Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/5e5c30-8aa4-47e8-bd8f-fbe1a0d0aa98/1/RyxhNCjGNhT_XpElSHsopl-jkSU.roa
File: RyxhNCjGNhT_XpElSHsopl-jkSU.roa (raw, json)
Hash identifier: e92Kb2sFCP60uq2BQM+g584AdLPdxSp7t83849AImkQ=
Subject key identifier: 47:2C:61:34:28:C6:36:14:FF:5E:91:25:48:7B:28:A6:5F:A3:91:25
Certificate issuer: /CN=557b0ac10b8642a27dd3d74ed6cb5ee045e67b97
Certificate serial: 018CC492C25D15C960A06E98CAF8200A4567
Authority key identifier: 55:7B:0A:C1:0B:86:42:A2:7D:D3:D7:4E:D6:CB:5E:E0:45:E6:7B:97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VXsKwQuGQqJ909dO1ste4EXme5c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/5e5c30-8aa4-47e8-bd8f-fbe1a0d0aa98/1/RyxhNCjGNhT_XpElSHsopl-jkSU.roa
Signing time: Mon 01 Jan 2024 10:30:01 +0000
ROA not before: Mon 01 Jan 2024 10:30:01 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 44814
IP address blocks: 93.94.137.0/24 maxlen: 24
93.94.136.0/24 maxlen: 24
93.94.138.0/24 maxlen: 24
93.94.143.0/24 maxlen: 24
93.94.141.0/24 maxlen: 24
93.94.140.0/24 maxlen: 24
185.7.217.0/24 maxlen: 24
46.253.10.0/24 maxlen: 24
46.253.8.0/24 maxlen: 24
46.253.15.0/24 maxlen: 24
95.169.213.0/24 maxlen: 24
95.169.208.0/20 maxlen: 20
95.169.219.0/24 maxlen: 24
95.169.218.0/24 maxlen: 24
95.169.222.0/24 maxlen: 24
2a01:4a40::/32 maxlen: 32
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:92:c2:5d:15:c9:60:a0:6e:98:ca:f8:20:0a:45:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=557b0ac10b8642a27dd3d74ed6cb5ee045e67b97
Validity
Not Before: Jan 1 10:30:01 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=472c613428c63614ff5e9125487b28a65fa39125
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:07:c1:ee:59:9e:0d:01:52:69:68:6a:6e:9f:
1f:06:ab:9e:a1:80:f2:48:62:7d:70:b8:16:c9:c3:
d0:b2:0e:6c:e0:40:05:98:f9:c6:ca:c5:24:f0:d4:
61:0a:7e:ac:37:be:27:45:bb:0b:e8:8e:5b:4f:ac:
1a:67:8c:1e:00:5f:89:6a:9f:37:4f:c7:a2:6a:2e:
a2:8d:2b:f0:76:5e:d4:2c:a8:c6:4c:c7:b1:d5:b0:
d4:86:9e:b3:e6:e0:b7:d2:6d:5e:f7:d7:e6:6e:eb:
05:a9:1a:d0:44:f1:bf:ec:e0:71:58:a9:40:8a:3a:
5a:24:f2:d2:18:be:f4:26:3f:69:4d:fe:8f:f9:be:
4c:e7:99:ca:a6:ca:80:51:88:dd:5d:dd:99:4d:77:
7d:61:12:3d:47:82:e4:76:da:a0:19:4f:83:c1:89:
f7:cd:e7:b4:b1:02:e5:8b:a3:a7:e6:7f:08:b2:77:
22:cd:7f:7a:68:ed:f6:02:7b:dd:91:1a:2c:44:0a:
af:4e:69:92:c1:20:89:80:c9:15:f0:b2:84:56:97:
e6:78:ee:b6:3a:85:e3:30:43:ea:db:7f:7d:62:4d:
ca:60:ba:ca:1b:63:34:37:ba:dd:26:3e:b3:af:6d:
b8:7c:53:96:25:57:5d:0d:d5:a9:dd:28:48:62:3c:
02:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:2C:61:34:28:C6:36:14:FF:5E:91:25:48:7B:28:A6:5F:A3:91:25
X509v3 Authority Key Identifier:
keyid:55:7B:0A:C1:0B:86:42:A2:7D:D3:D7:4E:D6:CB:5E:E0:45:E6:7B:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VXsKwQuGQqJ909dO1ste4EXme5c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/5e5c30-8aa4-47e8-bd8f-fbe1a0d0aa98/1/RyxhNCjGNhT_XpElSHsopl-jkSU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/5e5c30-8aa4-47e8-bd8f-fbe1a0d0aa98/1/VXsKwQuGQqJ909dO1ste4EXme5c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.253.8.0/24
46.253.10.0/24
46.253.15.0/24
93.94.136.0-93.94.138.255
93.94.140.0/23
93.94.143.0/24
95.169.208.0/20
185.7.217.0/24
IPv6:
2a01:4a40::/32
Signature Algorithm: sha256WithRSAEncryption
9b:81:fd:44:55:dd:54:3f:e1:27:dd:00:00:d3:cc:69:f5:43:
f2:34:8c:41:e5:d8:94:87:8d:2f:ba:97:74:92:42:33:81:41:
5f:c4:00:88:f5:e0:ab:ec:bc:54:f3:d3:78:9c:bc:e7:6d:03:
20:9e:50:68:a5:5a:ee:93:e5:35:88:55:2f:2c:15:80:a5:f8:
2d:72:5f:34:33:fb:07:9f:0b:18:0c:be:dd:44:55:a7:50:f0:
16:3a:7c:58:28:72:89:76:ea:56:19:cc:2f:b5:c7:0f:25:58:
6d:f6:1a:61:a3:1b:fd:53:04:5d:dc:df:cd:3e:85:91:22:66:
8e:e0:46:85:d9:b5:a3:df:0e:06:a4:1f:98:d0:17:21:bd:2b:
4c:59:ff:f0:9f:5d:a2:f3:d1:86:6c:e5:dc:50:a8:4e:ae:ec:
41:6c:57:45:de:02:c8:59:4a:d4:da:80:e7:4a:5e:f5:06:4b:
c4:1a:76:eb:b2:3a:13:b1:d4:d1:43:9c:d7:9e:da:79:1f:cc:
6d:91:92:94:68:16:2b:2a:b1:15:99:b5:5b:34:d4:e6:f3:51:
9d:62:8f:b5:09:54:69:05:eb:d7:5f:75:3e:d9:34:cd:ee:47:
46:08:c6:0e:f8:64:84:e8:f7:67:17:35:75:46:a5:5b:8a:74:
56:2c:00:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 7 16:57:44 2024 by rpki-client on console-fra.rpki-client.org