Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/e1171c-5270-49cd-9379-b95b08a23ae1/1/ECsaUVVVgDAH2GYlpyNNw0pEssQ.roa
File: ECsaUVVVgDAH2GYlpyNNw0pEssQ.roa (raw, json)
Hash identifier: j5os1gTUeKTy3VxPuvmnYF85DJ/cjuNiNsiwm73RyBA=
Subject key identifier: 10:2B:1A:51:55:55:80:30:07:D8:66:25:A7:23:4D:C3:4A:44:B2:C4
Certificate issuer: /CN=408af485b4fd0f03717cd4a709ef11c61d3ef46e
Certificate serial: 018DAD1440144E0D261406873D3C1CF533E9
Authority key identifier: 40:8A:F4:85:B4:FD:0F:03:71:7C:D4:A7:09:EF:11:C6:1D:3E:F4:6E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QIr0hbT9DwNxfNSnCe8Rxh0-9G4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/e1171c-5270-49cd-9379-b95b08a23ae1/1/ECsaUVVVgDAH2GYlpyNNw0pEssQ.roa
Signing time: Thu 15 Feb 2024 14:03:21 +0000
ROA not before: Thu 15 Feb 2024 14:03:21 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 5606
IP address blocks: 46.102.144.0/22 maxlen: 22
89.33.236.0/23 maxlen: 23
89.40.16.0/24 maxlen: 24
89.40.17.0/24 maxlen: 24
89.40.18.0/24 maxlen: 24
89.40.19.0/24 maxlen: 24
89.45.168.0/21 maxlen: 21
89.46.6.0/24 maxlen: 24
93.115.112.0/21 maxlen: 21
93.119.152.0/24 maxlen: 24
93.119.153.0/24 maxlen: 24
185.171.186.0/24 maxlen: 24
188.214.105.0/24 maxlen: 24
195.246.242.0/23 maxlen: 23
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:ad:14:40:14:4e:0d:26:14:06:87:3d:3c:1c:f5:33:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=408af485b4fd0f03717cd4a709ef11c61d3ef46e
Validity
Not Before: Feb 15 14:03:21 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=102b1a515555803007d86625a7234dc34a44b2c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:50:4a:c3:9b:08:e0:75:92:f4:1c:7b:69:33:
8d:d6:a1:f0:55:b0:78:8b:8b:dc:90:cc:98:7d:18:
9e:2b:2b:9a:23:03:62:cd:d9:25:79:79:ad:9a:02:
07:5d:ae:90:ba:d6:1e:55:fd:81:d4:0a:d3:21:a9:
cf:46:4e:13:87:3e:2f:dd:d8:a4:88:35:7e:af:c1:
06:c9:60:fd:82:91:11:7e:44:fd:0d:2d:f8:1e:88:
8b:2c:57:b9:26:76:74:77:56:cc:b8:b4:13:95:4d:
fd:0c:a6:1e:80:c9:0a:d2:2c:e8:14:c3:4e:3b:2a:
12:f8:fe:cd:1c:7e:ae:1f:8c:63:ec:80:54:16:b9:
0d:a7:cb:c6:29:41:76:89:0a:72:ba:ff:ff:9c:7d:
20:27:83:39:0f:01:63:a4:c7:32:7a:50:ba:fa:00:
cb:02:66:d5:e2:e2:a2:3d:ec:be:ea:14:fa:86:55:
23:e3:36:ca:c7:f9:40:04:a7:f6:2b:a5:7e:6c:3a:
84:74:c2:01:8e:6c:4b:17:4e:6c:5f:27:d0:48:cc:
97:4d:6d:65:7d:20:bb:4a:ab:94:4d:3a:67:6a:e2:
e5:12:18:3d:a5:be:5b:f7:e2:44:01:f2:f0:6b:6c:
46:60:28:32:a4:bf:d7:ad:fe:4b:33:22:ab:40:f0:
32:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:2B:1A:51:55:55:80:30:07:D8:66:25:A7:23:4D:C3:4A:44:B2:C4
X509v3 Authority Key Identifier:
keyid:40:8A:F4:85:B4:FD:0F:03:71:7C:D4:A7:09:EF:11:C6:1D:3E:F4:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QIr0hbT9DwNxfNSnCe8Rxh0-9G4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/e1171c-5270-49cd-9379-b95b08a23ae1/1/ECsaUVVVgDAH2GYlpyNNw0pEssQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/e1171c-5270-49cd-9379-b95b08a23ae1/1/QIr0hbT9DwNxfNSnCe8Rxh0-9G4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.102.144.0/22
89.33.236.0/23
89.40.16.0/22
89.45.168.0/21
89.46.6.0/24
93.115.112.0/21
93.119.152.0/23
185.171.186.0/24
188.214.105.0/24
195.246.242.0/23
Signature Algorithm: sha256WithRSAEncryption
48:ff:2e:45:dc:6f:83:94:3e:27:41:73:06:b0:9b:73:a3:c6:
84:66:80:0b:fd:43:26:50:b2:dc:05:24:00:0e:36:46:dd:03:
5c:4f:e4:bf:78:e9:08:6e:0a:5a:d2:e3:ff:18:1b:fd:c6:97:
1d:76:96:cb:62:0f:f2:83:1d:6f:e5:65:07:83:91:1d:d1:37:
9c:65:b8:f9:9d:fe:b3:b7:88:fc:e7:ae:47:01:e7:25:ff:0c:
f9:d6:33:e9:56:19:68:7b:42:e3:d7:52:3e:38:64:e5:94:ec:
4d:a4:72:7d:92:e7:cd:a0:27:cd:27:1d:c5:58:df:2f:6b:a9:
d2:0f:6d:99:75:79:cb:af:90:03:4b:7e:65:17:99:24:3a:c1:
9d:2e:57:0b:5f:fb:a4:c3:34:3e:61:e4:39:e8:06:ae:86:95:
ac:a4:22:5a:8f:cc:45:9e:67:51:87:bd:bd:77:fd:86:1c:8c:
20:3a:22:0a:60:55:46:e8:53:06:9c:8d:10:d2:3f:f2:db:89:
7c:42:61:d3:4f:57:c6:f4:61:00:17:04:02:1d:39:b9:d4:5b:
9d:ee:23:3e:da:cd:f4:18:76:20:1e:a1:9e:f2:06:79:b7:19:
30:23:45:77:c9:17:03:30:25:9c:88:71:51:c0:d1:18:a2:4c:
5f:2e:64:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 13 08:59:15 2024 by rpki-client on console-fra.rpki-client.org