Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/9571d6-974f-4327-b9e0-443be63fc123/1/tIWfidz5llKmKTs1M5FkYg8J6hY.roa
File: tIWfidz5llKmKTs1M5FkYg8J6hY.roa (raw, json)
Hash identifier: CuwlCKN+2GwkTgC7cNIhY2bbMJS2nb1bMI83Jyyc0Y8=
Subject key identifier: B4:85:9F:89:DC:F9:96:52:A6:29:3B:35:33:91:64:62:0F:09:EA:16
Certificate issuer: /CN=592e7c1f2394c3e3aaa8ccb647fd83671d6098b7
Certificate serial: 158DA86B
Authority key identifier: 59:2E:7C:1F:23:94:C3:E3:AA:A8:CC:B6:47:FD:83:67:1D:60:98:B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WS58HyOUw-OqqMy2R_2DZx1gmLc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/9571d6-974f-4327-b9e0-443be63fc123/1/tIWfidz5llKmKTs1M5FkYg8J6hY.roa
Signing time: Sat 01 Jan 2022 06:54:45 +0000
ROA not before: Sat 01 Jan 2022 06:54:45 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 199366
IP address blocks: 37.247.101.0/24 maxlen: 24
46.20.10.0/24 maxlen: 24
46.20.12.0/24 maxlen: 24
46.20.13.0/24 maxlen: 24
95.130.174.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 361605227 (0x158da86b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=592e7c1f2394c3e3aaa8ccb647fd83671d6098b7
Validity
Not Before: Jan 1 06:54:45 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b4859f89dcf99652a6293b35339164620f09ea16
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:e0:17:fb:70:b6:39:7d:9c:6f:dc:51:e9:7f:
e8:3a:ec:94:67:e5:c5:13:3d:b0:66:4f:a2:68:f8:
56:43:f3:7e:4a:34:e1:f4:91:8d:81:a7:e6:31:a5:
35:78:d7:02:55:ae:d9:00:1b:5a:f5:c0:b8:14:4a:
0c:bc:4e:fe:01:2a:85:2d:7f:fb:9d:e6:d6:ad:a2:
0e:7b:de:c2:fc:2f:87:27:66:2c:fe:d4:18:64:1a:
46:da:05:c1:c2:be:b9:5a:26:ba:ee:c8:d4:23:47:
d4:64:34:c2:b5:0d:b6:e9:0f:42:45:3e:26:59:0f:
1f:f5:42:fe:98:37:75:f2:17:7f:49:4b:f4:65:0d:
d1:8c:e4:b2:67:1b:74:ee:6e:ee:bd:e9:2b:8a:10:
3c:09:82:f9:61:ce:15:e8:fb:30:6f:72:78:70:8b:
e5:3e:fd:b2:3f:5c:68:cf:6e:b9:7c:e5:b2:57:00:
df:f8:b3:a2:ba:6b:f3:a7:3c:de:77:ac:9f:ac:5b:
0f:83:b4:8d:09:24:8f:8e:f8:80:e1:93:12:d7:20:
65:da:ff:f7:a2:7f:06:4c:94:fc:0b:f0:67:11:93:
5c:d1:3c:c1:18:a5:12:4b:97:57:3c:cc:bb:44:70:
cf:a7:9c:07:b8:93:66:68:28:61:bb:28:46:f2:9c:
ac:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:85:9F:89:DC:F9:96:52:A6:29:3B:35:33:91:64:62:0F:09:EA:16
X509v3 Authority Key Identifier:
keyid:59:2E:7C:1F:23:94:C3:E3:AA:A8:CC:B6:47:FD:83:67:1D:60:98:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WS58HyOUw-OqqMy2R_2DZx1gmLc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/9571d6-974f-4327-b9e0-443be63fc123/1/tIWfidz5llKmKTs1M5FkYg8J6hY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/9571d6-974f-4327-b9e0-443be63fc123/1/WS58HyOUw-OqqMy2R_2DZx1gmLc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.247.101.0/24
46.20.10.0/24
46.20.12.0/23
95.130.174.0/24
Signature Algorithm: sha256WithRSAEncryption
0b:71:02:e2:44:87:da:9d:29:69:20:4c:85:d0:19:d1:29:19:
38:b0:ed:37:c1:29:c2:e7:6e:14:b0:77:3b:be:0c:6a:83:3b:
88:a2:23:e3:b6:30:fe:bf:56:0b:1c:c9:c7:b9:50:9f:5a:3a:
ac:59:5d:b5:60:e5:ba:f9:11:7a:f3:e7:02:98:46:9d:d0:9b:
e0:b8:49:d7:89:c6:5b:db:12:3d:8c:64:96:9c:63:68:3f:6f:
64:6e:02:b0:3e:17:d6:e8:de:84:12:47:ee:55:6b:e5:ae:3c:
28:7f:74:fb:e9:c1:47:3f:aa:9d:90:66:ec:39:88:88:0a:4a:
c7:b0:f2:fa:9c:27:1b:0b:78:0a:a6:e6:64:d2:5f:94:93:32:
11:70:46:0b:d9:84:2f:d4:65:d1:56:0c:81:6a:44:f4:a7:e8:
4e:7d:c2:2e:3c:f7:05:50:1f:c0:d8:08:bb:24:d9:90:45:3a:
62:13:bc:59:54:5f:1d:79:fa:9a:ee:76:17:e1:4c:7c:50:75:
13:2a:65:e8:ba:1f:4c:ec:0f:66:34:59:e7:a6:9f:07:41:16:
8d:3c:2d:45:3d:3c:06:b5:0f:35:5d:2e:8c:e9:06:15:53:80:
c9:74:b1:c4:ac:80:5b:8d:2a:66:05:51:0a:85:fa:df:2f:af:
5b:00:13:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 08:23:02 2025 by rpki-client