Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/eannPik-ZAD5JtDeO0tVAk843so.roa
File: eannPik-ZAD5JtDeO0tVAk843so.roa (raw, json)
Hash identifier: C+g1NP+zF7z1UFvzfumIFh471iGILddhVwNj5QUqs/0=
Subject key identifier: 79:A9:E7:3E:29:3E:64:00:F9:26:D0:DE:3B:4B:55:02:4F:38:DE:CA
Certificate issuer: /CN=b557ccd43afe816e4953228bf14a75dc29014b8d
Certificate serial: 01857067645D8BA085A8D793BADD59F45B21
Authority key identifier: B5:57:CC:D4:3A:FE:81:6E:49:53:22:8B:F1:4A:75:DC:29:01:4B:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tVfM1Dr-gW5JUyKL8Up13CkBS40.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/eannPik-ZAD5JtDeO0tVAk843so.roa
Signing time: Mon 02 Jan 2023 02:55:02 +0000
ROA not before: Mon 02 Jan 2023 02:55:02 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 6079
IP address blocks: 45.138.0.0/23 maxlen: 23
45.134.176.0/23 maxlen: 23
46.161.218.0/23 maxlen: 23
2a0c:9e05::/32 maxlen: 32
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:67:64:5d:8b:a0:85:a8:d7:93:ba:dd:59:f4:5b:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b557ccd43afe816e4953228bf14a75dc29014b8d
Validity
Not Before: Jan 2 02:55:02 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=79a9e73e293e6400f926d0de3b4b55024f38deca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:66:6f:bd:a9:6c:98:8e:54:2d:c8:29:41:0c:
d4:6d:98:f2:cf:59:9e:0a:45:19:ec:09:c8:c7:a0:
6c:ec:03:3e:1d:a4:8c:32:77:3e:d0:8e:65:97:f4:
5b:cd:39:3e:79:3f:cf:1e:83:d4:0c:33:d0:be:4a:
59:75:d0:33:06:18:41:c5:4b:5c:67:33:f7:cf:b2:
77:4a:ac:95:d4:70:d6:00:88:65:35:58:4d:83:65:
47:17:38:be:72:9b:c9:b3:04:d2:eb:31:e9:ff:77:
6f:0b:bb:74:af:5f:84:ab:f3:5c:df:32:c0:f8:61:
cf:17:09:33:af:42:fb:e5:ba:cc:5c:2a:25:8f:9e:
c5:5c:36:fe:19:81:fc:d3:1e:35:c1:6a:ee:22:20:
4b:7d:06:2a:98:45:7a:d6:43:96:87:db:2d:b6:c7:
0a:92:04:25:ce:7d:e3:29:68:7f:d4:11:d7:7c:bb:
d7:56:9e:a3:63:35:8e:cf:cc:6d:2c:6a:09:35:7e:
77:96:aa:17:6b:e7:d0:f8:b5:ee:27:fd:d0:52:27:
a8:ba:4b:86:b1:fc:52:4a:6a:e6:41:de:db:49:4c:
89:57:7e:3a:c4:b1:2b:37:2e:ed:51:78:34:c5:56:
a0:ae:a9:78:e9:c1:ca:7a:de:bd:34:d2:99:80:b2:
47:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:A9:E7:3E:29:3E:64:00:F9:26:D0:DE:3B:4B:55:02:4F:38:DE:CA
X509v3 Authority Key Identifier:
keyid:B5:57:CC:D4:3A:FE:81:6E:49:53:22:8B:F1:4A:75:DC:29:01:4B:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tVfM1Dr-gW5JUyKL8Up13CkBS40.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/eannPik-ZAD5JtDeO0tVAk843so.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/tVfM1Dr-gW5JUyKL8Up13CkBS40.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.134.176.0/23
45.138.0.0/23
46.161.218.0/23
IPv6:
2a0c:9e05::/32
Signature Algorithm: sha256WithRSAEncryption
5f:18:a4:0b:d9:47:0e:54:f2:30:12:96:24:33:ac:f2:25:c8:
c2:47:f3:68:53:bf:f0:07:ae:6e:df:24:9f:2c:0d:b1:70:aa:
26:56:b3:c2:0a:f9:80:0a:bc:90:62:b2:39:4b:6e:dd:5f:74:
e0:59:3c:74:2f:1e:46:27:9e:a8:64:5b:f6:e6:ba:03:6e:e2:
a4:6b:01:dd:02:19:e0:16:2f:21:6a:56:17:f3:d8:ad:4f:bb:
d6:d2:35:c5:22:77:a7:37:bb:cc:b6:65:f4:68:9e:96:14:32:
e7:a3:bb:ee:0a:4b:65:a0:cd:06:8d:08:0d:27:0b:6f:0b:ef:
0e:4f:d5:7c:57:33:68:a1:d3:85:24:db:b5:22:b3:c5:ce:b6:
e5:69:dc:84:48:ae:3d:b2:f9:f4:7b:3d:4f:b3:1e:93:2b:a6:
30:d5:f9:c6:a1:47:aa:80:f9:06:7a:4d:1a:a5:f2:4e:cd:64:
cf:2e:1d:a8:09:65:8f:c2:aa:13:5b:5f:83:02:02:bb:4c:5f:
1a:83:49:d5:dd:11:2b:60:7a:d9:af:02:2c:db:4a:ba:1b:72:
e7:f3:12:51:a6:01:8f:84:bc:15:c2:f2:1c:df:d1:43:58:4d:
86:79:fa:3c:e8:a3:03:66:a4:81:71:17:95:ef:91:3a:f4:df:
79:c9:0c:13
-----BEGIN CERTIFICATE-----
MIIFGDCCBACgAwIBAgISAYVwZ2Rdi6CFqNeTut1Z9FshMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI1NTdjY2Q0M2FmZTgxNmU0OTUzMjI4YmYxNGE3NWRjMjkw
MTRiOGQwHhcNMjMwMTAyMDI1NTAyWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3OWE5ZTczZTI5M2U2NDAwZjkyNmQwZGUzYjRiNTUwMjRmMzhkZWNhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxmZvvalsmI5ULcgpQQzUbZjyz1me
CkUZ7AnIx6Bs7AM+HaSMMnc+0I5ll/RbzTk+eT/PHoPUDDPQvkpZddAzBhhBxUtc
ZzP3z7J3SqyV1HDWAIhlNVhNg2VHFzi+cpvJswTS6zHp/3dvC7t0r1+Eq/Nc3zLA
+GHPFwkzr0L75brMXColj57FXDb+GYH80x41wWruIiBLfQYqmEV61kOWh9sttscK
kgQlzn3jKWh/1BHXfLvXVp6jYzWOz8xtLGoJNX53lqoXa+fQ+LXuJ/3QUieoukuG
sfxSSmrmQd7bSUyJV346xLErNy7tUXg0xVagrql46cHKet69NNKZgLJHZwIDAQAB
o4ICJDCCAiAwHQYDVR0OBBYEFHmp5z4pPmQA+SbQ3jtLVQJPON7KMB8GA1UdIwQY
MBaAFLVXzNQ6/oFuSVMii/FKddwpAUuNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdFZmTTFEci1nVzVKVXlLTDhVcDEzQ2tCUzQwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYi8xOTA4NDMtMTgwMy00NDYyLWE3OTUt
NmJjNzU1NzhiNGMzLzEvZWFublBpay1aQUQ1SnREZU8wdFZBazg0M3NvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYi8xOTA4NDMtMTgwMy00NDYyLWE3OTUtNmJjNzU1NzhiNGMz
LzEvdFZmTTFEci1nVzVKVXlLTDhVcDEzQ2tCUzQwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDoGCCsGAQUFBwEHAQH/BCswKTAYBAIAATASAwQBLYawAwQB
LYoAAwQBLqHaMA0EAgACMAcDBQAqDJ4FMA0GCSqGSIb3DQEBCwUAA4IBAQBfGKQL
2UcOVPIwEpYkM6zyJcjCR/NoU7/wB65u3ySfLA2xcKomVrPCCvmACryQYrI5S27d
X3TgWTx0Lx5GJ56oZFv25roDbuKkawHdAhngFi8halYX89itT7vW0jXFInenN7vM
tmX0aJ6WFDLno7vuCktloM0GjQgNJwtvC+8OT9V8VzNoodOFJNu1IrPFzrbladyE
SK49svn0ez1Psx6TK6Yw1fnGoUeqgPkGek0apfJOzWTPLh2oCWWPwqoTW1+DAgK7
TF8ag0nV3RErYHrZrwIs20q6G3Ln8xJRpgGPhLwVwvIc39FDWE2Gefo86KMDZqSB
cReV75E69N95yQwT
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:18:25 2024 by rpki-client on console-fra.rpki-client.org