Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/5e5c30-8aa4-47e8-bd8f-fbe1a0d0aa98/1/vk9_vQSOMx_phZGKngSRoXQ2nrI.roa
File: vk9_vQSOMx_phZGKngSRoXQ2nrI.roa (raw, json)
Hash identifier: AL+34JbmmAUCTabwZ6sw54F3jva2zSmGbNV/XYOzTuU=
Subject key identifier: BE:4F:7F:BD:04:8E:33:1F:E9:85:91:8A:9E:04:91:A1:74:36:9E:B2
Certificate issuer: /CN=557b0ac10b8642a27dd3d74ed6cb5ee045e67b97
Certificate serial: 018C8BFCEEB72EF8F6AFB10166CE254E1ADC
Authority key identifier: 55:7B:0A:C1:0B:86:42:A2:7D:D3:D7:4E:D6:CB:5E:E0:45:E6:7B:97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VXsKwQuGQqJ909dO1ste4EXme5c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/5e5c30-8aa4-47e8-bd8f-fbe1a0d0aa98/1/vk9_vQSOMx_phZGKngSRoXQ2nrI.roa
Signing time: Thu 21 Dec 2023 10:47:38 +0000
ROA not before: Thu 21 Dec 2023 10:47:38 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 44814
IP address blocks: 93.94.136.0/21 maxlen: 21
93.94.137.0/24 maxlen: 24
93.94.136.0/24 maxlen: 24
93.94.138.0/24 maxlen: 24
93.94.143.0/24 maxlen: 24
93.94.142.0/24 maxlen: 24
93.94.141.0/24 maxlen: 24
93.94.140.0/24 maxlen: 24
185.7.217.0/24 maxlen: 24
46.253.10.0/24 maxlen: 24
46.253.8.0/24 maxlen: 24
46.253.15.0/24 maxlen: 24
95.169.213.0/24 maxlen: 24
95.169.208.0/20 maxlen: 20
95.169.219.0/24 maxlen: 24
95.169.218.0/24 maxlen: 24
95.169.222.0/24 maxlen: 24
2a01:4a40::/32 maxlen: 32
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:8b:fc:ee:b7:2e:f8:f6:af:b1:01:66:ce:25:4e:1a:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=557b0ac10b8642a27dd3d74ed6cb5ee045e67b97
Validity
Not Before: Dec 21 10:47:38 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=be4f7fbd048e331fe985918a9e0491a174369eb2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:ac:d5:cd:fc:13:44:be:63:a6:8e:83:72:90:
0b:7b:5f:06:de:68:dd:eb:5a:bd:4d:fc:da:71:bf:
fc:ed:05:e9:fa:c6:41:f9:6e:bc:08:08:14:46:0c:
69:80:69:6c:af:15:2d:8e:0a:79:e1:01:14:da:6f:
11:e4:2b:bc:a0:46:8a:87:b2:71:cb:34:16:60:ee:
00:22:6a:61:5b:74:ba:cf:8b:af:03:17:c3:91:b9:
ea:4b:ec:df:27:55:ee:d4:58:50:a0:37:fa:c5:09:
ce:42:af:f2:d0:b9:8a:96:1b:e5:e1:22:bb:8a:a6:
a8:06:e2:f8:29:bd:a2:3a:3b:60:be:51:45:0f:ee:
63:3e:f6:fe:c3:4b:bf:3e:cf:4c:1d:d7:ac:cd:0b:
5f:da:62:03:88:2f:6d:18:85:81:a0:e4:fa:3f:af:
32:df:ac:f4:33:25:61:03:b4:8f:d0:a4:26:c6:33:
4d:ef:6f:14:c8:5b:fc:80:3b:31:b6:07:08:13:7e:
84:56:73:d2:02:54:1b:6c:37:4e:3b:52:de:38:78:
96:5e:33:4e:89:4a:69:7d:ce:ac:91:74:e6:4c:2a:
62:f5:58:1d:f7:37:1d:00:74:61:a8:f6:a9:c8:d0:
9f:21:d3:33:ed:62:00:70:4d:9f:b5:f1:f6:48:ef:
23:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:4F:7F:BD:04:8E:33:1F:E9:85:91:8A:9E:04:91:A1:74:36:9E:B2
X509v3 Authority Key Identifier:
keyid:55:7B:0A:C1:0B:86:42:A2:7D:D3:D7:4E:D6:CB:5E:E0:45:E6:7B:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VXsKwQuGQqJ909dO1ste4EXme5c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/5e5c30-8aa4-47e8-bd8f-fbe1a0d0aa98/1/vk9_vQSOMx_phZGKngSRoXQ2nrI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/5e5c30-8aa4-47e8-bd8f-fbe1a0d0aa98/1/VXsKwQuGQqJ909dO1ste4EXme5c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.253.8.0/24
46.253.10.0/24
46.253.15.0/24
93.94.136.0/21
95.169.208.0/20
185.7.217.0/24
IPv6:
2a01:4a40::/32
Signature Algorithm: sha256WithRSAEncryption
93:00:b4:87:f5:7c:d5:1b:78:92:f0:8d:28:6d:6a:83:3a:18:
c1:b3:69:85:1e:d0:51:ec:4e:d3:86:dc:d7:0d:c3:73:11:91:
eb:98:6d:3d:f1:f8:d6:4e:fa:05:e8:81:ba:ec:d7:f0:54:26:
78:5e:d6:5a:fa:9c:37:f6:c9:d7:62:9a:5c:70:7a:d8:12:9c:
0a:3c:f1:0d:dc:de:91:00:d4:10:c8:0e:0d:49:dc:94:6d:8d:
fd:32:47:16:a6:ee:4c:23:48:80:80:2b:b2:f9:3d:18:26:99:
6c:5c:7d:af:f1:2b:b9:5a:bc:82:58:85:c3:76:20:38:ad:b2:
ab:a6:9c:22:19:28:d5:bf:6f:13:9d:cf:bc:24:cb:cb:31:86:
04:d9:53:a9:ad:ed:e3:cb:63:86:18:c6:50:87:30:6d:0c:d7:
18:6c:65:79:c1:1f:af:19:7f:8a:e3:21:82:e1:fd:fa:7e:42:
c9:48:9a:50:23:52:86:d0:cf:a3:88:d6:b6:50:39:a4:37:76:
8e:9e:04:6b:53:52:6e:e8:07:33:8c:0e:be:a1:39:98:1e:34:
5d:3c:d0:f4:25:30:8d:85:22:8c:77:10:92:3c:8c:09:11:b8:
3b:aa:f8:bc:65:38:8e:ba:d0:0d:46:3a:d4:78:58:6a:7c:76:
ca:81:56:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:11:50 2024 by rpki-client on console-ams.rpki-client.org