Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/SqWxtqXDGSNV020s0r3djKsL5TQ.roa
File: SqWxtqXDGSNV020s0r3djKsL5TQ.roa (raw, json)
Hash identifier: hIJXG9bG2AokMCuFg2vnTIfy6fO8czDByLy5jMa6Ums=
Subject key identifier: 4A:A5:B1:B6:A5:C3:19:23:55:D3:6D:2C:D2:BD:DD:8C:AB:0B:E5:34
Certificate issuer: /CN=8bab30683859ec7e0206fe9265363e8e3971a9a8
Certificate serial: 018E1946B6BA1836FEADA99E62F3FA9FFDD0
Authority key identifier: 8B:AB:30:68:38:59:EC:7E:02:06:FE:92:65:36:3E:8E:39:71:A9:A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/SqWxtqXDGSNV020s0r3djKsL5TQ.roa
Signing time: Thu 07 Mar 2024 14:17:28 +0000
ROA not before: Thu 07 Mar 2024 14:17:28 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 64470
IP address blocks: 45.140.32.0/22 maxlen: 22
45.149.160.0/22 maxlen: 22
193.46.204.0/24 maxlen: 24
193.46.211.0/24 maxlen: 24
193.46.214.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:19:46:b6:ba:18:36:fe:ad:a9:9e:62:f3:fa:9f:fd:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8bab30683859ec7e0206fe9265363e8e3971a9a8
Validity
Not Before: Mar 7 14:17:28 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4aa5b1b6a5c3192355d36d2cd2bddd8cab0be534
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fc:bb:94:ff:e9:3e:06:51:50:aa:77:01:8e:94:
3e:4a:99:8f:fa:0e:3f:a2:28:67:6b:19:71:ff:fa:
fe:32:51:8c:b7:1e:86:6b:9f:21:20:c9:9f:f1:40:
f6:30:2e:49:ea:8a:e9:22:c3:b4:ce:35:34:d7:c8:
4d:a6:3c:10:c6:d0:6f:d0:4d:43:88:f4:d5:41:9c:
52:07:ff:45:08:96:c6:dd:8f:82:60:f1:ac:b8:2e:
cb:d8:ce:25:ad:2c:bf:1b:ef:53:e1:8a:98:6e:82:
a4:8c:ff:2a:e3:1f:01:25:11:79:58:65:74:00:b9:
74:35:d8:cb:08:74:51:f2:d1:3e:94:78:a2:77:69:
8d:83:3e:8a:b0:b0:10:56:60:76:48:0c:f0:a6:29:
69:39:52:2d:60:22:03:15:0a:d5:17:99:28:c2:df:
ce:b5:5e:d3:8b:6d:7a:29:1f:80:04:82:2a:8d:03:
ef:35:6f:9a:99:09:69:c0:b6:69:28:ea:4a:ca:83:
23:5b:c1:30:6d:94:77:0e:bc:99:40:96:0a:95:1c:
3f:d2:ae:59:5f:78:1d:63:d6:1b:08:04:35:7e:6e:
b9:2b:ff:6f:1b:f0:5a:d4:fa:a1:4d:8b:a9:dc:00:
39:5e:f1:c6:3d:50:e8:9b:7f:6e:5f:c8:0b:93:17:
51:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:A5:B1:B6:A5:C3:19:23:55:D3:6D:2C:D2:BD:DD:8C:AB:0B:E5:34
X509v3 Authority Key Identifier:
keyid:8B:AB:30:68:38:59:EC:7E:02:06:FE:92:65:36:3E:8E:39:71:A9:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/SqWxtqXDGSNV020s0r3djKsL5TQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/i6swaDhZ7H4CBv6SZTY-jjlxqag.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.140.32.0/22
45.149.160.0/22
193.46.204.0/24
193.46.211.0/24
193.46.214.0/24
Signature Algorithm: sha256WithRSAEncryption
4a:38:86:be:be:f1:f7:5d:8f:88:a6:43:d0:0d:27:19:f7:5b:
9b:81:6f:7c:94:41:24:71:7d:6a:7a:d8:28:ee:66:23:d3:1f:
c6:ab:94:0b:6c:f9:91:5d:54:3a:ad:d0:22:d0:21:c2:8f:a6:
c1:2f:3c:6c:6b:9c:5a:5b:4b:30:ba:d5:9f:50:2b:6c:fc:20:
ea:b0:5c:58:57:d6:1b:be:4f:20:f6:d4:ba:30:7d:93:18:6a:
7f:58:a7:14:74:de:49:0c:df:11:80:48:c2:4a:55:58:45:12:
b3:6c:1a:df:52:ae:e2:fc:5c:86:4e:16:60:6b:bd:ce:b8:35:
7c:0c:80:fc:61:01:8f:5a:e1:1a:f0:7f:b1:ec:e8:e2:84:3d:
1e:c6:45:8f:73:18:8f:90:c5:b4:22:4f:0d:e2:ba:3b:6c:4b:
9c:f3:7d:65:90:be:91:d7:3d:5b:86:1b:59:bb:53:d4:7b:1d:
d2:92:56:73:28:d0:f1:8f:a2:38:0d:e9:52:a9:f9:99:89:2f:
9b:ad:6c:cd:03:5d:c1:04:b5:7d:aa:78:e2:93:76:26:32:aa:
80:da:7f:06:9e:3f:12:75:73:06:7e:ef:13:83:12:b8:b3:21:
a9:2d:98:4c:4d:51:e5:a5:c5:e6:0c:70:9d:f2:87:bb:86:5b:
7d:c5:42:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 18 17:05:23 2024 by rpki-client on console-fra.rpki-client.org