Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/f6ada1-7e8a-4b3e-b7e8-f8589f682691/1/OEuDL4XCaD5n7p9CRAY-kdlYDhc.roa
File: OEuDL4XCaD5n7p9CRAY-kdlYDhc.roa (raw, json)
Hash identifier: LKmdTLz+q9M7oDT3veDKkTQfFnHrV2Wek0bYBw1ax/Y=
Subject key identifier: 38:4B:83:2F:85:C2:68:3E:67:EE:9F:42:44:06:3E:91:D9:58:0E:17
Certificate issuer: /CN=ccd76159bfd9e337523ee930f3df111d6bae7306
Certificate serial: 01831EB472A5CFBBCDCC6F767E35FDC16CB7
Authority key identifier: CC:D7:61:59:BF:D9:E3:37:52:3E:E9:30:F3:DF:11:1D:6B:AE:73:06
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zNdhWb_Z4zdSPukw898RHWuucwY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/f6ada1-7e8a-4b3e-b7e8-f8589f682691/1/OEuDL4XCaD5n7p9CRAY-kdlYDhc.roa
Signing time: Thu 08 Sep 2022 20:04:45 +0000
ROA not before: Thu 08 Sep 2022 20:04:45 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 12722
IP address blocks: 46.150.248.0/24 maxlen: 24
46.150.249.0/24 maxlen: 24
185.21.140.0/24 maxlen: 24
91.195.21.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:1e:b4:72:a5:cf:bb:cd:cc:6f:76:7e:35:fd:c1:6c:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ccd76159bfd9e337523ee930f3df111d6bae7306
Validity
Not Before: Sep 8 20:04:45 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=384b832f85c2683e67ee9f4244063e91d9580e17
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:c5:55:21:ef:5c:80:ad:6d:e6:b1:ad:df:69:
70:19:25:25:90:b3:ad:3f:0f:c9:5f:8e:4f:ab:9e:
90:a5:eb:4f:ae:4e:ef:53:1e:67:b7:9a:f4:11:65:
78:16:ac:29:7c:48:ac:0a:67:1e:42:bd:35:76:2d:
95:eb:d0:fb:56:d1:b6:98:a1:39:15:9c:0b:f4:9b:
0d:96:21:7f:99:ef:c5:aa:1f:45:ec:b7:88:9a:7d:
59:9a:71:fc:03:02:54:2e:b8:33:51:0b:c3:99:79:
13:9a:7d:f2:90:fc:df:20:1f:fc:5b:57:bc:62:cd:
d4:03:10:88:ab:8c:ff:e8:60:75:c5:98:52:c2:60:
b8:d9:2b:f1:06:05:36:6d:ed:9d:b1:3f:8d:e9:96:
25:71:5d:52:54:52:38:0a:e7:4b:65:72:ac:c8:0a:
32:c2:99:e8:ee:63:ff:13:ac:3d:0e:a6:21:a1:1d:
c6:94:ed:ef:99:08:04:31:61:13:53:a6:d5:b4:57:
3c:e4:a0:95:cf:7a:9d:f7:83:4f:de:b7:ba:d5:8a:
6c:c6:b8:e0:1e:4d:44:e1:5d:96:72:77:4b:41:97:
34:4b:4f:bc:20:5e:f8:89:24:0c:be:37:f7:19:fb:
0a:c8:36:9c:a3:85:5c:68:61:62:b3:29:b1:4e:8d:
6d:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:4B:83:2F:85:C2:68:3E:67:EE:9F:42:44:06:3E:91:D9:58:0E:17
X509v3 Authority Key Identifier:
keyid:CC:D7:61:59:BF:D9:E3:37:52:3E:E9:30:F3:DF:11:1D:6B:AE:73:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zNdhWb_Z4zdSPukw898RHWuucwY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/f6ada1-7e8a-4b3e-b7e8-f8589f682691/1/OEuDL4XCaD5n7p9CRAY-kdlYDhc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/f6ada1-7e8a-4b3e-b7e8-f8589f682691/1/zNdhWb_Z4zdSPukw898RHWuucwY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.150.248.0/23
91.195.21.0/24
185.21.140.0/24
Signature Algorithm: sha256WithRSAEncryption
3c:46:67:8f:6a:2b:4d:74:e1:b6:48:1f:9f:09:4b:9e:b5:f5:
47:5d:1b:ba:8b:10:07:7f:78:a9:86:06:1f:35:3d:5d:76:5a:
3c:17:43:f1:33:81:db:66:a8:94:73:0e:8e:e2:9a:ed:f3:3a:
76:e3:b5:4f:77:63:04:4a:1d:73:d4:67:8d:0c:6a:29:89:2c:
f9:66:35:ab:ba:9e:5c:ad:76:5d:68:be:97:24:43:ee:03:74:
92:8b:47:b6:a0:3d:c4:cc:db:1e:1d:33:09:0b:dc:95:45:d0:
7d:46:37:e4:3d:c0:0f:8d:73:6e:34:8f:bc:d6:87:93:06:be:
c2:25:fb:32:0f:89:58:23:62:72:4e:da:af:6b:27:14:78:23:
7d:7c:ea:47:ba:d2:c1:9c:5b:2d:af:22:7d:4e:37:53:79:d7:
5b:c7:c6:5c:21:22:79:0b:4d:2a:8a:33:b0:6f:a2:47:f5:ed:
80:fd:25:b3:78:36:93:b7:49:0c:ba:5a:d0:43:06:31:4b:eb:
0c:6b:fe:04:16:d1:20:29:28:a8:f3:b9:57:6b:a6:9f:d6:24:
ae:bc:2e:4f:d0:4c:29:5b:33:1e:e5:11:57:1e:bd:71:a0:fc:
d2:e0:cc:b0:23:0d:0a:b7:6a:37:14:41:34:de:bf:04:c0:55:
f3:ac:15:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:11 2023 by rpki-client on console-fra.rpki-client.org