Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/92b8ae-9c09-443c-b8ba-436bfb9e77ed/1/JCDgFHL3xxZPYdZ5JxorJ46353M.roa
File: JCDgFHL3xxZPYdZ5JxorJ46353M.roa (raw, json)
Hash identifier: 6RypmY9aF0bUL0CmhqbMNI3m0a6xr0UEp7tlJqC/pgQ=
Subject key identifier: 24:20:E0:14:72:F7:C7:16:4F:61:D6:79:27:1A:2B:27:8E:B7:E7:73
Certificate issuer: /CN=42ca1a1e3d0925423310c154b502c2842888e612
Certificate serial: 13A8C2CF
Authority key identifier: 42:CA:1A:1E:3D:09:25:42:33:10:C1:54:B5:02:C2:84:28:88:E6:12
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QsoaHj0JJUIzEMFUtQLChCiI5hI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/92b8ae-9c09-443c-b8ba-436bfb9e77ed/1/JCDgFHL3xxZPYdZ5JxorJ46353M.roa
Signing time: Thu 16 Jun 2022 06:28:44 +0000
ROA not before: Thu 16 Jun 2022 06:28:44 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 197240
IP address blocks: 46.30.104.0/23 maxlen: 24
46.30.108.0/24 maxlen: 24
46.30.110.0/23 maxlen: 24
46.30.106.0/23 maxlen: 24
46.30.109.0/24 maxlen: 24
45.155.32.0/22 maxlen: 23
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 329827023 (0x13a8c2cf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=42ca1a1e3d0925423310c154b502c2842888e612
Validity
Not Before: Jun 16 06:28:44 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=2420e01472f7c7164f61d679271a2b278eb7e773
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:34:d4:1f:91:48:aa:8a:0c:95:f7:69:d3:31:
f2:01:93:ff:f4:80:c7:a8:9e:80:f3:40:a0:20:7f:
bd:a9:11:18:94:cf:5d:5e:8e:28:20:b8:fe:79:17:
24:de:4f:17:14:5a:c9:4d:ac:b1:e9:af:b8:9d:7d:
be:4f:59:8a:bb:bc:4d:16:2f:48:f0:d1:25:90:0d:
a5:ec:5b:5c:fa:93:e4:3b:d8:cc:e7:dd:1f:40:ee:
58:10:10:cb:a3:64:18:47:88:25:11:f5:0a:45:97:
79:ce:1c:12:3d:40:5e:0f:7e:c1:f7:ed:6a:cc:2c:
bc:8a:84:60:ea:7b:2f:92:cd:32:99:2a:9e:b0:e2:
63:8b:e4:e7:9a:c8:8d:4e:97:e1:05:04:48:b4:f3:
13:68:60:4d:f4:5b:c4:82:a1:59:44:e0:5e:93:70:
80:ec:f3:f0:d1:a3:4b:0d:c1:61:5c:cd:b9:dc:a4:
2e:0d:d7:a2:86:39:9f:5c:b0:c3:20:fe:e8:92:de:
b5:3e:0e:d4:62:0c:e7:4f:bc:51:dd:df:b6:04:ba:
1f:64:2e:f3:23:66:47:dc:94:b0:39:3c:05:c7:30:
55:51:8c:f1:b6:55:b8:f3:3e:a5:5f:de:28:c1:e5:
6d:ed:2f:54:ae:1e:3c:b6:e1:db:cf:f7:79:00:c0:
a1:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:20:E0:14:72:F7:C7:16:4F:61:D6:79:27:1A:2B:27:8E:B7:E7:73
X509v3 Authority Key Identifier:
keyid:42:CA:1A:1E:3D:09:25:42:33:10:C1:54:B5:02:C2:84:28:88:E6:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QsoaHj0JJUIzEMFUtQLChCiI5hI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/92b8ae-9c09-443c-b8ba-436bfb9e77ed/1/JCDgFHL3xxZPYdZ5JxorJ46353M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/92b8ae-9c09-443c-b8ba-436bfb9e77ed/1/QsoaHj0JJUIzEMFUtQLChCiI5hI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.155.32.0/22
46.30.104.0/21
Signature Algorithm: sha256WithRSAEncryption
34:cd:a5:4e:93:16:16:aa:04:b2:db:0c:7e:3e:2c:de:66:e7:
df:4a:75:14:26:14:46:6b:0c:3a:34:2f:2a:94:9f:23:67:85:
43:7a:8f:45:02:c9:c8:15:b4:19:d6:bd:98:36:40:df:16:e1:
7b:e5:e8:57:55:ca:fc:4f:74:22:6e:b0:61:94:28:a8:0b:24:
54:8a:2f:c3:65:19:7b:66:74:66:d2:2e:2b:c7:97:13:e6:1a:
35:a9:64:f7:70:e2:0e:ce:68:97:fd:d1:8c:e1:0c:42:42:ed:
ec:1e:e1:62:2e:2f:2c:c2:47:5b:a4:31:dd:4a:53:9b:06:e6:
69:bb:2e:f6:79:c5:04:4e:0a:3d:e3:70:35:06:92:7a:e1:1e:
3b:21:4b:46:ac:e0:3a:34:98:a0:d4:aa:f1:ee:13:11:09:ef:
e6:d0:65:91:90:3e:81:2e:98:b2:25:8d:ef:04:5d:7c:5e:91:
5d:82:f5:0e:0a:e1:5a:ff:f5:c7:61:87:7d:5c:8a:8b:f0:b8:
67:3a:28:d1:33:21:9d:a1:3a:c4:4e:31:e5:e7:6d:38:80:c4:
49:7d:15:74:35:61:60:de:8e:27:1f:bf:1d:63:3a:eb:9f:a4:
db:0e:43:d1:4b:00:1a:44:0c:a6:6b:c0:f7:99:35:56:4d:a4:
40:8d:22:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:30:20 2024 by rpki-client on console-fra.rpki-client.org