Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/c800c9-51b5-4589-9260-063fcdd3a057/1/4BCGD1xSutsjZZEQdkuPUfcfb4g.roa
File: 4BCGD1xSutsjZZEQdkuPUfcfb4g.roa (raw, json)
Hash identifier: IRWdEpZAP9Bdze4FSHkB2QSf/bkrMbr7JWCUj7nbhjk=
Subject key identifier: E0:10:86:0F:5C:52:BA:DB:23:65:91:10:76:4B:8F:51:F7:1F:6F:88
Certificate issuer: /CN=7c3c39d1899e699bf5177418ee381489edff4380
Certificate serial: 1B49D08D
Authority key identifier: 7C:3C:39:D1:89:9E:69:9B:F5:17:74:18:EE:38:14:89:ED:FF:43:80
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fDw50YmeaZv1F3QY7jgUie3_Q4A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/c800c9-51b5-4589-9260-063fcdd3a057/1/4BCGD1xSutsjZZEQdkuPUfcfb4g.roa
Signing time: Tue 12 Apr 2022 09:28:52 +0000
ROA not before: Tue 12 Apr 2022 09:28:52 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 1239
IP address blocks: 109.246.240.0/20 maxlen: 24
109.246.144.0/20 maxlen: 24
185.27.178.0/23 maxlen: 24
109.246.160.0/20 maxlen: 24
109.246.176.0/20 maxlen: 24
185.18.122.0/24 maxlen: 24
109.246.192.0/20 maxlen: 24
109.246.208.0/20 maxlen: 24
109.246.0.0/17 maxlen: 24
109.246.224.0/20 maxlen: 24
109.246.128.0/20 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 457822349 (0x1b49d08d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7c3c39d1899e699bf5177418ee381489edff4380
Validity
Not Before: Apr 12 09:28:52 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e010860f5c52badb23659110764b8f51f71f6f88
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:4c:8e:0d:8c:d9:4f:33:60:c7:5e:7f:26:41:
b9:42:58:03:99:42:51:de:12:f7:3c:c7:b8:71:55:
12:21:92:bc:7b:f7:71:05:71:d5:43:71:8f:5b:c7:
dc:11:8d:3a:df:dd:38:d0:12:8c:b0:15:41:d5:6c:
c6:36:8b:8b:9d:5f:db:bd:cd:f1:77:ee:03:18:e2:
b2:54:dd:a3:2c:30:be:33:3f:8e:da:db:ee:1a:a8:
c6:4a:dc:59:9f:7b:2b:8a:de:6c:72:ca:e7:ba:f8:
f8:44:4c:10:ec:8d:92:ae:bd:c6:5b:b5:d1:10:68:
72:1b:c2:50:e0:5e:f4:64:3c:2b:36:29:30:64:8e:
d2:c4:0c:cd:8e:7f:1e:9e:58:27:b0:21:05:99:0f:
5f:80:4b:f7:a9:65:2b:91:50:80:f4:4d:56:78:db:
d8:57:61:c5:31:b7:6d:cc:7a:58:be:57:6f:3a:5a:
3d:82:c9:a1:58:65:d9:3b:f6:e3:d9:14:ba:89:88:
94:fe:fc:b9:30:b4:a3:fd:17:82:d5:d6:98:d5:e7:
17:66:5a:04:ed:ee:96:b3:ee:8d:e0:b6:08:2f:ea:
05:3f:f2:de:a3:91:41:0e:81:6f:5b:f0:69:83:70:
3b:64:5a:d8:24:da:19:0b:5e:75:72:bc:30:05:93:
2b:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:10:86:0F:5C:52:BA:DB:23:65:91:10:76:4B:8F:51:F7:1F:6F:88
X509v3 Authority Key Identifier:
keyid:7C:3C:39:D1:89:9E:69:9B:F5:17:74:18:EE:38:14:89:ED:FF:43:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fDw50YmeaZv1F3QY7jgUie3_Q4A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/c800c9-51b5-4589-9260-063fcdd3a057/1/4BCGD1xSutsjZZEQdkuPUfcfb4g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/c800c9-51b5-4589-9260-063fcdd3a057/1/fDw50YmeaZv1F3QY7jgUie3_Q4A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.246.0.0/16
185.18.122.0/24
185.27.178.0/23
Signature Algorithm: sha256WithRSAEncryption
a1:52:33:e4:82:c3:f9:25:1d:45:77:15:45:bc:c0:bc:d3:fa:
02:dd:3b:9d:da:7d:31:6a:d0:a4:05:13:0b:56:49:8e:55:0c:
95:07:17:ad:0b:bb:f7:1b:ea:4d:72:66:21:88:7b:ed:b6:89:
23:28:8a:9b:48:a4:ed:b4:a3:28:81:bc:e8:d2:ae:3a:7f:aa:
db:53:b7:2f:21:4d:96:60:42:a2:a2:92:f6:ff:3b:a2:5f:5c:
35:2c:4c:e4:6b:93:f3:67:94:bc:8f:23:40:1e:57:ce:90:0d:
d6:67:90:99:55:8d:ba:39:25:fb:48:06:e8:d0:33:b7:54:83:
42:af:47:d2:b3:20:88:84:81:87:aa:5b:18:17:97:9b:30:9f:
31:7b:43:04:49:1e:c2:1b:ec:9a:c2:83:84:79:b2:bb:5f:b3:
17:9f:2d:cc:4c:13:09:c0:a9:d2:dd:c6:c1:a6:56:1a:4d:1e:
89:05:ac:05:bf:d3:73:a7:82:f4:ee:89:17:40:c3:7f:c7:8e:
62:11:29:8b:d7:39:11:10:af:39:8c:87:c2:f6:56:b6:60:e5:
80:5f:78:6d:bb:5f:f2:d7:a2:31:82:7d:3f:9b:dc:fb:f9:ea:
3b:1d:c4:af:52:5a:17:20:7d:16:48:2c:e7:e6:47:c9:d3:e3:
8e:9b:61:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:46:31 2023 by rpki-client on console-fra.rpki-client.org