Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/7b1205-3450-4e90-8b14-17e66c1fd3d1/1/443MkKf-Z_ob_UnqX7RQsMQGugI.roa
File: 443MkKf-Z_ob_UnqX7RQsMQGugI.roa (raw, json)
Hash identifier: o3NnMgg8bZq17Q4A1qLAS/BrkGRmOLYpQ9AvzZ21bRY=
Subject key identifier: E3:8D:CC:90:A7:FE:67:FA:1B:FD:49:EA:5F:B4:50:B0:C4:06:BA:02
Certificate issuer: /CN=260b2bc45477c81d774daa0c28ab44b774ba0920
Certificate serial: 018CC26D084B4D16429CF5879B956A1B37CF
Authority key identifier: 26:0B:2B:C4:54:77:C8:1D:77:4D:AA:0C:28:AB:44:B7:74:BA:09:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JgsrxFR3yB13TaoMKKtEt3S6CSA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/7b1205-3450-4e90-8b14-17e66c1fd3d1/1/443MkKf-Z_ob_UnqX7RQsMQGugI.roa
Signing time: Mon 01 Jan 2024 00:29:34 +0000
ROA not before: Mon 01 Jan 2024 00:29:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 48031
IP address blocks: 46.149.173.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:6d:08:4b:4d:16:42:9c:f5:87:9b:95:6a:1b:37:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=260b2bc45477c81d774daa0c28ab44b774ba0920
Validity
Not Before: Jan 1 00:29:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e38dcc90a7fe67fa1bfd49ea5fb450b0c406ba02
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:a8:c8:a0:86:ba:07:de:36:1f:42:3b:cb:ac:
9b:fe:68:03:35:da:b7:50:82:20:2c:ef:92:70:56:
99:48:cb:3c:ea:0b:7c:56:c9:33:72:55:e3:3e:24:
15:91:a0:7a:65:d6:44:5b:f6:7a:34:68:97:5c:d8:
8a:d2:e4:f8:79:a6:99:03:4d:76:17:65:2f:2f:48:
32:13:8e:25:24:d1:13:9b:5a:65:39:3a:e3:10:25:
b4:c7:71:0c:c8:32:97:4a:bb:38:77:ea:70:ae:d6:
35:2f:95:80:55:8d:43:55:55:df:8c:6a:c6:d0:d8:
2c:d8:c2:62:fb:b6:05:eb:73:d8:18:06:bd:4d:8a:
4d:d3:c3:cf:f0:6c:88:39:0e:2a:8d:18:bd:52:65:
b9:bb:19:4f:ad:08:5c:69:9a:1f:b0:bd:8f:28:64:
04:3e:bc:68:a2:a7:5e:87:45:22:a0:43:05:21:b9:
57:a8:c0:f1:74:fe:41:f9:0e:1e:4a:6f:6c:cb:60:
ed:a8:cb:e9:d9:64:33:2e:18:45:39:cb:f6:93:f5:
7d:83:e8:d0:7e:61:6b:b4:f6:b9:30:87:ef:dd:01:
ea:04:c0:a1:ea:60:92:0a:4f:3a:a9:ca:2e:78:de:
7e:cb:97:d7:52:f4:c4:4f:b6:cf:5f:c6:7a:db:51:
c7:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:8D:CC:90:A7:FE:67:FA:1B:FD:49:EA:5F:B4:50:B0:C4:06:BA:02
X509v3 Authority Key Identifier:
keyid:26:0B:2B:C4:54:77:C8:1D:77:4D:AA:0C:28:AB:44:B7:74:BA:09:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JgsrxFR3yB13TaoMKKtEt3S6CSA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/7b1205-3450-4e90-8b14-17e66c1fd3d1/1/443MkKf-Z_ob_UnqX7RQsMQGugI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/7b1205-3450-4e90-8b14-17e66c1fd3d1/1/JgsrxFR3yB13TaoMKKtEt3S6CSA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.149.173.0/24
Signature Algorithm: sha256WithRSAEncryption
ca:57:6a:5a:10:34:4b:71:83:55:dc:fa:51:79:c1:62:46:5d:
80:84:e4:e8:5b:f1:59:47:54:1c:da:4f:53:60:e9:a2:76:84:
36:4d:e0:27:2c:62:23:47:61:2f:76:ca:a8:fd:9b:75:d4:fa:
f2:8c:80:e3:ad:78:83:70:ca:ee:7e:38:b4:99:33:e7:4c:28:
92:10:13:02:d0:38:b9:e5:4e:c1:e9:00:f4:0c:53:fe:06:65:
8f:ca:2b:5c:71:3e:14:4d:f8:b3:8a:da:fb:47:cf:2a:dc:c0:
7e:5e:e6:6d:62:66:b7:2d:5f:76:36:2b:4d:5a:92:87:39:88:
51:4d:6e:07:bb:d2:f2:41:31:55:3d:74:16:e0:56:a8:9c:b7:
17:16:40:f8:47:4f:65:ce:3b:15:2e:1e:84:53:a5:b5:d5:71:
2b:81:d3:f1:45:8e:43:83:89:67:4e:bd:a6:c8:61:40:73:8d:
68:ab:9e:81:9d:52:21:67:0c:66:3f:29:22:91:c6:02:0f:3b:
6e:76:11:6d:62:59:00:d3:78:32:ec:70:28:a4:c5:e2:9c:f7:
61:00:e5:7a:74:bb:d1:e3:d1:e8:4a:34:7e:9a:2a:91:f9:b5:
1b:56:ee:fb:47:b3:14:7e:7c:43:df:2e:58:b7:91:8a:39:a3:
7e:7e:cd:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:26:02 2024 by rpki-client on console-fra.rpki-client.org