Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/669ebf-ee7f-4eb7-8486-95ad92ac8698/1/zytw2xyv0rqwb-AUSJO4QjUolNo.roa
File: zytw2xyv0rqwb-AUSJO4QjUolNo.roa (raw, json)
Hash identifier: LLhjFJ8KpoduUd3DggNDa5yM16/LjNrjFFukJbCgWfI=
Subject key identifier: CF:2B:70:DB:1C:AF:D2:BA:B0:6F:E0:14:48:93:B8:42:35:28:94:DA
Certificate issuer: /CN=1062bc36512658a0f7d3f96bc1d8e67d9fd4918b
Certificate serial: 018CC26D6A2AC9D515617F858F57EB907194
Authority key identifier: 10:62:BC:36:51:26:58:A0:F7:D3:F9:6B:C1:D8:E6:7D:9F:D4:91:8B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EGK8NlEmWKD30_lrwdjmfZ_UkYs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/669ebf-ee7f-4eb7-8486-95ad92ac8698/1/zytw2xyv0rqwb-AUSJO4QjUolNo.roa
Signing time: Mon 01 Jan 2024 00:29:59 +0000
ROA not before: Mon 01 Jan 2024 00:29:59 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 197297
IP address blocks: 195.245.86.0/23 maxlen: 24
46.253.144.0/20 maxlen: 24
46.253.145.0/24 maxlen: 24
193.24.252.0/22 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:6d:6a:2a:c9:d5:15:61:7f:85:8f:57:eb:90:71:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1062bc36512658a0f7d3f96bc1d8e67d9fd4918b
Validity
Not Before: Jan 1 00:29:59 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=cf2b70db1cafd2bab06fe0144893b842352894da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:44:dd:5b:9c:af:aa:35:75:c9:58:9c:a4:f4:
bf:92:e9:d5:62:a5:b2:45:65:d1:d9:56:86:65:1b:
19:4a:7b:d1:9b:ce:88:11:41:68:62:87:72:3d:b0:
bb:c4:5a:18:85:dd:8f:0f:02:39:4b:d4:77:67:8e:
95:34:9c:67:d5:74:36:9a:a0:ec:fd:ab:cd:c4:9e:
b9:f8:11:a9:12:d8:f8:f0:8a:49:e6:dc:9e:4e:90:
38:da:22:73:5f:8e:7d:f4:b9:61:65:3e:96:e5:8b:
20:65:50:84:13:63:2c:d8:f1:08:e8:30:85:95:04:
8c:e8:b3:20:e5:6b:98:6b:26:88:25:81:a5:8a:fe:
63:a7:b4:7a:07:6e:27:dc:8f:5a:dc:db:95:14:90:
a3:18:4c:3e:37:52:f9:93:f8:5d:8c:d2:d6:56:f8:
8b:f0:e1:cf:28:f9:66:40:78:f2:c0:53:8d:40:2f:
94:09:9c:31:98:81:c3:64:4a:73:ee:bf:01:30:11:
d1:4b:14:95:8f:c2:e1:62:c7:6e:13:a1:c6:30:34:
fd:15:12:e4:de:73:76:12:ff:43:7c:bf:1b:9e:2e:
c6:3c:ae:e4:ee:21:1b:04:17:c6:57:69:b5:03:df:
14:fd:b5:35:6e:d4:94:ca:61:b1:87:0d:b8:d4:0c:
a0:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:2B:70:DB:1C:AF:D2:BA:B0:6F:E0:14:48:93:B8:42:35:28:94:DA
X509v3 Authority Key Identifier:
keyid:10:62:BC:36:51:26:58:A0:F7:D3:F9:6B:C1:D8:E6:7D:9F:D4:91:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EGK8NlEmWKD30_lrwdjmfZ_UkYs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/669ebf-ee7f-4eb7-8486-95ad92ac8698/1/zytw2xyv0rqwb-AUSJO4QjUolNo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/669ebf-ee7f-4eb7-8486-95ad92ac8698/1/EGK8NlEmWKD30_lrwdjmfZ_UkYs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.253.144.0/20
193.24.252.0/22
195.245.86.0/23
Signature Algorithm: sha256WithRSAEncryption
a1:57:91:46:9f:9c:9f:8a:24:49:d5:9b:95:8d:d2:26:5c:35:
03:c7:9d:89:bd:0b:e3:04:89:5b:ea:f0:5f:49:92:a2:83:a2:
94:73:c3:79:1f:8b:2a:94:61:21:80:a1:75:59:fc:57:79:ef:
f3:cd:86:bb:c8:68:59:ff:ef:0f:bf:0e:f1:90:01:ea:4d:3d:
89:d3:de:0e:2b:0b:25:74:b0:3c:7f:e4:9c:9e:b4:88:37:45:
f3:b1:73:7b:57:a9:0a:73:64:65:0d:92:cc:2f:65:64:aa:02:
10:89:2a:6a:5e:12:fc:43:64:3d:f0:c7:11:65:a5:a0:7c:dc:
4f:7f:48:4d:c6:84:5e:b2:ec:42:72:b2:00:80:a8:f2:55:60:
fa:f5:d3:5f:67:83:81:65:f2:66:e2:37:3c:76:cc:24:79:b0:
f3:e8:1b:c3:94:ff:80:2c:69:52:e0:40:dc:a0:fb:f5:89:1b:
af:a9:65:a1:c9:9e:75:9f:9a:69:c7:0e:9a:3c:b0:33:aa:43:
6d:26:ec:f7:b7:ed:24:7b:eb:0d:3d:3a:88:3e:95:ef:c1:49:
5d:13:ec:13:9c:4a:81:2b:fa:55:97:45:4d:c2:31:dc:71:d4:
3d:9b:9d:a8:d9:e9:4c:b2:aa:60:99:d9:8a:c2:08:a0:83:34:
61:74:a9:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 19 11:23:49 2024 by rpki-client on console-ams.rpki-client.org