Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/SSV-Dr1SSoryiJboYNO48DuRR9g.roa
File: SSV-Dr1SSoryiJboYNO48DuRR9g.roa (raw, json)
Hash identifier: KGVhCw1YhvFwadqTrZ5ia6BHvxBNWfAIbSRapSTaDvc=
Subject key identifier: 49:25:7E:0E:BD:52:4A:8A:F2:88:96:E8:60:D3:B8:F0:3B:91:47:D8
Certificate issuer: /CN=b557ccd43afe816e4953228bf14a75dc29014b8d
Certificate serial: 09EAEF27
Authority key identifier: B5:57:CC:D4:3A:FE:81:6E:49:53:22:8B:F1:4A:75:DC:29:01:4B:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tVfM1Dr-gW5JUyKL8Up13CkBS40.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/SSV-Dr1SSoryiJboYNO48DuRR9g.roa
Signing time: Mon 27 Jun 2022 11:06:47 +0000
ROA not before: Mon 27 Jun 2022 11:06:47 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 7018
IP address blocks: 185.123.156.0/22 maxlen: 23
185.130.40.0/22 maxlen: 23
94.232.244.0/22 maxlen: 23
46.161.210.0/23 maxlen: 23
46.161.216.0/22 maxlen: 23
2a0c:9e03::/32 maxlen: 40
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 166391591 (0x9eaef27)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b557ccd43afe816e4953228bf14a75dc29014b8d
Validity
Not Before: Jun 27 11:06:47 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=49257e0ebd524a8af28896e860d3b8f03b9147d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:41:d5:16:2d:28:a5:59:87:0a:d3:86:68:68:
54:e8:8d:8b:61:0a:59:1c:0f:45:a8:e4:02:06:50:
9a:77:5e:99:32:fc:62:3e:44:71:13:65:b1:b0:81:
16:13:ab:f3:63:cc:89:f9:e2:45:4d:10:ae:97:ef:
8b:4c:ee:38:16:d9:41:05:a3:21:2a:a3:82:a8:41:
03:c7:83:c0:46:dc:84:46:88:0f:55:1f:73:62:70:
c3:c0:88:05:fe:f5:06:6a:e4:ef:fa:cf:2d:59:31:
99:b3:0f:00:ba:e1:1d:d1:a2:73:c2:38:e7:c9:f3:
22:3e:73:3b:a7:75:67:10:5b:66:4b:d8:c8:b7:00:
68:50:08:ed:3e:d6:cf:23:08:7c:31:99:ca:9b:b7:
47:c7:b8:41:20:cf:73:da:e4:68:e0:18:72:5c:07:
14:70:45:1b:c6:bd:67:53:d0:99:ea:db:dc:4a:8b:
5f:ae:a2:5a:42:00:c9:21:b9:bf:a7:b7:85:5c:ed:
2e:9f:a0:f2:06:7c:fe:db:9a:3a:d8:66:3d:26:12:
e1:e7:26:13:c6:5a:c5:40:1a:a5:37:b6:dd:39:43:
91:a3:50:5a:86:36:8f:31:b5:e6:93:33:c0:d3:52:
87:2a:9a:d8:53:45:46:12:af:99:3c:04:e8:83:8f:
18:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:25:7E:0E:BD:52:4A:8A:F2:88:96:E8:60:D3:B8:F0:3B:91:47:D8
X509v3 Authority Key Identifier:
keyid:B5:57:CC:D4:3A:FE:81:6E:49:53:22:8B:F1:4A:75:DC:29:01:4B:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tVfM1Dr-gW5JUyKL8Up13CkBS40.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/SSV-Dr1SSoryiJboYNO48DuRR9g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/tVfM1Dr-gW5JUyKL8Up13CkBS40.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.161.210.0/23
46.161.216.0/22
94.232.244.0/22
185.123.156.0/22
185.130.40.0/22
IPv6:
2a0c:9e03::/32
Signature Algorithm: sha256WithRSAEncryption
a3:9a:d4:4f:75:ca:cd:0a:e7:30:4d:db:43:ec:e3:e6:09:bf:
14:82:8e:e5:5d:77:50:eb:12:99:a8:65:5a:4b:99:30:0b:d4:
47:b4:68:a9:33:e3:fe:96:33:da:69:01:62:25:7f:e8:a8:d5:
4d:4a:00:a6:6f:0e:19:fd:6f:f2:79:99:de:b0:b3:4e:36:81:
38:dc:f5:08:9b:33:a3:7c:15:3d:a2:7d:77:82:26:bc:7a:3c:
56:35:87:87:fe:e6:6f:ea:11:93:e9:67:4c:93:4b:48:d8:c1:
21:af:33:ae:1d:8f:90:12:f5:8a:9b:ab:e8:15:e0:bf:6e:46:
c8:13:fe:f4:4b:89:81:e7:2b:f6:92:63:0b:9f:6c:0d:46:eb:
57:93:3f:4a:f8:bc:8c:04:a8:60:34:b0:01:f2:66:3e:ac:19:
79:31:8e:d3:76:ca:ff:8c:57:0e:00:25:16:b6:4b:b1:9f:aa:
a3:ae:1b:34:7a:8f:44:4e:50:6a:3d:be:8e:35:7f:87:61:e1:
17:2e:0b:14:c6:39:ca:3b:17:65:04:e8:99:f2:11:e3:41:d5:
33:75:25:61:69:cd:60:ec:76:39:90:68:e6:8d:11:ce:e7:44:
1e:5e:1b:74:4c:8f:f7:5a:0e:fb:04:12:e6:f8:0c:26:fb:21:
a1:23:fc:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:18:25 2024 by rpki-client on console-fra.rpki-client.org