Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/c800c9-51b5-4589-9260-063fcdd3a057/1/7yn3HuRoD103a8gWKvYOHXOHoaU.roa
File: 7yn3HuRoD103a8gWKvYOHXOHoaU.roa (raw, json)
Hash identifier: YIrcL+xlUvOeZ/el1KZModkwkh1aSbnaAz2AOI/Xv30=
Subject key identifier: EF:29:F7:1E:E4:68:0F:5D:37:6B:C8:16:2A:F6:0E:1D:73:87:A1:A5
Certificate issuer: /CN=7c3c39d1899e699bf5177418ee381489edff4380
Certificate serial: 1B5B40C4
Authority key identifier: 7C:3C:39:D1:89:9E:69:9B:F5:17:74:18:EE:38:14:89:ED:FF:43:80
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fDw50YmeaZv1F3QY7jgUie3_Q4A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/c800c9-51b5-4589-9260-063fcdd3a057/1/7yn3HuRoD103a8gWKvYOHXOHoaU.roa
Signing time: Thu 21 Apr 2022 05:31:26 +0000
ROA not before: Thu 21 Apr 2022 05:31:26 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 1239
IP address blocks: 109.246.240.0/20 maxlen: 24
109.246.144.0/20 maxlen: 24
185.27.178.0/23 maxlen: 24
109.246.160.0/20 maxlen: 24
109.246.176.0/20 maxlen: 24
185.18.122.0/24 maxlen: 24
109.246.192.0/20 maxlen: 24
109.246.208.0/20 maxlen: 24
109.246.0.0/17 maxlen: 24
109.246.224.0/20 maxlen: 24
109.246.128.0/20 maxlen: 24
109.246.128.0/17 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 458965188 (0x1b5b40c4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7c3c39d1899e699bf5177418ee381489edff4380
Validity
Not Before: Apr 21 05:31:26 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ef29f71ee4680f5d376bc8162af60e1d7387a1a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:4d:7d:f3:bd:d4:e8:84:90:d6:75:60:35:8d:
71:c9:29:3b:8d:0f:a2:56:1f:d3:48:fd:4b:66:4c:
dd:9b:72:59:a9:32:e6:9d:f5:8c:ed:48:df:fd:42:
3f:ce:69:3d:57:da:21:a5:37:d1:8a:13:41:3d:3b:
fc:6d:ae:dd:39:84:cc:d9:bb:c2:e4:33:e0:4c:5d:
15:38:c2:2c:06:6a:96:5c:f7:da:c1:c6:10:34:7c:
57:df:92:3c:55:5c:1e:2c:a6:2c:de:31:fd:05:1e:
5e:65:c5:31:0b:03:16:48:2a:29:d3:43:e1:03:4e:
de:54:7a:29:d4:4f:b5:64:af:93:eb:22:f4:db:7e:
e9:48:5e:96:27:f9:57:4e:f6:7f:fa:7c:46:f2:92:
95:6f:12:89:df:bf:1b:bf:a1:ff:72:32:1b:f2:85:
27:9e:3e:14:7e:d1:ef:59:fa:88:19:ed:2f:5b:59:
bf:a1:30:e8:a7:64:61:7c:0a:fd:c5:cd:94:d8:39:
5d:aa:e9:43:43:5e:2f:a0:92:81:64:aa:d0:0e:eb:
8a:38:f8:31:38:82:59:31:78:59:d8:b9:4d:c7:ce:
4a:1a:46:96:cf:be:88:e4:f9:e7:c7:04:52:ea:d8:
52:69:7e:2c:94:71:fe:dd:aa:5e:a4:4f:d8:31:74:
8f:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:29:F7:1E:E4:68:0F:5D:37:6B:C8:16:2A:F6:0E:1D:73:87:A1:A5
X509v3 Authority Key Identifier:
keyid:7C:3C:39:D1:89:9E:69:9B:F5:17:74:18:EE:38:14:89:ED:FF:43:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fDw50YmeaZv1F3QY7jgUie3_Q4A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/c800c9-51b5-4589-9260-063fcdd3a057/1/7yn3HuRoD103a8gWKvYOHXOHoaU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/c800c9-51b5-4589-9260-063fcdd3a057/1/fDw50YmeaZv1F3QY7jgUie3_Q4A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.246.0.0/16
185.18.122.0/24
185.27.178.0/23
Signature Algorithm: sha256WithRSAEncryption
73:64:eb:ad:1d:b9:52:40:11:77:31:a0:1a:dd:79:1b:81:c8:
09:5c:cf:5f:8d:c2:ad:ff:4d:4b:b1:32:a1:ac:97:cf:2a:e8:
a3:79:4f:6e:29:de:2f:fb:6c:1a:d9:d7:af:18:d4:eb:92:d4:
b9:1d:f2:62:96:d5:61:e4:6a:11:26:cd:d7:4a:d5:67:6d:c7:
e2:f5:0c:ad:60:4f:7c:ac:68:05:51:a7:31:ae:31:cd:99:90:
77:18:79:af:cd:a4:89:25:43:b9:6f:55:dc:8e:d0:68:b8:56:
e1:1e:2a:c5:85:05:9d:33:72:96:88:a8:7c:14:f8:ee:6e:f6:
33:3c:a3:de:fb:ea:c8:43:7d:71:72:ce:3d:68:bb:1b:12:72:
72:70:cf:b7:ff:bb:1b:cf:31:f9:bd:12:9f:5b:be:39:4f:7e:
30:01:65:69:6d:f0:7d:63:fb:fc:f7:be:5b:3b:43:24:c4:ad:
d1:c2:c9:1d:f6:e5:9f:67:5f:3f:83:fa:70:a5:6f:19:95:40:
38:a0:b4:92:40:02:ac:a9:0a:62:85:bd:c1:c3:bd:48:8b:de:
c8:11:62:75:e4:2a:9a:b8:8d:5e:9d:64:be:ed:46:6c:45:be:
40:d8:95:80:88:74:40:cc:ea:d3:7a:fa:87:cc:5f:ae:c0:2a:
69:7f:60:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:50:18 2023 by rpki-client on console-ams.rpki-client.org