Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/92b8ae-9c09-443c-b8ba-436bfb9e77ed/1/ACH-e4Jw_-rZ_7uENA0mrv29ubA.roa
File: ACH-e4Jw_-rZ_7uENA0mrv29ubA.roa (raw, json)
Hash identifier: SJ7vhu6j1dVnownEgIcutvtZWceRjXVabKOMnaROV7k=
Subject key identifier: 00:21:FE:7B:82:70:FF:EA:D9:FF:BB:84:34:0D:26:AE:FD:BD:B9:B0
Certificate issuer: /CN=42ca1a1e3d0925423310c154b502c2842888e612
Certificate serial: 13A692F8
Authority key identifier: 42:CA:1A:1E:3D:09:25:42:33:10:C1:54:B5:02:C2:84:28:88:E6:12
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QsoaHj0JJUIzEMFUtQLChCiI5hI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/92b8ae-9c09-443c-b8ba-436bfb9e77ed/1/ACH-e4Jw_-rZ_7uENA0mrv29ubA.roa
Signing time: Wed 15 Jun 2022 15:38:45 +0000
ROA not before: Wed 15 Jun 2022 15:38:45 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 197240
IP address blocks: 46.30.104.0/23 maxlen: 24
46.30.108.0/24 maxlen: 24
46.30.110.0/23 maxlen: 24
46.30.106.0/23 maxlen: 24
46.30.109.0/24 maxlen: 24
45.155.34.0/23 maxlen: 23
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 329683704 (0x13a692f8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=42ca1a1e3d0925423310c154b502c2842888e612
Validity
Not Before: Jun 15 15:38:45 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=0021fe7b8270ffead9ffbb84340d26aefdbdb9b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:39:60:5b:b2:55:86:53:13:10:e5:03:0e:06:
b2:af:c9:55:c4:33:73:e4:96:25:a9:1d:77:c8:1f:
92:5a:b5:a2:04:ab:9f:44:cf:83:0e:34:fa:27:ba:
df:2a:9c:43:9a:ae:f4:d4:ae:90:b1:39:ee:30:38:
6b:1a:b1:b8:f8:fd:98:23:ba:73:dc:2f:04:ca:8e:
be:f0:37:c6:11:d9:f8:9b:7a:4e:e5:c2:72:0f:81:
a4:78:cf:4a:e5:13:1d:a3:ac:17:08:8a:d8:c1:65:
f3:45:7d:f3:e1:a8:85:70:b3:c0:1c:f5:16:cd:ad:
b2:8b:d1:6e:84:a3:87:ec:9e:cb:5d:f4:27:6d:52:
83:24:c2:c7:4b:59:ee:73:88:0b:67:d4:68:06:d3:
23:cb:0f:4e:1f:35:85:b9:ce:36:a0:76:4f:8e:f3:
66:94:9e:e9:03:ae:5a:76:73:9c:f4:59:9e:5a:13:
64:70:ba:34:1e:92:96:19:c1:a0:9c:c9:09:d1:29:
12:14:b8:5d:76:e0:f0:fe:9f:42:0a:16:66:96:3c:
4a:89:28:c7:0e:ea:7a:ca:27:80:24:b5:15:54:63:
be:8f:d6:d7:26:d6:1a:c5:b0:0b:48:48:97:00:e8:
eb:b4:40:01:60:d5:ee:18:dd:45:1b:9a:c2:22:85:
9e:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:21:FE:7B:82:70:FF:EA:D9:FF:BB:84:34:0D:26:AE:FD:BD:B9:B0
X509v3 Authority Key Identifier:
keyid:42:CA:1A:1E:3D:09:25:42:33:10:C1:54:B5:02:C2:84:28:88:E6:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QsoaHj0JJUIzEMFUtQLChCiI5hI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/92b8ae-9c09-443c-b8ba-436bfb9e77ed/1/ACH-e4Jw_-rZ_7uENA0mrv29ubA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/92b8ae-9c09-443c-b8ba-436bfb9e77ed/1/QsoaHj0JJUIzEMFUtQLChCiI5hI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.155.34.0/23
46.30.104.0/21
Signature Algorithm: sha256WithRSAEncryption
e0:96:a1:5d:58:6a:e6:35:d4:a4:5e:bd:47:ed:fa:02:50:97:
81:29:1f:e1:6c:6b:1a:17:23:3f:0b:1d:9e:13:f1:7c:91:dc:
81:58:95:a3:88:39:5f:55:24:15:62:58:d3:66:d4:e1:fd:6b:
19:12:d6:60:cf:55:1a:52:2f:9a:9d:b4:d1:b1:24:6a:d7:87:
56:c5:77:c5:dd:e4:e6:54:6a:a7:cb:90:c6:a9:a2:f2:6b:d6:
3f:12:4e:30:72:47:bb:34:b1:67:01:bf:f2:98:59:b9:8e:d8:
8a:2e:e8:65:f8:15:ff:b8:63:e5:5d:22:29:c8:80:ec:1f:2c:
a9:5e:66:4e:5c:ca:9b:e1:d7:bb:04:93:e5:50:d4:e8:32:0b:
e9:0d:c6:56:89:68:56:61:a3:8a:2e:db:2c:a3:0d:b8:a9:59:
fa:90:f0:e4:c7:c6:09:48:e4:35:ad:65:40:76:ab:4d:a9:53:
a2:0e:7d:6e:19:f5:e4:bb:ab:5f:09:bd:82:09:50:e6:93:5a:
f1:c7:e2:e9:fe:62:67:05:df:9d:bc:23:52:a9:b0:5f:64:82:
92:8c:37:d0:eb:58:84:d3:ca:6d:96:b8:c0:b5:0f:9a:e4:4e:
31:60:5d:63:75:fa:53:c6:99:c2:e9:9d:71:9b:c1:a6:af:f7:
0a:ce:06:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:10:31 2024 by rpki-client on console-ams.rpki-client.org