Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/7b1205-3450-4e90-8b14-17e66c1fd3d1/1/aidrtDp3wDskj5Zu6kAjAzESgBU.roa
File: aidrtDp3wDskj5Zu6kAjAzESgBU.roa (raw, json)
Hash identifier: k/HBYebIilUoFdz7Tk/vD9SUxt1HkDGdRQMrrsZ4THs=
Subject key identifier: 6A:27:6B:B4:3A:77:C0:3B:24:8F:96:6E:EA:40:23:03:31:12:80:15
Certificate issuer: /CN=260b2bc45477c81d774daa0c28ab44b774ba0920
Certificate serial: 018DA79E3DA9FB2EFC1A93DBA81EE174FB49
Authority key identifier: 26:0B:2B:C4:54:77:C8:1D:77:4D:AA:0C:28:AB:44:B7:74:BA:09:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JgsrxFR3yB13TaoMKKtEt3S6CSA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/7b1205-3450-4e90-8b14-17e66c1fd3d1/1/aidrtDp3wDskj5Zu6kAjAzESgBU.roa
Signing time: Wed 14 Feb 2024 12:36:21 +0000
ROA not before: Wed 14 Feb 2024 12:36:21 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 212667
IP address blocks: 45.90.44.0/24 maxlen: 24
45.90.47.0/24 maxlen: 24
45.128.130.0/23 maxlen: 23
46.149.174.0/24 maxlen: 24
62.204.32.0/24 maxlen: 24
185.253.2.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:a7:9e:3d:a9:fb:2e:fc:1a:93:db:a8:1e:e1:74:fb:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=260b2bc45477c81d774daa0c28ab44b774ba0920
Validity
Not Before: Feb 14 12:36:21 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6a276bb43a77c03b248f966eea40230331128015
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:b2:2b:67:5d:d2:06:38:64:bc:4f:70:d8:d4:
a9:1e:ca:df:8e:27:ec:39:2a:8a:b9:d9:f0:89:32:
51:af:6d:79:86:f4:29:5f:4b:f0:66:84:92:39:9c:
48:b8:9a:8b:b0:e0:c1:e5:2b:f4:f6:fc:73:10:65:
1d:22:c9:80:ff:bb:8b:07:5d:78:57:c8:39:d5:e8:
62:c5:cb:d5:cb:24:2f:2e:4e:b1:4a:e2:4c:e5:3c:
c9:91:ba:81:81:e2:c7:7f:08:73:ad:39:68:c6:ab:
2f:80:30:df:c9:98:46:8d:6a:fc:0f:3c:5e:f0:ca:
61:1f:a9:a8:d5:db:61:09:c3:92:d8:dc:ae:e2:7d:
3e:e8:10:00:fa:8a:8a:5a:ac:e6:f7:42:62:a9:48:
24:93:19:f1:1f:eb:2e:c7:10:bd:4f:53:ef:4a:5e:
f2:4f:d3:e7:8e:8e:6c:f6:58:fb:e5:2e:3c:d1:a8:
b8:87:c0:9a:0e:4b:08:d0:4d:56:91:02:6f:29:c8:
1e:00:3f:d8:6f:6c:3d:b3:c4:70:f1:b7:f5:95:d2:
2c:20:8e:13:31:ca:0c:c9:37:82:4b:00:6a:07:95:
df:13:db:36:cd:37:a6:e5:e7:08:d7:7a:e2:df:87:
e8:49:55:87:dd:b7:3c:9a:53:ed:ec:d2:73:bf:32:
ec:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:27:6B:B4:3A:77:C0:3B:24:8F:96:6E:EA:40:23:03:31:12:80:15
X509v3 Authority Key Identifier:
keyid:26:0B:2B:C4:54:77:C8:1D:77:4D:AA:0C:28:AB:44:B7:74:BA:09:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JgsrxFR3yB13TaoMKKtEt3S6CSA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/7b1205-3450-4e90-8b14-17e66c1fd3d1/1/aidrtDp3wDskj5Zu6kAjAzESgBU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/7b1205-3450-4e90-8b14-17e66c1fd3d1/1/JgsrxFR3yB13TaoMKKtEt3S6CSA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.90.44.0/24
45.90.47.0/24
45.128.130.0/23
46.149.174.0/24
62.204.32.0/24
185.253.2.0/24
Signature Algorithm: sha256WithRSAEncryption
7b:45:7b:52:12:9f:42:b8:85:ef:0e:46:f3:d2:a6:4c:a0:60:
cc:71:2b:83:47:53:92:da:c2:7a:92:ad:7d:1d:35:ca:f3:6c:
6d:46:8c:d5:41:af:64:88:22:bd:bf:30:47:95:9b:96:f5:de:
f9:5a:e1:07:39:68:6a:4a:a0:41:ee:2e:64:1e:16:d7:47:b1:
b3:fb:42:b2:d9:a4:b7:ce:4e:04:49:c7:29:3a:35:d3:3c:0e:
3a:48:b3:a8:3f:e7:6a:50:26:3e:7d:78:60:35:19:7c:0d:16:
5b:fd:20:ae:0f:3d:ed:3f:08:8e:fb:d1:a4:08:6a:3a:19:74:
9b:87:19:fe:83:b6:ea:6d:e2:0c:14:db:6d:d9:1c:23:a2:16:
e0:78:38:73:b1:47:23:63:37:58:7e:14:2a:b6:1f:32:74:2d:
99:f9:be:3a:b5:da:9e:77:21:be:9f:4d:b9:70:92:e2:f9:54:
5b:88:17:f4:44:72:80:49:1d:c1:fe:ea:16:48:58:b4:7e:57:
da:77:0a:05:1a:48:cb:fd:f9:50:a7:16:33:fc:25:eb:4f:dc:
35:5e:18:e9:4a:42:40:f0:f4:19:aa:49:4c:3d:63:45:af:d4:
c4:ea:c2:84:74:9c:5c:8a:32:69:0d:9f:9a:5b:96:cf:40:15:
bb:72:67:b3
-----BEGIN CERTIFICATE-----
MIIFGzCCBAOgAwIBAgISAY2nnj2p+y78GpPbqB7hdPtJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI2MGIyYmM0NTQ3N2M4MWQ3NzRkYWEwYzI4YWI0NGI3NzRi
YTA5MjAwHhcNMjQwMjE0MTIzNjIxWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2YTI3NmJiNDNhNzdjMDNiMjQ4Zjk2NmVlYTQwMjMwMzMxMTI4MDE1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuLIrZ13SBjhkvE9w2NSpHsrfjifs
OSqKudnwiTJRr215hvQpX0vwZoSSOZxIuJqLsODB5Sv09vxzEGUdIsmA/7uLB114
V8g51ehixcvVyyQvLk6xSuJM5TzJkbqBgeLHfwhzrTloxqsvgDDfyZhGjWr8Dzxe
8MphH6mo1dthCcOS2Nyu4n0+6BAA+oqKWqzm90JiqUgkkxnxH+suxxC9T1PvSl7y
T9Pnjo5s9lj75S480ai4h8CaDksI0E1WkQJvKcgeAD/Yb2w9s8Rw8bf1ldIsII4T
McoMyTeCSwBqB5XfE9s2zTem5ecI13ri34foSVWH3bc8mlPt7NJzvzLs9wIDAQAB
o4ICJzCCAiMwHQYDVR0OBBYEFGona7Q6d8A7JI+WbupAIwMxEoAVMB8GA1UdIwQY
MBaAFCYLK8RUd8gdd02qDCirRLd0ugkgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSmdzcnhGUjN5QjEzVGFvTUtLdEV0M1M2Q1NBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYS83YjEyMDUtMzQ1MC00ZTkwLThiMTQt
MTdlNjZjMWZkM2QxLzEvYWlkcnREcDN3RHNrajVadTZrQWpBekVTZ0JVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zYS83YjEyMDUtMzQ1MC00ZTkwLThiMTQtMTdlNjZjMWZkM2Qx
LzEvSmdzcnhGUjN5QjEzVGFvTUtLdEV0M1M2Q1NBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMD0GCCsGAQUFBwEHAQH/BC4wLDAqBAIAATAkAwQALVosAwQA
LVovAwQBLYCCAwQALpWuAwQAPswgAwQAuf0CMA0GCSqGSIb3DQEBCwUAA4IBAQB7
RXtSEp9CuIXvDkbz0qZMoGDMcSuDR1OS2sJ6kq19HTXK82xtRozVQa9kiCK9vzBH
lZuW9d75WuEHOWhqSqBB7i5kHhbXR7Gz+0Ky2aS3zk4ESccpOjXTPA46SLOoP+dq
UCY+fXhgNRl8DRZb/SCuDz3tPwiO+9GkCGo6GXSbhxn+g7bqbeIMFNtt2Rwjohbg
eDhzsUcjYzdYfhQqth8ydC2Z+b46tdqedyG+n025cJLi+VRbiBf0RHKASR3B/uoW
SFi0flfadwoFGkjL/flQpxYz/CXrT9w1XhjpSkJA8PQZqklMPWNFr9TE6sKEdJxc
ijJpDZ+aW5bPQBW7cmez
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:03:55 2024 by rpki-client on console-ams.rpki-client.org