.123.156.0/22 maxlen: 23
185.130.40.0/22 maxlen: 23
94.232.244.0/22 maxlen: 23
46.161.210.0/23 maxlen: 23
46.161.208.0/23 maxlen: 23
46.161.216.0/22 maxlen: 23
2a0c:9e04::/32 maxlen: 32
2a0c:9e03::/32 maxlen: 32
2a0c:9e07::/32 maxlen: 32
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:1a:ac:6e:5c:56:6e:56:da:10:62:1b:c2:02:bb:ed:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b557ccd43afe816e4953228bf14a75dc29014b8d
Validity
Not Before: Dec 16 11:23:06 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=22fac62264dd341655e489e51e5a0596345d9cd4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:22:d7:22:ed:47:5e:12:d0:36:f1:3a:ea:c8:
2e:6b:91:e1:eb:28:0c:fe:0a:33:b9:bf:7a:70:a1:
66:c2:1c:25:00:c8:7c:67:2e:1b:17:69:2e:4c:1b:
4e:b6:b3:8f:01:25:94:0c:87:0a:53:82:03:6c:dd:
d4:34:66:32:0a:99:50:c3:68:df:db:e2:34:ec:3e:
b9:f7:c8:16:a9:8b:95:02:c2:c3:51:d4:1e:f0:37:
ed:f1:76:26:c9:4d:9e:64:9d:83:74:6a:fe:6a:72:
7c:b8:d4:19:52:35:b6:e3:f9:4d:2f:61:28:b6:f3:
67:29:1f:b7:fe:a1:8a:0d:4d:4c:8a:97:99:8a:fd:
f6:bc:ad:e4:89:52:49:c3:30:19:37:58:aa:c3:1b:
7e:dc:1b:cf:8d:46:fc:18:b7:4b:12:5a:06:b8:4c:
bb:75:74:4b:76:1e:bd:a8:ca:47:59:e6:e4:f4:a3:
d6:5f:3c:80:f1:7a:ee:20:62:92:38:93:a4:87:27:
5d:f1:f6:46:b6:6d:a4:7c:ec:4b:10:47:42:ed:d2:
78:d5:2f:08:bc:94:6a:31:a3:67:31:b2:1a:ac:cf:
69:32:de:88:59:63:59:2e:9e:45:30:c2:d3:45:0f:
76:31:bb:67:55:1e:83:1f:af:64:d7:2c:12:79:e5:
ab:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:FA:C6:22:64:DD:34:16:55:E4:89:E5:1E:5A:05:96:34:5D:9C:D4
X509v3 Authority Key Identifier:
keyid:B5:57:CC:D4:3A:FE:81:6E:49:53:22:8B:F1:4A:75:DC:29:01:4B:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tVfM1Dr-gW5JUyKL8Up13CkBS40.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/IvrGImTdNBZV5InlHloFljRdnNQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/tVfM1Dr-gW5JUyKL8Up13CkBS40.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.161.208.0/22
46.161.216.0/22
94.232.244.0/22
185.123.156.0/22
185.130.40.0/22
IPv6:
2a0c:9e03::-2a0c:9e04:ffff:ffff:ffff:ffff:ffff:ffff
2a0c:9e07::/32
Signature Algorithm: sha256WithRSAEncryption
77:ce:61:30:56:cf:14:59:51:1c:77:73:ae:9a:ac:31:3d:d8:
16:dd:09:41:18:31:24:48:cd:5f:5b:93:62:3c:28:c9:80:bc:
3f:d5:3b:45:d6:f2:21:ce:70:ae:d3:45:81:d7:41:a3:9c:8b:
c7:c4:93:ba:d7:2d:e3:9d:0f:77:a2:83:e5:19:68:48:0e:d0:
50:82:3f:2d:fc:6d:dd:41:aa:3a:52:b9:a5:04:ae:6d:fd:3e:
62:07:92:e1:a9:c7:01:ca:4f:9b:89:97:c4:13:31:4c:86:6c:
a2:cd:fd:65:8c:97:7d:83:d6:16:fc:97:ab:7f:79:e4:bd:21:
51:90:4b:79:37:85:50:a3:48:5f:1e:d7:fa:5b:62:ef:ff:56:
aa:f9:3b:0d:29:e4:e3:f5:b0:de:bf:c6:0b:d1:12:fc:08:dc:
c8:45:94:fe:3f:ac:8f:1c:4a:de:78:35:c9:3f:0e:60:72:a6:
bc:5b:6e:f7:54:97:62:bc:1a:0d:d3:10:a2:b4:cc:02:37:e7:
cf:dd:f8:92:d7:f2:a2:88:50:c7:e4:b0:67:d5:d0:d5:76:2b:
c4:ec:2d:b0:38:70:78:4e:a3:d3:37:c1:49:a5:66:dc:eb:df:
64:77:55:eb:0b:51:7a:45:d6:6a:af:db:c0:da:79:17:2d:d4:
de:ab:98:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:18:25 2024 by rpki-client on console-fra.rpki-client.org