Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/e0925e-47bf-4907-bcbc-fd9f36a8ba6e/1/GFpFw1dlHAyYdeGvgoqOPwIC0rA.roa
File: GFpFw1dlHAyYdeGvgoqOPwIC0rA.roa (raw, json)
Hash identifier: dbgeQ5F3krSAKlTtWUdw6hw6IrLQBlz4PjvCW2WLsJ4=
Subject key identifier: 18:5A:45:C3:57:65:1C:0C:98:75:E1:AF:82:8A:8E:3F:02:02:D2:B0
Certificate issuer: /CN=331e7784f60ac8d969b81cf5231cd9dc087ced32
Certificate serial: 018695586D542C7AA6100C5B3CEB6966A7E8
Authority key identifier: 33:1E:77:84:F6:0A:C8:D9:69:B8:1C:F5:23:1C:D9:DC:08:7C:ED:32
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Mx53hPYKyNlpuBz1IxzZ3Ah87TI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/e0925e-47bf-4907-bcbc-fd9f36a8ba6e/1/GFpFw1dlHAyYdeGvgoqOPwIC0rA.roa
Signing time: Tue 28 Feb 2023 00:07:25 +0000
ROA not before: Tue 28 Feb 2023 00:07:25 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 39545
IP address blocks: 46.247.104.0/21 maxlen: 21
77.89.128.0/18 maxlen: 18
46.247.0.0/17 maxlen: 17
46.247.0.0/18 maxlen: 18
46.247.112.0/20 maxlen: 20
89.105.96.0/19 maxlen: 19
2a00:f18::/32 maxlen: 32
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:95:58:6d:54:2c:7a:a6:10:0c:5b:3c:eb:69:66:a7:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=331e7784f60ac8d969b81cf5231cd9dc087ced32
Validity
Not Before: Feb 28 00:07:25 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=185a45c357651c0c9875e1af828a8e3f0202d2b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:79:0f:a8:f5:56:02:8b:ed:6d:52:bc:4f:1e:
71:6e:3b:30:76:f6:4b:20:04:21:49:87:f5:0b:e0:
e3:6f:32:88:95:8e:4c:6d:31:c7:9f:66:e8:eb:ba:
5b:b7:81:f1:21:b8:32:39:16:79:ed:fa:49:75:4e:
b7:8b:50:0c:70:e8:5b:65:4f:34:8c:24:df:fc:54:
53:0b:1e:7a:d7:6b:cd:7c:a8:e0:45:38:e2:db:12:
b6:44:0d:0a:c4:fd:68:8d:0e:d5:40:c9:f5:0b:58:
da:77:2c:f5:67:37:5d:dd:1b:2d:0c:f4:ea:ef:c8:
a5:d4:de:77:09:b8:3d:58:7b:9b:3d:8d:9b:a7:7a:
a2:e0:a2:d7:a6:9e:ee:47:ed:7d:d1:2f:ef:5a:39:
87:77:ed:ca:e8:8d:6d:80:b0:7b:87:ce:81:1c:96:
8d:bb:69:f0:fb:55:32:3e:29:f4:24:6b:27:d9:1f:
f3:fa:9d:b3:3a:a4:76:3b:3a:a5:e0:5b:63:34:63:
95:f4:bb:81:fa:08:20:78:e1:63:9b:26:7c:a3:a9:
48:e2:15:58:62:f9:74:b4:a1:d1:7f:3c:5b:fb:cd:
42:50:15:5a:a4:7c:4e:70:b9:91:00:d1:a4:1e:f0:
ec:e1:e2:5b:c1:73:75:08:77:19:4e:da:20:c8:f5:
a1:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:5A:45:C3:57:65:1C:0C:98:75:E1:AF:82:8A:8E:3F:02:02:D2:B0
X509v3 Authority Key Identifier:
keyid:33:1E:77:84:F6:0A:C8:D9:69:B8:1C:F5:23:1C:D9:DC:08:7C:ED:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Mx53hPYKyNlpuBz1IxzZ3Ah87TI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/e0925e-47bf-4907-bcbc-fd9f36a8ba6e/1/GFpFw1dlHAyYdeGvgoqOPwIC0rA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/e0925e-47bf-4907-bcbc-fd9f36a8ba6e/1/Mx53hPYKyNlpuBz1IxzZ3Ah87TI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.247.0.0/17
77.89.128.0/18
89.105.96.0/19
IPv6:
2a00:f18::/32
Signature Algorithm: sha256WithRSAEncryption
39:d5:39:4b:ad:3a:6c:1f:08:00:85:bd:f7:15:6b:ad:d6:aa:
e0:65:1f:3b:53:7b:b8:45:ca:c7:52:fa:be:eb:81:03:4d:ff:
53:c6:15:cf:d8:5a:c2:b4:24:b5:fe:af:dd:1f:d2:2b:44:da:
3c:93:d0:a0:41:19:5b:b2:11:64:6d:f2:cb:e1:54:26:68:2b:
d8:a2:7c:4c:74:c5:76:7c:6a:5f:13:6b:9f:d2:8d:7c:4e:a1:
06:1e:13:ae:b5:77:2b:7e:48:88:6a:db:09:4f:72:d5:62:7e:
e3:c8:aa:dd:0f:e2:c9:9b:fa:29:3c:b5:79:4f:eb:2d:f0:10:
85:c3:85:ea:2d:9a:04:b7:90:cb:26:50:9c:1b:a3:f5:74:c0:
cc:2a:fc:7b:a2:ff:df:03:e3:3b:53:82:fc:4a:c7:ac:89:e4:
7f:55:c8:9d:b0:f8:eb:e1:ae:47:a4:8f:4e:39:6d:61:78:4e:
dd:ca:92:33:50:af:2c:5b:96:2e:8f:ee:32:71:54:a3:88:95:
2b:de:76:22:83:77:89:65:84:9b:fd:fd:d6:29:77:8f:49:cd:
e5:36:2d:c0:ab:1d:1f:89:bb:1e:94:03:1f:f2:15:5b:e4:ff:
f1:91:f2:51:90:92:b7:d3:2e:66:75:21:57:82:6c:54:27:ba:
54:d2:53:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:08:30 2024 by rpki-client on console-ams.rpki-client.org